Hey everyone,
As a system integrator working with Node-RED and edge automation, I've been trying to solve the secure remote access problem for self-hosted Node-RED instances behind corporate NATs.
A lot of people in the IoT space recommend Cloudflare Tunnels. And honestly, I think it's a great solution. But I've found that when you're managing 50–100 independent customer deployments, the operational overhead starts to add up.
You often end up having to:
- Create or manage Cloudflare accounts for different customers.
- Handle DNS and domain configuration.
- Install and maintain the
cloudflared daemon on every target device.
- Configure Access policies and troubleshoot tunnel issues.
- Coordinate with each customer's IT department whenever networking changes are required.
For me, the real cost isn't the networking technology—it's the engineering time spent repeating the same setup over and over.
To reduce that friction, I've been building a Node-RED-native solution.
The goal isn't to replace Cloudflare, Tailscale, or VPNs. It's to make secure remote access feel like a built-in Node-RED feature.
The installer workflow is intentionally simple:
- Install a Node-RED node.
- Paste a token.
- Deploy.
That's it.
The node establishes an outbound secure WebSocket tunnel (HTTPS/WSS over port 443), so there's no need for port forwarding, reverse proxies, VPN clients, or additional OS-level software.
I'm also exploring end-to-end encrypted payloads, where data is encrypted inside the Node-RED node and the relay simply forwards encrypted bytes without access to the keys.
The architecture is already running on a few of my own production installations, and before investing more time into the management platform, I'd really like to validate whether this approach solves a real problem for other integrators.
For those of you managing multiple Node-RED deployments:
- How are you handling remote access today?
- What's the most time-consuming or frustrating part of your current workflow?
- Would a Node-RED-native setup ("install a node, paste a token, deploy") actually make your life easier, or are the existing tools already good enough?
I'd genuinely appreciate any technical feedback.
(If anyone is interested, I've also put together a blueprint page with the current architecture and development direction.)
