STRELAYSRV(1) Syncthing STRELAYSRV(1) (NAME) strelaysrv - Syncthing (SYNOPSIS) strelaysrv [-debug] [-ext-address=
] [-global-rate=] [-keys=] [-listen=] [-message-timeout=] [-nat] [-nat-lease=] [-nat-renewal=] [-nat-timeout=] [-network-timeout=] [-per-session-rate=] [-ping-interval=] [-pools=] [-pprof] [-protocol=] [-provided-by=] [-status-srv=] [-token=] [-version] (DESCRIPTION) Syncthing . Syncthing . : https://relays.syncthing.net. (OPTIONS) -debug . -ext-address=
. (port forwarding) 443 443 . -global-rate= (bytes/s). -keys= cert.pem key.pem ( <<.>>). -listen= ( <<:22067>>). -message-timeout= ( 1m0s). -nat UPnP/NAT-PMP . -nat-lease= (lease) NAT ( 60). -nat-renewal= NAT ( 30). -nat-timeout= NAT ( 10). -network-timeout= . . ( 2m0s). -per-session-rate= (bytes/s). -ping-interval= ( 1m0s). -pools= ( <>). . -pprof (profiling) . -protocol= . `tcp' IPv4 IPv6 `tcp4' IPv4 `tcp6' IPv6 ( <>). -provided-by= . -status-srv= ( ) ( <<:22070>>). ( ) . -token= (). . -version . (Installing) releases . strelaysrv ( strelaysrv.exe ) . . strelaysrv . . . apt / . apt . syncthing-relaysrv . (SETTING UP) TLS . 22067 443 . root 443 . / : $ sudo useradd strelaysrv $ sudo mkdir /etc/strelaysrv $ sudo chown strelaysrv /etc/strelaysrv $ sudo -u strelaysrv /usr/local/bin/strelaysrv -keys /etc/strelaysrv strelaysrv /etc/strelaysrv . . -pools="" . . (Client configuration) ( ) Sync Protocol Listen Address Actions Settings . : relay://[:port]/?id= : relay://private-relay-1.example.com:443/?id=ITZRNXE-YNROGBZ-HXTH5P7-VK5NYE5-QHRQGE2-7JQ6VNJ-KZUEDIU-5PPR5AM (device ID) . 443 (Running on port 443 as an unprivileged user) 443 ( ) . 1024 root root . . 22067 iptables 443 22067 : iptables -t nat -A PREROUTING -p tcp --dport 443 -j REDIRECT --to-port 22067 ufw /etc/ufw/before.rules : *nat :PREROUTING ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] -A PREROUTING -p tcp --dport 443 -j REDIRECT --to-port 22067 COMMIT strelaysrv -ext-address ":443" . strelaysrv 22067 443 . 443 22067 . . (FIREWALL CONSIDERATIONS) : https://relays.syncthing.net. iptables TCP : o : 22067/tcp -listen -ext-address o : 22070/tcp -status-srv iptables : iptables -I INPUT -p tcp --dport 22067 -j ACCEPT iptables -I INPUT -p tcp --dport 22070 -j ACCEPT . (ACCESS CONTROL FOR PRIVATE RELAYS) 1.22.1 . (shared secret) . -token : $ strelaysrv -token=mySecretToken Syncthing : relay://[:port]/?id=&token=mySecretToken (SEE ALSO) syncthing-relay(7), syncthing-faq(7), syncthing-networking(7) (AUTHORS) The Syncthing Authors (COPYRIGHT) 2014-2026, The Syncthing Authors v2.1.0 July 23, 2026 STRELAYSRV(1)