Shulker
Tunnels.
Expose your local HTTP & WebSocket applications to the world — protected by our Anycast Edge with L3/L4/L7 DDoS filtering, a full WAF, Smart performance boosting, and enterprise load balancing.
Zero Complexity.
Live in Seconds.
Three steps from your local machine to a globally accessible, enterprise-protected endpoint.
Install the Agent
A lightweight daemon that runs on your machine. Linux, macOS, Windows.
Point & Activate
One-liner to link your local port to the Shulker Edge.
Configure Everything
Add custom domains, WAF rules, load balancing — from the dashboard.
Full Control.
One Dashboard.
Manage tunnels, routes, WAF rules, domains, load balancers, and analytics from a single clean interface.
Real-time overview of all active tunnels, request rates, blocked threats, and edge health
Configure path-based routing rules, custom domains, TLS settings, and header transforms
Pool-based load balancing with real-time health monitoring, failover, and algorithm selection
Your App Behind
An Indestructible Edge.
Every tunnel is routed through Shulker's Anycast Edge — L3, L4, and L7 protection, all layered, always on.
Layer 3 · Network
Absorbs UDP floods, ICMP floods, and IP fragmentation attacks at the network layer.
Layer 4 · Transport
Stops TCP SYN floods, ACK floods, connection exhaustion, and port scanning attacks.
Layer 7 · Application
Detects and blocks HTTP floods, Slowloris, RUDY, credential stuffing, and application-layer exhaustion.
A Firewall That
Thinks For Itself.
Shulker Tunnels ships with a full-stack Web Application Firewall that blocks virtually every modern attack class — out of the box, with zero configuration.
Instant 70–80%
Performance Boost.
Smart Boost is a zero-configuration edge optimization layer that intercepts every response and applies performance transformations before it reaches the user.
Distribute. Monitor.
Never Go Down.
Point multiple local services into a tunnel pool. Traffic distributes intelligently, monitors health, and fails over automatically.
Round Robin
Distributes requests evenly
Least Connections
Sends to service with fewest connections
Weighted
Assign weights to services
IP Hash
Pins user to specific instance
Real-Time Pool Health Monitor
Unlimited Custom Domains.
Your Brand, Your Rules.
Add as many custom domains as you want to any tunnel. Point your DNS, and Shulker handles TLS certificate provisioning, renewal, and routing automatically.
See Every Bit.
In Real Time.
Built for
Developers.
Anything that speaks HTTP or WebSocket can be tunneled, protected, and supercharged.
Everything
Included.
No hidden add-ons. No upgrade walls.
L3/L4/L7 DDoS Protection
All layers, always on
Smart Boost
70–80% performance boost
WAF Protection
Blocks SQLi, XSS, RCE
Granular WAF Rules
Custom expression-based rules
Unlimited Custom Domains
TLS handled automatically
Load Balancing
Pool and balance services
Real-Time Analytics
Requests, blocks, cache
HTTP & WebSocket
Full protocol support
One-Command Setup
Under 60 seconds
Common
Questions.
Your App. Globally.
Battle-Protected.
No credit card required · Free tier available · Setup in under 60 seconds