Wiki & guides
Everything you need to set up wayangi, test your tunnel, use your IPv6 prefix in real apps, and decide if wayangi is the right tool for your job vs. cloudflared, Tailscale, or ZeroTier.
Get started · install & verify
Test that your tunnel works
Verify your wayangi agent is forwarding traffic end-to-end. Two commands and a curl from any phone or laptop on the public internet.
Download the wayangi agent
Pre-built binaries for Linux, macOS, Windows, and Android. SHA-256 + ed25519 manifest signature baked into every release.
Pricing & tiers
From a single /128 at $5/mo to a full /64 for resellers. Side-by-side comparison, cost-per-IP maths, free mesh tier for 3 devices.
Use your IPv6 prefix in real apps
Using your /124, /120, … or /64
How to actually use every address in your prefix once the agent has the tunnel up. AnyIP routing, Caddy/nginx examples, common gotchas on Linux vs. macOS.
Sub-devices — one prefix, many machines
Buy a /124 once, run wayangi on 16 different machines. Each sub-device auto-claims one IPv6 from the parent's prefix — no manual binding, no extra cost.
Mesh VPN + public-IPv6 tunnel in one binary
Combine private mesh between your devices with public-IPv6 exposure for self-hosting. One agent, one token, two modes — works alongside Tailscale or as a replacement.
Compare wayangi vs. alternatives
wayangi isn't trying to replace every tunnel. It's narrowly aimed at inbound IPv6 discoverability — giving one device a dedicated, reachable public address. Here's where it fits vs. the more general-purpose tools.
wayangi vs Cloudflare Tunnel (cloudflared)
cloudflared is HTTPS-only and routes through Cloudflare's edge. wayangi gives you a real IPv6 you control, with raw TCP/UDP/anything — and no third-party reverse proxy in the path.
wayangi vs Tailscale
Tailscale builds a private mesh; outsiders can't reach your devices unless you enable Funnel. wayangi is built around the opposite default: every customer device has one public IPv6, reachable from the open internet.
wayangi vs ZeroTier
ZeroTier is a virtual flat L2 network. wayangi hands out routable public IPv6 addresses backed by a real AS — closer in shape to a colocated server with a static IP than a virtual LAN.
wayangi vs ngrok
ngrok is brilliant for short-lived dev tunneling. wayangi gives you a permanent, dedicated public IPv6 with raw TCP/UDP and no per-tunnel bandwidth caps — better fit for a real home server or production endpoint.
wayangi vs PageKite
PageKite uses a Python client + a relayed pagekite.net subdomain. wayangi gives you a real, routable IPv6 address you control end-to-end — single static Go binary, no Python.
Long-form blog
How to host a website behind CGNAT in 2026
Your ISP gave you shared IPv4 and no port-forwarding. Six realistic options ranked from least to most friction — Cloudflare Tunnel, Tailscale Funnel, ngrok, wayangi, VPS + reverse SSH.
Public IPv6 for Raspberry Pi: complete 2026 guide
Give a Raspberry Pi (or any aarch64 Linux board) its own dedicated public IPv6 in 5 minutes. Walks through Jellyfin, Pi-hole, and MQTT.
Self-host Mastodon at home: the IPv6 path
ActivityPub federation needs a reachable address. The cheapest, most permanent fix in 2026 — and why it's the right shape for fediverse software.
All blog posts
Self-hosting, IPv6 routing, real-world use cases. Long-form technical. New post every few weeks.
About wayangi
About wayangi
What wayangi is, technical architecture (WireGuard, AS-routed /48), pricing model, who operates it (dalang.io · Indonesian carrier-grade cloud), when to use it and when not to.
Security
Threat model, ed25519-signed manifest, SHA-256 binary verification, hashed session tokens, audit log, no telemetry, inbound-only egress policy. Known gaps openly listed.
Changelog
What shipped, when. Monthly release notes for the CLI agent + Android APK + hub.
Missing a guide?
If something tripped you up while setting up wayangi, mail [email protected] — we'd rather write the guide once than answer the same ticket twice.