route64.org
Create account

Bring your network.
We automate the rest.

route64 (AS212895) is a free, non-profit network. IPv6 tunnels, static and anycast IPs, BGP transit, DNS hosting and DynDNS at 17 PoPs. You choose in the manager, the automation sets it up on our routers.

Create free account See all services
manager.route64.org

New IPv6 tunnel

WireGuard at Frankfurt
  • Tunnel createdWritten to r1-fra-de and read back.
  • Addresses assignedA /64 transfer net, plus a routed /56 for your network.
  • Reverse DNS setPTR records for both ends of the tunnel.
  • Your config is readyFor Linux, RouterOS or OpenWrt, or scan the QR code with your phone.
  • Up2001:db8:64::/56 is routed to you. No ASN needed.

Five services, one manager

Pick what you need, everything is self-service in the manager. The full spec sheet for each service is further down.

IPv6 tunnelbroker

A routed /56 for your home lab or VPS. No ASN needed.

Free
WireGuardGRESITVXLANL2TPv3EoIP

You get

  • A /64 transfer net and a routed /56
  • WireGuard without a fixed endpoint, for laptops and phones
  • Endpoint updates through dyndns2 when your home IP changes

Automated

  • Tunnel written to the router and read back
  • Reverse DNS for both tunnel ends
  • Ready-made configs for Linux, RouterOS and OpenWrt, Cisco and Arista for most protocols, a QR code for WireGuard
# generated for your side, WireGuard
[Interface]
Address    = 2001:db8:64::2/64
PrivateKey = <your key>
[Peer]
Endpoint   = <PoP endpoint>:51820
AllowedIPs = ::/0

Static IP tunnel

Your own IPv4 or IPv6 subnet, routed to you through a tunnel.

For supporters

You get

  • IPv4 /31, /29, /28 or /27, or an IPv6 /64, in the region you pick
  • Used flat on the tunnel, or routed to a gateway inside it
  • A backup gateway on a second tunnel at the same PoP, and moves within a PoP without downtime

Automated

  • Route pushed and read back, failed changes retried every 15 minutes
  • Compared with the router every 4 hours
  • Geofeed entry at the subnet's PoP
  • Renewed every 30 days, with a reminder before anything is released
203.0.113.8/29tunnel 1 at Amsterdam, backup tunnel 2 at AmsterdamRouted

Anycast tunnel

One prefix, announced from several PoPs. Traffic usually lands at the nearest.

For supporters

You get

  • An anycast IPv4 /31 or IPv6 /64 from our space
  • Tunnels at as many PoPs as your tunnel limit allows

Automated

  • Announced at every PoP you picked
  • Renewed every 30 days
  • A notice when the size you want is free again

BGP transit and peering

Your ASN on the internet. Full table or default route, over a tunnel or at one of our IXPs.

Free

You get

  • IPv4 and IPv6 transit, or peering with AS212895 and with other customers
  • Sessions at any PoP, over a tunnel or an IXP port
  • Blackholing with 65535:666

Automated

  • ASN verified through your RIR record
  • Prefix list from the RIR databases, max-prefix from PeeringDB
  • RPKI-invalid routes dropped on import
  • Our AS-SET and our upstreams updated for you
FrankfurtTransit, IPv6, full tableEstablished
Amsterdam, AMS-IXPeering, IPv4Established

DNS hosting

Authoritative DNS for your domains and your address space, on three nameservers.

NewFree

You get

  • Forward zones: A, AAAA, CNAME, MX, TXT, NS, SRV, CAA
  • Reverse zones for your own space (BYOIP or your announced prefixes), with bulk PTR
  • BIND zone import and export
  • Reverse DNS delegation: point the reverse zone of a prefix you have from us at your own nameservers (higher sponsor levels)

Automated

  • Synced to dns1, dns2 and dns3.route64.org seconds after a change
  • Delegation check, TSIG dynamic updates (RFC 2136) and an API
example.net.NSdns1.route64.org.
example.net.NSdns2.route64.org.
wwwAAAA2001:db8:64::80
@MX10 mail.example.net.
@TXT"v=spf1 mx -all"

DynDNS

A hostname that follows your changing IP, for the NAS at home or the office router.

NewFree

You get

  • A name under dyn.route64.org, or any name in a zone you host with us
  • IPv4 and IPv6, in one update or one per family
  • A token per host: a lost router only exposes that one name
  • dyndns2 at /nic/update, a token URL and a JSON API

Automated

  • Live on dns1, dns2 and dns3.route64.org seconds after an update, TTL 60 s
  • An update that comes too early waits and goes out when your interval opens
  • Every update in the host's log, with the client that sent it
GET/nic/update?hostname=home.dyn.route64.org
answer200good 198.51.100.23
homeA198.51.100.23
homeAAAA2001:db8:64::23
homeTTL60

Blackhole an attack yourself

Announce the attacked prefix with 65535:666 and traffic to it is dropped at our edge, before it fills your link.

