fshy

fshy / Egress and tunnels

Sidecar Network

sidecar.network · Egress and tunnels · 1 record · JSON

Sidecar Network Egress and tunnels

fails: quotaanonymousno cardDper-ip-shaping

sidecar.network/pricing · public IPv4 and IPv6 per container over WireGuard · egress/sidecar-network · JSON · compare

Free tier"Free $0 / forever 3 peers - 4 IPv6 - 2 Mbps", and "Personal tiers: unlimited data transfer - IPv6 reachable - cancel anytime".
unit unlimited; metered on none
PriceUSD 0 for the free tier (3 peers, IPv6 only, 2 Mbps); paid from USD 0.99 per month, IPv4 tiers priced only by their USD 29 setup and USD 3 provisioning fees on the page read
Per-object capnot applicable
Retentionnot applicable
Egress"Every tier ships with unlimited data transfer. You pay for a public IP and speed - not for gigabytes." and "We never charge you for data - ever. Our tiers are speed-limited, not data-capped." The free tier's speed is the cap: 2 Mbps.; ingress: tcp+udp
free_allowance: none published
Identityanonymous Free peers are provisioned through an RFC 8628 device code with no email: "without a browser, email, or human-in-the-loop steps". Payment, where required, is PayPal or Bitcoin via Lightning.
Limits
  • per-ip-shaping 2 Mbps per peer on the free tier source
Bindingper-ip-shaping The free tier's 2 Mbps is below the 3.24 Mbit/s that 1 TiB/month needs, so a single peer tops out near 0.65 TB in 30 days (2e6 bits per second times 2,592,000 seconds over 8). The bytes are unlimited but the rate cannot deliver the target. Paid tiers are speed-tiered up to 100 Mbps on Launch and unlimited on bytes.
Interfacecli, rest REST API with an OpenAPI spec, plus an installer and a Docker network plugin.
Toolingone-line agent install for Docker; REST API; systemd or Docker Desktop
Composes withThe strongest composition: a free-tier VM runs the agent and gets a real address with no config file, and the API makes provisioning scriptable.
ReliabilityOutbound port 25 is blocked at the relay on all tiers; free peers share a relay with other customers, and isolation starts at Pulse.
NotesThe surprising row: genuinely unlimited bytes at USD 0, with no email, and the free tier still cannot carry 1 TiB/month because of the 2 Mbps ceiling. Three candidate explanations were tested for the free tier's shape. (1) The 2 Mbps is a per-account cap rather than per-peer, which would lift a 3-peer account to 6 Mbps and past the target: refuted for a user's case, because the pricing page attaches the rate to each peer ("each peer gets its own rate limit at the plan's throughput tier") and the client's single service sits on one address. (2) Unlimited data is real and only speed is sold: confirmed by two independent sentences on the same page and by a published customer claim of 14 TB in a month. (3) The free tier is IPv4 but rate-limited: refuted by the FAQ sentence that names Free among the IPv6-only plans. Monthly prices for the IPv4 tiers (Pulse and up) are not in the page HTML, so the paid IPv4 path is priced only by its setup fees here.
Evidence rungdocumented The free plan card, the unlimited-data claim, the IPv6-only rule and the API path are first-party. A measured throughput test at 2 Mbps would confirm the ceiling; the monthly figure here is arithmetic from the stated rate, not a measurement.
Checked2026-10-23 (live); stale on 2026-11-22
Parsed numbers
  • $.price_per_tb_month price-per-tb USD3.0 TB / month
Evidence (4)
datesourcewhat it proved
2026-10-23sidecar.network/pricingFree 3 peers / 4 IPv6 / 2 Mbps / USD 0 forever; Micro USD 0.99 at 100 kbps; Spark USD 4.99 at 25 Mbps; Launch USD 9.99 at 100 Mbps; unlimited data on every tier
2026-10-23sidecar.network/pricing"IPv4 depends on plan: Pulse+IPv4, Relay, Surge, Fleet, and Command include dedicated IPv4(s); Micro / Free / Spark / Launch / Pulse are IPv6-only."
2026-10-23sidecar.network/pricingIPv4 tiers carry a USD 29 setup fee plus USD 3 provisioning fee
2026-10-23sidecar.network/llms.txtdevice-code onboarding without email or a browser; REST API for peers; verify call returns externally_reachable and the assigned addresses
More fields (7)
{
 "wg_path": "registration-api",
 "wg_detail": "There is no file to import: the agent injects the tunnel into the container's network namespace. \"WireGuard kernel netns injection - the container IS the IP. No NAT, no proxy; every protocol including raw UDP and ICMP.\" Peers are created through the REST API: \"POST https://sidecar.network/v1/device/authorize ... tier: free\". The device-flow page states the onboarding: \"AI agents can install Sidecar without a browser, email, or human-in-the-loop steps using RFC 8628 device-code flow.\"",
 "ingress": "tcp+udp",
 "volume_tib_month": null,
 "volume_stated": "\"Every tier ships with unlimited data transfer. You pay for a public IP and speed - not for gigabytes.\" and \"We never charge you for data - ever. Our tiers are speed-limited, not data-capped.\" The free tier's speed is the cap: 2 Mbps.",
 "bytes_transit": "yes",
 "transit_note": "Six regions on the vendor's relays; the container holds the address itself rather than sitting behind NAT."
}
Unknown or withheld values (2)
  • $.per_object_cap.stated not-applicable
  • $.retention.stated not-applicable