LocalXpose

LocalXpose - Free IoT Remote Access from Anywhere

Access, control, and manage IoT devices remotely over the internet. Reach device dashboards, SSH, and MQTT behind firewalls, NAT, or CGNAT. No port forwarding.

Start Free Trial → No credit card required
online Remote Access Client Any Protocol Multiple Secure Tunnels LocalXpose Cloud Edge IoT Fleet up Sensor Node up Raspberry Pi SSH up Smart Camera up Cellular Gateway

What is IoT Remote Access?

IoT remote access is the ability to reach a device on a private network from anywhere over the internet, so you can open its dashboard, run commands, read its data, or push an update without being on the same network. The device can be an industrial sensor, a Raspberry Pi, a smart camera, or a gateway deployed at a remote site.

The problem is that IoT devices rarely have a public address. They sit behind a router, a corporate firewall, or a cellular network running CGNAT, so nothing on the internet can reach them directly. LocalXpose opens an outbound tunnel from the device to a public URL, so you get remote access from anywhere with no public IP, no port forwarding, and no VPN client on every machine.


LocalXpose: Free Remote Access for Any IoT Device

Whether you need to reach a device dashboard over HTTP or a sensor feed over UDP, LocalXpose exposes the services your devices already run, from anywhere, over any protocol.

Reach Any Device From Anywhere

Start a tunnel on the device and its local service gets a public HTTPS URL. Reach it from your phone, your laptop, or any browser, with no static IP and nothing to install for the person connecting.

loclx tunnel http --to localhost:80 --subdomain sensor-07
# https://sensor-07.loclx.io

One stable URL per device that survives reboots and IP changes.

Works Behind Firewalls, NAT, and CGNAT

The device connects outbound, the same way a browser reaches a website, so it passes straight through firewalls, NAT, and carrier-grade NAT with nothing to configure on the router.

  • A gateway on a 4G/5G modem at a customer site? Reachable.
  • A Raspberry Pi behind a home router? Reachable.
  • A sensor behind a strict company firewall? Reachable.

Port forwarding cannot do this on CGNAT. LocalXpose can.

Every Protocol Your Devices Use

HTTP, TCP, and UDP over one tool. This is where tunnels beat remote desktop agents, which stop at screen sharing.

# SSH into the device
loclx tunnel tcp --to localhost:22
# MQTT broker over TCP
loclx tunnel tcp --to localhost:1883
# CoAP or MQTT over DTLS (UDP)
loclx tunnel udp --to localhost:5683

Secure by Default

Exposing a device should reduce risk, not add it.

  • No inbound ports for attackers to scan
  • Encrypted TLS tunnels end to end
  • Access controls with IP allowlisting, basic auth, and scoped tokens
  • Hidden origin, so users hit a LocalXpose URL, never the device IP

Pair the tunnel with the device’s own login for sensitive admin panels.

Control and Manage Remotely

Remote control starts with access. Once a service is tunneled, reach the device’s own control interface from anywhere: change settings from its dashboard, run management commands over SSH, or trigger a firmware update. Each device carries its own URL, so operating a fleet means tunneling the right service on each one.

Raspberry Pi and Edge Devices

LocalXpose runs as a single binary on a Raspberry Pi or edge gateway and exposes SSH, a web dashboard, or a camera stream, even behind a home router or cellular modem. See the Raspberry Pi remote access guide for the full walkthrough.

loclx tunnel tcp --to localhost:22

Start Free Trial →

No credit card required

IoT Remote Access Use Cases

Remote Device Dashboards

Expose the web interface that gateways, cameras, and controllers already run, and manage the device from its own dashboard remotely. The fastest way to reach a web page on many devices in the field.

Field and Customer-Site Equipment

Reach devices on cellular or customer networks you do not control. Because the connection is outbound, CGNAT and firewalls are not a blocker, so no static IP or open port is needed.

SSH Access and Firmware Updates

Reach a device terminal over the internet to run commands, deploy updates, or debug, without opening port 22 to the world.

Remote Desktop to Edge PCs

Tunnel VNC or RDP over TCP when an edge PC or panel needs full graphical remote desktop access over the internet.

Sensor and Telemetry Data

Carry MQTT and CoAP traffic over TCP or UDP tunnels, including UDP-based protocols that remote desktop tools cannot handle.