Your IP changed? One call.

Point any DynDNS client at the manager: your tunnelbroker endpoint follows your home IP, and so does a name like home.dyn.route64.org.

An API for the rest

Keys you create in the manager, for dyndns2, DynDNS hosts, reverse DNS, DNS zones and a PeeringDB-compatible API.

Every feature, in detail

The full spec sheet for each service, taken from the platform itself.

IPv6 tunnelbroker

running now 8,039 tunnels

Addresses

Transfer net
An IPv6 /64 per tunnel. Our router is ::1, you are ::2.
Your network
One routed /56 per tunnel, routed to your ::2. Need another /56? Open another tunnel.
IPv4
Not part of the tunnelbroker. For IPv4 addresses, see Static IP.
Reverse DNS
Set for both ends automatically: tb<id>-gw and tb<id>-cus.customer.route64.org.

Your endpoint

Address
Your public IPv4 or IPv6 address. Private ranges are refused.
Over IPv6
WireGuard or EoIP. Over IPv4, all six protocols.
No fixed IP
WireGuard works without an endpoint, from a laptop, a phone or behind CGNAT.
Dynamic IP
dyndns2 at /nic/update moves the tunnel to your new address: username plus API key, at most one change per 10 minutes.

Setup

Configs
Copy-paste for Linux, RouterOS, OpenWrt, Cisco IOS-XE and Arista EOS, depending on the protocol. IPv6 default route included.
WireGuard
A .conf file and a QR code for your phone.
MTU
A sensible default per protocol, adjustable from 1280 to 1480.

In the manager

Traffic
Graphs from 5-minute samples, kept 7 days in full and 90 days hourly.
Link state
Tunnel up or down, and the WireGuard handshake.
Changes
New endpoint, new MTU, or rebuild the tunnel, yourself.

Tunnel protocols

Which protocol works for which service, over which endpoint, and which configs you get.

ProtocolMTUIPv6 tunnelbrokerStatic and anycastBGP tunnelConfigs
over IPv4over IPv6over IPv4over IPv6
WireGuard1420yesyesyesyesyesLinux, RouterOS, OpenWrt, QR
GRE1476 / 1456yes-yesyesyesLinux, RouterOS, OpenWrt, Cisco, Arista
SIT (6in4)1480yes-IPv6 only-yesLinux, RouterOS, OpenWrt, Cisco
VXLAN1450 / 1430yes-yesyesyesLinux, RouterOS, OpenWrt, Cisco, Arista
L2TPv31458 / 1438yes-yesyesyesLinux, RouterOS, OpenWrt, Cisco
EoIP1458 / 1444yesyesyesyesyesRouterOS

MTU over an IPv4 / IPv6 endpoint. Every value can be changed per tunnel.

17 PoPs, four lines

IPv6, static and anycast tunnels at 17 PoPs, BGP at all 17, every one with the full table. Dublin, Johannesburg, Lisbon, Lagos and Sydney are not open yet.

Schematic map of the route64 network: 23 PoPs on four lines, Dallas closed, Dublin not open yet, Johannesburg not open yet, Lisbon not open yet, Lagos not open yet, Sydney not open yet Atlantic AucklandAKL AmsterdamAMS StockholmARN AshburnASH DallasDAL closed DublinDUB FrankfurtFRA FremontFRM JohannesburgJNB LilleLIL LisbonLIS LondonLON LagosLOS Kansas CityMCI MilanMXP NewarkNYC ParisPAR SandefjordSAN SingaporeSIN SydneySYD TokyoTYO TorontoYYZ ZurichZRH

Swipe to see the whole map.

Americas line Europe line Africa line Asia-Pacific line Long-haul line not open yet Schematic, heights follow latitude.
Good service on all lines.17 PoPs open. Dublin, Johannesburg, Lisbon, Lagos and Sydney are not open yet, Dallas is closed.

Americas line

Fremont to Newark

  • FremontFRM · USIXPs: FREMIX
  • Dallas ClosedDAL · US
  • Kansas CityMCI · USIXPs: F4IX, KCIX, SIX Seattle, SIX Seattle (Jumbo)Sponsored by F4 Networks
  • AshburnASH · USIXPs: NVIX
  • TorontoYYZ · CAIXPs: Ontario Internet Exchange
  • NewarkNYC · US

