Free tunnels and egress paths
Usable ways to get traffic in or out: tunnels, relays, IPv6 brokers, VPN egress.
Ranked byverdict, best first, then the evidence · 54 hosted ranked · 5 self-hosted, listed last
Key
- ★ qualifies
- usable as stated; the read path was probed
- caveat
- usable, with a named limit or an unprobed read path
- trial
- a time-boxed or one-time trial, not a recurring allowance
- paid
- no free allowance; listed for its price
- fails: identity
- the identity required is not reachable without it
- fails: egress
- data cannot be read back out at a usable rate or price
- fails: quota
- the free allowance is too small to matter
- dead
- the offer or the service no longer exists
- self-hosted, last resort
- software or a node that the user installs, runs and maintains. Self-hosted options are listed last, because this site is for users who have no hardware.
- free tier, no free tier
- the record states a free allowance, or states that it has none
- identity email
- what a signup asks for. A question mark after it: a placeholder, not read from a source
- no card, card, card?
- a payment card is not asked, is asked, or the record does not say
- limit
- the limit that runs out first, for example request-rate or volume-quota
- evidence
- how the record is backed, strongest first: measured, documented, reported, inferred, unverified
- fresh until, stale since
- the check is inside its window, or past it, on today's date
- inherited, checked live
- inherited: the record was carried from an earlier source, and its check date is an upper bound. Checked live: the record was checked against the service. The chip filters on it
- verdict
- a judgement of the whole offer for the need of its topic. The data holds no number as a cut-off. Read the free allowance and the limits of the record, and decide for your own need
- duplicate, disagrees
- another record holds the same offer, or a sibling record states another value
- ★ qualifiesCloudflare Quick Tunnel
One ephemeral trycloudflare.com hostname per cloudflared run; no account, no card
free tieridentity anonymousno cardlimit retention-clampedevidence measuredstale on 2026-12-22
- ★ qualifiesGitHub Releases
No total size and no bandwidth limit; under 2 GiB per file; 1,000 assets per release
free tieridentity emailno cardlimit per-object-capevidence measuredstale on 2026-12-22
- ★ qualifiesTailscale Personal
6 users, unlimited user devices, 3 ACL groups, 50 tagged resources
free tieridentity emailno cardlimit request-rateevidence measuredstale on 2026-12-22
- ★ qualifiesRoute64 (org)
Route64 provides IPv6 tunnels with a routed /56 subnet, delivered through multiple tunnel protocols (WireGuard, GRE, IP6IP, etc.) to your endpoint.
free tieridentity emailno cardevidence documentedstale on 2026-11-23
- caveatAdGuard VPN (Egress and tunnels)USD 3.99/month
Free version: 'Unlimited VPN traffic, compared to 3 GB per month in the free version', up to 2 devices ('compared to only 2 in the free version') and fewer...
free tieridentity emailno cardlimit volume-quotaevidence documentedstale on 2026-12-05
- caveatGhostTunnel (cushell)
SIT & GRE and WireGuard tunnels - routed ::/64 prefix
free tieridentity emailno cardevidence documentedstale on 2026-12-05
- caveatNodeMesh
One host - your own PC - is free with no time limit, for as many game servers as your hardware can run: the web panel and console, the config editor, the...
free tieridentity emailno cardevidence documentedstale on 2026-12-05
- caveatPort Buddy
HTTP and UDP tunnels are free. No credit card. TCP tunnels from $5/month. Transfer is unmetered on every plan: no bandwidth caps, no overage charges.
free tieridentity emailno cardevidence documentedstale on 2026-12-05
- caveatRiseup VPN, free (donations)
Free to use with no account: 'You just install it and run it—no configuration, no account registration.' The service is donation-funded: 'The cost for us to...
free tieridentity anonymousno cardevidence documentedstale on 2026-12-05
- caveatStarVPN (Star Internet Services), Egress and tunnelsUSD 8/month
Free VPN Anonymous: '100GB/month data usage', Android and Windows apps, tier 1 countries (US, CA, GB, DE, AU), 'No registration or personal information...
