Bridge to a private network

The DataRunner agent runs on a machine inside your network and opens an outbound line to us itself. A connection marked “through the bridge” reaches its database over that line, so a database on 10.0.0.5 or behind a VPN becomes queryable with no inbound rule at all.

1. 01In the console, under Connections → Bridges, create a bridge. The key is shown once.
2. 02Install the agent on the machine and run the command the screen shows, with the key and the list of databases it may reach.
3. 03On the connection, pick the bridge. From then on queries, reports and the monitor go through it.

datarunner-agent bridge --server https://api.datarunner.app --key drb_… --allow 10.0.0.5:5432 --save

What the bridge can reach is decided by the allow-list, on your machine: a request for any other address is refused right there. The agent holds no database credential, exposes no port and accepts no remote command. The key is stored hashed on the server and can be rotated at any time.

It keeps itself up to date: a few times a day it reads the manifest from the channel it was installed from, and when there is a newer version it downloads the binary from that version’s immutable directory, verifies the declared SHA-256, runs the binary once so it states its own version, and only then swaps it in.

• Windows: x86-64 and ARM64
• Linux: x86-64 and ARM64

There is no macOS build. When there is, it will appear on the download page.