gluetun
github.com · Egress and tunnels · 1 record · JSON
gluetun Egress and tunnels
paidinstitutionno cardD
| Free tier | no service and no account; a Docker container that connects to a VPN provider the operator has an account with unit none; metered on none |
|---|---|
| Price | USD 0 |
| Per-object cap | not applicable |
| Retention | not applicable |
| Egress | not applicable; the volume is the provider's, not the container's; ingress: none free_allowance: none published |
| Identity | institution a subscription with one of the listed VPN providers is what it exists to consume; the custom provider path needs no gluetun account but the endpoint still needs one |
| Binding | none gluetun adds no limit and no path: it is a consumer of somebody else's tunnel, so the binding constraint lives in the provider record |
| Interface | cli Docker environment variables, plus built-in SOCKS5, Shadowsocks and HTTP proxies |
| Tooling | Docker image qmcgaw/gluetun; compose or docker run |
| Composes with | takes a .conf from any provider record in this topic and republishes it as SOCKS5 or Shadowsocks inside a Docker network. |
| Reliability | the built-in firewall kill switch blocks traffic when the tunnel drops, by design |
| Notes | Recorded because brief names it, and because it is the standard way to turn a provider's .conf into a local SOCKS5 or Shadowsocks listener that other containers route through. It is not a transport wrapper and it does not cross a UDP block by itself: its tcp option is OpenVPN over TCP, not WireGuard over TCP. |
| Evidence rung | documented nothing here is about gluetun's own numbers; the rung that matters belongs to the provider it dials |
| Checked | 2026-10-23 (live); stale on 2026-11-22 |
| Parsed numbers |
|
Evidence (4)
| date | source | what it proved |
|---|---|---|
| 2026-10-23 | github.com/passteque/gluetun | "For custom Wireguard configurations using the custom provider" and "Supports Wireguard both kernelspace and userspace" |
| 2026-10-23 | github.com/passteque/gluetun | built-in Shadowsocks, SOCKS5 and HTTP proxies that tunnel through the VPN |
| 2026-10-23 | github.com/passteque/gluetun | release v3.41.3 published 2026-07-30; last push 2026-10-21; 15857 stars; repo moved to passteque/gluetun |
| 2026-10-23 | github.com/passteque/gluetun | "Choose the vpn network protocol, udp or tcp" |
More fields (10)
{
"wg_path": "native-conf",
"wg_detail": "\"For custom Wireguard configurations using the custom provider\", so an ordinary .conf is its input",
"ingress": "none",
"volume_tib_month": null,
"volume_stated": "not applicable; the volume is the provider's, not the container's",
"bytes_transit": "yes",
"transit_note": "through whichever VPN provider is configured",
"hosting_requirement": "a Docker host; the tunnel itself is the provider's",
"last_release": "v3.41.3 2026-07-30",
"stars": 15857
}Unknown or withheld values (2)
$.per_object_cap.statednot-applicable$.retention.statednot-applicable