Pricing Wiki Blog Download
USD IDR
A DALANG.IO PRODUCT

About wayangi

wayangi is the public-IPv6 product of dalang.io, an Indonesian carrier-grade cloud operator. It gives a single device a dedicated, globally-routable public IPv6 address — backed by a real Autonomous System we operate from Jakarta — so the device is reachable from anywhere on the internet, even from behind CGNAT, mobile carriers, or restrictive ISPs.

What wayangi does

Most home internet connections in 2026 don't give you a real IPv4 address (CGNAT) and don't expose a usable IPv6 port forwarding flow. Mobile carriers double-NAT everything. Even fiber ISPs increasingly hide customers behind shared addresses. The practical result: your home server, IoT board, Mastodon node, or game host cannot be reached from the outside internet — no matter how correctly it's configured.

wayangi solves that by giving the device its own routable public IPv6 address from a BGP-announced prefix we operate. The device runs a single static Go binary that brings up a WireGuard tunnel to our hub in Jakarta. Inbound traffic to the assigned IPv6 lands at the hub, traverses the tunnel, arrives at the device. Outbound traffic stays on the device's own ISP — wayangi is inbound-only by design, not a VPN.

Technical architecture

  • Data plane: WireGuard, via the embedded userspace wireguard-go library in the agent. Single binary, no wireguard-tools or kernel modules needed on the client.
  • Control plane: Stdlib-only Go on the hub. SQLite for state. Hand-rolled Google OAuth. No external authentication dependency.
  • Network: AS-routed /48 IPv6 prefix announced via BGP through dalang.io's MikroTik upstream. Customer pool is 2001:df6:d2c0:1400::/56. Live traffic visible at ix.dalang.io.
  • Transport fallback: When UDP/443 is blocked, the agent auto-falls-back to WireGuard tunneled inside a WebSocket over TLS — same WireGuard keys, just shipped over Cloudflare-fronted TCP/443.
  • Platforms: Linux (x86_64 / arm64, static), macOS (Apple Silicon / Intel), Windows (x86_64 / arm64), Android (native APK, arm64 + armv7). All ad-hoc / release-signed; manifest signed with ed25519 for self-update integrity.

Pricing model

Per-IP pricing, all tiers public at wayangi.dalang.io/pricing. Free tier covers 3 mesh-only devices with no credit card. Paid tiers start at $5/month for a single /128 (one public IPv6) and scale to $8,000/month for a full /64 subnet. Annual saves 15%. Payment via Xendit (cards, IDR bank transfer, GoPay, OVO).

Who runs it

wayangi is built and operated by dalang.io — an Indonesian enterprise hosting business with 100+ enterprise customers, multilingual ID/EN/ZH content, and a dedicated baremetal data center in Jakarta. Operating entity is DALANG PTE. LTD. (Singapore UEN 202622331M, registered address: 160 Robinson Road #14-04, Singapore 068914). Real-time service status is published at uptime.dalang.io.

Choosing wayangi means choosing an SEA-operated infrastructure provider — your traffic is routed through Jakarta, not a US/EU control plane. For organisations with data-residency preferences in Indonesia / SEA, that's the differentiator.

When to use wayangi (and when not to)

Use wayangi when:

  • You need inbound connectivity to a device — home server, IoT fleet, game server, Mastodon node, self-hosted Nextcloud — without a third-party reverse proxy in the path.
  • You want raw TCP / UDP / any IP protocol, not just HTTPS.
  • You want a dedicated, routable IPv6 you control end-to-end.

Use something else when:

  • You want a private mesh between your own devices and nothing more — see Tailscale or ZeroTier.
  • You only need HTTPS exposure routed through a CDN — see Cloudflare Tunnel.
  • You're a regulated-industry enterprise needing SOC 2 / SSO / multi-region today — these are on the roadmap but not shipped.

Contact