Bypass CGNAT.
Expose your machines.

Dedicated public ports on a static IP, tunneled directly to your machine. Built for vast.ai hosts, self-hosted services, homelabs, and anyone who needs a machine reachable from the internet.

Works on Ubuntu and other Linux hosts, including Raspberry Pi and ARM64 systems.

Start with a 1-day free trial
1-day free trial Valid payment method required.
Plans from $5/mo or $30/yr. Set up in under 60 seconds. No networking knowledge required.
$ curl -fsSL https://api.needports.com/install | sudo bash -s YOUR_TOKEN --accept-tos

[1/5] Validating setup token...
    > Registered as gpu-rig-01 - ports 42401-42425
[2/5] Installing tunnel client...
[3/5] Writing configuration...
[4/5] Setting up system service...
[5/5] Verifying connection...
    > 25 port tunnels connected

  Setup complete!
  Ports: 42401 - 42425
  Status: Connected

CGNAT kills public reachability

Your ISP puts you behind carrier-grade NAT. Your machine has no public IP. Platforms like vast.ai, remote admin tools, and self-hosted services all depend on stable inbound reachability.

No public ports means broken inbound access.

Without NeedPorts

  • ISP gives you a shared IP behind CGNAT
  • No way to open inbound ports
  • Hosting platforms can't reach your machine
  • GPU sits idle, earning nothing
  • VPN "port forwarding" gives you 1 port, maybe

With NeedPorts

  • Dedicated static IP with your own ports
  • 25 to 200 ports, all forwarded to your machine
  • Your host or service looks directly reachable from the public internet
  • Your service or host becomes reachable within minutes
  • One command to install, auto-reconnects forever

Built for hosts and self-hosters

Real ports on a real IP. Not HTTP tunnels, not dynamic URLs, and not single-port VPN hacks.

Static IP & Ports

Your ports never change. A consistent public address that vast.ai and other platforms can rely on. No rotating IPs, no DDNS.

🚀

One-Command Setup

Paste a single command on your GPU rig. The installer handles everything: binary, config, systemd service. Live in under 60 seconds.

🔒

Encrypted Tunnels

All inbound traffic is routed through TLS-encrypted tunnels to your machine. Your data stays private in transit.

🔄

Auto-Reconnect

Runs as a system service. If your connection drops or your machine reboots, the tunnel reconnects automatically. Zero babysitting.

🛡

Automatic Tunnel Failover

NeedPorts monitors tunnel-server health and can move affected customers to healthy capacity when infrastructure degrades. Your install stays the same.

🌐

TCP & UDP

Forward any protocol. SSH, HTTP, custom AI inference endpoints, anything that listens on a port.

🛡

Per-Machine Isolation

Each machine gets its own dedicated port range and authentication token. No one else can access or interfere with your ports.

Three steps to public ports

No router configuration. No firewall rules. No networking knowledge required.

1

Pick a plan

Choose how many ports and bandwidth you need. We generate a one-time setup token for your machine.

2

Run the installer

Paste the one-liner on your GPU rig. It installs the tunnel client, writes the config, and starts the service.

3

You're live

Your ports are immediately reachable from anywhere in the world. Point vast.ai at your new IP and start earning.

More ports than any VPN provider

Start with a 1-day free trial on eligible plans. A valid payment method is required, then choose the plan that fits your machine or service footprint.

Starter
$5 /mo
Great for one machine or a small service set
Billed monthly. Cancel anytime.
1-day free trial. Valid payment method required.
  • 25 dedicated ports
  • 300 Mbps inbound tunnel speed
  • Static public IP
  • TLS-encrypted tunnels
  • Auto-reconnect
  • Automatic tunnel failover
  • No transfer limits
Business
$10 /mo
Heavy workloads, full port range
Billed monthly. Cancel anytime.
1-day free trial. Valid payment method required.
  • 100 dedicated ports
  • 1 Gbps inbound tunnel speed
  • Static public IP
  • TLS-encrypted tunnels
  • Auto-reconnect
  • Automatic tunnel failover
  • No transfer limits
Enterprise
$15 /mo
High-throughput hosts or larger service stacks
Billed monthly. Cancel anytime.
1-day free trial. Valid payment method required.
  • 200 dedicated ports
  • 1.5 Gbps inbound tunnel speed
  • Static public IP
  • TLS-encrypted tunnels
  • Auto-reconnect
  • Automatic tunnel failover
  • No transfer limits

More use cases on the way

GPU hosting is just the start. We're testing and adding support for these use cases next.

