Built for developers
who care about privacy

Relayly uses the Noise Protocol XX pattern with X25519 key exchange and ChaChaPoly AEAD for authenticated, forward-secret, end-to-end encryption. The relay server never sees plaintext, only opaque binary frames.

• Mutual device authentication
• Forward secrecy via ephemeral keys
• Zero-knowledge relay
• Public Key Locking prevents key swapping

Pair devices using a 6-digit short code or a QR code generated in the terminal. No accounts, no emails, no cloud registration. Pure cryptographic pairing: your identity is your key.

• 6-digit one-time pairing code
• QR code for mobile scanning
• Admin-managed device registry
• One-click device revocation

Relayly embeds SQLite directly into the binary. No PostgreSQL, no Redis, no Kafka. Just a single portable binary you can run anywhere: your Raspberry Pi, your VPS, your NAS.

• Embedded SQLite storage
• Single static binary
• No external database setup
• Persistent volume for DB + keypair

An HTMX-powered dashboard running on a separate admin port (default 127.0.0.1:8081). Live connection counts, device management, and one-click revocation, no JavaScript framework needed.

• Live dashboard with auto-refresh
• Device management with revoke
• Separate admin bind address
• Uptime + connection metrics

Ship with Docker Compose or run the single binary directly. Pre-built images available. Works behind Caddy or nginx as a reverse proxy with TLS termination.

• docker compose up --build -d
• Single binary for any Linux/macOS/Windows
• Caddy / nginx reverse proxy support
• Persistent volume mounts

Two first-class SDKs maintained in the same monorepo. Auto-reconnect with exponential backoff, event-driven message handling, and full async/await support in TypeScript.

• Go SDK: sdk/go
• TypeScript SDK: sdk/ts (Node + Browser)
• Auto-reconnect with backoff
• Event-driven message handling