Hi, I'm Rohan Pandey
Expertly Crafting Mobile and Web Solutions for Businesses

How It Works

1. User logs in to the mobile app with their credentials.User logs in.
2. They start the Tally Connector on their local machine.Start Tally Connector locally.
3. The connector registers a live tunnel to the local Tally port on my VPS — no ngrok, no third-party service.Connector registers a live tunnel on VPS — no ngrok.
4. The tunnel URL is saved securely in the database — never exposed to the app or the user.Tunnel URL saved in DB — never exposed.
5. The app sends JWT-authenticated XML requests; unauthenticated calls are blocked at the gateway — Tally responds in real time.JWT-authenticated requests only — Tally responds in real time.

Tech Highlights

• Custom tunneling service on a self-managed VPS — zero ngrok, zero third-party tools.Self-managed VPS tunnel — zero ngrok.
• Tunnel URL lives only in the database — never sent to the client, never visible anywhere.Tunnel URL in DB only — never exposed.
• Every request is JWT-protected — even if someone gets the link, they cannot reach Tally without a valid token.JWT-protected — no token, no access.
• Supports multiple Tally XML types: create orders, modify orders, view reports, admin config.Orders, reports, and admin config via Tally XML.
• Fully real-time — no polling, no manual sync, no intermediate database layer.Fully real-time — no polling, no sync.

Mesh & Security Controls

• Granular Port Micro-Segmentation: Clients are strictly restricted to approved destination ports and services—all unauthorized ports are blocked automatically. Strict port restrictions; unauthorized ports blocked.
• Real-Time Firewall Automation: Admin permission changes synchronize instantly down to client devices, automatically configuring Windows Defender outbound firewall rules without reconnecting. Admin changes sync live and auto-configure local firewall.
• Encrypted P2P Mesh Architecture: Built on modern WireGuard/Tailscale technology, enabling high-speed direct encrypted tunnels between remote machines, servers, and developers with zero bottlenecks. High-speed direct encrypted WireGuard tunnels.

Admin & Policy Enforcement

• Centralized Cloud Admin Portal: Easily manage organization devices, monitor live online/offline presence, publish internal catalog services, and toggle client access permissions with a single click. Centralized device management & service catalog publishing.
• Device-Wise Permissions & Single Session: Assign specific internal services (PostgreSQL, SSH, Redis, Web Dashboards) to individual client devices or teams, with session validation and instant access revocation. Granular service assignment with session validation.
• Integrated Security Audit & Testing: Built-in TCP port diagnostic tools and comprehensive event audit logging to monitor connections, policy modifications, and device enrollment. TCP port diagnostics and event audit logging.