Escape CGNAT with your own public IPv4

Egret gives you a reachable static IP + VPN so you can host services and accept inbound connections even when your ISP uses CGNAT.

Instant setup US-based IP
Get started
Why use Egret?

VPN with static IP.

  • Port-forward any service — run a game server, NAS, or home lab from behind CGNAT
  • Accept inbound connections without dynamic DNS or changing IPs
  • Fixed outbound IP for allowlists and access control rules
  • Works on any device with a WireGuard client
How it works

Online in four steps.

01

Choose a Plan

Starting at $2/mo.

02

Install WireGuard

Download the app for your device. wireguard.com/install

03

Download your config

Import it into any WireGuard client on any device.

04

Connect

Open WireGuard, tap connect, and you're online through your own IP address.

Pricing

Choose your plan

Plus for light use, Pro for most people, Ultra for full gigabit.

Plus
$2/mo

 

  • 1 dedicated IP address
  • 10 devices
  • 5 open ports
  • 100 GBbandwidth
  • 20 Mbpsspeed
Most Popular
Pro
$4/mo

 

  • 2 dedicated IP addresses
  • Unlimited devices
  • Unlimited open ports
  • 1 TBbandwidth
  • 100 Mbpsspeed

5× speed · 10× bandwidth · 2 IPs — only $2/mo more

Ultra
$10/mo

 

  • 2 dedicated IP addresses
  • Unlimited devices
  • Unlimited open ports
  • 5 TBbandwidth
  • 1 Gbpsspeed
  • Inbound + outbound access
  • Instant activation
  • 7-day money-back guarantee
  • Cancel anytime
Add-ons, per IP addressCustom hostname $5·Addtl. IP $2/mo (Ultra $7/mo)·Gigabit Speed (Plus & Pro) $5/mo·SMTP $25
FAQ

Questions, answered.

01What is CGNAT and why is it a problem?

Carrier-grade NAT (CGNAT) means your ISP assigns one public IP address to many customers at once. You share it, so there is no way to receive inbound connections or open ports — services like game servers, home labs, remote desktop, or self-hosted apps simply cannot be reached from the internet.

02How does Egret fix this?

Egret gives you a dedicated static public IPv4, tunneled to your device over WireGuard. Your device connects outbound to Egret's node, and all inbound traffic to your public IP is forwarded through the tunnel to you — bypassing CGNAT entirely.

03Do I need a VPS or any server to run this?

No. Egret handles the server side. You only need the WireGuard client installed on your device and the config file Egret generates for you. There is nothing else to manage.

04What devices are supported?

Any device that can run WireGuard: • Phones and tablets: iPhone, iPad, Android • Computers: Windows, Mac, Linux • Routers: OpenWrt, pfSense, OPNsense, MikroTik, GL.iNet, and most modern router firmware • Servers: Linux servers, Raspberry Pi, Docker Set it up on your router to cover devices that can't run WireGuard, like game consoles and smart TVs. Get the free WireGuard app: https://www.wireguard.com/install/ Using AmneziaWG? It has apps for iPhone, iPad, Mac, Android and Windows, but fewer routers support it.

Have more questions? See the full FAQ →