{"rid":"egress/gluetun","card":{"rid":"egress/gluetun","eid":"github-passteque","topic":"egress","slug":"gluetun","provider":"gluetun","url":"https://github.com/passteque/gluetun","domain":"github.com","category":"tool (wireguard transport)","tier":"free","verdict":"paid-only","vorder":3,"grp":"paid","confidence":"documented","binding":"none","identity_kind":"institution","identity_basis":"stated","needs_card":0,"needs_phone":0,"needs_id":0,"needs_institution":1,"country":null,"crypto":null,"interfaces":"cli","egress_metered":0,"per_object_bytes":null,"retention_days":null,"verified_at":"2026-10-23T00:00:00.000Z","verified_basis":"live","checked_on":"2026-10-23","stale_on":"2026-11-22","n_evidence":4,"usd_month":null,"usd_per_tb_month":null,"summary":"no service and no account; a Docker container that connects to a VPN provider the operator has an account with","duplicate_of":null,"n_unknown":2},"record":{"topic":"egress","slug":"gluetun","provider":"gluetun","url":"https://github.com/passteque/gluetun","category":"tool (wireguard transport)","tier":"free","free_tier":{"stated":"no service and no account; a Docker container that connects to a VPN provider the operator has an account with","unit":"none","metered_on":"none","source_url":"https://github.com/passteque/gluetun","read_on":"2026-10-23","notes":""},"per_object_cap":{"stated":"not applicable","bytes":null,"source_url":"https://github.com/passteque/gluetun","notes":""},"retention":{"stated":"not applicable","days":null,"source_url":"https://github.com/passteque/gluetun","notes":""},"egress":{"terms":"not applicable; the volume is the provider's, not the container's; ingress: none","metered":false,"free_allowance":"none published","price_per_tb":null,"source_url":"https://github.com/passteque/gluetun"},"interface":["cli"],"interface_detail":"Docker environment variables, plus built-in SOCKS5, Shadowsocks and HTTP proxies","tooling":"Docker image qmcgaw/gluetun; compose or docker run","chaining":"takes a .conf from any provider record in this topic and republishes it as SOCKS5 or Shadowsocks inside a Docker network.","limits":[],"limits_note":"","binding":"none","binding_note":"gluetun adds no limit and no path: it is a consumer of somebody else's tunnel, so the binding constraint lives in the provider record","identity_cost":{"kind":"institution","detail":"a subscription with one of the listed VPN providers is what it exists to consume; the custom provider path needs no gluetun account but the endpoint still needs one","country":"None"},"reliability_note":"the built-in firewall kill switch blocks traffic when the tunnel drops, by design","confidence":"documented","confidence_note":"nothing here is about gluetun's own numbers; the rung that matters belongs to the provider it dials","evidence":[{"url":"https://github.com/passteque/gluetun","date":"2026-10-23","proved":"\"For custom Wireguard configurations using the custom provider\" and \"Supports Wireguard both kernelspace and userspace\""},{"url":"https://github.com/passteque/gluetun","date":"2026-10-23","proved":"built-in Shadowsocks, SOCKS5 and HTTP proxies that tunnel through the VPN"},{"url":"https://github.com/passteque/gluetun","date":"2026-10-23","proved":"release v3.41.3 published 2026-07-30; last push 2026-10-21; 15857 stars; repo moved to passteque/gluetun"},{"url":"https://github.com/passteque/gluetun","date":"2026-10-23","proved":"\"Choose the vpn network protocol, udp or tcp\""}],"verdict":"paid-only","verified_at":"2026-10-23T00:00:00.000Z","price_per_tb_month":"USD 0","notes":"Recorded because brief names it, and because it is the standard way to turn a provider's .conf into a local SOCKS5 or Shadowsocks listener that other containers route through. It is not a transport wrapper and it does not cross a UDP block by itself: its tcp option is OpenVPN over TCP, not WireGuard over TCP.","extras":{"wg_path":"native-conf","wg_detail":"\"For custom Wireguard configurations using the custom provider\", so an ordinary .conf is its input","ingress":"none","volume_tib_month":null,"volume_stated":"not applicable; the volume is the provider's, not the container's","bytes_transit":"yes","transit_note":"through whichever VPN provider is configured","hosting_requirement":"a Docker host; the tunnel itself is the provider's","last_release":"v3.41.3 2026-07-30","stars":15857}},"claims":[{"path":"$.free_tier.stated","kind":"free-quota","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"},{"path":"$.price_per_tb_month","kind":"price-per-tb","num":0,"unit":"TB","per":"month","currency":"USD","usd":0,"fx_date":null,"parse":"ok"}],"unknown":[["$.per_object_cap.stated","not-applicable"],["$.retention.stated","not-applicable"]],"history":[],"drift":[]}