Tuna has completed a major infrastructure overhaul, transitioning from a single-server architecture to a high-availability model. Previously, each tunnel was tied to a specific server, creating a single point of failure. The new system separates traffic entry points from tunnel nodes, distributing them across multiple data centers in Russia, Germany, and the Netherlands.
The updated architecture uses Envoy for TLS termination at entry points, which automatically route traffic to the nearest healthy node. If a tunnel node fails, clients automatically reconnect to another node within seconds. This change ensures that service disruptions at a single data center no longer impact tunnel availability.
The transition has eliminated the need for users to manually select regions for new tunnels. Free subdomains have been migrated to the a.tuna.free zone, while existing custom domains and reserved names remain supported. Users are advised to update their clients to version 0.28 or higher and switch from A-records to CNAME records to ensure full redundancy.
The migration was finalized on October 14, following a testing period and an acceleration of plans after infrastructure issues in October. During the final switch, total downtime for tunnels was limited to approximately five minutes. The service now supports HTTP and TCP tunnels, including WebSocket, HTTP/2, and SSE.
