// free ipv6 tunneling · norway

IPv6 for the rest of
your IPv4-only world.

SIT, GRE and WireGuard tunnels with BGP-routed /48s. Free, dual-stack, dyndns2-ready.

Get a tunnel →View network

198889

BGP sessions

Endpoint

Oslo, NO

~3 ms RTT to Oslo IX · check at lg.gigahost.no

// tunnel types

Three ways to tunnel.

Pick whichever your router speaks. All three give you the same BGP-routed prefixes.

Modern, peer-driven. The endpoint learns your IP from the handshake, so dynamic IPv4 routers work out of the box. Single prefix per tunnel.

· userspace · wireguard-tools
· MTU · 1420
· dual-prefix · no (single)

wg0.conf

[Interface]
PrivateKey = <YOUR_PRIVATE_KEY>
Address = 2a05:1083:bef0::1/64

[Peer]
PublicKey = <SERVER_PUBLIC_KEY>
Endpoint = tb.tahio.eu:51820
AllowedIPs = ::/0
PersistentKeepalive = 25

// network

Anchored in Oslo.

Our own AS, peered with Gigahost, with five /44 pools to delegate from.

AS198889

Peered with AS56655 (Gigahost). 4 BGP sessions established, importing default route only.

Looking glass ↗

Prefix pools

2a05:1083:bef0::/44primary delegation
2a12:bec0:02c0::/44secondary delegation
2a05:1083:bee0::/44primary (alt)
2a05:dfc1:3c10::/44secondary (alt)
2a03:94e0:2496::/48non-BGP local

Each tunnel gets two /64s from the primary pools plus a /64 from a tertiary.

// new

Dynamic DNS, no dashboard required.

Run your tunnel from a connection with a dynamic IPv4? Each SIT or GRE tunnel can issue a per-tunnel token — any router or script keeps the endpoint in sync over the standard dyndns2 protocol.

per tunnel — one token, rotateable on demand from the dashboard.
bcrypt — hashed in the database with cost 12. Plaintext shown once.
rate-limited — one update / 30 s per token, 30 / min per source IP.

Generate a token →

curl -u tun-XXXX-1:ddns_xxxxxxxxx... \
  "https://tb.tahio.eu/nic/update?myip=$(curl -4s ifconfig.me)"

Compatible with:Fritz!BoxMikroTikOpenWrtASUS MerlinOPNsensepfSenseddclientinadyncurl

// fair use

Free isn't unlimited.

Limits exist so the service stays available for everyone.

Per-tunnel limits

50 Mbit/s up + down, kernel-shaped
2 tunnels per account
SIT/GRE: dual-prefix · WG: single

Blocked ports

SMTP · 25 · 465 · 587 · 2525
POP3/IMAP · 110 · 143 · 993 · 995
We don't run mail and we won't relay yours.

Abuse

Spam, scanning, illegal traffic, DDoS reflection — instant termination, no warning.
SYN-flood + ICMP rate limits applied per-tunnel automatically.

No SLA, no uptime guarantee. We run this because it should exist. — kiAntrieb.de

IPv6 for the rest of your IPv4-only world.