{"rid":"egress/udp2raw","card":{"rid":"egress/udp2raw","eid":"github-wangyu","topic":"egress","slug":"udp2raw","provider":"udp2raw","url":"https://github.com/wangyu-/udp2raw","domain":"github.com","category":"tool (wireguard transport)","tier":"free","verdict":"paid-only","vorder":3,"grp":"paid","confidence":"documented","binding":"none","identity_kind":"anonymous","identity_basis":"stated","needs_card":0,"needs_phone":0,"needs_id":0,"needs_institution":0,"country":null,"crypto":null,"interfaces":"cli","egress_metered":0,"per_object_bytes":null,"retention_days":null,"verified_at":"2026-10-23T00:00:00.000Z","verified_basis":"live","checked_on":"2026-10-23","stale_on":"2026-11-22","n_evidence":4,"usd_month":null,"usd_per_tb_month":null,"summary":"no service and no account; source and pre-built static binaries","duplicate_of":null,"n_unknown":2},"record":{"topic":"egress","slug":"udp2raw","provider":"udp2raw","url":"https://github.com/wangyu-/udp2raw","category":"tool (wireguard transport)","tier":"free","free_tier":{"stated":"no service and no account; source and pre-built static binaries","unit":"none","metered_on":"none","source_url":"https://github.com/wangyu-/udp2raw","read_on":"2026-10-23","notes":""},"per_object_cap":{"stated":"not applicable","bytes":null,"source_url":"https://github.com/wangyu-/udp2raw","notes":""},"retention":{"stated":"not applicable","days":null,"source_url":"https://github.com/wangyu-/udp2raw","notes":""},"egress":{"terms":"not applicable; the software states no volume; ingress: tcp","metered":false,"free_allowance":"none published","price_per_tb":null,"source_url":"https://github.com/wangyu-/udp2raw"},"interface":["cli"],"interface_detail":"udp2raw_amd64 -s / -c","tooling":"static binaries for x86, ARM, Android and some OpenWrt routers","chaining":"only composes with a host the client rents or gets free, such as a free-tier VM, and adds nothing to a hosted tunnel.","limits":[],"limits_note":"","binding":"none","binding_note":"the constraint is a root Linux host with raw socket access at both ends, outside the seven-kind vocabulary","identity_cost":{"kind":"anonymous","detail":"no account; both ends are hosts the operator controls","country":"None"},"reliability_note":"needs root and iptables rules (-a), which is a common silent failure; the README states it survives reconnects and keeps UDP conversations valid","confidence":"documented","confidence_note":"a measured run through a named path would raise it; no throughput number is published","evidence":[{"url":"https://github.com/wangyu-/udp2raw","date":"2026-10-23","proved":"\"turns UDP Traffic into Encrypted FakeTCP/UDP/ICMP Traffic by using Raw Socket\" and \"Linux host ... with root access\""},{"url":"https://github.com/wangyu-/udp2raw","date":"2026-10-23","proved":"the two-sided invocation: server '-s -l0.0.0.0:4096 -r 127.0.0.1:7777 --raw-mode faketcp' and client '-c -l0.0.0.0:3333 -r44.55.66.77:4096'"},{"url":"https://github.com/wangyu-/udp2raw","date":"2026-10-23","proved":"release 20230206.0 published 2023-02-07; last push 2025-10-12; 8577 stars"},{"url":"https://www.wireguard.com/known-limitations/","date":"2026-10-23","proved":"WireGuard names udp2raw as one of the projects that can transform its UDP packets into TCP"}],"verdict":"paid-only","verified_at":"2026-10-23T00:00:00.000Z","price_per_tb_month":"USD 0","notes":"WireGuard's own limitations page names this project, which is why it stays despite a 2023 release. It forges IP and TCP headers, so it cannot ride a CDN or any managed forwarder: the far end must be a host that accepts the forged connection. That is the opposite of the wstunnel case.","extras":{"wg_path":"none","wg_detail":"\"A Tunnel which turns UDP Traffic into Encrypted FakeTCP/UDP/ICMP Traffic by using Raw Socket\"; WireGuard rides inside it because WireGuard is the UDP traffic","ingress":"tcp","volume_tib_month":null,"volume_stated":"not applicable; the software states no volume","bytes_transit":"yes","transit_note":"the bytes cross both hosts, with the far host forwarding to the WireGuard listener","hosting_requirement":"two root Linux hosts, one of them publicly reachable; fake-TCP needs raw sockets at both ends and cannot pass a managed HTTP forwarder","last_release":"20230206.0 2023-02-07","stars":8577}},"claims":[{"path":"$.free_tier.stated","kind":"free-quota","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"},{"path":"$.price_per_tb_month","kind":"price-per-tb","num":0,"unit":"TB","per":"month","currency":"USD","usd":0,"fx_date":null,"parse":"ok"}],"unknown":[["$.per_object_cap.stated","not-applicable"],["$.retention.stated","not-applicable"]],"history":[],"drift":[]}