Home / Egress and tunnels
Hurricane Electric tunnelbroker
tunnelbroker.net/IPv6 tunnel (free)egress/he-tunnelbrokerJSONcomparereport an errorprovider JSON
- Free allowance
- A free 6in4 tunnel and a routed /48
- Verdict
- caveatusable, with a named limit or an unprobed read path
- Cost
- free tier
- Identity
- emailno card, no phone
- Binding limit
- noneno named constraint binds
- Evidence
- documented3 sources; a first-party page was read and the sentence quoted
- Freshness
- stale on 2026-11-23checked 2026-10-23 (live); stale on 2026-11-23
| Free tier | a free 6in4 tunnel and a routed /48 unit unlimited; metered on none |
|---|
| Price | none stated |
|---|
| Binding | none nothing in the vocabulary binds: the protocol-41 requirement is a network capability a user's ISP passes or blocks, not a queue with a person in it, and the /48 itself has no volume limit |
|---|
| Identity | email a tunnelbroker account |
|---|
| Egress | not metered |
|---|
| Per-object cap | not applicable: a routed prefix |
|---|
| Interface | cli a 6in4 tunnel to a Hurricane Electric endpoint |
|---|
| Tooling | iproute2, netplan |
|---|
| Composes with | the free answer to a static address rather than to capacity: it composes with a dual-stack front and only with clients that have IPv6. |
|---|
| Reliability | the site served an incomplete TLS chain on 2026-10-22 |
|---|
| Notes | Re-read 2026-10-23 and unchanged: still a free tunnel over an existing IPv4 connection with a /48 once the tunnel is up, still protocol 41 or GRE, and WireGuard is not offered. A WireGuard client therefore cannot use it directly and would need a second host to terminate the tunnel. |
|---|
| Parsed numbers | |
|---|
Evidence 3
| date | source | what it proved |
|---|
| 2026-10-22 | tunnelbroker.net/ | a free tunnel plus a routed /48 |
| 2026-10-22 | probe: https://tunnelbroker.net/ | the served TLS chain names only CN=tunnelbroker.net and openssl reports an incomplete chain; curl exits 35 CRYPT_E_REVOKED without -k and returns 200 with it |
| 2026-10-23 | tunnelbroker.net/ | 'Our free tunnel broker service enables you to reach the IPv6 Internet by tunneling over existing IPv4 connections' and 'Ability to get your own /48 prefix once your tunnel is up' |
More fields 5
| stale after days | 180 |
|---|
| bytes transit | yes |
|---|
| transit note | the 6in4 tunnel carries the endpoint's IPv6 traffic over Hurricane Electric's network |
|---|
| extras.wg path | none |
|---|
| extras.wg test | fails: no WireGuard transport is offered, so no .conf can be obtained and no WG datagram is carried except inside a 6in4 or GRE outer packet the client builds itself |
|---|