Plus
$2/mo
- 1 dedicated IP address
- 10 devices
- 5 open ports
- 100 GBbandwidth
- 20 Mbpsspeed
Need to access your home computer from work or while traveling? GetAStatic gives it its own static public IP over WireGuard, even behind CGNAT or when your home internet IP changes. Connect using the same IP every time, from anywhere. Starting at $2/month.
Updated
Remote Desktop, SSH and VNC all need the home machine to accept an incoming connection. Usually you forward a port on the router to the PC. But if your ISP uses carrier-grade NAT (CGNAT), your router never gets a public address, so there is nothing to forward from.
Even without CGNAT, a home IP that changes every few days breaks saved connections, and dynamic DNS is one more thing that can fail the day you are away.
Plus for light use, Pro for most people, Ultra for full gigabit.
5× speed · 10× bandwidth · 2 IPs — only $2/mo more
Pricing based on crypto.
GetAStatic gives you a dedicated static IPv4 over WireGuard. The home machine, or your router, runs WireGuard and dials out to our node, which works through CGNAT. When you connect to YOUR-IP from outside, the connection comes down the tunnel to the machine.
The safest pattern opens one port only: your own WireGuard server, on the same machine that runs the GetAStatic tunnel. Your laptop connects to that, then uses Remote Desktop or VNC across it, so no login screen is ever on the internet.
Pick the ports for the tools you use, and open as few as you can.
| Port | Protocol | Used for |
|---|---|---|
| 51820 | UDP | Your own WireGuard server (recommended; reach RDP and VNC through it) |
| 22 | TCP | SSH (keys only) |
| 3389 | TCP | Windows Remote Desktop |
| 3389 | UDP | Remote Desktop, optional: smoother screen updates |
| 5900 | TCP | VNC |
An open RDP port is found and attacked with password guesses within hours. If you open 3389 anyway, use a long unique password, keep Network Level Authentication on, and sign in with a non-admin account. For SSH, turn off password login and use keys only.
Opening a port here is the same exposure as opening it on a router: anyone can reach it. What is safer is the pattern. Open only your own WireGuard server port and use RDP or VNC through it, so the login screen is never public.
Yes. It has to be running with WireGuard connected. Turn off sleep on it, because a sleeping machine cannot answer.
Yes. The home machine dials out to GetAStatic, so CGNAT on Starlink, 5G or LTE does not stop it. Nothing changes on the ISP side.
Yes. Run WireGuard on your router (OpenWrt, pfSense, OPNsense, MikroTik, GL.iNet) and point a port at each machine. Or give each machine its own IP: Pro includes 2, and extra IPs are $2/mo each.
Plus ($2/mo) is enough for two or three remote-access ports and light traffic. Choose Pro ($4/mo) if the same machine also hosts things that need more ports or data.
Have more questions? See the full FAQ →