udp2raw

Free allowance: No service and no account; source and pre-built static binaries
Verdict: self-hosted, last resortverdict paid-only: no free allowance; listed for its price. Self-hosted options are listed last, because this site is for users who have no hardware.
Cost: no price statedsee Price below
Identity: anonymousno card, no phone
Binding limit: noneno named constraint binds
Evidence: documented4 sources; a first-party page was read and the sentence quoted
Freshness: stale on 2026-11-23checked 2026-10-23 (live); stale on 2026-11-23

Free tier	no service and no account; source and pre-built static binaries unit none; metered on none
Price	USD 0
Binding	none the constraint is a root Linux host with raw socket access at both ends, outside the seven-kind vocabulary
Identity	anonymous no account; both ends are hosts the operator controls
Egress	not applicable; the software states no volume; ingress: tcp free allowance: none published
Interface	cli udp2raw_amd64 -s / -c
Tooling	static binaries for x86, ARM, Android and some OpenWrt routers
Composes with	only composes with a host a user rents or gets free, such as a free-tier VM, and adds nothing to a hosted tunnel.
Reliability	needs root and iptables rules (-a), which is a common silent failure; the README states it survives reconnects and keeps UDP conversations valid
Notes	WireGuard's own limitations page names this project, which is why it stays despite a 2023 release. It forges IP and TCP headers, so it cannot ride a CDN or any managed forwarder: the far end must be a host that accepts the forged connection. That is the opposite of the wstunnel case.
Evidence note	documented a measured run through a named path would raise it; no throughput number is published
Parsed numbers	has-free-tier 0 price USD 0

Evidence 4

date	source	what it proved
2026-10-23	github.com/wangyu-/udp2raw	"turns UDP Traffic into Encrypted FakeTCP/UDP/ICMP Traffic by using Raw Socket" and "Linux host ... with root access"
2026-10-23	github.com/wangyu-/udp2raw	the two-sided invocation: server '-s -l0.0.0.0:4096 -r 127.0.0.1:7777 --raw-mode faketcp' and client '-c -l0.0.0.0:3333 -r44.55.66.77:4096'
2026-10-23	github.com/wangyu-/udp2raw	release 20230206.0 published 2023-02-07; last push 2025-10-12; 8577 stars
2026-10-23	www.wireguard.com/known-limitations/	WireGuard names udp2raw as one of the projects that can transform its UDP packets into TCP

More fields 9

wg path	none
wg detail	"A Tunnel which turns UDP Traffic into Encrypted FakeTCP/UDP/ICMP Traffic by using Raw Socket"; WireGuard rides inside it because WireGuard is the UDP traffic
ingress	tcp
volume stated	not applicable; the software states no volume
bytes transit	yes
transit note	the bytes cross both hosts, with the far host forwarding to the WireGuard listener
hosting requirement	two root Linux hosts, one of them publicly reachable; fake-TCP needs raw sockets at both ends and cannot pass a managed HTTP forwarder
last release	20230206.0 2023-02-07
stars	8577

Unknown values 2