skills.rest
sudocarlos
sudocarlosCOMMUNITY
Explore all skills by this author →
GitHub

socat-relay-management

Manage socat TCP relays for non-HTTP protocols across Tailscale networks.

4|1|Updated Mar 13, 2026
Search Tags:#networking#tailscale#reverse proxy#port forwarding#socat#tcp relay
One-click install
npx skills add https://github.com/sudocarlos/tailrelay --skill socat-relay-management
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: socat-relay-management
Source: https://github.com/sudocarlos/tailrelay/tree/main/.agents/skills/socat
Command: npx skills add https://github.com/sudocarlos/tailrelay --skill socat-relay-management

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill enables the secure forwarding of non-HTTP network protocols, such as gRPC or raw TCP services, to designated target hosts and ports, bypassing the need for direct exposure.

Core Features & Use Cases

  • TCP Relaying: Establishes persistent TCP connections to forward traffic from a listening port to a target service.
  • Protocol Agnostic: Supports any TCP-based service, not limited to HTTP/S.
  • Use Case: Securely expose a database service or a custom TCP application running on a private network to your Tailscale network without opening firewall ports.

Quick Start

Use the socat-relay-management skill to create a new relay that forwards traffic from local port 50001 to the host 'my-service.tailnet' on port 8080.

Frequently Asked Questions about socat-relay-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I forward non-HTTP TCP protocols securely across a Tailscale network?▼

You can forward non-HTTP TCP protocols securely by configuring a socat TCP relay. This establishes a persistent connection from a local listening port to a target service, bypassing the need for direct firewall exposure.

What is the best way to expose a private database service to a tailnet without opening firewall ports?▼

The best way to expose a private database is using a protocol-agnostic TCP relay. It forwards traffic from a local port to your target host and port, securing the connection across your Tailscale network without firewall changes.

Can I manage and update socat relay configurations dynamically via a Web UI?▼

Yes, you can manage socat relays dynamically via a Web UI. It handles process lifecycle, state tracking, and supports migrating legacy environment variables to JSON-based storage for reliable TCP forwarding configuration.

Does socat TCP relaying support gRPC and raw TCP services?▼

Yes, socat TCP relaying supports gRPC and raw TCP services. It is completely protocol agnostic, allowing any TCP-based service to be forwarded to designated target hosts and ports across the network.

How do I migrate existing environment variable relay configurations to JSON-based storage?▼

You can migrate environment variable relay configurations to JSON-based storage using the built-in migration support. This enables dynamic configuration updates while maintaining reliable state tracking for your active TCP relays.

Related Skills

Explore More Software Engineering Skills→
AIDotNetAIDotNet
84

port-scanner

Scan network ports on a host to identify open ports and services.

Official
Basic
ajshedivyajshedivy
3

communication

Monitor IBM i network resources via SQL-based QSYS2 views.

Community
Advanced
JerryNixonJerryNixon
1

azure-mcp-inspector

Deploy MCP Inspector to Azure Container Apps with an nginx same-origin proxy.

Community
Advanced
freedomw1987freedomw1987
2

docker-port-forward-shadow-debug

Diagnose Docker containers shadowing host ports 80 and 443.

Community
Intermediate