tahio TunnelBroker
tahio.eu · Egress and tunnels · 1 record · JSON
tahio TunnelBroker Egress and tunnels
caveatemailno cardD
| Free tier | SIT, GRE and WireGuard tunnels with BGP-routed /48s. Free, dual-stack, dyndns2-ready. unit unlimited; metered on none |
|---|---|
| Price | USD 0 |
| Per-object cap | not applicable |
| Retention | not applicable |
| Egress | no monthly byte allowance is published; the fair-use section caps speed instead: '50 Mbit/s up + down, kernel-shaped'; ingress: tcp+udp free_allowance: none published |
| Identity | email https://tb.tahio.eu/sign-up asks for Email, Password and Full Name, with Nickname optional; no card and no phone field. |
| Limits | |
| Binding | none At 1 TiB/month the client needs 3.24 Mbit/s sustained; the 50 Mbit/s cap is about fifteen times that, so the speed limit does not bind at this volume and no byte quota exists. What actually constrains a workload here is the blocked-port list, which the seven kinds do not name: 'SMTP - 25 - 465 - 587 - 2525' and 'POP3/IMAP - 110 - 143 - 993 - 995' are closed, so a mail service on this prefix cannot work. Reachability is IPv6-only. |
| Interface | cli the site hands out SIT, GRE and WireGuard configuration; a dyndns2 endpoint updater is offered per tunnel for dynamic IPv4 |
| Tooling | wg-quick or wireguard-tools; a plain SIT/GRE interface for the other two transports |
| Composes with | a native WireGuard profile with no dashboard step makes it the cheapest way to put a free compute instance on a public IPv6 address with every port open. |
| Reliability | no SLA: 'No SLA, no uptime guarantee.' Abuse, spam or scanning gives 'instant termination, no warning.' |
| Notes | The page contradicts itself on prefix size: the headline says 'BGP-routed /48s' while the network section says 'Each tunnel gets two /64s from the primary pools plus a /64 from a tertiary.' The /64 arithmetic is the concrete statement and the /48 is unexplained, so the record carries three /64s and flags the /48 as unestablished. AS198889, single PoP in Oslo, peered with Gigahost. |
| Evidence rung | documented documented from the vendor page read today, including a full WireGuard profile. A measured rung needs a tunnel brought up and a UDP service reached through it, which needs an account. |
| Checked | 2026-10-23 (live); stale on 2026-11-22 |
| Parsed numbers |
|
Evidence (6)
| date | source | what it proved |
|---|---|---|
| 2026-10-23 | tb.tahio.eu/ | 'SIT, GRE and WireGuard tunnels with BGP-routed /48s. Free, dual-stack, dyndns2-ready.' |
| 2026-10-23 | tb.tahio.eu/ | a WireGuard profile with Endpoint = tb.tahio.eu:51820 and Address 2a05:1083:bef0::1/64 |
| 2026-10-23 | tb.tahio.eu/ | '50 Mbit/s up + down, kernel-shaped' and '2 tunnels per account' under 'Free isn't unlimited' |
| 2026-10-23 | tb.tahio.eu/ | blocked ports: 'SMTP - 25 - 465 - 587 - 2525', 'POP3/IMAP - 110 - 143 - 993 - 995' |
| 2026-10-23 | tb.tahio.eu/sign-up | Email, Password and Full Name are the only account fields |
| 2026-10-23 | tb.tahio.eu/ | 'Each tunnel gets two /64s from the primary pools plus a /64 from a tertiary.' |
More fields (7)
{
"wg_path": "native-conf",
"wg_detail": "the page publishes a complete WireGuard profile with 'Endpoint = tb.tahio.eu:51820', AllowedIPs ::/0 and PersistentKeepalive 25, and says 'The endpoint learns your IP from the handshake, so dynamic IPv4 routers work out of the box.'",
"ingress": "tcp+udp",
"volume_tib_month": null,
"volume_stated": "no monthly byte allowance is published; the fair-use section caps speed instead: '50 Mbit/s up + down, kernel-shaped'",
"bytes_transit": "yes",
"transit_note": "AS198889 carries the traffic; upstream is AS56655 (Gigahost), importing a default route."
}Unknown or withheld values (2)
$.per_object_cap.statednot-applicable$.retention.statednot-applicable