🎮

Game Servers

Minecraft, Valheim, CS2 from home

Coming Soon
🏠

Home Labs

Self-host Nextcloud, Plex, and more

Coming Soon
🖥

Remote Access

SSH/RDP into machines without public IPs

Coming Soon
📸

IoT & Cameras

Access devices remotely without VPN

Coming Soon
🔒

VPN Endpoints

Host WireGuard or OpenVPN servers

Coming Soon

NeedPorts vs other ways of getting inbound access

Most alternatives break down because they do not give you a stable public endpoint with enough dedicated ports.

Option Static public endpoint Many dedicated ports Easy setup Good fit for GPU hosts
NeedPorts Yes Yes Yes Yes
Typical VPN port forwarding Sometimes No, usually one port Usually easy Usually not ideal
Asking ISP for a public IP Sometimes Maybe Often slow or unavailable Can work if offered
Running your own VPS relay Yes Yes No, more operational work Can work, but higher effort

Not sure which plan fits?

Pick the rough size of your setup and we will suggest a starting point.

Questions people usually ask before buying

The short version: if your ISP or hosting setup puts you behind CGNAT, NeedPorts gives you a stable public endpoint and dedicated forwarded ports without making you rework your network.

What is CGNAT, and why does it break GPU hosting?

CGNAT means your ISP places your machine behind a shared public IP, so you cannot open inbound ports directly. Platforms like vast.ai need reachable inbound ports to route workloads to your host. Without public reachability, your machine may not be listable or usable.

How is NeedPorts different from a VPN with port forwarding?

Most VPN providers give you one forwarded port at best, and often rotate or restrict what you can expose. NeedPorts gives you a dedicated static public endpoint with a reserved block of ports for your machine, which is a better fit for GPU hosts and multi-service setups.

Do I get a static public IP and dedicated ports?

Yes. Your machine connects to the NeedPorts tunnel service and receives a dedicated forwarded port range on a stable public IP. That makes it suitable for vast.ai, SSH, web services, inference endpoints, and other workloads that need consistent inbound access.

How long does setup take?

Usually about a minute. After payment, NeedPorts provisions your port range automatically and gives you a one-line install command. Run it on your machine and the client installs, writes the config, starts the service, and connects.

What happens after I pay?

You are redirected to a success page that shows your install command once provisioning completes. Run that command on the target machine and NeedPorts will configure the tunnel client with your assigned port range automatically.

Does NeedPorts support both TCP and UDP?

Yes. The service is designed for real port forwarding, not just HTTP tunnels, so it can support TCP and UDP workloads that need direct inbound connectivity.

Can I cancel later?

Yes. Monthly plans can be cancelled anytime. Annual plans are billed once per year at the discounted rate. Subscription management is handled through Stripe.

Is this only for vast.ai?

No. vast.ai is the primary use case today, but NeedPorts also works for any machine behind CGNAT that needs a stable public IP and dedicated forwarded ports for remote access or hosted services.

Popular ways people use NeedPorts outside GPU hosting

If you need stable remote access to a home server, homelab, dashboard, API, or self-hosted service behind CGNAT, start with these pages.

Helpful reading before you buy

If you're comparing options or diagnosing why your host or service is unreachable, start here, or browse the full guides hub.

Get your ports

Start with a 1-day free trial on eligible plans. Choose your plan, use case, and billing interval, then continue securely through Stripe with a valid payment method. Annual plans are billed once per year at a 50% discount. Your ports are provisioned automatically and you'll get an install command immediately after checkout.

A name for your machine. Alphanumeric, hyphens, underscores. Max 32 chars.

1-day free trial for eligible new customers. Valid payment method required. Monthly plans cancel anytime.