Build your tunnel
No minimum term. €3 per tunnel whatever the protocol, a routed IPv6 /48 included. Without the option, IPv4 goes through NAT64 (WireGuard, GRE) or CGNAT (OpenVPN, L2TP); public IPv4 optional.
Optional: the first €3, then €5 per address, up to 10 additional IPv4 addresses, set up by hand by the team except with L2TP. Taken with the order, the public IPv4 is delivered with the tunnel. Without the option, NAT64 with WireGuard and GRE, CGNAT with OpenVPN and L2TP. The IPv6 /48 is included.
How it works
- You send your request
Your configuration is attached. Nothing to pay at this stage.
- A volunteer replies
By e-mail: a few questions if needed, then you sign our terms and a SEPA mandate online.
- You order in Univers
Your subscriber area is created. You order the service there and pay the first instalment by card; the next ones are direct-debited.
- Service delivery
About one week after your order.
More details in the FAQ.
In Univers
What you see in your subscriber area: a real subscriber's service, anonymised.
Names, addresses, IP addresses and references are replaced with fictitious values. Discover Univers
Good to know
How it works
Four protocols to choose from:
- WireGuard: a fast, modern encrypted tunnel that works well behind NAT.
- OpenVPN: universal, encrypted, IPv4 and IPv6, up to 500 Mbit/s; recommended for a tunnel on the move, or on a PC.
- L2TP: a protocol that works well behind NAT, IPv6 depending on your router (validated on MikroTik, Cisco, ASUS).
- GRE: a simple IP tunnel, IPv4 and IPv6, well supported by most routers, but requires a public IP address.
The service also includes:
- No throttling
- NAT64 available
- Regional routing in Lyon for Orange, SFR, Bouygues and K-Net
- Fixed interconnection IP addresses
- Reverse DNS you set yourself in Univers, the subscriber area
- Delegation of the reverse DNS zone of the IPv6 prefix available
Limits
- IPv4: without the option, WireGuard and GRE are IPv6-only, with NAT64 to reach IPv4; OpenVPN and L2TP get a private IPv4 address behind carrier-grade NAT (CGNAT). Either way, no inbound IPv4 connections. A public IPv4 address ordered with the tunnel is delivered with the tunnel; added later, it is set up by hand.

