Musixal/Backhaul ? reverse-engineered prompt

Build me a reverse tunneling app that lets a machine behind NAT or a firewall expose local services through a public server, with a simple client and server setup. I want to be able to point it at a TOML config, start one side as the public listener and the other side as the hidden client, and then forward traffic reliably with very high connection limits.

Please support TCP, TCP multiplexing, UDP over TCP, WebSocket, secure WebSocket, and the multiplexed WebSocket modes too. It should have keepalive and heartbeat settings, optional token based access, TLS certificate support, and a lightweight web page for monitoring. If possible, include hot reloading for config changes and clear logs for troubleshooting. Make it feel fast and stable, and if you need anything from current docs or best practices, look them up online first.