Skip to content
ARIS Docs

Remote Access

Remote access lets you run your rigs from anywhere: check the sequence from work, watch the guide graph from bed, get woken up only when something actually needs you. Same app, same screens — the rig doesn’t care whether you’re on the couch or three time zones away.

How it works

Section titled “How it works”

Each paired rig opens its own secure, outbound-only tunnel to the ARIS cloud. The rig dials out; nothing ever dials in. That means:

  • No port forwarding. You never open a port on your router.
  • No router configuration. No static IPs, no DHCP reservations, no dynamic DNS.
  • Nothing newly exposed on your network. The rig accepts no inbound connections from the internet.

All remote traffic is gated by your sign-in. You authenticate with your Google or Apple account, and only the account that claimed a rig can reach that rig. Requests without a valid signed-in session are rejected before they touch the rig.

Setup is a one-time, two-minute pairing per rig: Pair for Remote Access.

Your fleet, from anywhere

Section titled “Your fleet, from anywhere”

Open app.arisastro.com (or the app) and sign in. The launcher shows your fleet: every claimed rig with live online/offline presence. Pick a rig and it opens — full control, not a read-only dashboard. Slews, captures, focus runs, sequence edits all work remotely exactly as they do at home.

One honest note on physics: controls and previews travel light, but full-resolution frame downloads are naturally slower over the internet than over your LAN. Plan to pull the night’s raw FITS files when you’re back home, and use the remote session for driving the rig and judging the previews.

At home, you connect direct

Section titled “At home, you connect direct”

When you’re on the same network as a rig, ARIS notices and connects directly over the LAN instead of routing through the tunnel. It’s automatic — same launcher, same tap — just faster, because your frames aren’t taking a round trip through the internet to cross your living room. The tunnel is only used when you’re actually away.

Lock-screen alerts

Section titled “Lock-screen alerts”

Paired rigs push notifications to your phone, even on LTE with the app closed:

  • Sequence complete, stopped, or failed — know the moment the night ends, either way.
  • Deep stack ready — your overnight master is waiting in Files.
  • Guardian alerts — severity-ranked safety notifications from the rig’s night watch, so a failed unattended sequence wakes you instead of tracking silently into the morning.

Lock-screen delivery works through the phone apps — iOS via TestFlight (beta invite) and Android via direct APK (beta).

Security posture

Section titled “Security posture”
  • Per-rig authentication. Every rig validates remote requests itself — reaching the tunnel is not enough; you need a valid session for the owning account.
  • Your sign-in is the key. Only the Google or Apple account that claimed the rig can reach it. There are no shared passwords or API keys to leak.
  • Outbound-only. The rig never listens for inbound internet connections, so there’s no exposed service to scan or attack.
  • Revocable. One tap — Settings → Remote Access → Disable remote access — takes the tunnel down and returns the rig to LAN-only. Claim it again later if you change your mind.

Beta limits

Section titled “Beta limits”
  • Accounts are enabled per invite. If you see “Remote access is not enabled for this account,” contact us and we’ll enable it.

What’s next

Section titled “What’s next”