WireGuard blocked? Two ways to reach your static IP

Every GetAStatic IP comes with a second config on UDP port 443 and an AmneziaWG switch. Most networks that stop WireGuard let one of them through, and you keep the same fixed IP for your accounts and services.

Instant setup US-based IP

Updated

The problem

Why WireGuard stops working on some networks

WireGuard sends everything over UDP. At home that is fine. On many hotel, campus, office and mobile networks it is not: the app says it is on, but the handshake never completes and no data moves.

There are two usual causes. Some networks drop all UDP except DNS, or let out only a few ports, such as the ones web browsers use. Others look at the traffic itself: national filters in countries such as China, Iran, Russia, Turkmenistan and Myanmar can recognise WireGuard's handshake and block it. Pakistan and Turkey are also frequently reported.

Pricing

Choose your plan

Plus for light use, Pro for most people, Ultra for full gigabit.

Plus
$2/mo

 

  • 1 dedicated IP address
  • 10 devices
  • 5 open ports
  • 100 GBbandwidth
  • 20 Mbpsspeed
Ultra
$10/mo

 

  • 2 dedicated IP addresses
  • Unlimited devices
  • Unlimited open ports
  • 5 TBbandwidth
  • 1 Gbpsspeed
  • Inbound + outbound access
  • Instant activation
  • 7-day money-back guarantee
  • Cancel anytime
Add-ons, per IP addressCustom hostname $5·Addtl. IP $2/mo (Ultra $7/mo)·Gigabit Speed (Plus & Pro) $5/mo·SMTP $25
Why use GetAStatic?

Two switches, one IP

  • A port 443 config for every IP, right next to the normal one
  • AmneziaWG with a static IP: on or off per IP, at no extra cost
  • Your IP, open ports and plan stay the same whichever you use
  • Made for hotel, campus, office and mobile networks, and countries that filter VPNs
How it works

Two switches in your dashboard

Port 443 first. Our normal endpoint uses UDP port 1194. Every IP also has a config that connects on UDP port 443, the port browsers use for fast web traffic (HTTP/3). Networks that only let "web" ports out usually let this through. It is the same tunnel and the same IP; use one config or the other, not both at once.

AmneziaWG next. If the network inspects traffic, a different port is not enough. Switch the IP to AmneziaWG and it changes the packet pattern, so a filter looking for WireGuard does not recognise it. You use the AmneziaWG app, which exists for iPhone, iPad, Mac, Android and Windows; Linux needs the AmneziaWG kernel module.

Some networks block every option. Both switches still use UDP, so a network that drops all UDP stops them both. Filtering also changes over time, and we cannot promise that any method works in every country.

Setup

What to try, in order

  1. Join the network first. On hotel or airport Wi-Fi, finish the login page with the tunnel off.
  2. Connect with your normal config. If the handshake never completes, go to the next step.
  3. In the dashboard, open the Devices tab, click "Trouble connecting?" and choose Port 443. Import that config and turn the standard one off.
  4. Still nothing? On the same panel set Client to AmneziaWG, confirm, and import the new config into the AmneziaWG app.
  5. Open a what-is-my-IP site. It should show your static IP.

Switching to AmneziaWG stops your WireGuard config until you switch back, which you can do any time on the same panel.

Good to know

Honest limits

  • AmneziaWG has no port 443 variant, so you use one technique or the other.
  • On Linux, AmneziaWG needs the kernel module; there is no app.
  • Your plan's speed cap applies to every config, from 20 Mbps on Plus to 1 Gbps on Ultra.
  • It is a datacenter IP in Kansas City, Missouri or San Jose, California, and traffic goes there and back, so distance adds delay.
  • Built for a stable address, not anonymity: hiding that you use WireGuard does not hide who you are.
  • Nothing is guaranteed against filtering. A network or a country can block both methods, sometimes without warning.
FAQ

Questions, answered.

01How do I get the port 443 config?

Open the Devices tab in the dashboard and click "Trouble connecting?". Choose Port 443, then download the config or scan its QR code. It costs nothing; keep only one of the two configs active at a time.

02Does AmneziaWG cost extra?

No. It is included on every plan, and you switch it on for each IP separately. Your IP address and open ports do not change; you only download a new config for the AmneziaWG app.

03Does it work in China or Iran?

Often, but we cannot guarantee it: filtering differs between networks and changes over time. AmneziaWG is the better bet there. For readers in China, we have a setup guide in Simplified Chinese at /zh-cn.

04Will a hotel's login page block the tunnel?

Only until you sign in. Turn the tunnel off, accept the hotel's or airport's Wi-Fi page in your browser, then connect. If the handshake still fails, try the port 443 config.

05Does it slow things down?

Port 443 only changes the port, so speed stays the same. AmneziaWG adds a little overhead and runs slightly slower than plain WireGuard. Your plan's speed cap applies either way.

Have more questions? See the full FAQ →