Surfshark

surfshark.com · Egress and tunnels · 1 record · JSON

Surfshark Egress and tunnels

fails: egressemail?card?Dwrite-gated

surfshark.com/blog/vpn-port-forwarding · vpn port forward · egress/surfshark · JSON · compare

Free tier	No free tier, and the vendor refuses the feature: Surfshark VPN does not support port forwarding because it creates a potential network entry point that exposes devices to unauthorized connections. unit none; metered on none
Price	unverified: no plan price was read
Per-object cap	not applicable
Retention	not applicable
Egress	unverified: no page read states a Surfshark traffic allowance. ingress: none free_allowance: none published
Identity	email (placeholder) unverified: the purchase flow was not read; an account is required to use the service.
Limits	write-gated the feature is not offered at any tier: Surfshark VPN does not support port forwarding source
Binding	write-gated No inbound path exists, so no volume or identity constraint is reachable.
Interface	cli App and extension based.
Tooling	Official apps; WireGuard supported for outbound.
Composes with	Client-side tunnel only.
Reliability	No inbound path exists at any tier.
Notes	A third-party guide from 2021 said the same thing, which makes the position at least five years old rather than a recent withdrawal. No conflict found. The dedicated IP product Surfshark sells is an address, not a forwarded port, and was not read.
Evidence rung	documented The refusal is a direct vendor sentence on a vendor page read today. Measured is impossible.
Checked	2026-10-23 (live); stale on 2026-11-22

Evidence (1)

date	source	what it proved
2026-10-23	surfshark.com/blog/vpn-port-forwarding	Surfshark VPN does not support port forwarding, stated as the vendor's own answer, with security exposure given as the reason.

More fields (7)

{
 "wg_path": "native-conf",
 "wg_detail": "WireGuard is a supported protocol under the vendor's own client; the config does not create an inbound path because none is sold.",
 "ingress": "none",
 "volume_tib_month": null,
 "volume_stated": "unverified: no page read states a Surfshark traffic allowance.",
 "bytes_transit": "yes",
 "transit_note": "Outbound only from the client's point of view."
}

Unknown or withheld values (3)

$.identity_cost.kind identity-defaulted
$.per_object_cap.stated not-applicable
$.retention.stated not-applicable