- Free allowance
- SIT, GRE and WireGuard tunnels with BGP-routed /48s.
- Verdict
- caveatusable, with a named limit or an unprobed read path
- Cost
- free tier
- Identity
- emailno card, no phone
- Binding limit
- noneno named constraint binds
- Evidence
- documented7 sources; a first-party page was read and the sentence quoted
- Freshness
- stale on 2026-12-05checked 2026-11-04 (live); stale on 2026-12-05
| Free tier | SIT, GRE and WireGuard tunnels with BGP-routed /48s. Free, dual-stack, dyndns2-ready. unit unlimited; metered on none |
|---|
| Price | USD 0 |
|---|
| Limits | - per-ip-shaping 50 Mbit/s up and down, kernel-shaped, per tunnel source
- per-ip-shaping SYN-flood and ICMP rate limits applied per tunnel automatically source
|
|---|
| Binding | none The 50 Mbit/s cap is about fifteen times that, so the speed limit does not bind at this volume and no byte quota exists. What actually constrains a workload here is the blocked-port list, which the seven kinds do not name: 'SMTP - 25 - 465 - 587 - 2525' and 'POP3/IMAP - 110 - 143 - 993 - 995' are closed, so a mail service on this prefix cannot work. Reachability is IPv6-only. |
|---|
| Identity | email https://tb.tahio.eu/sign-up asks for Email, Password and Full Name, with Nickname optional; no card and no phone field. |
|---|
| Egress | no monthly byte allowance is published; the fair-use section caps speed instead: '50 Mbit/s up + down, kernel-shaped'; ingress: tcp+udp free allowance: none published |
|---|
| Interface | cli the site hands out SIT, GRE and WireGuard configuration; a dyndns2 endpoint updater is offered per tunnel for dynamic IPv4 |
|---|
| Tooling | wg-quick or wireguard-tools; a plain SIT/GRE interface for the other two transports |
|---|
| Composes with | a native WireGuard profile with no dashboard step makes it the cheapest way to put a free compute instance on a public IPv6 address with every port open. |
|---|
| Reliability | no SLA: 'No SLA, no uptime guarantee.' Abuse, spam or scanning gives 'instant termination, no warning.' |
|---|
| Notes | The page contradicts itself on prefix size: the headline says 'BGP-routed /48s' while the network section says 'Each tunnel gets two /64s from the primary pools plus a /64 from a tertiary.' The /64 arithmetic is the concrete statement and the /48 is unexplained, so the record carries three /64s and flags the /48 as unestablished. AS198889, single PoP in Oslo, peered with Gigahost. |
|---|
| Evidence note | documented documented from the vendor page read, including a full WireGuard profile. A measured rung needs a tunnel brought up and a UDP service reached through it, which needs an account. |
|---|
| Parsed numbers | - has-free-tier 1
- price USD 0
|
|---|