Home / Egress and tunnels
OpenTunnel
github.com/anomalyco/opentunnelHosted blind tls tunnel (tcp 443, tls clienthello only)egress/opentunnelJSONcomparereport an errorprovider JSON
- Free allowance
- Each client gets a unique <id>.opentunnel.xyz subdomain and TLS is terminated locally
- Verdict
- fails: egressdata cannot be read back out at a usable rate or price
- Cost
- not statedsee Price below
- Identity
- anonymousno card, no phone
- Binding limit
- noneno named constraint binds
- Evidence
- reported1 source; a third party said so
- Freshness
- stale on 2026-11-07checked 2026-10-23 (live); stale on 2026-11-07
| Free tier | each client gets a unique <id>.opentunnel.xyz subdomain and TLS is terminated locally unit none; metered on none |
|---|
| Price | USD 0 |
|---|
| Binding | none No quota is published, so the byte wall is unknown; the hard wall is that the relay reads only the TLS ClientHello and routes by SNI, so only TLS-wrapped traffic reaches a user. No UDP. |
|---|
| Identity | anonymous a client claims a route by hostname; no account is described in the README. |
|---|
| Egress | No byte allowance or price is published in the README.; ingress: http-only free allowance: none published |
|---|
| Interface | cli npm client. |
|---|
| Tooling | vendor client (TypeScript). |
|---|
| Composes with | Web ingress for a free VM, with client-side TLS termination. |
|---|
| Reliability | Depends on a Cloudflare TCP Workers beta and a temporary AWS relay. |
|---|
| Notes | Blind TLS relay on Cloudflare Workers with an AWS relay for inbound TCP. Interesting shape, no UDP. |
|---|
| Evidence note | reported The hosted service is young (MIT declared, no LICENSE file); a published quota would sharpen the binding. |
|---|
| Parsed numbers | |
|---|
Evidence 1
| date | source | what it proved |
|---|
| 2026-10-23 | github.com/anomalyco/opentunnel | 'It accepts public TCP on 443 and reads only the TLS ClientHello. A tunnel hostname is carried, still encrypted, over the tunnel bridge WebSocket' |
More fields 4
| wg path | none |
|---|
| ingress | http-only |
|---|
| volume stated | No byte allowance or price is published in the README. |
|---|
| bytes transit | yes |
|---|
Unknown values 2
- per object cap stated: the field does not apply to this kind of offer
- retention stated: the field does not apply to this kind of offer