FRP tunnel desktop client: MoonProxy

MoonProxy (Chinese name: 月神代理) is a cross-platform desktop client for FRP (Fast Reverse Proxy), built on Tauri v2. It wraps the frpc command-line complexity — config files, process management, and health checks — into a graphical interface aimed at non-technical users.

MoonProxy supports macOS (Apple Silicon aarch64 and Intel x64) and Windows (x64). Installers are available on GitHub Releases as DMG (macOS) and EXE (Windows) files.

No. MoonProxy bundles the frpc binary via the Tauri sidecar mechanism, so you don't need to install or configure the frp command-line tool separately.

Yes. MoonProxy is released under the MIT license, with source code and release cadence published on GitHub at MoonProxyHQ/moonproxy-desktop.

It adds: visual proxy rule management, a circular one-click start/stop button (4 visual states), endpoint health polling (local port reachability every 3 seconds), system tray residency, launch-at-login and silent start, scheduled connect (by weekday and time window), automatic frpc engine updates from upstream GitHub Releases (SHA256 verified and atomically swapped), and the application's own self-updates.

The app is currently ad-hoc signed (no Apple Developer certificate, no Apple notarization). On first launch, right-click the app → Open, or run xattr -cr after dragging it to /Applications to drop the quarantine attribute. Intel Macs can run it directly without warnings.

Not directly. MoonProxy only manages the frpc client side; you need to provide your own frps server. Common options: ① self-host on a public-IP machine (a 1-core 2GB cloud VM is enough); ② use a community-public frps node (evaluate trustworthiness yourself); ③ run a lightweight frps on a serverless function. Users share deployment guides in the repository’s Discussions.

Security is provided by the frp protocol itself: communication uses TCP/TLS or KCP encryption, and authentication tokens are held by you. MoonProxy does not store or relay your application data—configs and tokens live only on your machine. Best practices: ① use a strong per-rule token; ② enable TLS encryption in frpc.toml (transport.tls.force = true); ③ enable allowUsers whitelist on frps; ④ restrict exposed ports on the public side with a firewall.

They serve different use cases. ZeroTier / Tailscale are full-device VPN meshes — every device joins a virtual LAN, ideal when you want “devices feel like one network.” frp (managed by MoonProxy) is a per-port reverse proxy that exposes only chosen local services to the public internet. Quick rule of thumb: remote desktop / SSH to every home machine → ZeroTier/Tailscale; temporarily expose a NAS, blog, or webhook callback → frp + MoonProxy. The two can coexist.