Quickstart

From nothing to a server egressing as your own address. No account, no card for the trial, no call.

1. Order

Pick a plan on the pricing page. The trial is free, needs no card, and gives you a real IPv4 address out of the same block paying customers use — because the thing you need to see is your own partner accepting it.

You get an access token. It is the only credential on the lease: bookmark the dashboard link. If you lose it, we will email it back to the email you ordered with.

2. Create a tunnel

One tunnel is one machine. From the dashboard, choose the transport (WireGuard unless something filters it) and the routing mode:

Linux server → source routing. Your SSH session stays where it is.
Laptop, phone, Docker, anything with a GUI client → full tunnel.

The configuration contains a private key and is shown once. Nothing stores it, including us — if you lose it, revoke the peer and create another. That is a slot on your plan, not a support ticket.

3. Install it

Linux, which is the common case:

on your server

sudo apt install wireguard-tools          # or: dnf install wireguard-tools
sudo install -m 600 anchoredip-42.conf /etc/wireguard/aip0.conf
sudo wg-quick up aip0
sudo systemctl enable wg-quick@aip0       # bring it back after a reboot

The interface name comes from the filename, so name the file what you want the interface called. Other platforms: Linux in depth, macOS and Windows, Docker, Kubernetes.

4. Verify

This is the whole product in one command:

source routing — what step 3 installed

curl -s --interface 194.0.108.99 https://api.ipify.org

It should print your leased address. The address is named on purpose: source routing carries only traffic that already has it, which is exactly why bringing the tunnel up did not disturb the SSH session you typed the command into. A plain curl on that same machine still prints the machine's own address — that is the tunnel working as designed, not failing, and binding the source is how you point an application through us.

full tunnel — nothing to bind

curl -s https://api.ipify.org

5. Give the address to your partner

That address is now yours for as long as the lease runs. If a renewal is late, traffic stops but the address is held for another seven days and is not reassigned — paying restores exactly the same one, so what your partner allowlisted keeps working.

Set a PTR record from the dashboard if the far side checks reverse DNS. Many mail and finance systems do, and a missing one breaks more integrations than people expect.

Adding more machines

Create another tunnel. Every machine on the lease egresses as the same address — that is the point, and it is why the plans count machines rather than addresses. Only one machine per lease can receive inbound connections on the address, because WireGuard routes an address to exactly one peer.