01
Same port, every time
Reserved ports are yours, so nobody else can take them while your agent is offline, and your ssh config never changes.
Wormhop's agent dials out, so the machine you want to reach needs no open inbound ports, public IP or VPN. Reserve a TCP port once and the address stays the same across reboots and reconnects.
$wormhop tcp 22 --remote-port 20022$ssh -p 20022 you@tcp.wormhop.dev01
Reserved ports are yours, so nobody else can take them while your agent is offline, and your ssh config never changes.
02
If port 7000 is blocked, the agent quietly connects through 443 instead. Both attempts run at once, so a blocked port doesn't cost you a timeout.
03
The agent reconnects with backoff, and a restarted agent replaces its stale session instantly instead of waiting for it to time out.
04
Authtokens are shown once and stored hashed. Revoking one disconnects every agent using it, immediately.
Questions
No. TCP tunnels start on Hobbyist, which also gives you 10 reserved ports that keep the same number. Free is HTTP and HTTPS only.
Yes. Any TCP protocol works: Postgres, MySQL, Redis, RDP, VNC, MQTT and so on. Keep the service's own authentication on, since the port is public.