- Free allowance
- Free $0/mo, Base TCPShield plan, ideal for small 20-30 player servers: 1.0 TB monthly bandwidth, 1 network, 3 domains
- Verdict
- caveatusable, with a named limit or an unprobed read path
- Cost
- free tier
- Identity
- emailno card, no phone
- Binding limit
- volume-quota1.0 TB per month on Free; at 90% the vendor emails every few hours, at 100% it overwrites the server MOTD, at 200% or five days after 100% the domains are disabled
- Evidence
- inferred6 sources; reasoned from other evidence
- Freshness
- stale on 2026-11-23checked 2026-10-23 (live); stale on 2026-11-23
| Free tier | Free $0/mo, Base TCPShield plan, ideal for small 20-30 player servers: 1.0 TB monthly bandwidth, 1 network, 3 domains unit TB; metered on downloaded-bytes |
|---|
| Price | USD 0 |
|---|
| Limits | - volume-quota (binding) 1.0 TB per month on Free; at 90% the vendor emails every few hours, at 100% it overwrites the server MOTD, at 200% or five days after 100% the domains are disabled source
- write-gated creating the VXLAN interface needs root or full sudo on a Linux origin source
|
|---|
| Binding | volume-quota At 1 TiB/month the 1.0 TB monthly allowance is met first, and the consequence is now documented rather than unstated: an email at 90%, a MOTD overwrite at 100%, and the domains disabled at 200% or five days after 100%, whichever comes first. Bandwidth is counted as ingress from the server and the players. |
|---|
| Identity | email A self-serve panel account at panel.tcpshield.com. The register form was not opened, so the fields it requires are unread. No card is named for the Free plan. |
|---|
| Egress | 1.0 TB monthly bandwidth on Free; 5.0 TB on Pro at USD 25/mo; Unlimited bandwidth on Premium at USD 100/mo; ingress: udp free allowance: 1.0 TB monthly bandwidth on Free; 5.0 TB on Pro at USD 25/mo; Unlimited bandwidth on Premium at USD 100/mo |
|---|
| Interface | cli Self-serve panel: create a tunnel, copy the generated setup script, run it as root. |
|---|
| Tooling | the panel generates a shell script that creates a vxlan interface (ip link add ... type vxlan, dstport, nolearning) |
|---|
| Composes with | A free Linux VM becomes the origin; the tunnel gives it a public IP with UDP on any port and no domain, so it replaces the CNAME-plus-plugin step that the Minecraft path needs. |
|---|
| Reliability | The overage rule is now known: email at 90%, MOTD overwritten at 100%, domains disabled at 200% or five days after 100%. Bandwidth is counted from inception, so a spike is charged against the month. One backend IPv4 per tunnel. |
|---|
| Notes | 1.0 TB is read as 10^12 bytes, which is 0.909 TiB; the page says TB and never TiB, so if the vendor means TiB the allowance is 1.0 TiB. The strongest candidate. Two paths exist and only one carries UDP: the Minecraft CNAME path (Bedrock is Premium-only, per the FAQ) and the Sentry Tunnel path (protocol-agnostic, dedicated public IP, no domain needed). The free-plan gate on Tunnels is the open question; candidates and tests are in lane.md. A tunnel needs one backend IPv4 and root, so it pairs with a free Linux VM rather than a managed game panel. The billing doc does, in one paragraph, and the enforcement is a three-stage escalation ending in the domain being disabled at 200% of the allowance. The record called the consequence unstated. Replaces 'no overage rule is published', which the billing page contradicts. |
|---|
| Evidence note | inferred The allowance, the enforcement ladder and the metering direction are all on vendor pages read on 2026-10-23, so the volume fields are documented. The record stays at inferred only because the identity field was read from the panel's name and not from the register form, which was never opened. |
|---|
| Parsed numbers | - has-free-tier 1
- volume-quota 1 TB / month
- price USD 0
|
|---|