Plus
$4/mo
- 1 dedicated IP address
- 2 devices per IP
- 5 open ports
- 100 GBbandwidth
- 20 Mbpsspeed
Egret is now part of GetAStatic. Continue to getastatic.com →
Starlink Residential and Roam use CGNAT, so regular port forwarding won't work. Even Starlink's Public IP option isn't static. Egret gives you your own static public IP over WireGuard, with ports you can open, on any Starlink plan. From $4/month.
Not affiliated with Starlink or SpaceX. Prices as listed on their sites, checked 2026-10-06.
Updated
| Residential and Roam plans | CGNAT: no public IPv4 of your own |
|---|---|
| Public IP option | Not sold alone: included with Priority plans, which start at $55/mo (Local Priority, 50 GB) |
| Is the public IP static? | No. It can change when the dish moves or after an update |
| Port forwarding on the Starlink router | No setting listed |
| Bypass mode + your own router | Still CGNAT on Residential and Roam |
| Egret | A static IPv4 on any plan, with the ports you open, from $4/mo |
Checked .
Starlink Residential and Roam plans put you behind carrier-grade NAT (CGNAT). Your dish does not get a public IPv4 of its own. Starlink shares one public address among many customers, so nobody on the internet can start an IPv4 connection to you.
The Starlink router shows no port-forwarding setting. Bypass mode turns the router's Wi-Fi off so you can use your own router, but on Residential and Roam your router still gets a CGNAT address. Its port-forward rules stop at Starlink's NAT.
Starlink's public IPv4 is included with Priority plans, which start at $55/mo (Local Priority, 50 GB). It is public, not static: Starlink's help center says the address can change when you move the dish or after a software update. Starlink also gives you IPv6, but visitors on networks without IPv6 cannot reach it.
Plus for light use, Pro for most people, Ultra for full gigabit.
5× speed · 10× bandwidth · 2 IPs — only $3/mo more
With the Starlink router, the Starlink app shows the network details. With your own router in bypass mode, use its status page.
On Residential and Roam you will almost always see a 100.64 to 100.127 address. That is why a port forward cannot work.
Egret gives you a dedicated static IPv4 in San Jose, California. Your device, or your own router in bypass mode, connects out to our node over WireGuard. Starlink allows outgoing connections, so CGNAT does not block the tunnel.
Connections to your IP on the ports you open come down the tunnel to your device. The device also sends its outgoing traffic from that IP, so remote-access apps, DNS records and allowlists see one address.
Moving the dish, a reboot or a Starlink update does not change your IP. It works the same on Residential, Roam and Priority plans. For other ISPs with the same problem, see how to escape CGNAT.
Run WireGuard on the device that hosts your service. Or put your own router behind Starlink in bypass mode and run WireGuard there, so every device behind it uses the IP.
| Port | Protocol | Used for |
|---|---|---|
| 32400 | TCP | Plex Media Server |
| 443 | TCP | Website or reverse proxy (HTTPS) |
| 25565 | TCP | Minecraft Java server |
| 554 | TCP | IP camera (RTSP) |
Plus includes 5 open ports; Pro and Ultra have unlimited open ports. A port range counts as its size.
Yes, on Residential and Roam plans. Many customers share one public IPv4, so nobody on the internet can start a connection to your dish. Only the Public IP option on Priority plans avoids it.
No. Starlink's Public IP option is included with Priority plans, which start at $55/mo (Local Priority, 50 GB). It gives a public address, but Starlink says it can change when you move the dish or after a software update. Egret gives you an IPv4 that stays the same, on any Starlink plan.
No. The Starlink router shows no port-forwarding setting. Even with your own router, port forwarding needs a public IPv4, which Residential and Roam plans do not get.
Not by itself. Bypass mode lets you use your own router, but that router still sits behind Starlink's CGNAT. Run WireGuard on it, and every device behind it uses your Egret IP.
Yes. The tunnel connects out from wherever the dish is, and your IP stays the same when you move.
No. WireGuard runs on the device that needs the IP, through Starlink's CGNAT as it is. Your own router is optional.
Have more questions? See the full FAQ →