Self-host from anywhere with a public IPv4

Port forwarding only works if your ISP gives you a real public IP. Behind CGNAT — common with Starlink, LTE, and many cable and fiber ISPs — it does nothing. Egret bypasses this by routing a real public IPv4 back to your device over WireGuard.

Anything that listens on a port: web servers, game servers, SSH, home automation hubs, media servers, sync tools. If it can bind to an address and listen for connections, it works.

You need WireGuard running on whatever device hosts the service — a Raspberry Pi, an always-on router, or a home server. WireGuard is lightweight and reconnects automatically after interruptions.

Yes. WireGuard is supported on OpenWrt, pfSense, OPNsense, and most modern router firmware. Running it at the router level means all devices on your network can be reached without installing WireGuard on each one.

Egret gives you a permanent public IPv4 address, and a VPN to handle the traffic. No server to manage, and it works on any device.

Use it to escape CGNAT, self-host services, reach home or office devices remotely, whitelist a stable IP for work tools, secure traffic on public Wi-Fi, or keep the same endpoint while traveling.

Create your Egret account, install WireGuard (wireguard.com/install) on your device, then download your WireGuard config. We handle everything else.

• Extra Devices Each device has its own tunnel with its own dedicated IPv4 for a flat $2/mo, sharing your account's plan and bandwidth. Devices added mid-cycle are prorated so the whole account renews on one date. Unlockable options (per device): • Outgoing SMTP ($25) • Custom hostname ($5 free)

If you're not happy within the first 30 days, we'll refund you in full. No hoops. Just email support@egret.host.