Escape CGNAT with your own public IPv4

GetAStatic gives you a reachable static IP + VPN so you can host services and accept inbound connections even when your ISP uses CGNAT.

Instant setup US-based IPv4 Cancel anytime
Get started
Why use GetAStatic?

VPN with static IP.

  • Port-forward any service — run a game server, NAS, or home lab from behind CGNAT
  • Accept inbound connections without dynamic DNS or changing IPs
  • Fixed outbound IP for allowlists and access control rules
  • Works on any device with a WireGuard client
How it works

Online in four steps.

01

Choose a Plan

Starting at $2/mo.

02

Install WireGuard

Download the app for your device. wireguard.com/install

03

Download your config

Import it into any WireGuard client on any device.

04

Connect

Open WireGuard, tap connect, and you're online through your own IPv4.

Pricing
Instant Activation
Basic
$2/mo
  • 1 private IPv4 address
  • 1 device extras $2/mo
  • Inbound + outbound access
  • 1 open port
  • 10 GB bandwidth
Instant Activation
Plus
$4/mo
  • 1 private IPv4 address
  • 1 device extras $2/mo
  • Inbound + outbound access
  • 5 open ports
  • 1 TB bandwidth
Instant Activation
Pro
$10/mo
  • 2 private IPv4 addresses
  • 2 devices extras $2/mo
  • Inbound + outbound access
  • Unlimited open ports
  • 10 TB bandwidth
Add-ons, per deviceCustom hostname $5·Extra device & IPv4 $2/mo·SMTP $25
FAQ

Questions, answered.

01What is CGNAT and why is it a problem?

Carrier-grade NAT (CGNAT) means your ISP assigns one public IP address to many customers at once. You share it, so there is no way to receive inbound connections or open ports — services like game servers, home labs, remote desktop, or self-hosted apps simply cannot be reached from the internet.

02How does GetAStatic fix this?

GetAStatic gives you a dedicated static public IPv4, tunneled to your device over WireGuard. Your device connects outbound to GetAStatic's node, and all inbound traffic to your public IP is forwarded through the tunnel to you — bypassing CGNAT entirely.

03Do I need a VPS or any server to run this?

No. GetAStatic handles the server side. You only need the WireGuard client installed on your device and the config file GetAStatic generates for you. There is nothing else to manage.

04Will this work with my router or device?

Yes. WireGuard runs on Linux, Windows, macOS, iOS, Android, and most router firmware (OpenWrt, pfSense, OPNsense, and others). If your device can run WireGuard, it works with GetAStatic.

05What is GetAStatic?

GetAStatic gives you a permanent public IPv4 address, and a VPN to handle the traffic. No server to manage, and it works on any device.

06What can I use it for?

Use it to escape CGNAT, self-host services, reach home or office devices remotely, whitelist a stable IP for work tools, secure traffic on public Wi-Fi, or keep the same endpoint while traveling.

07What do I need to get started?

Create your GetAStatic account, install WireGuard (wireguard.com/install) on your device, then download your WireGuard config. We handle everything else.

08What options are available?

• Extra Devices Each device has its own tunnel with its own dedicated IPv4 for a flat $2/mo, sharing your account's plan and bandwidth. Devices added mid-cycle are prorated so the whole account renews on one date. Unlockable options (per device): • Outgoing SMTP ($25) • Custom hostname ($5)

0930-day money-back guarantee

If you're not happy within the first 30 days, we'll refund you in full. No hoops. Just email support@getastatic.com.

Have more questions? See the full FAQ →