Dashboard

The hub includes a web dashboard for managing exit nodes. It binds to localhost only — access it via SSH tunnel.

Access

ssh -L 8080:127.0.0.1:8080 user@your-server

Then open http://localhost:8080 in your browser.

The bind address is configurable:

restunnel-hub --dashboard-listen 127.0.0.1:9090

Features

Node List

Shows all enrolled exit nodes with their current status:

• Connected — node is online and relaying traffic
• Disconnected — node is offline (last seen time shown)

For connected nodes, the dashboard shows the node's public IP and latency.

Generate Enrollment Tokens

Click Generate Token to create a new one-time enrollment token. A QR code is displayed that exit node apps can scan. Tokens expire after 15 minutes.

Optionally set a label — this name is assigned to whatever node enrolls with the token.

Revoke Nodes

Remove a node's access by clicking its revoke button. This deletes the node's public key from the hub. The node is immediately disconnected and cannot reconnect.

REST API

The dashboard also exposes a REST API for programmatic access. This can be used for automation — for example, generating enrollment tokens from a script.

Security

• The dashboard is localhost-only by default. It is not exposed to the internet.
• CSRF protection is enabled on all state-changing endpoints.
• Access requires an SSH tunnel (or local access to the server).