STRELAYSRV(1) Syncthing STRELAYSRV(1)
>>> (NAME)
strelaysrv - >>>> >>> Syncthing
>>>>> >>>>> (SYNOPSIS)
strelaysrv [-debug] [-ext-address=
] [-global-rate=] [-keys=] [-listen=]
[-message-timeout=] [-nat] [-nat-lease=] [-nat-renewal=]
[-nat-timeout=] [-network-timeout=] [-per-session-rate=]
[-ping-interval=] [-pools=] [-pprof] [-protocol=]
[-provided-by=] [-status-srv=] [-token=] [-version]
>>>>>>> (DESCRIPTION)
>>>>>> Syncthing >> >>>>>>> >>
>>>>>>> >>> >>>> >>> >>
>>>> >>>>> >>>>>> >>>>>>
>>>> >>>>>>>. >> >>>>
>>>>>>>> >> >>>> >>> >>
>>>> >>> > >>> >>>> >>>>>>
>>>>>> >> >>>>> >>>>>>
>>>>>>>>> > >> >>>>>
>>>>>>> Syncthing >>>> >>>>>>>.
>>>>> >>>> >>>>>> >> >>>>>
>>> >>>> >>>>>> >>>:
https://relays.syncthing.net.
>>>>>>>> (OPTIONS)
-debug >>>>>>>>> >>>>>
>>>>>>>>>>>.
-ext-address=
>>>>> >>>>>>> >>>>
>>>>> >> >>>>> >>>> >>>
>>. >>>>> >>>> >>> >>
>>>>> >>>>>>>> >> >>>>>
>>>>> (port forwarding) >> >>>>> 443>
> >>>>>>> >>>>>> >>>
>>>>> 443 >> >>>>> >>>>>>.
-global-rate=
>>>>>>> >>> >>>>>>> >>
>>>> >> >>>>> (bytes/s).
-keys=
>>>>>>>>> >>>
>>>>>>>>>> cert.pem > key.pem
(>>>>>>> <<.>>).
-listen=
>>>> >>>> >>>>>>
(>>>>>>> <<:22067>>).
-message-timeout=
>>>>>> >>>>>>>>> >>
>>>>> >>>>>> >>>>>>>>
>>>>> >>>>>>>> (>>>>>>>
1m0s).
-nat >>>>>>> >> UPnP/NAT-PMP >>>>
>>>>>> >>>>> >>>>>
>>>>>.
-nat-lease=
>>>>>>>> >>>>> (lease) >> NAT
>> >>>>> (>>>>>>> 60).
-nat-renewal=
>>>> >>>>> >>>>> NAT >>
>>>>> (>>>>>>> 30).
-nat-timeout=
>>>> >>>>> >>> NAT >>
>>>>> (>>>>>>> 10).
-network-timeout=
>>>> >>>>> >>>> >>>>>>
>>>> >>>> >>>>>> > >>>.
>>>>>> >> >>> >>>> >>>>>
>>> >>>>>>> >>> >>>>>> >
>>>> >>> >>>>>> >>>>>
>>>>> >>> >>>>> >>.
>>>>> >> >>>> >>> >> >>>
>>>> >>>>> >>> >>>>>>>
>>>> >>>>>>>>>>
>>>>>>> >>>>>> >>>>>
>>>> >>> >>>>> >>>>>>>
(>>>>>>> 2m0s).
-per-session-rate=
>>>>>>> >>> >> >>>> >>
>>>>> >> >>>> >> >>>>>
(bytes/s).
-ping-interval=
>>>> >>>>> >>>>>
>>>>>>> (>>>>>>> 1m0s).
-pools=
>>>>> >>> >>> >> >>>> >>
>>>>>>>>> >>>>> >>>
>>>> >>>>>> (>>>>>>>
<>). >>>>
>>>>>>> >>>> >>>>> >> >>
>>>>>> > >> >>>>> >>>>>
>>>> >>>>> >>>> >>>
>>>>> >> >>>> >>>>>>>.
-pprof >>>>>>>>> >>>>>>>>>>>>
>>>>> (profiling) >>> >>>>
>>>>>.
-protocol=
>>>>>> >>>> >>>>>>>
>>>> >>>>. >>>>> `tcp' >>>>
IPv4 > IPv6> >>>>> `tcp4' >>>> IPv4> >
>>>>> `tcp6' >>>> IPv6 (>>>>>>>
<>).
-provided-by=
>>>>>>>> >>>>>>>
>>>>>> >>>>> >> >>> >>>>
>>> >> >>>>> >>>>>>.
-status-srv=
>>>>> >>>> >>>>> >>>>>
(>>>> >>>>>>> >>>> >>>>
>>>>>>>) (>>>>>>> <<:22070>>).
