Hurricane Electric tunnelbroker
tunnelbroker.net · Egress and tunnels · 1 record · JSON
Hurricane Electric tunnelbroker Egress and tunnels
caveatemailno cardD
| Free tier | a free 6in4 tunnel and a routed /48 unit unlimited; metered on none |
|---|---|
| Price | none stated |
| Per-object cap | not applicable: a routed prefix |
| Retention | not applicable |
| Egress | not metered |
| Identity | email a tunnelbroker account |
| Binding | none nothing in the vocabulary binds: the protocol-41 requirement is a network capability the client's ISP passes or blocks, not a queue with a person in it, and the /48 itself has no volume limit |
| Interface | cli a 6in4 tunnel to a Hurricane Electric endpoint |
| Tooling | iproute2, netplan |
| Composes with | the free answer to a static address rather than to capacity: it composes with a dual-stack front and only with clients that have IPv6. |
| Reliability | the site served an incomplete TLS chain on 2026-10-22 |
| Notes | Re-read 2026-10-23 and unchanged: still a free tunnel over an existing IPv4 connection with a /48 once the tunnel is up, still protocol 41 or GRE, and WireGuard is not offered. A WireGuard client therefore cannot use it directly and would need a second host to terminate the tunnel. |
| Evidence rung | documented |
| Checked | 2026-10-23 (live); stale on 2026-11-22 |
Evidence (3)
| date | source | what it proved |
|---|---|---|
| 2026-10-22 | tunnelbroker.net/ | a free tunnel plus a routed /48 |
| 2026-10-22 | probe:https://tunnelbroker.net/ | the served TLS chain names only CN=tunnelbroker.net and openssl reports an incomplete chain; curl exits 35 CRYPT_E_REVOKED without -k and returns 200 with it |
| 2026-10-23 | tunnelbroker.net/ | 'Our free tunnel broker service enables you to reach the IPv6 Internet by tunneling over existing IPv4 connections' and 'Ability to get your own /48 prefix once your tunnel is up' |
More fields (5)
{
"stale_after_days": 180,
"bytes_transit": "yes",
"transit_note": "the 6in4 tunnel carries the endpoint's IPv6 traffic over Hurricane Electric's network",
"extras.wg_path": "none",
"extras.wg_test": "fails: no WireGuard transport is offered, so no .conf can be obtained and no WG datagram is carried except inside a 6in4 or GRE outer packet the client builds itself"
}