Modern CLI tool for managing multiple port-forward connections with real-time monitoring and certificate support.

• 🎨 Simple TUI - Clean terminal interface with real-time status
• ⚡ Fast & Reliable - Detects connection failures quickly
• 🔄 Auto-Reconnection - Automatically reconnects on failure
• 🧹 Port Cleanup - Automatically kills conflicting processes
• 🔐 Certificate Support - Built-in P12 certificate handling for kubectl
• 📊 Real-time Monitoring - Live status updates
• 🛡️ Graceful Shutdown - Proper cleanup on exit or Ctrl+C
• 📦 Single Binary - No external dependencies
• 🌍 Cross-Platform - Works on Windows, Linux, and macOS

go build -o pf.exe
# Optional: Move to a directory in PATH

go build -o pf
sudo mv pf /usr/local/bin/
sudo chmod +x /usr/local/bin/pf

Download pre-built binaries from Releases.

# Add a service
pf add db "kubectl port-forward service/postgres 5432:5432"

# Run the service
pf run db

# List all services
pf list

Add P12 certificates for secure kubectl connections:

# Add certificate (used for all kubectl services)
pf cert add "/path/to/certificate.p12"

# View configured certificate
pf cert list

# Remove certificate
pf cert remove

How it works:

• Extracts certificate and private key from P12 file
• Stores them securely in ~/.pf/certs/
• Automatically injects --client-certificate and --client-key flags into kubectl commands
• Password is only required during setup (not stored)

# Add services
pf add db "kubectl -n prod port-forward service/postgres 5432:5432"
pf add redis "kubectl port-forward service/redis 6379:6379"
pf add api "kubectl port-forward deployment/api 8080:8080"

# List all services
pf list

# Run single service
pf run db

# Run multiple services
pf run db,redis,api

# Delete a service
pf delete redis

# 1. Add your P12 certificate
pf cert add company-vpn.p12
# Enter password when prompted

# 2. Add kubectl service (certificate will be auto-used)
pf add production "kubectl -n prod port-forward service/postgres 5432:5432"

# 3. Run the service
pf run production

# Kill all kubectl/ssh processes
pf cleanup

When running services:

• q or Ctrl+C - Quit and stop all services
• r - Manual refresh

~/.pf/
├── certificate.json      → Certificate configuration
└── certs/
    ├── client-cert.pem   → Extracted certificate
    └── client-key.pem    → Private key

services.json             → Stored services (same directory as executable)

.
├── main.go          → CLI entry point and commands
├── manager.go       → Service lifecycle management
├── storage.go       → Service persistence
├── ui.go            → Terminal UI (Bubbletea)
└── cert/
    ├── p12.go       → P12 certificate extraction
    └── manager.go   → Certificate management

1. Port Management: Automatically detects and kills processes using target ports
2. Service Storage: Services saved in services.json
3. Auto-Reconnection: Automatically restarts failed connections
4. Certificate Injection: For kubectl commands, automatically adds certificate flags
5. Process Cleanup: Proper cleanup of all processes on exit

• P12 password is only used during extraction (never stored)
• Certificate and key files stored with 0600 permissions (owner-only)
• Files stored in user's home directory (~/.pf/)

This tool executes system commands (kubectl, ssh) and manages network connections, which may trigger antivirus false positives.

Recommendations:

• Build from source to verify the code
• Add exception in antivirus software if needed
• Code is open source - audit anytime

Run pf cleanup to kill all kubectl/ssh processes.

• Verify the P12 file path is correct
• Ensure you entered the correct password
• Check certificate with: pf cert list

• Check the command manually: kubectl port-forward ...
• Verify kubectl context and permissions
• Check if certificate is required

• Go 1.21+
• Dependencies:
  • github.com/charmbracelet/bubbletea - TUI framework
  • github.com/charmbracelet/lipgloss - Styling
  • software.sslmate.com/src/go-pkcs12 - P12 handling

go build -o pf

# Windows
GOOS=windows GOARCH=amd64 go build -o pf.exe

# Linux
GOOS=linux GOARCH=amd64 go build -o pf

# macOS
GOOS=darwin GOARCH=amd64 go build -o pf

Contributions are welcome! Feel free to:

• Report bugs
• Suggest features
• Submit pull requests

Open source - feel free to use and modify.

Simple. Secure. Reliable.