free tieridentity anonymousno cardlimit per-ip-shapingevidence documentedstale on 2026-12-05
- caveattahio TunnelBroker
SIT, GRE and WireGuard tunnels with BGP-routed /48s. Free, dual-stack, dyndns2-ready.
free tieridentity emailno cardevidence documentedstale on 2026-12-05
- caveatTaiwanFRP
[translated] 'A free service, designed for users who do not have a public IP.' 'It supports both TCP and UDP traffic forwarding at the same time, ensuring...
free tieridentity emailno cardphonelimit retention-clampedevidence documentedstale on 2026-12-05
- caveattunnel64
Static routed /64 per tunnel, up to 5 tunnels per account, 100 Mbit/s per tunnel, dynamic IPv4 endpoint updates (dyndns2), self-service reverse DNS (PTR)...
free tieridentity emailno cardevidence documentedstale on 2026-12-05
- caveatbore
MIT client and server; bore.pub is one shared public instance
identity anonymousno cardevidence documentedstale on 2026-12-04
- caveatCloudflare R2USD 15/TB-month
10 GB-month storage, 1M Class A and 10M Class B operations per month, egress free
free tieridentity cardevidence documentedstale on 2026-12-04
- caveatExpose (expose.dev managed service), Hobby
Free: TLS/SSL encryption, a time limit on every connection, random URLs, a single EU server; no card required
identity emailno cardevidence documentedstale on 2026-12-04disagrees
- caveatFreeVPS.org (Charity Donor)
Charity Donor: 2 cores (fair share), 1GB RAM, 40GB disk, 500GB bandwidth on a 300 Mbps port, 20 forwarded NAT ports, a dedicated /64 or /80 IPv6 subnet...
free tieridentity emailno cardlimit write-gatedevidence documentedstale on 2026-12-04
- caveatFreeVPS.org (regular)
Regular Community: FREE for qualifying active forum members: 1 core (fair share), 1GB RAM, 20GB disk, 250GB bandwidth on a 150 Mbps port, 20 forwarded NAT...
free tieridentity emailno cardlimit write-gatedevidence documentedstale on 2026-12-04
- caveatlocaltunnel
A unique public URL proxied to a local server, with no published limits
free tieridentity anonymousno cardevidence documentedstale on 2026-12-04
- caveatmicroLXC (tiny)
Free LXC container, tiny shape: 1 Core, 256 MB, 2.56GB SSD, 200GB Traffic; NAT IPv4 + IPv6, HAProxy support, a /64 or /70 IPv6, 20 IPv4 ports.
free tieridentity email?card?limit volume-quotaevidence documentedstale on 2026-12-04
- caveatfreefrp.com public server
Open protocols: TCP / UDP / HTTP / HTTPS; open ports: 10000 to 60000; auth token: public.freefrp.com. [translated]
free tieridentity anonymousno cardlimit per-ip-shapingevidence documentedstale on 2026-11-23
- caveatFree FRP (freefrp.net)
Connection port: 7000; password: freefrp.net; open ports: 80 / 443, 10001 to 50000; current version: 0.56.0. [translated]
free tieridentity anonymousno cardlimit request-rateevidence documentedstale on 2026-11-23
- caveatGlobal Socket (gsocket)
Global Socket allows two workstations on different private networks to communicate with each other.
free tieridentity anonymousno cardlimit per-ip-shapingevidence documentedstale on 2026-11-23
- caveatHurricane Electric tunnelbroker
A free 6in4 tunnel and a routed /48
free tieridentity emailno cardevidence documentedstale on 2026-11-23
- caveatLocalXpose
2 active HTTP and HTTPS tunnels, no time limit
free tieridentity emailno cardlimit request-rateevidence documentedstale on 2026-11-23
- caveatNatP2P
Reverse proxy makes an intranet public; hole punching supports TCP and UDP direct connection; aggregated links let one tunnel span several nodes. [translated]
free tieridentity anonymousno cardlimit per-ip-shapingevidence documentedstale on 2026-11-23
- caveatNekotopia nSolo
Encrypted WireGuard Mesh: Yes on every tier.
