Operate an Awala VPN tunnel
Configure your website as an Awala VPN tunnel and earn $0.15 per gigabyte!
Sign up
To get started, you’ll have to sign up as an individual or organisation on our partners portal (to be released in early 2025), and undergo a screening process by Stripe Connect.
You’ll be able to add websites to your account as soon as you’re approved by Stripe.
Reverse proxy configuration
You basically need to configure a reverse proxy at a randomly generated path in your existing web server configuration file.
For example,
an existing Nginx server {...}
block for example.com
could host a tunnel under https://example.com/<random-path>
with the following configuration:
location /<random-path> {
proxy_pass https://singapore.vpn-shields.awala.app;
# Enable WebSockets
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
access_log off;
}
We will provide the configuration for all major web servers.
Eligible traffic
We will pay the same rate for all the inbound and outbound traffic relayed by your tunnel. Specifically, we will pay for the payload in HTTP requests and responses, as well as the WebSockets messages. Overhead, such as TLS handshakes and HTTP headers, will be excluded from these calculations as we are unable to calculate it accurately.
Only traffic driven by legitimate Awala VPN clients will be eligible for payment.
Variable rates
We will pay a flat $0.15/GB for at least the first six months after the launch of Awala VPN.
Afterwards, the payout will vary by website, and we’ll offer between $0.10 and $0.15 per gigabyte, depending on factors such as:
- Server location.
- Domain name age.
- Bandwidth metrics (e.g. downlink, uplink, latency).
- Recent uptime.
- Having legitimate content that would plausibly explain its traffic patterns.
- Being actively maintained with regular content updates.
- Having organic search engine traffic and/or a legitimate user base.
Trivial or placeholder websites will be paid on the lower end of the scale, if accepted at all.
We will give tunnel operators a 30-day notice before the new rates come into place.
Requirements
Confidentiality
Tunnel operators MUST NOT disclose to any third party that they are operating an Awala VPN tunnel, except for third parties that are necessary to operate the tunnel.
Residency
We impose the following residency requirements for the safety of our users and tunnel operators. Note that these requirements only refer to the country of residence of the operator, not their citizenship(s) or nationality(s).
All parties involved in the operation of the server hosting the tunnel MUST reside in one of the eligible jurisdictions. In the case of an organisation, it MUST be headquartered in one of the eligible jurisdictions; additionally every individual or organisation with significant control over the organisation MUST meet these residency requirements, unless the organisation is a public company.
For the avoidance of doubt, this requirement applies to in-house staff and freelancers responsible for the operation of the server, as well as the hosting provider and any reverse proxy providers.
Examples of eligible operators include:
- An individual who resides in the European Union and runs the tunnel on a DigitalOcean server in Singapore.
- A US-headquartered startup, founded by UK residents, with a Board of Directors made up of US and UK residents, hosting the tunnel on an Google Cloud Platform server in Australia.
- A Russian national who resides in the UK and runs the tunnel on an Amazon Web Services server in the US.
Examples of ineligible operators include:
- A resident of Russia.
- A company incorporated in Hong Kong.
- A UK-headquartered company with a member of the Board of Directors residing in China.
- A company intending to host the tunnel on Alibaba Cloud (a Singapore-headquartered subsidiary of a Chinese company).
- An individual intending to run the tunnel on a Microsoft Azure server in Hong Kong.
US compliance
As a US-headquartered company, we are unable to accept any operators subject to US sanctions, embargoes, or other regulatory restrictions. This includes entities or individuals from regions that are under US sanctions, as well as those listed by the Office of Foreign Assets Control (OFAC).
Technical requirements
- The server(s) MUST support TLS 1.2 or newer. SSL and older versions of TLS MAY be supported, although doing so is highly discouraged for security reasons.
- If supported, cleartext requests MUST unconditionally redirect to HTTPS.
- The server(s) MUST NOT log anything that could be used to identify the clients connected to the tunnel (e.g. IP addresses, timestamps). This requirement extends to any reverse proxies.
- The server(s) hosting the tunnel MUST be physically located in one of the eligible jurisdictions.
- The website’s domain name MUST have been registered for more than 365 days.
Content requirements
The website MUST NOT host political, religious, or adult content. This is to prevent the website from being blocked by the censorship system (e.g. the Great Firewall of China), regardless of its use as an Awala VPN tunnel.
Eligible jurisdictions
Tunnels MUST be fully operated within the following jurisdictions:
- Australia.
- Barbados.
- Canada.
- Chile.
- Costa Rica.
- European Economic Area countries (i.e. European Union member states, Iceland, Liechtenstein, and Norway).
- Japan.
- New Zealand.
- Singapore.
- South Korea.
- Switzerland.
- Taiwan.
- The United Kingdom, and British Overseas Territories.
- The United States of America, and US territories.
- Uruguay.
The jurisdictions above were chosen based on their ratings on the WJP Rule of Law Index and Freedom in the World report.