Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

h2tunnel

package module

Go to main page

Versions in this module

v1

v1.0.20260916

Sep 15, 2026

Changes in this version

+ const NetworkTCP

+ const NetworkUDP

+ const TunnelDeathAuthRejected

+ const TunnelDeathCanceled

+ const TunnelDeathDataGap

+ const TunnelDeathMaxRetries

+ const TunnelDeathPeerFIN

+ var ErrForbidden = errors.New("h2tunnel: target forbidden")

+ var ErrUnauthenticated = errors.New("h2tunnel: unauthenticated")

+ var ErrUnsupportedNetwork = errors.New("h2tunnel: unsupported network")

+ var ErrUnsupportedTransport = errors.New("h2tunnel: unsupported transport")

+ func PprofHandler() http.Handler

+ func SelfSignedTLSConfig(host string) (*tls.Config, error)

+ func Version() string

+ type Authenticator func(context.Context, *http.Request) (Principal, error)

+ func NewTokenAuthenticator(token string) (Authenticator, error)

+ type Client struct

+ func NewClient(options ClientOptions) (*Client, error)

+ func (c *Client) Close() error

+ func (c *Client) DialContext(ctx context.Context, network, target string) (net.Conn, error)

+ func (c *Client) DialPacketContext(ctx context.Context, network, target string) (PacketConn, error)

+ func (c *Client) ForceReconnect()

+ func (c *Client) SetEventHandler(h ClientEventHandler)

+ func (c *Client) Shutdown(ctx context.Context) error

+ func (c *Client) Start(ctx context.Context) error

+ func (c *Client) Stats() *ClientStats

+ type ClientDialer func(context.Context, string, string) (net.Conn, error)

+ type ClientEvent struct

+ Attempt int

+ Err error

+ Kind ClientEventKind

+ Network Network

+ Reason string

+ Target string

+ Transport Transport

+ type ClientEventHandler func(ClientEvent)

+ type ClientEventKind string

+ const EventReconnecting

+ const EventTargetDenied

+ const EventTunnelDied

+ const EventTunnelEstablished

+ type ClientOptions struct

+ Credentials CredentialProvider

+ Dialer ClientDialer

+ Endpoint string

+ EventHandler ClientEventHandler

+ Host string

+ Logger *slog.Logger

+ Path string

+ QUICDialer QUICDialer

+ TLSConfig *tls.Config

+ Transport Transport

+ Tuning ClientTuning

+ UtlxFingerprint string

+ type ClientStats struct

+ ActiveDials atomic.Int64

+ DialAttempts atomic.Int64

+ DialFailures atomic.Int64

+ DownlinkBytes atomic.Int64

+ ResumeReconnects atomic.Int64

+ UplinkBytes atomic.Int64

+ type ClientTuning struct

+ AutoRedial bool

+ DatagramQueueSize int

+ HandshakeTimeout time.Duration

+ HeartbeatInterval time.Duration

+ KeepaliveInterval time.Duration

+ MasqueALPN string

+ Padding PaddingTuning

+ RedialBudget time.Duration

+ SessionWindowBytes int

+ StandbyConnections int

+ type CredentialProvider func(context.Context, http.Header) error

+ func NewTokenCredentials(token string) (CredentialProvider, error)

+ type DialKind string

+ const DialKindBusiness

+ const DialKindProbe

+ type DialRequest struct

+ Kind DialKind

+ Network Network

+ Principal Principal

+ Target string

+ Transport Transport

+ type Listeners struct

+ QUIC net.PacketConn

+ TCP net.Listener

+ type Network string

+ type PacketConn interface

+ type PaddingTuning struct

+ MaxRecordBytes int

+ MinRecordBytes int

+ type Principal struct

+ ID string

+ Roles []string

+ type QUICDialer func(context.Context, string, *tls.Config, *quic.Config) (*quic.Conn, error)

+ type Server struct

+ func NewServer(options ServerOptions) (*Server, error)

+ func (s *Server) Close() error

+ func (s *Server) Handler() http.Handler

+ func (s *Server) ListenAndServe(address string) error

+ func (s *Server) Listeners() Listeners

+ func (s *Server) Serve(listeners Listeners) error

+ func (s *Server) SetEventHandler(h ServerEventHandler)

+ func (s *Server) Shutdown(ctx context.Context) error

+ func (s *Server) Stats() *ServerStats

+ type ServerEvent struct

+ Err error

+ Kind ServerEventKind

+ Network Network

+ Principal Principal

+ Reason string

+ RemoteAddr string

+ SessionID string

+ Target string

+ Transport Transport

+ type ServerEventHandler func(ServerEvent)

+ type ServerEventKind string

+ const ServerEventAuthRejected

+ const ServerEventReplayDropped

+ const ServerEventSessionClosed

+ const ServerEventSessionOpened

+ const ServerEventSessionResumed

+ const ServerEventTargetDenied

+ type ServerOptions struct

+ Authenticator Authenticator

+ Dialer TargetDialer

+ EventHandler ServerEventHandler

+ Logger *slog.Logger

+ Networks []Network

+ Path string

+ TLSConfig *tls.Config

+ Transports []Transport

+ Tuning ServerTuning

+ type ServerStats struct

+ AuthFailures atomic.Int64

+ DownlinkBytes atomic.Int64

+ SessionsActive atomic.Int64

+ SessionsCreated atomic.Int64

+ SessionsResumed atomic.Int64

+ UplinkBytes atomic.Int64

+ type ServerTuning struct

+ Padding PaddingTuning

+ SessionIdleTimeout time.Duration

+ SessionWindowBytes int

+ type Service struct

+ Address string

+ Network Network

+ Roles []string

+ type TargetDialer func(context.Context, DialRequest) (net.Conn, error)

+ func NewStaticServiceDialer(services map[string]Service, base *net.Dialer) (TargetDialer, error)

+ type Transport string

+ const TransportAuto

+ const TransportGRPC

+ const TransportH2

+ const TransportH2C

+ const TransportH3

+ const TransportMASQUE

+ const TransportWebTransport

+ type TunnelError struct

+ func (e *TunnelError) Error() string

+ func (e *TunnelError) HTTPStatus() int

+ func (e *TunnelError) Unwrap() error

v1.0.20260424

Apr 24, 2026

v1.0.20260415

Apr 15, 2026

v1.0.20260411

Apr 11, 2026

v1.0.20260410

Apr 10, 2026

v1.0.20260409

Apr 9, 2026