1 connected server licence included per 20 seats. Extra connected servers €349/yr; fully air-gapped from €499/yr.
Run the tunnel server on your own machines while asd.host stays the control plane — developer authentication, seats, tokens, and the dashboard keep working.
No asd.host dependency at all. asd-tunnel verifies an Ed25519-signed licence fully offline — your own keys, your own network, no central control plane and none of the SaaS account features.
A private tunnel server operated by ASD exclusively for your organisation — dedicated capacity without running anything yourself.
Fair use applies only to our shared servers — on self-hosted and dedicated servers your licence tier and your hardware set the limits.
Connected self-host licenses are a derived entitlement — floor(seats ÷ 20). The control plane keeps running: auth, seats, tokens, dashboard.
Minimum spec: 2 vCPU · 2 GB RAM
Need more connected servers than your seats include? Add them at a flat annual price. Requires an active subscription.
Minimum spec: 2 vCPU · 2 GB RAM
Full sovereignty. asd-tunnel verifies an Ed25519-signed license entirely offline — single server, your keys, your network.
Minimum spec: 2 vCPU · 2 GB RAM
The sovereign cluster anchor. NATS clustering, session handover, and pub/sub messaging priced into the license — no subscription to attach the capability to.
Minimum spec: 3 × (1 vCPU · 1 GB), spread across hosts (anti-affinity)
Beta pricing — licence prices are committed for early customers. Larger or custom deployments: contact sales for a quote and PO.
Every licence is an Ed25519-signed JWT carrying capability claims the server enforces locally — no phone-home.
| Capability | Claim | What it gates |
|---|---|---|
| TURN / NAT traversal | turn = true | Included on every licence and plan — relayed traffic counts against your bandwidth. |
| NATS Clustering & Messaging | ha = true | Multi-server clustering, session handover, and pub/sub messaging. Connected servers: enable the add-on and your licences re-issue with ha = true. Air-gapped HA carries it in the licence. Without it, the cluster runtime refuses to start. |
Yes, by entitlement: every 20 seats include 1 connected server licence, recomputed the moment your seat count changes. Need more connected servers than your seats earn? Extra connected licences are €349/yr each. Fully air-gapped deployments (no control plane at all) are licensed separately at €499/yr (single server) or €1,499/yr (HA cluster).
Connected: developers sign in via asd.host (asd login) — the central control plane manages seats, tokens, and access. Air-gapped: there is no central control plane; the CLI authenticates against your own server with keys only, and the server validates its Ed25519-signed licence fully offline.
No. The license is a Ed25519-signed JWT verified locally against a public key embedded in the asd-tunnel binary. Air-gapped deployments are fully supported.
No — a single-server licence carries ha = false, and the cluster runtime refuses to start. Connected servers unlock clustering through the NATS Clustering & Messaging add-on: your licences re-issue with ha = true and gain NATS clustering, session handover, and pub/sub messaging. Air-gapped HA bakes ha = true into the licence itself.
Single server: 2 vCPU / 2 GB RAM. HA cluster: three instances of 1 vCPU / 1 GB each, spread across hosts (anti-affinity) so the HA promise holds. These published minimums keep comfortable memory headroom above your licensed connection cap.
After invoicing, you receive a downloadable license file. Drop it at /etc/asd-tunnel/license.key (or set ASD_LICENSE_FILE) and reload the server. Renewal regenerates the file with the new expiry — keep ahead of the 7-day grace period.
There is a 7-day soft grace period after the expiry date during which the server keeps running with a warning. After the grace period, new connections are rejected; in-flight sessions are not killed. Renewal hot-reloads on SIGHUP.
No, by default. Aggregated capacity reporting for support purposes is always opt-in, never on by default, and reviewed against GDPR before activation.
Yes. We pro-rate the difference and issue a new license file with the higher cap or capabilities. Drop in the file, send SIGHUP, the new claims apply immediately.
Need a custom configuration?
Contact Sales