Introducing STUNner 2.0

One port.
Every call.STUNner, the Kubernetes media gateway for real-time communications

WebRTC, VoIP and live video on Kubernetes, behind a single public port. Now quantum-ready.

Start free Compare plans

10,001 open ports

Real-time media servers usually need a whole UDP port range open to the internet.

STUNner replaces it with a single public port.

Behind that port, media servers are ordinary Kubernetes pods.

WebRTC

TURN for your media servers

Deploy containerized WebRTC services into Kubernetes and get its lifecycle management for free.

VoIP beta

SIP calls on one port

Ingest VoIP calls into a Kubernetes cluster over a single RTP/UDP port.

SRT beta

Live video that autoscales

Match live video publishers with readers and let Kubernetes autoscale your SRT media server pool.

Your media plane, finally cloud native. Scale it with the Horizontal Pod Autoscaler. Configure it with the Gateway API. Monitor it like everything else. Stop paying for someone else's TURN.

Quantum-ready.

Encrypted traffic can be recorded today and stored for later.

A large quantum computer could open classical encryption after the fact.

Connections secured by STUNner 2.0 stay sealed.

TLS listeners prefer or enforce a post-quantum key exchange, set per Gateway. Available on the Member and Enterprise plans.

Member and Enterprise

Built for running real-time media in production.

The open-source gateway gets you started. The paid plans add the protection and deployment options you need once real traffic arrives.

User quotas

TURN credentials live in the browser, so they leak. Cap how many allocations one credential can hold, and a leaked one can't be used to flood your relays.

Custom external address

Running STUNner as a public TURN server? Each TURN server advertises the public IP of its node as the relay address, so peers outside the cluster can reach it.

One dataplane pod per node

Run a gateway as a DaemonSet. No port clashes, no anti-affinity workarounds, no babysitting replica counts.

High-availability operator

Run several operator replicas, one active and the rest hot standbys. Your gateways keep receiving their configuration when a node or the operator goes down.

Dual-stack IPv4/IPv6

TURN servers relay over IPv4 and IPv6 alike, so clients on IPv6-only mobile networks connect directly.

Kernel offload

10Gbps

eBPF kernel offload relays plaintext UDP flows at up to 10 Gbps per CPU core.

Add cores and keep going: beyond 100 Gbps from a single Linux server.

TURN channels, plain UDP, SIP media and SRT streams. 10 offloaded flows on Free, 100 on Member, unlimited on Enterprise.

Start free. Upgrade when you scale.

Every plan runs the same gateway. Paid plans unlock premium features and higher limits with a license key.

Free

Open source, for home users and small-scale deployments.

€0

  • Full Kubernetes integration with the Gateway API
  • Expose media servers on one UDP port
  • Independent NAT traversal
  • Unlimited TURN Gateways and allocations
  • 1 SIP and 1 SRT Gateway (beta)
  • 10 kernel offloads
  • Community support on Discord
Install for free

L7mp Member

For growing real-time communication providers.

€500

  • Everything in Free, plus
  • User quotas
  • Custom external address
  • DaemonSet deployments
  • Post-quantum TLS encryption
  • High-availability operator
  • Dual-stack IPv4/IPv6
  • 3 SIP and 3 SRT Gateways (beta)
  • 100 kernel offloads, 10× Free
  • Priority issue handling and consulting
For large-scale deployments

L7mp Enterprise

For production-critical deployments, with the limits removed.

€5,000

  • Everything in Member, plus
  • Unlimited kernel offload
  • Unlimited TURN, SIP and SRT Gateways
  • Unlimited calls and streams
  • Priority issue handling and consulting

Monthly and annual billing. Prices do not include VAT. Terms and Conditions apply. Planning something bigger? Talk to us.

Complete checkout

Please confirm the following to continue to payment with Stripe.
Compare plans
LimitsFreeMemberEnterprise
TURN Gateways and allocationsUnlimited on every plan.UnlimitedUnlimitedUnlimited
SIP Gateways (VoIP, beta)The number of SIP Gateways STUNner serves in a Kubernetes cluster.13Unlimited
Concurrent callsThe concurrent calls of a SIP Gateway.10100Unlimited
SRT Gateways (beta)The number of SRT Gateways STUNner serves in a Kubernetes cluster.13Unlimited
Concurrent streamsThe concurrent streams of an SRT Gateway. A stream counts once, however many publishers and readers it has.10100Unlimited
Kernel offloadsThe flows a dataplane pod relays in the kernel at a time. TURN, SIP, SRT and plain UDP flows share this one limit; further flows are relayed in user space as usual.10100Unlimited
Premium featuresFreeMemberEnterprise
User quotasLimit the TURN allocations a single credential may hold at a time, so a leaked credential cannot exhaust your gateway.–
Custom external addressTURN servers advertise the public IP of their node as the relay address, so STUNner can act as a public TURN server.–
DaemonSet deploymentsRun a gateway as a DaemonSet, one pod on every node, instead of a Deployment.–
Post-quantum TLS encryptionTLS listeners prefer or enforce a post-quantum key exchange, set per Gateway.–
High-availability operatorSeveral operator replicas, one active and the rest hot standbys, so gateways keep their configuration when a node or the operator goes down.–
Dual-stack IPv4/IPv6TURN servers relay over IPv4 and IPv6 alike.–
SIP and SRT Gateways are in beta. Check the plan and limits a cluster runs at any time. 
$ stunnerctl license
License status:
  Subscription type: member

Install STUNner in one command.

Works with LiveKit, Janus, Jitsi, mediasoup and any standards-compliant WebRTC client. Your application code stays the same.

helm repo add stunner https://l7mp.io/stunner
helm install stunner stunner/stunner --create-namespace --namespace=stunner-system
Read the docs View on GitHub