Getting started

Applicable version: technical preview. Multi-architecture prebuilt binaries are available from the Release Notes page; no automatic online update channel is provided.

frp-tun is a closed-source site-to-site gateway. WireGuard encrypts the overlay locally; frp signalling and carriers only transport already encrypted UDP datagrams.

Before deployment, operators need managed Linux or OpenWrt gateways, the ability to audit policy routing and nftables, and a tested manual rollback path. Never submit private keys, frp credentials, internal addresses, or topology details to public support channels.