>>>>> >>>>> >>>> >>>>
>>>>>> >>>> >>>>> >>>
>>>> >>>>> >>>>
(>>>>>>>> >>>>>>>>>>
>>>>> >>>>>>>>> > >>>>)
>> >>> >>>>>>.
-token=
>>>> >>>> >>>>> >>>>
>>>>>> >> >>>> >>>
(>>>>>>>). >>>>>> >> >>>>
>>>>>>> >> >>>>>>>
>>>>>>.
-version
>>>>> >>>>.
>>> (Installing)
>> >>> releases
>>>> >
>>>> >>>>> >>>>>>>>>> >>>
>> >>>>>>> >>>>. >> >>
>>>>>>> >>> >> >>>> >>>>>>
>> >>> strelaysrv (>> strelaysrv.exe >>
>>>>>>) >> >>> >>>>>>. >>>
>>>>>> >> >> >> >>>> >>
>>>>>>> >>>>> >>>> >>>>>
>>>>> >>>> >>>> >>> >> >>>>
>> >> >>>> >>>>>>> >>> >>>.
>> >>>>>> >>>>> strelaysrv
>>>>>>>> >>>>> >
>>>>>>>>>>> >> >>
>>>>>>>>> >>>> >>>>>
>>>>>>> >>> >>>>>
>>>>>>>>>> >>>> >> >>>>
>>> >>>>. >>>>>> >>>>>>
>>>>>>> >> >>>>>>>> >>>
>>>> >>>>>>> >> >>> >>>> >>
>>>>>>> >>>>> >>>> >>>>>>
>>>> > >> >>>>>>> >>>>>>>>
>> >> >>>> >>>. >>>>
>>>>>>>>>>>
>>>>>>>>>>>>>>> >> >>>>>>
>>>> >>>>> >>> >>>>> >>>
>>>>>>.
>>>> >>> >> >>>>>> >>>>>>>
>> >>>> apt> >>>> >>>>
>>>>>/>>>>>>>> >>>> >>>.
>>>>>>>> >>>> >> >>>>>>>
>> >>>> apt
>>>>>>>>> >>>>. >>> >>>
>>>> syncthing-relaysrv >>>.
>>>>>>>>>> (SETTING UP)
>> >>>> >>>>> >>>> >>>>>>
>> >>>>>>>>> >>>> >>>>>
>>>> > >>>>> TLS > >> >>>>>
>>>> >>>>> >>>>>>. >>>>>
>>>> >>>>>>> 22067 >>>
>>>>>>> >>> >>>> >>>>>>>
>>>>>> >>>>>
>>>>>>>>>>>>> >>>> >>>>>>
>>>>>>>>>>>> >>>>> 443
>>>>>>> >>>>>>. >>> >>>
>>>> >>> >>>> >>>> >>>>
>>>>> root >> >> >>>>> >>>>>>
>>>>>>> >>>>>>>> >>>>>
>>>>> >> >>> >>>> >>> >>>>>
443 >> >>>>> >> >>>>>
>>>>>>>> >> >>>>> >>>>>>
>>>>. >> >>>> >>>>>>> >>>>>
>>>>>>>> >>> >>>> >>> >>
>>>>> >>>>>>/>>>>>> >>>
>>>:
$ sudo useradd strelaysrv
$ sudo mkdir /etc/strelaysrv
$ sudo chown strelaysrv /etc/strelaysrv
$ sudo -u strelaysrv /usr/local/bin/strelaysrv -keys /etc/strelaysrv
>>> >>>>>>> >>>>>> >> >>>
strelaysrv > >>>>>>>>> /etc/strelaysrv >>
>>>> >>>>> >>>>>> >>>>>
>>>>>>>. >>>>>> >> >>>>>>
>>>>>>>>>> >>>>> >>>>>>>.
>>> >> >>>>> >>>>>> >>>
>>>>> >>>>>> >>> >>>>>
>>>>>>> -pools="" >>>> >>> >>>>.
>>>> >>>> >>>>>> >>>> >>>
>>>>> >>> >>>>>> >>
>>>>>>> >>>>>>>>> >>>>
>>>>>>>>>> >>> >>>>>>>
>>>>.
>>>>>>>> >>>>>> (Client configuration)
>>>>>>>>> >> >>>>>>>
>>>>>>>>>> >>>>>>>> >>>
>> >> >>>>>>> >>> >>>>
>>>>>>> >>> (>>>>>>
>>>>>>> >> >>> >>>>>
>>>>>)> >>> >>> >> >>>>>>
>>>>>>> >>>> >>> >> >>>> Sync
Protocol Listen Address> >>> >>> Actions > Settings
>>>>> >>>>>>. >>>>>> >> >>
>>>> >>> >>>:
relay://[:port]/?id=
>>>> >>>>>:
relay://private-relay-1.example.com:443/?id=ITZRNXE-YNROGBZ-HXTH5P7-VK5NYE5-QHRQGE2-7JQ6VNJ-KZUEDIU-5PPR5AM
>>>>> >>>>>> (device ID) >>>
>>>>> >>>>>>>>>> >>>>>
>>>> >>>>>>.
