Plus
$2/mo
- 1 dedicated IP address
- 10 devices
- 5 open ports
- 100 GBbandwidth
- 20 Mbpsspeed
GetAStatic runs a Tailscale exit node in your tailnet for $5/mo per IP address, on top of a plan from $2/mo. Select it on any Tailscale device, and that device reaches the internet from your static IP. You run no VPS and install no WireGuard app.
GetAStatic is not affiliated with Tailscale. Tailscale steps from Tailscale's own docs, checked 2026-10-27.
Updated
| Price | $5/mo | Per IP address, billed with that IP's renewal. The first charge is prorated from your credit balance. |
|---|---|---|
| In your tailnet | One machine, named after your IP, for example getastatic-203-0-113-10 | |
| Approval | A tailnet admin allows it as an exit node once, or an autoApprovers rule does it | |
| Devices | Any device with the Tailscale app: Windows, macOS, Linux, iOS, Android | |
| Removal | One link in the dashboard. Unused time goes back to your credit balance. |
Tailscale can send all internet traffic from a device through another machine in your tailnet, called an exit node. Websites then see the public IP of the exit node, not the IP of the network you are on.
Tailscale does not supply that machine. A home computer gives you your home IP, which can change, and the exit node stops when the computer sleeps. A VPS gives you a fixed IP, but you rent it, install Tailscale on it, patch it and keep it online.
Your own static IP over WireGuard. No VPS.
Dedicated IPv4 from $2/mo →The add-on puts one machine in your tailnet for you. It runs in an isolated container on our host and joins your tailnet with an auth key that you create. It appears with a name made from your IP, for example getastatic-203-0-113-10.
The machine sends exit traffic through its own WireGuard device on your static IP. Every Tailscale device that selects it reaches the internet from that IP, and the traffic counts against that IP's plan. Your devices keep the standard Tailscale app and nothing else.
You need admin rights on your tailnet for the approval step.
"tagOwners": {
"tag:getastatic": ["autogroup:admin"]
},
"autoApprovers": {
"exitNode": ["tag:getastatic"]
}Optional: add these entries to your tailnet policy file first, then generate the auth key with the tag tag:getastatic. Tailscale then allows the exit node without the manual step.
Plus for light use, Pro for most people, Ultra for full gigabit.
5× speed · 10× bandwidth · 2 IPs — only $2/mo more
No. Your devices run only the Tailscale app. The WireGuard tunnel to your static IP runs on our side, inside the exit node machine.
Tailscale requires a tailnet admin to allow every exit node, including ours. Until then, your devices cannot select it. Allow it once on the Machines page, or let an autoApprovers rule allow machines with the tag tag:getastatic.
No. We use the key once to join the machine to your tailnet, then discard it. If the key is rejected, the dashboard row shows the error and a Retry with a new key link, with no extra charge. Revoking the key later does not remove the machine from your tailnet.
A one-off or a reusable key works. If you use the autoApprovers rule, add the tag tag:getastatic to the key. Do not use an ephemeral key: Tailscale removes an ephemeral machine 30 to 60 minutes after it goes offline, and we cannot rejoin without a new key.
Select Remove in the dashboard row. The machine logs out right away, and the unused part of the current period goes back to your credit balance. It stays in your admin console as expired until you delete it there.
Have more questions? See the full FAQ →