First public release in preparation
SSH tunnels without system components.
Tunello brings local, remote, and dynamic SOCKS5 forwarding into a native macOS interface. It runs in the App Sandbox, does not modify system network settings, and installs no helper processes.
What is coming in version 1.0
- Local and remote TCP forwarding and dynamic SOCKS5.
- OpenSSH Ed25519 and RSA key import into the app’s private sandbox.
- Explicit server fingerprint approval and host-key mismatch protection.
- Workspaces, on-demand endpoints, diagnostics, and Quick Look for backups.
- Optional configuration sync through your private iCloud database without keys or passphrases.
Not a VPN or system proxy
Tunello creates only the SSH port forwards you configure. It installs no VPN profile, does not modify /etc/hosts or DNS resolvers, asks for no administrator access, and does not run Docker or the system ssh-agent.
The first release is being prepared for the Mac App Store. A download is not available yet.