Plus
$2/mo
- 1 dedicated IP address
- 10 devices
- 5 open ports
- 100 GBbandwidth
- 20 Mbpsspeed
Running a service at home? CGNAT blocks incoming connections, and a changing IP makes your server harder to reach. GetAStatic gives your server, router, or device its own dedicated static public IPv4 address over WireGuard, with ports you can open to the Internet. From $2/mo.
Updated
Many ISPs now put homes behind CGNAT. Your router shares one public address with other customers, so port forwarding on the router does nothing. See how to escape CGNAT.
If you do have a public IP, it often changes. Dynamic DNS follows it, but links break each time it changes. Most ISPs sell a static IP only on business plans. Tunnel services make you reachable, but add their own limits: web traffic only, bandwidth caps, rules about video, or an address you share (Cloudflare Tunnel is one example).
Plus for light use, Pro for most people, Ultra for full gigabit.
5× speed · 10× bandwidth · 2 IPs — only $2/mo more
Pricing based on crypto.
GetAStatic gives you a dedicated public IPv4 in Kansas City, Missouri or San Jose, California and a WireGuard config. Run the config on the machine that hosts your apps, or on your router. Open the ports that each app needs on the dashboard. People connect to your IP, and the tunnel brings them to your home.
It is a VPN too: the outbound traffic of that device also leaves from the same IP. Select your app below for its ports and setup steps.
On Unraid, Proxmox or TrueNAS, run WireGuard on the host, or in a container with host networking, so that inbound traffic reaches your apps. One config gives one IP to one tunnel. To run several web apps, such as Nextcloud and a dashboard, on one IP, put a reverse proxy (Nginx Proxy Manager, Caddy or Traefik) on ports 80 and 443 and let it send each name to the correct app.
The same steps work for most apps. Only the ports change.
| Port | Protocol | Used for |
|---|---|---|
| 443 | TCP | Reverse proxy for Nextcloud and other web apps |
| 32400 | TCP | Plex |
| 8123 | TCP | Home Assistant |
| 25565 | TCP | Minecraft Java server |
| 22 | TCP | SSH |
Plus lets you open 5 open ports per IP. Pro and Ultra have unlimited open ports. A range counts as its size.
Usually CGNAT: your router has no public address, so a port forward never sees outside traffic. Your static IP comes in through the tunnel instead. To find the cause on your line, see port forwarding not working?.
Yes. Run WireGuard on the host, in a VM, or in a container with host networking. Inbound traffic arrives where the tunnel runs, so the apps must be reachable from there. One config is one IP for one tunnel.
Only to put several web apps on ports 80 and 443 of one IP, or to get HTTPS by name. Apps on their own ports, such as Plex, game servers or SSH, need only an open port.
Yes. Outgoing port 25 is blocked until you unlock it ($25 one-time per IP). A custom hostname (reverse DNS) costs $5 one-time. Open ports 25, 587 and 993 for inbound mail and your users.
Only the ports that you open are reachable, and every new IP starts with all of them closed. Open only what each app needs, keep the apps up to date, and use a reverse proxy with HTTPS for web apps.
Have more questions? See the full FAQ →