Home / Egress and tunnels
gluetun
github.com/passteque/gluetunTool (wireguard transport)egress/gluetunJSONcomparereport an errorprovider JSON
- Free allowance
- No service and no account; a Docker container that connects to a VPN provider the operator has an account with
- Verdict
- self-hosted, last resortverdict paid-only: no free allowance; listed for its price. Self-hosted options are listed last, because this site is for users who have no hardware.
- Cost
- no price statedsee Price below
- Identity
- institutionno card, no phone
- Binding limit
- noneno named constraint binds
- Evidence
- documented4 sources; a first-party page was read and the sentence quoted
- Freshness
- stale on 2026-11-23checked 2026-10-23 (live); stale on 2026-11-23
| Free tier | no service and no account; a Docker container that connects to a VPN provider the operator has an account with unit none; metered on none |
|---|
| Price | USD 0 |
|---|
| Binding | none gluetun adds no limit and no path: it is a consumer of somebody else's tunnel, so the binding constraint lives in the provider record |
|---|
| Identity | institution a subscription with one of the listed VPN providers is what it exists to consume; the custom provider path needs no gluetun account but the endpoint still needs one |
|---|
| Egress | not applicable; the volume is the provider's, not the container's; ingress: none free allowance: none published |
|---|
| Interface | cli Docker environment variables, plus built-in SOCKS5, Shadowsocks and HTTP proxies |
|---|
| Tooling | Docker image qmcgaw/gluetun; compose or docker run |
|---|
| Composes with | takes a .conf from any provider record in this topic and republishes it as SOCKS5 or Shadowsocks inside a Docker network. |
|---|
| Reliability | the built-in firewall kill switch blocks traffic when the tunnel drops, by design |
|---|
| Notes | It is not a transport wrapper and it does not cross a UDP block by itself: its tcp option is OpenVPN over TCP, not WireGuard over TCP. |
|---|
| Evidence note | documented nothing here is about gluetun's own numbers; the rung that matters belongs to the provider it dials |
|---|
| Parsed numbers | - has-free-tier 0
- price USD 0
|
|---|
Evidence 4
More fields 9
| wg path | native-conf |
|---|
| wg detail | "For custom Wireguard configurations using the custom provider", so an ordinary .conf is its input |
|---|
| ingress | none |
|---|
| volume stated | not applicable; the volume is the provider's, not the container's |
|---|
| bytes transit | yes |
|---|
| transit note | through whichever VPN provider is configured |
|---|
| hosting requirement | a Docker host; the tunnel itself is the provider's |
|---|
| last release | v3.41.3 2026-07-30 |
|---|
| stars | 15857 |
|---|
Unknown values 2
- per object cap stated: the field does not apply to this kind of offer
- retention stated: the field does not apply to this kind of offer