free tieridentity emailno cardlimit volume-quotaevidence documentedstale on 2026-11-23
- caveatNetBird
100 machines on the cloud plan
free tieridentity emailno cardlimit per-ip-shapingevidence documentedstale on 2026-11-23
- caveatopenport.pw
Openport is 100% free with no paywalls or ads; one permanent port, TCP and UDP simultaneously, zero signup, and no published limit of any kind
identity anonymousno cardlimit per-ip-shapingevidence documentedstale on 2026-11-23
- caveatOptimistix Tunnel
Enjoy free local tunneling without any payment or subscription.
free tieridentity anonymousno cardlimit per-ip-shapingevidence documentedstale on 2026-11-23
- caveatOracle Cloud Always Free (always free)
As part of your Always Free resources, you get 10 TB per month of outbound data.
free tieridentity cardlimit volume-quotaevidence documentedstale on 2026-11-23
- caveatPinggy
One 60-minute tunnel at unlimited data, no account
free tieridentity anonymousno cardlimit per-ip-shapingevidence documentedstale on 2026-11-23
- caveatplayit.gg
Free tunnels on global anycast with no published cap
free tieridentity emailno cardlimit per-ip-shapingevidence documentedstale on 2026-11-23
- caveatportmap.io
Free: One configuration setting, One forwarding rule, Random external port, Auto-generated domain name
free tieridentity emailno cardlimit per-ip-shapingevidence documentedstale on 2026-11-23
- caveatPortPlay
Free: EUR 0, free forever. Session 24h, Max players 10, Ports 1, Speed 10 Mbps, Latency Standard.
free tieridentity emailno cardlimit per-ip-shapingevidence documentedstale on 2026-11-23
- caveatPortwarp
1 active tunnel, 2 extra ports per tunnel, TCP and UDP support, Unlimited bandwidth
free tieridentity emailno cardlimit per-ip-shapingevidence documentedstale on 2026-11-23
- caveatWoiden
Unmetered Bandwidth: all data centers provide unlimited bandwidth.
free tieridentity any-phoneno cardlimit retention-clampedevidence documentedstale on 2026-11-23
- caveatZeroTier
10 devices, 1 network, 1 administrator
free tieridentity emailno cardlimit request-rateevidence documentedstale on 2026-11-23
- caveatCloudflare Pages
Unlimited static requests; 100,000 Function invocations per day; 25 MiB per asset
free tieridentity emailno cardlimit per-object-capevidence documentedstale on 2026-11-22
- caveatCloudflare Tunnel (named)
Unlimited tunnels and unmetered transit; 1,000 tunnels per account
free tieridentity emailno cardlimit write-gatedevidence documentedstale on 2026-11-22
- caveatCloudflare WARP (consumer)
A free client with no published data cap
free tieridentity emailno cardevidence documentedstale on 2026-11-22
- caveatiroh public relays
Four public relay regions, no authentication, rate-limited per connection
free tieridentity anonymousno cardlimit per-ip-shapingevidence documentedstale on 2026-11-22
- caveatNetAssist tunnel broker
We provide this service for free! Also, each user of the tunnel broker is provided with his own IPv6 network of size / 48.
free tieridentity emailno cardevidence reportedstale on 2026-11-19
- caveat6Project
Eligible active accounts can contribute USD 12.50 with a /64 transport prefix or USD 20 with a /80 transport prefix for an additional routed /48.
free tieridentity emailno cardlimit write-gatedevidence reportedstale on 2026-11-07
- caveatIP4Market tunnel broker
The service rules say 'Servis besplatnyy' (the service is free) and 'Servis dlya chastnogo, nekommercheskogo ispolzovaniya'; the indexed text of the...
