TUNNELNET

Business / UniFi

UniFi · Dream Machine and UniFi gateways

A static IP on your UniFi gateway

One command from the portal, then ports from the portal. Your gateway gets a public IPv4 address that stays the same on Comcast, Starlink, 5G or whatever line is up. You still need a static IP, just not from your ISP.

Add your UniFi site

How it works

  1. Add a site in the TunnelNet portal and choose UniFi.
  2. Make your install command in the portal, log in to the gateway over SSH as root and paste it. The command works once, for 30 minutes. The agent sets itself up.
  3. Add the device in the portal and open a port on it. The agent applies it on the gateway and the port shows Applied.
  4. Check it from outside, for example a phone on cellular. tnet status on the gateway tells you if all is well.

Then point your domain at the site's address with one DNS record; it never has to change. One DNS record, and we handle the rest.

Step by step: A static IP on your UniFi gateway, step by step.

What we measured

Our own office

Our office runs on a UniFi Dream Machine SE. In 77 minutes of checks from Miami, once a second, 7 of 4,605 checks failed (0.15%), three of them while we restarted the test server. The office answered in about 135 to 140 ms. Field notes, bugs included.

In our lab

On a test gateway set up like a UniFi one: port changes from the portal worked from outside 7 to 19 seconds later; after a reboot the site answered again 44 to 58 seconds after boot; switching to the backup line took 2.3 seconds; when the gateway rewrote its own firewall, the agent put the rules back with a 1.2 to 2.3 second gap. If our own hub stays up but stops forwarding traffic, there is no automatic failover; those events go on our uptime page.

What you get on UniFi

Real visitor addresses

Your server sees who is really connecting.

Site-to-site New

Link two offices' networks from the portal.

Remote workers New

Staff laptops join the office network from anywhere.

Only what you open is reachable. Everyday browsing stays on your own internet line. To remove TunnelNet from the gateway: /data/tunnelnet/tn-agent uninstall.

Price

$49 per site per month, including 1 TB of traffic. Same plan as every TunnelNet Business site.

Questions: support@minakilabs.com. Homelab with one server, not a whole network? TunnelNet Home.