Quickstart

From nothing to a server egressing as your own address. No account, no card for the trial, no call.

1. Order

Pick a plan on the pricing page. The trial is free, needs no card, and gives you a real IPv4 address out of the same block paying customers use — because the thing you need to see is your own partner accepting it.

You get an access token. It is the only credential on the lease: bookmark the dashboard link. If you lose it, we will email it back to your billing address.

2. Create a tunnel

One tunnel is one machine. From the dashboard, choose the transport (WireGuard unless something filters it) and the routing mode:

Linux server → source routing. Your SSH session stays where it is.
Laptop, phone, Docker, anything with a GUI client → full tunnel.

The configuration contains a private key and is shown once. Nothing stores it, including us — if you lose it, revoke the peer and create another. That is a slot on your plan, not a support ticket.

3. Install it

Linux, which is the common case:

on your server

sudo apt install wireguard-tools          # or: dnf install wireguard-tools
sudo install -m 600 anchoredip-42.conf /etc/wireguard/aip0.conf
sudo wg-quick up aip0
sudo systemctl enable wg-quick@aip0       # bring it back after a reboot

The interface name comes from the filename, so name the file what you want the interface called. Other platforms: Linux in depth, macOS and Windows, Docker, Kubernetes.

4. Verify

This is the whole product in one command:

on the machine you just configured

curl -s https://api.ipify.org

It should print your leased address. If it prints the machine's own address instead, the tunnel is up but your traffic is not using it — in source-routing mode that is expected for traffic not bound to the leased address, and binding the source is how you send it through us.

source routing: ask explicitly

curl -s --interface 194.0.108.64 https://api.ipify.org

5. Give the address to your partner

That address is now yours for as long as the lease runs. If a renewal is late, traffic stops but the address is held for another seven days and is not reassigned — paying restores exactly the same one, so what your partner allowlisted keeps working.

Set a PTR record from the dashboard if the far side checks reverse DNS. Many mail and finance systems do, and a missing one breaks more integrations than people expect.

Adding more machines

Create another tunnel. Every machine on the lease egresses as the same address — that is the point, and it is why the plans count machines rather than addresses. Only one machine per lease can receive inbound connections on the address, because WireGuard routes an address to exactly one peer.