Frequently Asked Questions

Pick the endpoint with the lowest latency from your location. Our latency test page measures the round-trip time from your browser to every endpoint — run it and choose the one with the smallest number. Generally the geographically closest endpoint wins.

Yes — this is one of the simplest ways to make a local project accessible to anyone. If you're running something on 127.0.0.1:4321 (a dev server, an AI app, a side project), Get Real IP turns that into 134.49.x.x:4321 — a real public address anyone on the internet can reach.

No need to learn Nginx, Docker, cloud platforms, or DNS configuration. Just install WireGuard, paste the config we give you, and your local ports are reachable at your public IP. It takes about 5 minutes.

See the Put Your Localhost on the Internet guide for step-by-step instructions.

No — and this is by design. We route your static IP directly to your device. We are not a middlebox and we do not filter or inspect your traffic. The entire point is that you get a real public IP with full control over what runs on it.

This means you are responsible for your own firewall. Any port that isn't protected by software on your device (or your router) is reachable from the internet. If you're running services you don't want exposed, make sure they're protected before connecting.

Most operating systems include a built-in firewall:

• Ubuntu / Debian — ufw
• Fedora / RHEL — firewalld
• Windows Defender Firewall
• macOS Firewall
• Router-level: pfSense, OPNsense, and GL.iNet all have built-in firewall/NAT rules

The exception is outbound port 25, which we block by default on our end to prevent abuse by spammers — see the question above.

Yes, but this is optional and requires extra configuration on your end. By default, the tunnel routes all your traffic (inbound and outbound) through your static IP. If you'd prefer to only use the tunnel for incoming connections — keeping your normal ISP for browsing, downloads, etc. — you can set this up with policy-based routing on your router or OS.

Policy-based routing is not a WireGuard config option — it requires routing rules on your router or Linux box. The basic idea: packets arriving from the tunnel get marked, and a separate routing table sends replies back the same way, while unmarked outbound traffic uses your normal default route.

The important thing to understand is that your OS won't automatically know to send replies back via the tunnel just because the inbound packet arrived that way. Without explicit policy routing rules, replies leak out your ISP connection with the wrong source IP and the connection breaks. You have to explicitly tell your router to send return traffic back via the tunnel.

See the Policy-Based Routing guide for step-by-step instructions on Linux (fwmark + ip rule), BSD/pfSense/OPNsense (pf reply-to), and other routers. There's also an advanced section covering multiple IPs routed to different LAN hosts.

Same endpoint location: Yes. If both tunnels are on the same endpoint (e.g. both on turnpike), we can move IPs between them, merge two tunnels into one, or split a tunnel's IPs across new tunnels. Use the contact form to request this and we'll handle it for you.

Different endpoint locations: No. IPs are tied to the subnet of their endpoint location and can't be moved between locations. If you need an IP at a different endpoint, you'll need to create a new tunnel there.

Yes. By default, all our IP reassignment records in ARIN's WHOIS database are marked as a private customer — your name and address are not published. If you'd like your information to appear on the WHOIS record for your IPs, contact us and we'll update it.

This can be useful if you want GeoIP databases to associate your IP with a specific location, or if you're running a business and want your organization name visible on the IP registration. Most residential users prefer the default private record.

First, cancel all your IPs and tunnels from the dashboard using "do not renew." Once your billing period ends and your resources are deactivated, contact us to request full account deletion.

We'll remove your account data from our systems. Payment records may be retained separately for tax and legal compliance.

Use the contact form and select "Feature Request" as the category. Describe what you're trying to do and why it would be useful. We read every submission and use them to prioritize the roadmap.

Some things we've heard interest in: expanded endpoint locations (West Coast, Europe, Asia), a reverse proxy option (like rathole or frp) instead of WireGuard, IPv6 support, managed firewall rules, or API access for programmatic IP management. Even if it's on this list, let us know — the more people ask for something, the sooner it gets built.