RINGLINK EDGE DOCUMENTATION

Connect, secure and operate your applications

Configure application access, retain TLS and authentication, and follow Kubernetes or MCP resource-management patterns

Get ready in four steps

Choose a plan for your application

Choose Global Accelerator for application delivery or Shield Aegis for higher mitigation capacity. For HTTP/HTTPS, select Vector Prime, Vector Apex or any Shield Aegis plan. Shared Vector Launch and Vector Scale provide TCP with optional UDP

Choose the protocol and entry port

Select a protocol supported by your plan and an assigned or available custom port. Review any selected add-ons and the included monthly transfer

Set the entry point and origin

Choose TCP or UDP, set the public listening port, and enter your origin server address and service port. The public and origin ports can be configured separately

# Vector Prime with UDP: USD monthly add-on $99
Protocol:        UDP
Edge Listener:   198.51.100.42:30000-30005
Origin Target:   203.0.113.88:30000-30005
Applications:    1 of 5

Check the connection and secure the origin

Test your application through RingLink Edge. Configure origin firewall allowlists to control direct access, and retain TLS and application authentication

CONNECT AND MANAGE

Your services. Your way of working

Connect TCP/UDP and HTTP/HTTPS services and manage application resources across your deployment workflow

Connection and resource settings

Protocol: TCP or UDP, per application
Public port: Assigned port or plan-supported custom port
Origin: Publicly reachable IP or hostname + port
Proxy Protocol: Off for an unmodified service

Run your service on the configured origin port, then enter its address and matching TCP or UDP protocol. Port choices and application counts follow your plan
For a TCP game server, enable Proxy Protocol v1 or v2 only when the server or its supported adapter can parse that version. Otherwise keep it off
For UDP, v2 adds metadata to the first datagram of a stream; Simple Proxy Protocol adds a 38-byte header to every datagram and requires matching reply headers. Use a compatible origin; ordinary UDP services keep it off

Use your own domains, addresses, ports and resource IDs in these configuration examples

Configuration examples

textTCP game service · port mapping

TCP  game.example.com:25565  →  203.0.113.10:25565

textUDP voice or game service · port mapping

UDP  voice.example.com:27015  →  203.0.113.11:27015

Prepare your origin for the edge

Keep the settings that secure your application, and make the edge entry point easy for clients to use

Keep application authentication and encryption

Use your application's existing security controls, such as TLS certificates, SSH keys, and game or voice session tokens. Network-layer protection works alongside them

# SSHd Origin Hardening Example
PasswordAuthentication no
PermitRootLogin prohibit-password
PubkeyAuthentication yes

Give clients a hostname

A Dedicated IP is allocated to your service. Use a hostname for client connections and configure the appropriate A or AAAA record for your address

# Point your hostname to the assigned IP
app.example.com.  300  IN  A     198.51.100.42
app.example.com.  300  IN  AAAA  2001:db8::42

Choose the access mode for your application

TCP/UDP pass-through operates at L4. HTTP/HTTPS access is available only on dedicated IP plans: Vector Prime, Vector Apex and all Shield Aegis plans. Native HTTP/HTTPS access can use an L7 processing path. Web traffic uses TCP and needs no UDP add-on; WAF and caching require separate configuration

TCP / UDP pass-through → L4 → Origin
HTTP / HTTPS: dedicated IP plans only
Native HTTP / HTTPS → L7 → Web origin
HTTP / HTTPS uses TCP; no UDP add-on required

Common questions about plans and billing

What is included in the free plan?

Vector Launch includes one TCP application, an assigned port, 20 GB of monthly transfer and 100 Gbps DDoS protection at no base charge. Optional UDP, a custom port and transfer above the monthly allowance are billed at the displayed rates

Will Vector Launch automatically become a paid plan?

No. Vector Launch has a $0 monthly base fee. You choose whether to add paid options or upgrade. Free slots are available first come, first served, and additional transfer is billed at the displayed rate

How is monthly transfer calculated?

We combine upload and download traffic across the applications in your service. Units are decimal: 1 GB is 1,000,000,000 bytes and 1 TB is 1,000 GB. Additional charges apply to the amount above your included allowance at your plan's per-GB rate

How do Vector Prime's five applications cover up to 30 ports?

Each of the five applications can use one port or a range of up to six consecutive ports. Five six-port ranges cover 30 ports in total. Five separate single-port applications cover five ports

What protection capacities can I choose?

Global Accelerator includes 100, 200, 300, or 800 Gbps by plan. Aegis Core provides 600 Gbps, Aegis Prime 1 Tbps, Aegis Apex up to 3.2 Tbps, and Aegis Sovereign at least 20 Tbps. The USD price list sets additional transfer at $0.15/GB on Core, Prime, and Apex; Sovereign is unmetered on a best-effort basis

How does RingLink serve China and international markets?

China Network (Partner) serves China access, while RingLink’s global network connects international markets. Advanced coverage excludes mainland China; choose the service coverage that matches your deployment

How does annual billing work?

Annual subscriptions are charged for the full year. Transfer allowances and additional usage are calculated monthly at the displayed rate

Which plans support HTTP and HTTPS?

HTTP/HTTPS is available only on dedicated IP plans: Vector Prime, Vector Apex and every Shield Aegis plan. Shared-IP Vector Launch and Vector Scale provide TCP with optional UDP, without HTTP/HTTPS access. HTTP/HTTPS uses TCP and does not require the UDP add-on

Can my application receive the original client IP?

A compatible origin can receive client IP and port information through Proxy Protocol. v1 supports TCP; v2 supports TCP and UDP. UDP services can also use Simple Proxy Protocol (SPP), which requires the origin to parse SPP and wrap its replies. Keep this off for ordinary game servers unless they support the chosen format

What does intelligent protection mean?

Intelligent protection means always-on, automated mitigation of network-layer attacks, including floods and connection attacks. Combine edge protection with your configured origin allowlists, application TLS and authentication to protect service availability and access

How does MCP fit into Agent deployment workflows?

Use a resource-management workflow with Claude Code, Codex or OpenCode: identify the origin, create or associate an application, retain its resource ID, then inspect status and update the origin during releases. The examples below describe the tool inputs and authorization boundaries

Calculate monthly pricing →