Network
A fixed IPv4 address and an IPv6 prefix, routed from our network in Luxembourg to your own router or server over WireGuard. Works behind CGNAT, dynamic IPs and ISP modems without bridge mode. No BGP, no ASN.
What you get
How it works
You request a quote and tell us what you will run over it. We review every tunnel order individually.
After payment you send us your WireGuard public key in a ticket. We reply with our endpoint, our public key, your addresses and the gateway addresses.
You configure the tunnel on your side. We confirm when it is live, then remove the keys from the ticket.
Activation normally takes one to five business days from the later of payment and receipt of your key.
The wg-quick form of a tunnel, with placeholders. Your ticket carries the real keys, addresses and port; nothing else changes.
[Interface]
PrivateKey = <your private key>
Address = 203.0.113.10/32, 2001:db8::1/64
[Peer]
PublicKey = <our public key>
Endpoint = <endpoint from your ticket>:<port from your ticket>
AllowedIPs = 0.0.0.0/0, ::/0
PersistentKeepalive = 25Typical uses
Support scope
Fair use, in short
Ordinary traffic is unlimited and not metered per GB. Each tunnel has a monthly reference level: 1 TB for every full euro of the monthly price excluding VAT, rounded up, at least 3 TB. A quote can state a different level or a dedicated bandwidth commitment, and then the quote applies. Going above the level is not a breach and costs nothing by itself. If sustained traffic affects other customers we contact you first, offer more allocation or a committed rate, or rate-limit; we do not cut a tunnel for volume alone. Product Terms, Section 4; the mechanism is Section 5.2.5 of the Terms of Service.
FAQ
No. The addresses are routed statically over the tunnel.
Yes. Your side initiates the tunnel; only outbound UDP to our endpoint is needed.
Yes. Any block or prefix size can be quoted. Tell us what you need in the quote request.
WireGuard only. Other protocols are not offered.
No. Capacity is shared. If you need a committed rate, ask for a quote.
Outbound port 25 is closed by default and opened after review of your use.
In Luxembourg, to NovaNode. Geolocation and abuse contact are NovaNode's and cannot be changed per customer.
The tunnel is disabled and the addresses return to us at the end of the paid period. Update your DNS before then.
Guides
Why port forwarding stops working on a shared IPv4 address, how to tell whether your connection has one, and the four ways around it, with their limits.
Set the PTR record of your VPS address yourself in the control panel. The forward record must exist first.
Which payment methods the client area accepts, how VAT is applied to consumers and EU businesses, and why the two price displays on the site differ.
Quote
Addresses, prefix size and whether you need a committed rate. We answer with a quote; nothing is set up before you accept it.
Every order is governed by our Terms of Service. The product sections in it set the limits that matter in practice, such as what unlimited traffic means and when a plan is no longer suited to a workload.
Prices All prices are in euro. The switch in the top bar shows them with or without VAT. Consumers pay 17 % Luxembourg VAT; businesses with a valid EU VAT number outside Luxembourg are invoiced without VAT under the reverse-charge mechanism; Luxembourg businesses pay 17 %. Prices and plan contents can change; the price shown in the client portal at the time of ordering applies.
IP Tunnel The IP Tunnel service is governed by the NovaNode Terms of Service and the IP Tunnel Product Terms (v1.0, effective 20 October 2026). Addresses are Provider-Aggregatable resources of NovaNode (Terms, Section 5.5). Prices are quoted individually and shown exclusive of VAT for business customers; Luxembourg VAT at 17% applies to consumers.