free tieridentity emailno cardevidence reportedstale on 2026-11-07
- caveatME Frp
Free users: 2 tunnels, 10 Mbps limit, traffic claimable by daily check-in; real-name verification raises the limit to 25 Mbps. [translated from a forum roundup]
free tieridentity emailno cardlimit volume-quotaevidence reportedstale on 2026-11-07
- caveatMikrus FROG (free)
FROG - free, one-time activation fee: 256 MB RAM, 3 GB disk, Finland, 0 PLN per year. [translated]
free tieridentity emailno cardlimit per-ip-shapingevidence reportedstale on 2026-11-07
- caveatOpenFrp
Free users: 2 tunnels, 12 Mbps limit, traffic claimable by daily check-in. [translated from a forum roundup]
free tieridentity emailno cardlimit volume-quotaevidence reportedstale on 2026-11-07
- caveatUlziX Hong Kong free NATUSD 0.09/month
[translated] 'To celebrate UlziX's half-year anniversary we are launching a pre-sale event for a permanently free Hong Kong NAT VPS.
free tieridentity emailno cardphonelimit write-gatedevidence reportedstale on 2026-11-07
- caveatTCPShield (Sentry Tunnel)
Free $0/mo, Base TCPShield plan, ideal for small 20-30 player servers: 1.0 TB monthly bandwidth, 1 network, 3 domains
free tieridentity emailno cardlimit volume-quotaevidence inferredstale on 2026-11-23
- caveatMoFrp
MoFrp promises a permanently free basic service; the free tier is a check-in traffic model, where signing in each day grants additional traffic. [translated]
free tieridentity emailno cardevidence unverifiedstale on 2026-11-19
- caveatNetAssist IPv6 tunnel broker
'Please, fill in this form to get your FREE IPv6 tunnel.' The form asks for an email and 'IPv4 address of your side of the tunnel'.
free tieridentity emailno cardevidence unverifiedstale on 2026-11-19
- caveatNetBird Reverse Proxy
NetBird Free is 0 EUR, 'up to 5 users', '100 machines'; the pricing page lists P2P connections, Networks, SSO, access controls, Private DNS, Network Routes...
free tieridentity emailno cardevidence unverifiedstale on 2026-11-19
- caveatOpenworld Free IPv6 VPS
Yes. The free tier is permanent as long as you renew it - no trial, no card required.
free tieridentity emailno cardlimit per-ip-shapingevidence unverifiedstale on 2026-11-19
Self-hosted, the last resort 5
Software or a node that the user installs, runs and maintains. Self-hosted options are listed last, because this site is for users who have no hardware. They follow the same order: ranked, then with no parsed number.
- self-hosted, last resortHolesail
Holesail is the world's first truly peer-to-peer proxy for TCP and UDP ports. No port forwarding, servers or configuration required.
verdict qualifies-with-caveatfree tieridentity anonymousno cardevidence documentedstale on 2026-12-04
- self-hosted, last resortusque
No service and no account; "an open-source reimplementation of the Cloudflare WARP client's MASQUE mode"
verdict qualifies-with-caveatidentity anonymousno cardevidence documentedstale on 2026-11-23
- self-hosted, last resortwarp-plus
No service and no account; "an open-source implementation of Cloudflare's Warp, enhanced with Psiphon integration"
verdict qualifies-with-caveatidentity anonymousno cardevidence documentedstale on 2026-11-23
- self-hosted, last resortwgcf
No service and no account; a CLI that registers with Cloudflare and writes a profile
verdict qualifies-with-caveatidentity anonymousno cardevidence documentedstale on 2026-11-23
- self-hosted, last resortBastionRoute
A deliberately minimal forwarding fabric for WireGuard endpoints operating behind CGNAT, mobile networks and other NAT environments.
verdict qualifies-with-caveatfree tieridentity anonymousno cardlimit volume-quotaevidence reportedstale on 2026-11-07
The query
SELECT rid, vorder FROM record WHERE topic='egress' AND grp='usable' AND duplicate_of IS NULL AND coalesce(summary,'') NOT LIKE 'no free %' AND coalesce(summary,'') NOT LIKE 'no published free %' AND coalesce(summary,'') NOT LIKE 'no perpetual free %' ORDER BY self_hosted, vorder ASC NULLS LAST
Run it yourself: /api/v1/need/egress-tunnels, or the MCP tool need.