>>>> >>> >>>>> 443 >> >>>>> >>
>>>>> >>>>>>>> (Running on port 443 as an
unprivileged user)
>>>>> >>>>>> >> >>> >> >>>
>>>>> 443 (>> >>>>> >>>>> >>
>>>>>>> >> >>>>
>>>>>>>>>>> >>>>>>> >>>>
>>>>>> >>>>>>) >>>> >>>> >>
>>>> >>>>> >>>>>>> >>
>>>>>> >>>>. >> >>> >>>>
>>> >>>> >>> >>>>>>>>> >>>
1024 >> >>>>>> root >>>> >>>> >
>>>>> >>> >> >>>>> >>>>> root
>>>>> >>>>>>>. >>>>>>>>>
>>>>> >>>>>> >> >>>>> >>>
>>>> >>>>.
>> >>>>>> >>>>> >>> >>>
>>>>> 22067 > >>>>>>> >> >>>>>
iptables >>>> >>>>> >>>>>> >>
>>>>> 443 >> >>>>> 22067 >>>>
>>>> >>>>>:
iptables -t nat -A PREROUTING -p tcp --dport 443 -j REDIRECT --to-port 22067
>> >>>>>> >> ufw >>>>>>>
>>>>>>>> >>>>> >>> >> >>
/etc/ufw/before.rules >>>>>>>>:
*nat
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
-A PREROUTING -p tcp --dport 443 -j REDIRECT --to-port 22067
COMMIT
>>> >>>> strelaysrv >> >> >>>>>
-ext-address ":443" >>>>>>>>>> >>>>.
>>> >>>>>>> >> strelaysrv >>>>>
>>>>>> >> >> >>>> >>>> >>>
>>>>> 22067> >> >>>> >>>>> 443
>>>> >>>>> >>>. >>> >>>>>>
>>>> >>>>> >>>> >> >> >>>>>
443 > 22067 >> >> >>>>>>> >>>>>.
>>>>> >>>> >> >>>>> >>>
>>>> >>> >>>
> >>>>>
>>>> >>> >>>>> >>>> >>>
>>>>>> >>>>.
>>>>>>> >>>>>>> (FIREWALL CONSIDERATIONS)
>>>> >>> >>>>>> >>>>>>> >>
>> >>>>> >>> >>>>>>: >>>
>>>> >>>>>>> >>>> > >>>>>
>>>> >>>>> >>>> >>>>> >>
https://relays.syncthing.net. >>>>>>>> >>>>>
iptables> >>>> >>>>>>> >>>>> TCP
>> >>>>>>>>> >>> >> >>>>
>>>>>:
o >>>>> >>>>: 22067/tcp >> >> -listen
>>>>>>>> >>>>>> > >> -ext-address
>>>>> >>>>>>>
o >>>>> >>>>>: 22070/tcp >> >> -status-srv
>>>>>>>> >>>>>>
>>>>>> >>>> >>>>> iptables >>>>
>>>> >>>>> >>>>>> >>
>>>>>>>>> >>>>>>>:
iptables -I INPUT -p tcp --dport 22067 -j ACCEPT
iptables -I INPUT -p tcp --dport 22070 -j ACCEPT
>>>>> >>>> >>>>>> >>>>
>>>>>> >>>>>>>> >>
>>>>>>> >>>>> >>>>>> >>>
>>>> >>>>.
>>>>> >>>>>> >>>> >>>>>>>
>>>>> (ACCESS CONTROL FOR PRIVATE RELAYS)
>> >>>> 1.22.1 >>>>> >>.
>>>>>>> >>>>> >> >>>>>>>
>>>>>>>>>> >>>>>>>> >>>
>> >>> >>>>>>>> >> >>
>>>>>>> >>>>> >>> >>>>> (shared
secret) >>>>>>>. >>>> >>>>>>>>
>>> >>>>>>> >> >>>>> -token
>>>>>>> >>>>:
$ strelaysrv -token=mySecretToken
>>> >>>>>>>>>> Syncthing >>> >>
>>>>>>>>>> >>>>> >>>> >>
>>>>> >>>>> >> >>>> >>>> >>
>>>>> >>>>:
relay://[:port]/?id=&token=mySecretToken
>>>>>> >>>>>> (SEE ALSO)
syncthing-relay(7), syncthing-faq(7), syncthing-networking(7)
>>>>>>>>> (AUTHORS)
The Syncthing Authors
>>>>>>>> > >>>>> (COPYRIGHT)
2014-2026, The Syncthing Authors
v2.1.0 July 23, 2026 STRELAYSRV(1)