DOCSEARCHbyAlgolia
Submit Docs

Tuna Documentation

website·Indexed 33 days ago

https://tuna.am/

Documentation for the Tuna platform, including installation guides for network tunnels (HTTP, TCP, SSHd, Trigger, Postgres, and Redis), backup solutions with monitoring, and legal frameworks such as the Terms of Service, Privacy Policy, and Data Processing Agreement. Includes changelogs for version v0.32.0.

Tokens
70.2K
Snippets
347
Records
586
Agent score
62%

What's inside Tuna

  1. Overview of Tuna Secrets for centralized configuration management

    Tuna Secrets is a centralized service for managing sensitive settings and environment variables, serving as a secure alternative to .env files and CI/CD variables (e.g., GitLab/GitHub CI). It provides a single source of configuration across local development, CI/CD, staging, and production environments. Key features include RBAC, audit logs, IP restrictions via CIDR, and encrypted storage where keys are not stored in the database to prevent data exposure during a DB leak. The organizational hierarchy follows: Projects $\rightarrow$ Environments $\rightarrow$ Configurations.

  2. Overview of Tuna Platform Capabilities

    Tuna is a developer platform designed to accelerate development, simplify team collaboration, and enhance security. Its core feature set includes:

    • Network Tunnels: Create reverse-proxy tunnels (HTTP, TCP, SSHd) using the tuna CLI to provide public internet access to local sites or applications without requiring a public IP, VPN, or router port forwarding.
    • Specialized Tunnels: Dedicated tunnels for Trigger events, PostgreSQL (with SQL query inspection), and Redis (with request inspection).
    • Webhooks: Tools to debug incoming HTTP requests by inspecting request bodies, headers, and source IPs.
    • Gateways: Cloud load balancers and web servers with flexible traffic policies for distributing requests across multiple services and managing headers and authorization.
    • Monitors: Monitoring for CronJobs, Heartbeat, ICMP, DNS, HTTP, and TCP applications with notification support.
    • Security Tools:
      • Password Manager: A zero-knowledge proof password manager for secure team sharing.
      • Secrets: A secure alternative to .env files and CI/CD environment variables for application configuration.
      • Bastion: A Zero Trust SSH server with role-based access control, temporary certificates, and session auditing.
      • Protected Applications: A secure reverse proxy with role-based access, country-based restrictions, SSO, and MFA.
    • Collaboration: Bug reporting tools that collect screenshots and debug information from websites.

  3. Overview of Tuna Tunnel types

    Tuna allows the creation of reverse-proxy tunnels via the Tuna CLI or Tuna Desktop app, providing internet access to local services without requiring a public IP, VPN, or router port forwarding. Supported tunnel types include:

    • HTTP: For websites and web applications.
    • TCP: For databases, SSH, and RDP access.
    • SSHd: For SSH access without a dedicated SSH server.
    • Postgres: For PostgreSQL databases with an integrated query inspector.
    • Redis: For Redis instances with an integrated query inspector.
    • Trigger: For executing actions based on specific events.

  4. Overview of Tuna monitor types

    Tuna supports six types of monitors divided into two categories:

    User-driven Monitors (expect signals from your apps/scripts):

    • Job (CronJob): Monitors the execution of scheduled periodic tasks.
    • Heartbeat: Monitors regular signals sent from services and applications.

    External Monitors (actively probe your resources):

    • HTTP: Checks the availability of websites and APIs.
    • TCP: Checks the availability of TCP services and ports.
    • DNS: Verifies DNS records and domain resolution.
    • ICMP (Ping): Checks network reachability of hosts via ICMP.

  5. Overview of Tuna Monitors

    Tuna Monitors provide health tracking for services, tunnels, tasks, and infrastructure. It supports automatic notifications via email, Telegram, Slack, and webhooks when failures or recoveries occur. The system is divided into two main categories: User Monitors (which receive signals from apps/scripts) and External Monitors (which actively probe resources from multiple geographic regions).

  6. Overview of Tuna Bastion SSH access

    Tuna Bastion is an SSH server implementing a role-based mandatory access control model based on Zero Trust principles. It focuses on user identification, temporary certificates, and role-based access to simplify server security.

    Availability: Currently in open beta for users with the 'Legend' (Легенда) subscription plan.

  7. Overview of Tuna monitor types

    Tuna provides several types of monitors to check the availability of different services:

    • HTTP: Used for websites, REST APIs, and webhooks.
    • TCP: Used for databases, mail servers, and game servers.
    • DNS: Used for domains, MX records, and TXT records.
    • ICMP: Used for servers and network equipment (ping).

    External monitors (HTTP, TCP, DNS, ICMP) can be configured to check from multiple geographical regions with a customizable check interval.

  8. Data collected from API and Client Software users

    When using Tuna's client software or API, the following data is processed:

    • Account identifier and access token.
    • Connection IP address.
    • Client software version, OS type/version, and architecture.
    • Resource parameters: tunnel names and addresses, connection region, session start/end times, and volume of transferred traffic.

  9. Manage team accounts and membership in Tuna

    Tuna allows users to belong to multiple teams as either a creator or a member. Users can switch between their personal account and team accounts using the selector located in the top-left corner of the screen. New teams can also be created from this same selector.

  10. Use Tuna Desktop for simplified tunnel management

    Tuna Desktop is a GUI application designed for users who prefer a visual interface over the command line or for developers who need to maintain persistent tunnels with static addresses (e.g., for payment gateway webhooks like YooKassa) without manually running CLI commands. It supports Windows, macOS, and Linux.

  11. Secure web services with Tuna Applications (Zero Trust Proxy)

    Tuna Applications provide a protected reverse proxy that adds authorization, SSO, and granular access control to any web service (e.g., admin panels, staging environments, Grafana, internal APIs) without requiring code changes to the service itself. The system verifies every incoming request based on user identity, authentication method, origin, and path permissions.

  12. Tuna Platform Acceptable Use Policy (AUP) Overview

    The Tuna Acceptable Use Policy defines the permissible use of platform services for all users regardless of their pricing plan. Users are responsible for ensuring that their actions, and those of their organization members or authorized third parties, comply with the laws of the Republic of Armenia, the user's own country, and the country where the infrastructure is hosted. Users must possess all necessary rights to the data, content, domain names, and TLS certificates used within the services.