Escape CGNAT with your own public IPv4

Egret gives you a reachable static IP + VPN so you can host services and accept inbound connections even when your ISP uses CGNAT.

Instant setup US-based IP Cancel anytime
Why use Egret?

VPN with static IP.

  • Port-forward any service — run a game server, NAS, or home lab from behind CGNAT
  • Accept inbound connections without dynamic DNS or changing IPs
  • Fixed outbound IP for allowlists and access control rules
  • Works on any device with a WireGuard client
How it works

Online in four steps.

01

Choose a Plan

Starting free.

02

Install WireGuard

Download the app for your device. wireguard.com/install

03

Download your config

Import it into any WireGuard client on any device.

04

Connect

Open WireGuard, tap connect, and you're online through your own IP address.

Pricing
Instant Activation
Basic
$0/mo
  • 1 dedicated IP address
  • 10 devices extras $2/mo
  • Inbound + outbound access
  • 10 open ports
  • 100 GB bandwidth
Instant Activation
Pro
$4/mo
  • 5 dedicated IP addresses
  • Unlimited devices extras $2/mo
  • Inbound + outbound access
  • Unlimited open ports
  • 10 TB bandwidth

Then $4/mo · cancel anytime

Add-ons, per deviceCustom hostname $5 free·Addtl. IP $2/mo·SMTP $25
FAQ

Questions, answered.

01What is CGNAT and why is it a problem?

Carrier-grade NAT (CGNAT) means your ISP assigns one public IP address to many customers at once. You share it, so there is no way to receive inbound connections or open ports — services like game servers, home labs, remote desktop, or self-hosted apps simply cannot be reached from the internet.

02How does Egret fix this?

Egret gives you a dedicated static public IPv4, tunneled to your device over WireGuard. Your device connects outbound to Egret's node, and all inbound traffic to your public IP is forwarded through the tunnel to you — bypassing CGNAT entirely.

03Do I need a VPS or any server to run this?

No. Egret handles the server side. You only need the WireGuard client installed on your device and the config file Egret generates for you. There is nothing else to manage.

04Will this work with my router or device?

Yes. WireGuard runs on Linux, Windows, macOS, iOS, Android, and most router firmware (OpenWrt, pfSense, OPNsense, and others). If your device can run WireGuard, it works with Egret.

05What is Egret?

Egret gives you a permanent public IPv4 address, and a VPN to handle the traffic. No server to manage, and it works on any device.

06What can I use it for?

Use it to escape CGNAT, self-host services, reach home or office devices remotely, whitelist a stable IP for work tools, secure traffic on public Wi-Fi, or keep the same endpoint while traveling.

07What do I need to get started?

Create your Egret account, install WireGuard (wireguard.com/install) on your device, then download your WireGuard config. We handle everything else.

08What options are available?

• Extra Devices Each device has its own tunnel with its own dedicated IPv4 for a flat $2/mo, sharing your account's plan and bandwidth. Devices added mid-cycle are prorated so the whole account renews on one date. Unlockable options (per device): • Outgoing SMTP ($25) • Custom hostname ($5 free)

0930-day money-back guarantee

If you're not happy within the first 30 days, we'll refund you in full. No hoops. Just email support@egret.host.

Have more questions? See the full FAQ →