_____ _          _ _ _____                 _     
 / ____| |        | | |  __ \               | |    
| (___ | |__   ___| | | |__) |___  __ _  ___| |__  
 \___ \| '_ \ / _ \ | |  _  // _ \/ _` |/ __| '_ \ 
 ____) | | | |  __/ | | | \ \  __/ (_| | (__| | | |
|_____/|_| |_|\___|_| |_|  \_\___|\__,_|\___|_| |_|

$ Secure shell access, anywhere

ShellReach is a Linux-native remote access platform currently under development. Our goal is to provide secure, identity-based shell access to Linux devices without port forwarding, static IPs, or VPNs — built from the ground up for ARM, embedded systems, and headless environments.

$ project status $ design vision

Design vision

ShellReach is designed for scenarios where traditional SSH access becomes fragile or risky: devices behind CGNAT, mobile networks, intermittent connectivity, and large fleets of unattended nodes. The focus is on outbound-only connectivity, cryptographic device identity, and minimal operational overhead.

Embedded & ARM systems

First-class support for Armbian and other embedded Linux distributions.

Edge & field devices

Reliable access to devices deployed outside the datacenter or corporate network.

Operators & integrators

People who need dependable shell access during development and long after deployment.

Project status

ShellReach is currently in the design and early prototyping phase. Core architecture decisions are being validated, and implementation work has started.

Public source code, documentation, and early builds will be announced once the foundational components are stable.

Planned principles

While the implementation is still evolving, ShellReach is built around a few core principles:

No inbound listeners

Devices initiate outbound connections only.

Strong device identity

Each node is uniquely identified using cryptographic keys.

Minimal assumptions

No requirement for static IPs, special networks, or VPNs.