Your own public IPv6, no Cloudflare account.
Cloudflared puts your traffic behind Cloudflare's edge and a *.trycloudflare.com subdomain (or your Cloudflare-managed domain). wayangi gives you a real, dedicated public IPv6 address — point any domain at it, run any protocol, no proxy in the middle.
wayangi vs Cloudflared at a glance
| What you get | Cloudflared (free) | wayangi |
|---|---|---|
| Public IPv6 address | — no, you get a Cloudflare-proxied DNS record | Yes — dedicated /128 per device |
| Raw TCP / UDP | — HTTP only on free; TCP/UDP on Zero Trust paid | Any IP protocol — TCP, UDP, ICMP, QUIC, WireGuard |
| Bring your own domain | Cloudflare must manage DNS for your domain | Any DNS provider — point an AAAA record |
| Cloudflare account required | Yes | No |
| Traffic path | Through Cloudflare's edge | Through the wayangi hub directly to your device |
| CGNAT / mobile | Works (outbound UDP) | Works (outbound UDP) |
| Cost | $0 free tier; Zero Trust paid for TCP/UDP | $5/mo per public IPv6 device |
| Inbound-only egress policy | N/A (proxy) | Enforced — your IP can't initiate outbound flows |
| Single binary install | Yes (cloudflared) | Yes (wayangi) |
When to pick wayangi over Cloudflared
- You need raw TCP or UDP and don't want to pay for Cloudflare Zero Trust.
- You want a public IP you can hand out — to a custom domain, a game server, an IRC bouncer, a Bitcoin node.
- You don't want a third party in your traffic path. wayangi's hub forwards packets but doesn't terminate TLS.
- You want to avoid Cloudflare's account lock-in on your DNS.
- You're self-hosting from CGNAT and Cloudflare's HTTP-only free tier doesn't fit your protocol.
When Cloudflared is the better pick
- You only need HTTP(S) and a free tier is enough.
- You want Cloudflare's WAF / DDoS protection in front of your origin.
- You're already paying for Cloudflare and want to consolidate.
- You don't care about traffic going through a third party.
How wayangi replaces Cloudflared in 60 seconds
- Sign in with Google at wayangi.dalang.io.
- Pick a tier (one IP, /128, $5/mo is the most common starting point).
- Pay via Xendit — your dedicated public IPv6 is allocated when the invoice clears.
- Copy the device token (shown once).
- On the device you want exposed:
wayangi --token=<token>. The agent installs as a service, brings up a WireGuard tunnel, and your service binds to the assigned IPv6. - Point an AAAA DNS record at the IPv6, or just hand out the address directly.
Frequently asked questions
Is wayangi a Cloudflare Tunnel (cloudflared) alternative?
Yes — wayangi solves the same core problem (expose a device behind NAT to the public internet via a single outbound tunnel), but instead of routing your traffic through Cloudflare's edge, it gives you a dedicated public IPv6 address on a hub the operator runs. You control the IP, the domain, the TLS termination, and the traffic path.
What does wayangi cost compared to Cloudflare Tunnel?
wayangi starts at $5/month per device. Cloudflare Tunnel is free but requires a Cloudflare account, a Cloudflare-proxied DNS record, and routes all your traffic through Cloudflare's network. wayangi is paid because there's no third-party proxy — you're paying for the public IPv6 address and the hub bandwidth.
Can wayangi expose raw TCP and UDP, not just HTTP?
Yes. Cloudflared's free tier only forwards HTTP(S). wayangi forwards any IP protocol — TCP, UDP, ICMP, QUIC, WireGuard, game servers, IRC, SSH. You get a real IPv6 address, so anything that binds an IPv6 socket works.
Do I need a domain to use wayangi?
No. Each device gets a public IPv6 address you can use directly, or point an AAAA record at. With Cloudflare Tunnel you need a Cloudflare-managed domain; with wayangi you can BYO any DNS or skip DNS entirely.
Does wayangi work behind CGNAT or mobile data?
Yes — same as Cloudflared, the agent only makes outbound UDP connections, so it traverses CGNAT, mobile carrier NAT, and most restrictive ISPs.
Is the wayangi agent open source?
The agent binary is freely distributable. The control-plane source is closed-source and operated by DALANG PTE. LTD. (Singapore).
Skip the Cloudflare account. Get your own IPv6.
$5/month per device. Cancel any time. No long-term contract.
Sign in with Google →