A real public IPv4 address for any machine you own — Linux, macOS, Windows, WSL, or a phone. No router config, no port forwarding, no static IP from your ISP. SSH open by default — everything else closed until you open it.
Not a hostname. Not a shared IP behind a reverse proxy. A globally routable IPv4 address from our /24, announced by AS396500, assigned to your machine.
Keep your workload where it is. A home server, a laptop, a WSL instance. The address attaches to the machine you already own. Works behind NAT, no port forwarding needed.
SSH is open by default (port 22, or 2222 on WSL). Everything else is closed — you explicitly open what you need through the CLI. The firewall is enforced at our edge — non-SSH traffic is dropped before it reaches your machine.
Host a dedicated game server from home without begging your ISP for a static IP or punching holes in your router. Players connect to your public address directly.
Make self-hosted services reachable from the internet. Nextcloud, Gitea, Home Assistant — whatever you run. A real address, not a dynamic DNS workaround.
Expose a local dev server for testing webhooks, OAuth callbacks, or API integrations. No ngrok session limits, no hostname changes between restarts.
Give third-party services a stable IP to POST to. Stripe, GitHub, Twilio — point them at your address and handle the traffic on your own machine.
Small business network security, new from TunnelNet: malware protection, DNS filtering and a dedicated IP address for every office device, at one affordable price.
Your business router in the cloud. Every phone, laptop and office computer connects through your own private Halo server, on any internet connection, wherever it is. Malware, spyware, trackers, ads and data brokers are blocked before they reach the device.
Small businesses and offices that want every device protected the same way, without an IT department. Every block says why, you can always let something through, and your choice always wins.
$15 per device per month, with a minimum of 3 devices ($45 a month). A dedicated public address is included.
$15 per device per month, minimum 3 devices. Choose your devices Read the full Halo page → Halo questions and answers →
TunnelNet Cloak is no longer sold to new customers. Already have it? Nothing changes for you: it keeps working as it does today.
Want a private connection today? TunnelNet VPN gives you a server of your own in the city you pick.
Your own box. A dedicated server in the city you pick — one box, one IP, both yours.
Private, no activity logs. Datacenter address.
People can reach your computer at this address. A real public IPv4 address from our /24, assigned to your machine. Traffic sent to the address comes to you; your own traffic still goes out through your internet provider.
Linux, macOS, Windows, WSL, or a phone.
People can reach you, and your traffic goes out from your own address. Everything in IP, plus the sites and services you connect to see your dedicated address instead of your internet provider’s. Choose Chicago or Newark as your exit. Useful for vendor IP allowlisting and stable network identity.
Linux, macOS, Windows, WSL, or a phone.
Already have an ASN and address space? Announce your own /24 or /48 from your own hardware. No BGP-capable VPS, no BIRD to configure — we handle the routing and origination through our hubs.
Linux and WSL2 only — BIRD does not run natively on Windows or macOS.
TunnelNet is built by MinakiLabs, a small company in Illinois. We run our own network: our own address block and hubs in two cities. Every change that reaches customers is reviewed before it goes live, and we publish our measured uptime, including the incidents we caused ourselves.
IP $10/mo · Full $20/mo · Halo $15/device · VPN $30/mo · Transit on request.
Read the Docs →