fshy

fshy / Egress and tunnels

HYEHOST IPv4 tunnels

hyehost.org · Egress and tunnels · 1 record · JSON

HYEHOST IPv4 tunnels Egress and tunnels

paidemailno cardD

hyehost.org/ipv4-tunnels · routed IPv4 prefix over WireGuard · egress/hyehost-ipv4-tunnels · JSON · compare

Free tierNo free tier: "1 IPv4 address /32 IPv4 prefix ... $1.50 / month". The only zero-price network product is IPv6 transit, not an address.
unit none; metered on none
PriceUSD 1.50 per IPv4 address per month (USD 18 per year for a /32); USD 0.20 per Mbps per month above the included 100 Mbps in UK and US
Per-object capnot applicable
Retentionnot applicable
EgressNot a byte quota but a rate, measured at the 95th percentile: "Included - 95th percentile 100 Mbps" in the UK and US, "Tunnel port 2 Gbps", and "Extra bandwidth: $0.20/Mbps". New Zealand includes 10 Mbps.; ingress: tcp+udp
free_allowance: none published
Identityemail Ordering is self-serve in the panel: "Pay in the panel, configure the generated tunnel details, then assign the IPv4 addresses." The payment and verification steps were not read, so a card requirement is inferred from a paid panel order rather than observed.
Limits
  • per-ip-shaping 100 Mbps at the 95th percentile in UK and US; 10 Mbps in New Zealand source
  • volume-quota no byte quota; bandwidth is bought per Mbps at USD 0.20 (USD 0.60 in NZ) source
Bindingnone Nothing fails at 1 TiB/month. Sustained 100 Mbps carries about 32 TB in 30 days, roughly 30 times the target, and the 95th-percentile method ignores short bursts by construction. The 100 Mbps is recorded in limits as per-ip-shaping because it is a rate the client can exceed, but exceeding it is billed at USD 0.20 per Mbps rather than cut off, so no constraint binds at this volume.
Interfacecli Generated tunnel details in the panel; no API named on the pages read.
Toolingwg-quick, or the router's own WireGuard, GRE, GRETAP, SIT or VXLAN
Composes withA /29 on a free-tier VM gives each container a real public address, which removes the port-remap step from every service behind it.
ReliabilityNo DDoS protection on tunneled addresses and null-routing when attacked; the vendor says so plainly.
NotesCheapest per address: USD 1.50 per month is USD 18 per year for a /32, and the same price buys a /25. The price conflict is real and unresolved: the homepage tile says "From $1.25 / mo" and the product page says "$1.50 per IPv4 address per month" in three separate places. Candidates tested: (1) the homepage tile is stale after a rise, which fits because every per-prefix figure on the product page is exactly 1.50 times the address count; (2) $1.25 is the 12-month term price, which does not fit because 15 percent off 1.50 is 1.275, not 1.25; (3) $1.25 is a leftover campaign rate, which is consistent with the page's other struck-through campaign prices but is unproven. Verdict: refuted for (2), plausible for (1) and (3), and the record keeps the product-page figure.
Evidence rungdocumented Prefix sizes, per-address price, tunnel protocols and 95th-percentile terms are all first-party. A probe past the included rate would show what the limit-down looks like.
Checked2026-10-23 (live); stale on 2026-11-22
Parsed numbers
  • $.price_per_tb_month price-per-tb USD0.2 TB / month
Evidence (3)
datesourcewhat it proved
2026-10-23hyehost.org/ipv4-tunnels/32 through /25 at USD 1.50 per address per month; WireGuard among five tunnel types; 100 Mbps included at the 95th percentile in UK and US; 2 Gbps tunnel port
2026-10-23hyehost.org/ipv4-tunnels"We do not provide or claim DDoS protection for tunneled IP addresses"; tunneled addresses are null-routed when attacked
2026-10-23hyehost.org/the product tile says "From $1.25 / mo", which disagrees with the product page's $1.50 per address (see notes)
More fields (7)
{
 "wg_path": "extractable",
 "wg_detail": "The prefix is routed for a user's endpoint: \"Your selected public IPv4 space is delivered to your endpoint over WireGuard, GRE, GRETAP, SIT, or VXLAN\" and \"Choose WireGuard, GRE, GRETAP, SIT or VXLAN when configuring the service.\" It is a routed prefix, not a single NAT address: \"The prefix is delivered to your tunnel endpoint for use on your router, server, firewall or customer-edge network.\"",
 "ingress": "tcp+udp",
 "volume_tib_month": null,
 "volume_stated": "Not a byte quota but a rate, measured at the 95th percentile: \"Included - 95th percentile 100 Mbps\" in the UK and US, \"Tunnel port 2 Gbps\", and \"Extra bandwidth: $0.20/Mbps\". New Zealand includes 10 Mbps.",
 "bytes_transit": "yes",
 "transit_note": "Prefixes are announced from the vendor's own AS47272 network."
}
Unknown or withheld values (2)
  • $.per_object_cap.stated not-applicable
  • $.retention.stated not-applicable