Get Real IP

Static IP over Starlink (and LTE / 5G)

Quick answer

Starlink and cellular connections put you behind CGNAT with dynamic IPs, so inbound connections can't reach you and Starlink's optional public IP still changes over time. Get a truly static, reachable IP by routing a dedicated public IPv4 to your router over an outbound WireGuard tunnel — it works over Starlink, LTE, and 5G, and the IP stays the same even when you fail over between connections or move locations.

Starlink changed what's possible for rural, remote, mobile, and backup connectivity — but if you've tried to host a service, set up remote access, or run a camera system over it, you've hit a wall. The same is true of LTE and 5G. The problem is always the same two things: CGNAT and dynamic IPs.

Why Starlink and mobile connections block hosting

By default, Starlink and cellular carriers put you behind carrier-grade NAT: your connection shares one public IP with many other customers, and your router only gets a private, carrier-side address. There's no public IP that belongs to you, so inbound connections have nowhere to land — port forwarding does nothing, and remote access, hosting, and monitoring all fail.

"But Starlink offers a public IP…"

Starlink has an optional public-IP setting that takes you out of CGNAT. It helps — but it's a dynamic address assigned by DHCP that can change over time. A changing IP breaks the things hosting depends on: DNS records go stale, IP-based firewall rules and allowlists stop matching, TLS setups pinned to an address fail, and email is a non-starter because reverse DNS has to match a stable IP. It's better than CGNAT, but it isn't a static IP.

How to get a truly static IP over Starlink or LTE

The reliable fix is to stop depending on the underlying link for your address at all. With Get Real IP, your router (or server, or laptop) opens an outbound WireGuard tunnel — which Starlink and every mobile carrier allow, since it's just normal outbound traffic — and we route a dedicated static public IPv4 to it. Inbound connections for that IP flow down the tunnel to you.

Because the IP lives on the tunnel rather than the connection, you get properties that matter for mobile and remote setups:

Typical use cases

Remote sites and cabins reachable over Starlink; RV and marine setups that need a stable address as they move; surveillance and IoT that must be reachable from a fixed IP; and LTE/5G as a primary or failover link for a small office. In all of these, a dedicated static IP over the tunnel turns an unhostable CGNAT connection into one you can actually build on.

Frequently asked questions

Can I get a static IP on Starlink?

Starlink doesn't offer a true static IP on residential plans, and by default it puts you behind CGNAT. Starlink's optional public IP is assigned by DHCP and can change over time. To get a stable, static, reachable IP over Starlink, route a dedicated public IP to your router over a WireGuard tunnel with a service like Get Real IP — it works over Starlink because the tunnel is outbound.

Isn't Starlink's public IP option enough?

Not for most hosting. Starlink's public IP is dynamic (DHCP) and can change, which breaks DNS, firewall rules, TLS, and email reverse DNS. A dedicated static IP over a tunnel stays the same no matter what Starlink does — and stays the same even if you switch to LTE backup or move locations.

Does this work on LTE, 5G, and mobile connections too?

Yes. LTE/5G carriers almost always use CGNAT and dynamic IPs, exactly like Starlink. The same outbound WireGuard tunnel gives you a dedicated static IP over any of them — fixed installations, RVs, boats, or failover connections.

What about when I switch between Starlink and a backup connection?

Because your public IP lives on the tunnel, not on the underlying link, it stays the same when you fail over from Starlink to LTE or back. Services keep the same address regardless of which internet connection is carrying the tunnel.

Want a dedicated static IP in minutes?

Get Real IP delivers a dedicated static public IPv4 to your server, router, or laptop over an encrypted WireGuard tunnel — any protocol, any port, works behind CGNAT. $8/mo, no contract.

Start your free trial

7 days free · Cancel anytime

Related guides

Updated September 4, 2026