A VPN with port forwarding: fixed ports on your own US IP

GetAStatic is a WireGuard VPN with your own static US IPv4, from $2/mo. You open the TCP and UDP ports you choose, and they stay the same until you close them: no random port, no shared IP, no add-on.

Not affiliated with Proton, PIA, NordVPN or PureVPN. Facts from their sites or third-party reports, checked 2026-10-06.

Instant setup US-based IP

Updated

Compare

VPN port forwarding compared

Port forwarding on the big VPNs, next to a port on your own IP.

FeatureGetAStaticProton VPNPIANordVPNPureVPN
PriceFrom $2/moAll paid plans~$2.50/mo (reported)~$3.69-4.19/mo (reported)$4.45/mo (2-year plan)
Port forwardingYes, TCP and UDPYes, on P2P servers onlyYes, but not on US serversNoOnly as a paid add-on
Your own dedicated IPYes, in the planNo, shared serversYes, as an add-onYes, as an add-onYes, as an add-on
Ports you choose and keepYes, until you close themNo, random; changes on reconnectNot on US serversNoOnly with the add-on
Inbound behind CGNATYes, on your own IPRandom port onlyNot on US serversNoOnly with the add-on

Proton includes port forwarding on its paid VPN plans. PIA's and NordVPN's figures are for the dedicated IP add-on; PureVPN's is its dedicated IP on a 2-year plan, with port forwarding extra. Surfshark and ExpressVPN list no port forwarding either. Checked 2026-10-06. More in static IP VPNs compared.

The problem

Why VPN port forwarding usually disappoints

Most VPNs share one exit IP among many users. A shared IP cannot give each user a fixed inbound port, so most providers either limit port forwarding or leave it out.

Proton VPN forwards one port on its P2P servers, but it picks the port at random, and the port usually changes when you reconnect. You cannot choose it, so a game server address or a client setting breaks again and again. PIA forwards ports, but third-party reports say not on its US servers.

NordVPN, Surfshark and ExpressVPN list no port forwarding, even with a dedicated IP. PureVPN sells it as a separate add-on on top of the VPN and the dedicated IP.

Your own static IP over WireGuard. No VPS.

Dedicated IPv4 from $2/mo →
Why use GetAStatic?

What people run on a fixed port

  • Game servers such as Minecraft or Valheim, on an address your friends save once
  • Plex, Jellyfin and other home servers that need a real inbound port
  • Torrent and other P2P clients that seed better with a fixed, open listening port
  • SSH, IP cameras and self-hosted apps behind CGNAT
How it works

Fixed ports on your own US IP

GetAStatic gives you one static US IPv4 that only you use. You open the ports you need in the dashboard, TCP or UDP, with no ticket. The port number is yours: it does not rotate, and it does not change when you reconnect. Plus costs $2/mo with 5 open ports; Pro costs $4/mo with unlimited open ports.

The WireGuard tunnel connects out from your side, so inbound ports work behind CGNAT: on Starlink, 5G home internet, mobile data and hotel Wi-Fi. See escape CGNAT, Plex behind CGNAT and a game server behind CGNAT.

It is a full VPN too: while the tunnel is on, the device's outbound traffic leaves from the same IP. See a static IP VPN. Pay by card or crypto, with a 7-day money-back guarantee.

Setup

Open a fixed port, then point the app at it

Every port on a new IP starts closed. You open only the ones you need.

  1. Choose a plan and sign up. Your static US IPv4 appears in the dashboard.
  2. Open the port your app uses on that IP, and choose TCP or UDP.
  3. Download the WireGuard config. Import it on the device or router that runs the app, and turn the tunnel on.
  4. Set the same port in the app: the game server, Plex, or the listening port of your P2P client.
  5. Share YOUR-IP:port. The IP and the port stay the same after a reconnect or a reboot.
PortProtocolUsed for
25565TCPA Minecraft Java server
32400TCPPlex remote access
51413TCP+UDPA P2P client's listening port
22TCPSSH into a home server

Plus opens up to 5 ports; Pro and Ultra have no limit.

Good to know

Good to know

  • It is a datacenter IP in Kansas City, Missouri or San Jose, California, not a residential one. Users far from the IP's city see some extra delay.
  • Speed is capped per plan: 20 Mbps on Plus, 100 Mbps on Pro, 1 Gbps on Ultra. Monthly data is capped too.
  • Built for a stable address, not anonymity.
  • Everyone who connects to an open port sees your static IP, and it does not change. Open only the ports you need.
  • Each IP is one WireGuard config, active on one device at a time. Run it on a router and every device behind it shares the IP; the plan card's device figure is a guide, not a cap. Extra IPs are $2/mo.
Pricing

Choose your plan

Plus for light use, Pro for most people, Ultra for full gigabit.

Plus
$2/mo

 

  • 1 dedicated IP address
  • 10 devices
  • 5 open ports
  • 100 GBbandwidth
  • 20 Mbpsspeed
Ultra
$10/mo

 

  • 2 dedicated IP addresses
  • Unlimited devices
  • Unlimited open ports
  • 5 TBbandwidth
  • 1 Gbpsspeed
  • Inbound + outbound access
  • Instant activation
  • 7-day money-back guarantee
  • Cancel anytime
Add-ons, per IP addressCustom hostname $5·Addtl. IP $2/mo (Ultra $7/mo)·Gigabit Speed (Plus & Pro) $5/mo·SMTP $25
FAQ

Questions, answered.

01Does the port change when I reconnect?

No. The IP and every port you open stay the same after a reconnect, a reboot or a new network. They change only if you close the port or cancel.

02Can I pick the port number?

Yes. You choose the port number and TCP or UDP when you open it in the dashboard, single ports or ranges. Plus opens up to 5; Pro and Ultra have no limit.

03Does it forward UDP?

Yes. Open a port as UDP for game servers such as Minecraft Bedrock or Valheim, for VoIP, or for your own WireGuard server. See a game server behind CGNAT.

04Does it work on Starlink or T-Mobile Home Internet?

Yes. The tunnel connects out on UDP 1194 or 443, so CGNAT does not stop it, and inbound connections come back down the tunnel. See Starlink port forwarding and T-Mobile Home Internet port forwarding.

05Is it a VPN too?

Yes. It is a WireGuard VPN: while the tunnel is on, the device's traffic leaves from your static IP. On networks that block VPNs, switch to AmneziaWG, which every plan includes.

06How is this different from Proton VPN port forwarding?

Proton includes port forwarding on its paid plans, but on shared P2P servers, with a random port that usually changes when you reconnect. GetAStatic gives you your own US IP and the ports you choose, and they stay the same. Checked 2026-10-06.

Have more questions? See the full FAQ →