A reverse proxy and traffic tunnel to expose endpoints behind a firewall (say, on your laptop or devbox) to the outside world (a VM at a provider, let's say). Sets up a tunnel to the other machine over SSL/TLS. Supports websockets. Reconnects automatically. Implements authentication to keep people from poking around. Supports Let's Encrypt natively.