Business · for your whole site
One static IP for your whole site. It doesn't care what's behind it.
You still need a static IP, just not from your ISP. Ours doesn't care what's behind it: Comcast, Starlink, 5G, whatever line is up. Your router connects to us, and the address stays with the site.
For offices, shops, farms, job sites, camera installers, IT providers and homelabs. Works with UniFi gateways, MikroTik and OPNsense.
Why port forwarding does nothing on these lines
Starlink, 5G home internet and many cable and rural providers share one public address among many customers (the industry name is CGNAT). Your router has an address, but not one the internet can reach. And when you have two lines, you have two addresses that change on their own. Our guide Stuck behind CGNAT? has a two-minute check.
What works today
Install from the portal
UniFi gateways: paste one command from the portal and the agent sets itself up. MikroTik and OPNsense: download a ready-made setup file and follow the guide.
Ports from the portal
Open or close a port in the portal, and the UniFi agent applies it on the gateway for you. In our lab, changes worked from outside 7 to 19 seconds later. On MikroTik and OPNsense, ports come in the setup file for now.
Real visitor addresses
On UniFi gateways with our agent, your server sees the real address of whoever connects, so its logs and blocklists work as they should.
Failover, same address
Main line down, the router moves to the backup and the site keeps its address. In our lab: MikroTik 2 to 3 seconds, OPNsense 4 to 6 seconds, the UniFi agent 2.3 seconds. Your time depends on your router and lines.
Site-to-site New
Link two offices' networks from the portal, UniFi gateways for now. In our lab, cutting one office's main line interrupted traffic between the offices for 1.6 to 1.8 seconds.
Remote workers New
Staff laptops join the office network from anywhere, UniFi gateways for now. The laptop makes its own key; only the public half is sent to us.
Site-to-site and remote workers are new: tested in our lab, and now being tried on our own sites. Incoming connections use the site's address; everyday browsing stays on your own line. Failover means your router moving to its backup line: if our own hub stays up but stops forwarding traffic, there is no automatic failover; those events go on our uptime page.
Routers
UniFi gateways New
One command from the portal, then ports, site-to-site and remote workers from the portal. Running on our own office's Dream Machine SE. UniFi page.
MikroTik (RouterOS 7) Works today
Setup file plus a step-by-step guide, tested in our lab including the switch to a backup line. An agent that applies portal changes by itself is coming.
OPNsense Works today
Setup file plus one copy-paste command, tested in our lab including the switch to a backup line. An agent that applies portal changes by itself is coming.
Peplink, GL.iNet Coming soon
Listed when tested.
How it works
- Create your account and add a site.
- Pick your router. UniFi: copy the one-time install command. MikroTik or OPNsense: download the setup file.
- The site shows as connected in your dashboard once the router reaches us.
- Open the ports you need, for the devices you choose, and limit who can use them.
Your domain needs one DNS record pointing at the site's address, and it never has to change: One DNS record, and we handle the rest.
The full story, with our lab method and numbers, is in the white paper One static IP across any internet line.
Pricing
- Includes 1 TB of traffic a month through the site's address
- One dedicated static public IPv4 address per site, on every line
- Any port, with source allowlists
- Failover, site-to-site and remote workers included
- Setup help on your first site, by email
Cancel any time from your dashboard.
Coming soon
Not available yet, and no dates. We list them so you know where this is going, and we don't charge for anything before it exists.
Whole-site traffic, per device Coming soon
Choose which devices send all their traffic out through the site's address.
More addresses + IPv6 Coming soon
A small block of addresses for one site, and IPv6.
HTTPS on your domain Coming soon
Point your domain at a port and get HTTPS set up for you.
Login wall Coming soon
A sign-in page in front of any port.
Country blocks Coming soon
Allow or block visitors by country, per port.
Threat feed Coming soon
Known bad addresses blocked before they reach you.
Bonding Coming soon
Two lines used together as one, on one address.
TunnelNet OS box Coming soon
A ready-made box with everything built in.
Hypervisor agent Coming soon
Run the agent on your virtualization hosts instead of the router.
Insights Coming soon
Line health and history: which line is up, and when it switched.
Diagnose assistant Coming soon
One button checks your site and explains what's wrong in plain words. It uses AI.
MSP console + API Coming soon
All your clients' sites in one place, and sites and ports from your own tools.
Support, plainly
Support is by email only, at support@minakilabs.com. There is no phone line.
We publish our measured uptime, outages included, on our uptime page. We do not promise an uptime percentage.