LocalXpose vs Traditional IoT Remote Access Tools

CapabilityLocalXposeRemote desktop / agent tools (TeamViewer, RealVNC, Splashtop)Port forwarding + DDNSVPN (self-hosted WireGuard, OpenVPN)
Works behind CGNAT/NAT✅ Yes✅ Yes❌ No✅ With a public server
No proprietary per-device platform agent✅ One lightweight tunnel client❌ Vendor agent per device✅ Nothing on device✅ Standard VPN client
Protocol coverageHTTP/S, TCP, UDPRemote desktop; TeamViewer adds terminal and TCPAny (if reachable)Any (network level)
Public URL for device dashboards✅ Yes❌ Vendor client or console✅ Yes (exposes the device)❌ Private network only
Tunnels arbitrary UDP (CoAP, MQTT over DTLS)✅ Yes❌ No✅ If reachable✅ Yes
No open inbound ports or router changes✅ Yes✅ Yes❌ No✅ Yes
Pricing modelFree tier + flat, per accountPer device or per seatFree (ISP fees)Free (self-hosted server)

Agents are built around vendor platforms and mostly remote desktop. Port forwarding exposes the device through an open port. VPNs put everything on one private network. LocalXpose reaches a specific device service, over any protocol, from a public URL, without opening inbound ports and without a proprietary platform agent on every device.


Get Started in Under 60 Seconds

Put a device online in three commands.

2

Authenticate

loclx account login
3

Tunnel the device service

loclx tunnel http --to localhost:80   # dashboard
loclx tunnel tcp  --to localhost:22   # SSH
loclx tunnel udp  --to localhost:5683 # CoAP / MQTT-DTLS

For always-on access, run LocalXpose as a background service so tunnels survive device reboots.


Pricing That Makes Sense

Free Tier

$0/month

  • 2 active HTTP tunnels
  • Unlimited bandwidth
  • SSL encryption
  • Unique subdomains
  • Community support

Pro Plan

Popular

$8/month

  • 10 active tunnels (TCP/UDP/TLS included)
  • Custom domains
  • IP allowlisting and access control
  • Unlimited bandwidth
  • 24/7 availability

Flat pricing per account, not per device or per seat. No bandwidth overages as your fleet grows.


Frequently Asked Questions

What is IoT remote access?

It is reaching a device on a private network from anywhere over the internet, so you can open its dashboard, run commands, read data, or update it without being on the same network. LocalXpose provides this by tunneling the device’s local services to a public URL.

How do I access an IoT device from anywhere?

Run LocalXpose on the device and start a tunnel to the service you want. You get a public HTTPS URL that forwards to the device, reachable from any browser or client, with no public IP and no port forwarding.

Can I access IoT devices behind a firewall or CGNAT?

Yes. The device connects outbound, so it works behind firewalls, NAT, and carrier-grade NAT where port forwarding fails. This is what makes it practical for cellular gateways and remote-site equipment.

What is the best free way to access IoT devices remotely?

LocalXpose has a free tier with 2 HTTP tunnels and unlimited bandwidth, enough to reach one device’s dashboard from anywhere. The Pro plan adds SSH, TCP, UDP, multiple devices, and access controls.

How do I remotely control or manage an IoT device?

Tunnel the device’s own control interface, its dashboard over HTTP or its terminal over SSH, and operate it as if you were on the local network. Each device gets its own URL.

Can I use SSH, VNC, or RDP to an IoT device over the internet?

Yes. Tunnel SSH over TCP, or tunnel a VNC or RDP service over TCP for full remote desktop access, without opening those ports to the public internet.

Does it work for MQTT and CoAP?

Yes. LocalXpose supports UDP, so CoAP and MQTT over DTLS work through the tunnel, and TCP-based MQTT brokers work over a TCP tunnel. Most remote desktop tools cannot do this.

Does it work over cellular or mobile networks?

Yes. Cellular connections almost always use CGNAT, which blocks inbound connections. Because LocalXpose connects outbound, a device on a 4G or 5G modem is reachable through its tunnel.


Ready to reach your IoT devices from anywhere?

Try LocalXpose for free and put your first device online in under a minute, behind any firewall, over any protocol.

Get started free →

No credit card required