- Free allowance
- Everything, $0 forever: Unlimited concurrent tunnels, Unlimited bandwidth and requests, Private VPN over WireGuard, No card, no trial, no expiry
- Verdict
- deadthe offer or the service no longer exists
- Cost
- no price statedsee Price below
- Identity
- emailno card, no phone
- Binding limit
- per-ip-shapingfair-use guidance only, no meter and no number
- Evidence
- measured6 sources; a live request was made and its output kept
- Freshness
- checked 2026-10-23checked 2026-10-23 (live)
| Free tier | Everything, $0 forever: Unlimited concurrent tunnels, Unlimited bandwidth and requests, Private VPN over WireGuard, No card, no trial, no expiry unit unlimited; metered on none |
|---|
| Price | USD 0 |
|---|
| Limits | - per-ip-shaping (binding) fair-use guidance only, no meter and no number source
|
|---|
| Binding | per-ip-shaping As published, nothing binds: unlimited bandwidth, 60-second per-source idle window that matches WireGuard keepalive. That is the published figure. The service is not reachable, which is a stronger failure than any constraint. |
|---|
| Identity | email 'mytunnel login' opens a browser and saves a 90-day token; signup is at login.21tunnel.com, which does not resolve (see notes) |
|---|
| Egress | Unlimited bandwidth and requests, with 'Bandwidth is fair-use guidance, not a meter - we don't throttle or bill per-GB.'; ingress: udp free allowance: none published |
|---|
| Interface | cli, rest mytunnel udp 51820 --public-port 31099, mytunnel wg up, and a REST API at login.21tunnel.com/api |
|---|
| Tooling | mytunnel CLI, systemd unit, REST API |
|---|
| Composes with | would have been answer: a free WireGuard endpoint with a reserved UDP port, composed with any free VM |
|---|
| Reliability | the documented relay and dashboard hostnames do not exist in DNS as of 2026-10-23; the marketing site is a static Cloudflare page |
|---|
| Notes | The best-designed free WireGuard ingress and the only provider that ships the .conf, the reserved UDP port and a WireGuard recipe together. It is not running. The wildcard caveat that applies to playit (a bare subdomain legitimately NXDOMAIN while a wildcard serves) does not apply here because login.21tunnel.com is a named host, not a wildcard member. |
|---|
| Evidence note | measured The death is measured, not inferred: agent.21tunnel.com and login.21tunnel.com both return DNS status 3 (NXDOMAIN) for A and AAAA from Cloudflare DNS-over-HTTPS, an independent resolver, while 21tunnel.com resolves to Cloudflare addresses on the same zone. |
|---|
| Parsed numbers | - has-free-tier 0
- price USD 0
|
|---|