Guides

Guides for building with rstream tunnels. Continuously updated against the current product, they serve as the reference for taking each workflow from first test to production.
Realtime
Add an on-demand MediaMTX backend to the adaptive rstream video platform, share one protected device uplink across viewers, and keep direct WebRTC as a selectable path.
Read more, Distribute WebRTC Video with MediaMTX and rstream
AI Agents
Run local LLM workers across laptops, workstations, and GPU servers, then use rstream for connectivity, discovery, routing, and narrowly scoped access from a Next.js agent application.
Read more, Build a Private LLM Mesh with rstream
Applications
Serve a FastAPI application directly through a published rstream tunnel with the Python SDK, protect it with edge token auth, and consume the private variant over an rstream dial, all without a local HTTP server or an open port.
Read more, Serve a FastAPI App through rstream Tunnels
Realtime
Stream an FFmpeg source through a private rstream tunnel, connect an RTSP camera, and add MediaMTX when several consumers need the same feed.
Read more, Stream Video with FFmpeg and rstream
Realtime
Stream a GStreamer test source through a private rstream tunnel, first as reliable MPEG-TS and then as RTP over datagrams.
Read more, Stream Video with GStreamer and rstream
Applications
Serve a local or self-hosted Next.js app through a public rstream URL for webhooks, OAuth callbacks, browser previews, and mobile testing.
Read more, Expose a Local Next.js App with rstream
Private access
Run your own MASQUE-based private residential egress gateway behind a local network, publish it through rstream, route TCP with HTTP CONNECT, route UDP and QUIC with CONNECT-UDP, and validate the setup from macOS and Firefox.
Read more, Build a Private Residential Egress Gateway with MASQUE and rstream
Operations
Deploy rstream Engine Community Edition with Docker Compose, configure TLS and JWT authentication, run an agent validation, publish a tunnel, verify routing, and automate certificate renewal.
Read more, Self-Host rstream Engine CE with Docker Compose
Security
Store rstream agent tokens in macOS Keychain, use macOS Keychain for mTLS agent identities, and keep mTLS private keys inside a YubiKey, HSM, or SoftHSM through PKCS#11.
Read more, Secure rstream Agent Authentication with Keychain and PKCS#11
Operations
Set up a minimal k3s cluster on Ubuntu, install the rstream Kubernetes operator, deploy a small HTTP service, and expose it through an outbound-only rstream tunnel.
Read more, Expose a k3s Service with the rstream Kubernetes Operator
Realtime
Add product provisioning, authorization, and live fleet state around the adaptive Go video producer while keeping Next.js deployable on serverless platforms.
Read more, Build a Next.js WebRTC Video Platform with rstream
Private access
Use rstream WebTTY and optional QUIC tunnel transport to reach remote machines from the rstream Dashboard, browser-based clients, or the rstream CLI without exposing a conventional remote shell service publicly.
Read more, Access Remote Machines with rstream WebTTY
Private access
Reach remote machines over private tunnels, published TCP addresses, or TLS entrypoints while preserving the normal OpenSSH security model.
Read more, Access Remote Machines over SSH with rstream