wormhole-vpn

github.com · Egress and tunnels · 1 record · JSON

wormhole-vpn Egress and tunnels

paidcardcardDvolume-quota

github.com/ciamshrek/wormhole-vpn · tool (wireguard transport) · egress/wormhole-vpn · JSON · compare

Free tier	no free tier: the README requires "Cloudflare account (Workers paid plan, $5/mo)" unit none; metered on none
Price	USD 5 per month, Workers paid plan
Per-object cap	not applicable
Retention	not applicable
Egress	not applicable; the Worker plan is priced per month, not per byte, and the README states no transfer figure; ingress: tcp free_allowance: none published
Identity	card a Cloudflare account on the Workers paid plan at $5/mo, which needs a payment method
Limits	volume-quota no figure stated; the Workers paid plan is billed per request and duration beyond the included allowance source
Binding	volume-quota the Worker sits in the data path and every datagram becomes Worker work, so the plan's request and duration billing is what fails first at sustained volume; the README states no figure for it
Interface	cli wrangler deploy plus a 12 MB Go bridge
Tooling	Go bridge plus pnpm and wrangler; a CA certificate must be installed on each device
Composes with	composes with a Cloudflare account and a paid Workers plan, and with cloudflare-tunnel only if the Worker is fronted by one.
Reliability	the Worker terminates and re-originates TLS, so every upstream connection is intercepted by design; single maintainer, no releases
Notes	This is the only wrapper that moves the far end off a host the client runs and onto a hosted service, and it is the reason the structural fact is worth stating precisely: replacing the far host with a Worker costs $5/mo and adds a TLS-intercepting proxy in the path, so it is a paid answer to a paid problem, not a free path. Two stars and no releases means it is a design sketch, not a deployment.
Evidence rung	documented a probe through a deployed Worker would raise it, and would also be the only measurement of a Workers-hosted WireGuard path in this corpus
Checked	2026-10-23 (live); stale on 2026-11-22
Parsed numbers	`$.price_per_tb_month` price-per-tb USD5.0 TB / month

Evidence (3)

date	source	what it proved
2026-10-23	github.com/ciamshrek/wormhole-vpn	"Cloudflare account (Workers paid plan, $5/mo)" in the prerequisites
2026-10-23	github.com/ciamshrek/wormhole-vpn	the architecture line: stock WireGuard client, Go bridge over a single WebSocket, Durable Object, TLS MITM, then fetch() upstream
2026-10-23	github.com/ciamshrek/wormhole-vpn	2 stars, no releases, last push 2026-04-06; the description calls it "Very rough"

More fields (10)

{
 "wg_path": "none",
 "wg_detail": "device runs a stock WireGuard client against localhost:51820, a Go bridge (wireguard-go plus gvisor netstack) forwards over one WebSocket to a Cloudflare Durable Object",
 "ingress": "tcp",
 "volume_tib_month": null,
 "volume_stated": "not applicable; the Worker plan is priced per month, not per byte, and the README states no transfer figure",
 "bytes_transit": "yes",
 "transit_note": "through a Cloudflare Durable Object, which sees the plaintext of every intercepted connection",
 "hosting_requirement": "no host of the client's own, but a Cloudflare Workers paid plan at $5/mo, and a device able to run the Go bridge",
 "last_release": "none; last push 2026-04-06",
 "stars": 2
}

Unknown or withheld values (2)

$.per_object_cap.stated not-applicable
$.retention.stated not-applicable