tunelo

Free allowance: No service and no account; two Go programs built from source
Verdict: self-hosted, last resortverdict paid-only: no free allowance; listed for its price. Self-hosted options are listed last, because this site is for users who have no hardware.
Cost: no price statedsee Price below
Identity: anonymousno card, no phone
Binding limit: noneno named constraint binds
Evidence: documented3 sources; a first-party page was read and the sentence quoted
Freshness: stale on 2026-11-23checked 2026-10-23 (live); stale on 2026-11-23

Free tier	no service and no account; two Go programs built from source unit none; metered on none
Price	USD 0
Binding	none the constraint is a Linux server with IP forwarding and MASQUERADE, outside the vocabulary
Identity	anonymous no account; a Linux server with NAT rules and a user beside the user's VPN endpoint
Egress	not applicable; the software states no volume; ingress: tcp free allowance: none published
Interface	cli tunelo-server and tunelo-client
Tooling	go build; server needs iptables and ip_forward
Composes with	websocket mode rides the same class of forwarder as wstunnel; the server must sit on a host with a public address.
Reliability	client skips certificate verification in utls mode, stated in the README; last tagged build is from 2023
Notes	The only wrapper with a uTLS transport, which shapes the client hello, so it is aimed at filtering rather than at a broken MTU. Code activity in 2026 but no release since 2023, and 16 stars, so it is a single-maintainer project. Same shape as wstunnel and a smaller base.
Evidence note	documented a measured run would raise it; the repository publishes no benchmark
Parsed numbers	has-free-tier 0 price USD 0

Evidence 3

date	source	what it proved
2026-10-23	github.com/mehdieidi/tunelo	the description sentence, the two-binary layout, and the server requirements (WireGuard, Go, NAT rules, IP forwarding)
2026-10-23	github.com/mehdieidi/tunelo	"The current client skips certificate verification" in utls mode
2026-10-23	github.com/mehdieidi/tunelo	release v0.4.0 published 2023-09-10; last push 2026-09-27; 16 stars

More fields 8

wg path	none
wg detail	"tunelo encrypts and tunnels UDP traffic (e.g. WireGuard) over a transport protocol like websocket or TCP"; server/ and client/ are separate binaries, both defaulting to websocket
ingress	tcp
volume stated	not applicable; the software states no volume
bytes transit	yes
hosting requirement	a Linux server with a public address, IP forwarding and a NAT rule, plus the client binary on the device
last release	v0.4.0 2023-09-10
stars	16

Unknown values 2