Pricing
Managed plans
rstream edge network with hosted tunnels, dashboard, API, and analytics.
Basic
Ideal for individuals and small projects. Securely expose resources with basic requirements.
Free
- HTTPS tunnels
- WebSocket support
- rstream WebTTY
- Token-protected access
- 1 GB bandwidth per month
- 2 simultaneous tunnels
Pro
Designed for small teams requiring full protocol support, strong security controls, and support.
$99 / month
- Private tunnels
- TLS, QUIC and DTLS endpoints
- rstream Auth (interactive HTTP auth)
- Challenge mode (HTTP)
- Fine-grained access tokens
- IP and Geo access policies
- Analytics
- Email support
- 50 GB bandwidth per month
- 50 simultaneous tunnels
Enterprise
For organizations requiring isolated infrastructure, no quotas, and enterprise-grade security controls.
Custom
- Dedicated isolated infrastructure
- Unlimited bandwidth
- Unlimited tunnels
- User-controlled encryption
- Key-based authentication
- Dedicated support
Prices are listed in US dollars. Applicable taxes may be added. Invoices are provided in dashboard after purchase. Subscriptions may be cancelled at any time.
Self-hosted option
Run the rstream engine community edition in your own infrastructure.
Self-hosted
Free community edition. Run and operate the rstream engine community edition (CE) with no hosted dashboard, analytics, or managed support included.
Free
Compare plans
High-level feature differences across tunnels plans.
| Feature | Basic |
|---|---|
Outbound-only connectivity No inbound ports or public IPs required. | Yes |
Zero-trust edge enforcement Consistent identity, encryption, and policy enforcement across HTTP, TLS, QUIC, and DTLS. | Yes |
Identity-based access Use rstream Auth, scoped tokens, or mutual TLS to gate access at the edge. | Yes |
Managed platform Hosted control plane with API and management dashboard. | Yes |
Workspace collaboration Shared projects for users in the same workspace. | Yes |
Infrastructure Hosting model and ownership. | Shared / managed |
Support Support level included with the plan. | No |
Public tunnels Internet-facing tunnels with a public endpoint. | Yes |
Private tunnels Unpublished tunnels for remote access to SSH, dashboards, homelabs, and internal services. | No |
Bytestream tunnels Stream-oriented tunnels for HTTP/TLS and TCP-like protocols. | Yes |
Datagram tunnels UDP-like tunnels (datagram transport). | No |
HTTPS tunnels Public HTTP tunnels with edge TLS (HTTPS). | Yes |
TLS tunnels Published TLS endpoints with terminated or passthrough mode. | No |
QUIC / DTLS tunnels Published QUIC and DTLS endpoints. | No |
WebSocket support WebSocket upgrade over HTTP tunnels. | Yes |
rstream WebTTY Identity-aware browser terminal access and remote control over tunnels for servers and devices. | Yes |
Token auth (HTTP) Require scoped access tokens for identity-based access on HTTP tunnels. | Yes |
rstream Auth (HTTP) Browser-based identity and access for human or operator HTTP access. | No |
Challenge mode (HTTP) Additional auth challenge on HTTP tunnels. | No |
HTTP/3 upstream HTTP/3 upstream support. | No |
Least-privilege tokens Scoped tokens with granular permissions for discovery, creation, and access. | No |
IP/Geo restrictions Trusted IP ranges or country allow/deny policies. | No |
User-controlled encryption Customer-managed encryption controls for tunnel traffic and sensitive data paths. | No |
Key-based authentication for rstream clients Authenticate rstream clients using cryptographic keys instead of shared tokens. | No |
Analytics Tunnel analytics and log retention. | 1 day retention |
Monthly bandwidth Plan quota used in hosted usage. | 1 GB / month |
Managed STUN / TURN Hosted STUN discovery and TURN relay service for WebRTC and ICE connectivity. | 1 GB / month |
Simultaneous tunnels Max tunnels per project. | 2 tunnels |
| Feature | Basic | Pro | Enterprise | Self-hosted (CE) | |
|---|---|---|---|---|---|
Outbound-only connectivity No inbound ports or public IPs required. | Yes | Yes | Yes | Yes | |
Zero-trust edge enforcement Consistent identity, encryption, and policy enforcement across HTTP, TLS, QUIC, and DTLS. | Yes | Yes | Yes | Yes | |
Identity-based access Use rstream Auth, scoped tokens, or mutual TLS to gate access at the edge. | Yes | Yes | Yes | Yes | |
Managed platform Hosted control plane with API and management dashboard. | Yes | Yes | Yes | No | |
Workspace collaboration Shared projects for users in the same workspace. | Yes | Yes | Yes | No | |
Infrastructure Hosting model and ownership. | Shared / managed | Shared / managed | Dedicated / managed or on-premise | Self-hosted | |
Support Support level included with the plan. | No | Email support | Dedicated support | No | |
Public tunnels Internet-facing tunnels with a public endpoint. | Yes | Yes | Yes | Yes | |
Private tunnels Unpublished tunnels for remote access to SSH, dashboards, homelabs, and internal services. | No | Yes | Yes | Yes | |
Bytestream tunnels Stream-oriented tunnels for HTTP/TLS and TCP-like protocols. | Yes | Yes | Yes | Yes | |
Datagram tunnels UDP-like tunnels (datagram transport). | No | Yes | Yes | Yes | |
HTTPS tunnels Public HTTP tunnels with edge TLS (HTTPS). | Yes | Yes | Yes | Yes | |
TLS tunnels Published TLS endpoints with terminated or passthrough mode. | No | Yes | Yes | Yes | |
QUIC / DTLS tunnels Published QUIC and DTLS endpoints. | No | Yes | Yes | No | |
WebSocket support WebSocket upgrade over HTTP tunnels. | Yes | Yes | Yes | Yes | |
rstream WebTTY Identity-aware browser terminal access and remote control over tunnels for servers and devices. | Yes | Yes | Yes | Yes | |
Token auth (HTTP) Require scoped access tokens for identity-based access on HTTP tunnels. | Yes | Yes | Yes | Yes | |
rstream Auth (HTTP) Browser-based identity and access for human or operator HTTP access. | No | Yes | Yes | No | |
Challenge mode (HTTP) Additional auth challenge on HTTP tunnels. | No | Yes | Yes | No | |
HTTP/3 upstream HTTP/3 upstream support. | No | Yes | Yes | No | |
Least-privilege tokens Scoped tokens with granular permissions for discovery, creation, and access. | No | Yes | Yes | No | |
IP/Geo restrictions Trusted IP ranges or country allow/deny policies. | No | Yes | Yes | No | |
User-controlled encryption Customer-managed encryption controls for tunnel traffic and sensitive data paths. | No | No | Yes | No | |
Key-based authentication for rstream clients Authenticate rstream clients using cryptographic keys instead of shared tokens. | No | No | Yes | No | |
Analytics Tunnel analytics and log retention. | 1 day retention | 30 days retention | Custom | No | |
Monthly bandwidth Plan quota used in hosted usage. | 1 GB / month | 50 GB / month | Unlimited | N/A | |
Managed STUN / TURN Hosted STUN discovery and TURN relay service for WebRTC and ICE connectivity. | 1 GB / month | 50 GB / month | Unlimited | N/A | |
Simultaneous tunnels Max tunnels per project. | 2 tunnels | 50 tunnels | Unlimited | N/A | |
Frequently asked questions
Can’t find the answer you’re looking for? Reach out to our customer support.