Europe line

Stockholm to Lisbon

  • StockholmARN · SE
  • SandefjordSAN · NOSponsored by Vanvik Internet
  • AmsterdamAMS · NLIXPs: 1-IX EU, AMS-IX, ERA-IX AMS, FogIXP Amsterdam and 5 more
  • Dublin Not open yetDUB · IE
  • LondonLON · GBIXPs: GNM-IX, LONAPSponsored by cilix.cloud
  • LilleLIL · FRIXPs: France-IX LilleSponsored by Virtua.Cloud
  • ParisPAR · FRIXPs: France-IX Paris, NINE-IXSponsored by MilkyWan, DYJIX and Virtua.Cloud
  • FrankfurtFRA · DEIXPs: ERA-IX FRA, FogIXP Amsterdam, FogIXP Frankfurt, MAINPORTSponsored by ESEVEN DevOps and level66.network
  • ZurichZRH · CHIXPs: CHIX-CH, FogIXP Zurich
  • MilanMXP · ITIXPs: MINAP, NINE-IX
  • Lisbon Not open yetLIS · PT

Africa line

Lagos to Johannesburg

  • Lagos Not open yetLOS · NG
  • Johannesburg Not open yetJNB · ZA

Asia-Pacific line

Singapore to Auckland

  • TokyoTYO · JP
  • SingaporeSIN · SG
  • Sydney Not open yetSYD · AU
  • AucklandAKL · NZ

How far your routes reach

Transit from Arelion, a Tier 1 network, and 19 more upstreams. Peering at 27 internet exchanges in 11 cities, plus direct sessions with 9 networks.

bgp.tools ranks AS212895

  1. #3Known peersin Germany
  2. #6AS conein Germany
  3. #60Known peersworldwide

As of 26 October 2026. AS212895 on bgp.tools

Transitupstream

  • ArelionAS1299Tier 1IPv4 and IPv6, at Amsterdam and Frankfurt
  • Hurricane ElectricAS6939IPv6, at Amsterdam and Paris

And 18 more upstream networks, according to bgp.tools. See them on bgp.tools

Peeringsame level

27 internet exchanges in 11 cities. Each PoP's exchanges are in the station index.

Route servers at 1-IX EU, France-IX Lille, France-IX Paris and NINE-IX.

Direct sessions with Akamai Technologies, Cloudflare, Core-Backbone, dcent, Hetzner Online, Hurricane Electric, Init7, Sky Broadband and Verisign.

2,715 known peers in total, according to bgp.tools.

Customersdownstream

315 networks use AS212895 as an upstream, and 350 ASNs are in its customer cone, according to bgp.tools.

What runs without you

No tickets and no one typing commands. These jobs run on their own, for every customer.

On every change

Routers configured and checked

Written the moment you save, then read back. If a router is unhealthy, the change waits and replays once it recovers.

Every 2 minutes

Sessions watched

Session state every 2 minutes, received routes every 15. Alerts show up in the manager.

Every 10 minutes

Reverse DNS synced

Your PTR records go out to our nameservers within minutes.

Every 4 hours

Static routes checked

Routed subnets are compared with the routers, and any difference goes to our team.

Every 6 hours

Prefix lists rebuilt

Your AS-SET is expanded again. Routers get it twice a day, or right away when you click update.

Every hour

You join our AS-SET

Every ASN with an active transit session is added to our AS-SET in the RIPE database.

Every morning

Upstreams told

New customer prefixes go to our upstream providers at 07:00, so their filters let you through.

Every night

Max-prefix kept current

Your limits follow your PeeringDB entry and are checked again every night.

News

Deploys, new PoPs and planned work. Every post also goes to Discord and Telegram.

All news
  1. New manager version has been deployed (d0c95d94)
  2. New manager version has been deployed (57077b93)
  3. Inbound mail to your Route64 addresses now works on ports 25 / 2525 (and 465 / 587)
  4. E-Mail submission to all major providers and relay services (Gmail, Microsoft 365, Yahoo, iCloud, Amazon SES, SendGrid, Mailgun, …) works on ports 587 / 465 / 2525

Kept free by partners

These networks give us transit, ports, rack space and hardware.

Hurricane ElectricIP transit F4 NetworksSponsors Kansas City Virtua.CloudSponsors Lille, Paris MilkyWanSponsors Paris cilix.cloudSponsors London level66.networkSponsors Frankfurt ServergurusLIR services ERA-IXInternet exchange SmartnetIP transit MacarneIP transit LakeNetworksCloud, colocation Piter-IXInternet exchange 1-IXInternet exchange DYJIXSponsors Paris ESEVEN DevOpsSponsors Frankfurt NINEInternet exchange iFogIP transit, BGP VPS GetVPS.netBGP VPS Vanvik InternetSponsors Sandefjord Amsterdam Internet Exchange B.V.Internet exchange

And by people like you

Supporters and donations cover the running costs: colocation, ports and hardware.

DonateBecome a supporter

Your first tunnel is a few minutes away.

Free and self-service, from sign-up to a running tunnel.

Create free account