I never thought I’d write the words “I love my ISP”, but here we are. Olilo has launched a WireGuard tunnel that gives you a real static IPv4 address and a /48 of IPv6 over any UK broadband line, for £10 a month.

For anyone self-hosting, that removes one of the most common blockers in a homelab: not having a public IP you can rely on.

What Olilo has launched

You keep whatever broadband line you already have and run a WireGuard tunnel from your router into Olilo’s network. Your traffic then leaves the internet from Olilo’s side, with an IP address that belongs to you.

What you get:

• A static public IPv4 address. It’s yours for as long as you keep the service, and custom reverse DNS is included free.
• A /48 of IPv6, routed down the tunnel for you to split into subnets however you like.
• No carrier-grade NAT (CGNAT) and no double NAT, so inbound connections and port forwards just work.
• Olilo’s full backbone: the same RPKI-validated routing, LONAP and LINX peering, and network operations team as their full-fibre customers. Traffic leaves as Olilo’s own network (AS212683), so the IP behaves like a proper one.

It’s the WireGuard version of Olilo’s existing L2TP tunnel, built for routers that can’t run an L2TP client, UniFi gateways included.

How it works

Setup takes three steps, and no engineer visits:

1. Use any UK line. Openreach, an alternative fibre network or 4G/5G all work. Olilo doesn’t care who delivers the connection.
2. Load the config. Olilo emails you a WireGuard peer config, usually the same working day. Paste it into your router, which connects to wg.olilo.co.uk:51820 and stays connected.
3. Your traffic leaves through Olilo. Once connected, your static IP and /48 are routed down the tunnel.

It works on anything that runs WireGuard. Olilo lists UniFi gateways, MikroTik RouterOS 7, OPNsense, pfSense, OpenWrt, GL.iNet, VyOS and plain Linux wg-quick. They don’t ship or require their own hardware.

Who it’s for

• Anyone stuck behind CGNAT. Plenty of ISPs, especially alternative fibre networks and mobile broadband providers, put customers behind carrier-grade NAT. This gets you a real public IP without switching provider.
• Self-hosters. If you run game servers, mail, a VPN, monitoring or anything else that needs inbound connections on a predictable IP, this is what you need.
• Anyone who wants failover without changing IP. This is the standout. For existing Olilo PPPoE and CityFibre broadband customers, the tunnel is free. Bring it up over a 4G or 5G backup router, and if your main line drops, your IP, routing and inbound access stay the same.
• People outside Olilo’s coverage. If you want their network but they don’t reach your area yet, you can tunnel in until they do.

Specs and pricing

Spec	Detail
Price	£10.00/month inc. VAT, flat with no introductory pricing (free/Included) for Olilo PPPoE and CityFibre customers)
Setup fee	None
Contract	30-day rolling, cancel anytime
Static IPv4	1 public, routable address
IPv6	/48 prefix delegated
Reverse DNS	Custom, no charge
Data	Unmetered (fair use)
Throughput	Soft limit of 2.5Gbps per tunnel
Protocol and endpoint	WireGuard (UDP), wg.olilo.co.uk:51820
MTU	1420
Bring your own IP / BGP	Available, see Olilo’s prices page

The honest caveats

• It’s not a consumer VPN. There’s no app, no choice of exit locations and no “no-logs” marketing. It’s a plain tunnel from your network to theirs, for routing, not privacy.
• It’s only as good as the line underneath. If your current ISP is congested or flaky, the tunnel will be too. Over 4G or 5G, the mobile link will usually be the bottleneck long before the 2.5Gbps limit.
• Failover covers your line, not Olilo. If Olilo’s own network has a problem, the tunnel goes down too.
• Expect some tuning on mobile. Mobile networks often need a slightly lower MTU than the default 1420, and a keepalive so the carrier doesn’t drop an idle connection.
• Fair use applies. Data is unmetered on Olilo’s side, but if you run the tunnel over mobile data, your mobile plan’s data cap still counts.

Security: what a public IP means for your homelab

A real public IP is great, but it also means the internet can reach you directly. Treat whatever device holds the tunnel as internet-facing, and lock it down accordingly:

• Treat the tunnel as untrusted, like a WAN. Traffic arriving through it should hit a default-deny firewall and reach only what you deliberately expose.
• Expose as little as possible. One reverse proxy behind strong authentication beats a handful of port forwards straight to services.
• Keep router admin panels off the tunnel side. SSH, web admin and LuCI should only listen on the inside. Binding a service to an interface isn’t a firewall rule, so check your firewall zones as well.
• Protect the tunnel’s private key. Anyone with it can connect as you and receive your inbound traffic. Never show the config or QR code on screen, and back it up encrypted.
• Plan IPv6 deliberately. A /48 means globally reachable addresses with no NAT in front of them. Make sure your firewall’s IPv6 rules are as strict as your IPv4 ones before you hand addresses out.
• Check your access controls still see real source IPs. If any device between the tunnel and your services rewrites the source address, IP allowlists can quietly stop working, or worse, start trusting everyone.
• Test from outside. Port-scan your public IP from a device on mobile data and confirm only the ports you meant to open answer.

When KL Tech Videos asked why they offer this amazing service free to exsisting customers the CEO had this to say…

Aydan (CEO/Co-founder): Becuase it dont cost to do it 🙂

The Team from frontline support to CEO regulary engages with users on the companies Discord channel!

Verdict

A static IPv4, a /48 of IPv6 and real inbound access over any UK line, for £10 a month with no setup fee and a 30-day rolling contract, is very hard to argue with. If you’re already an Olilo PPPoE or CityFibre customer, free failover that keeps your IP is one of the best upgrades you can make to a homelab.

If you’re stuck behind CGNAT or want proper failover for self-hosted services, it’s well worth a look. I’ll be putting it through its paces on the channel, so subscribe to @KLTECHVIDEOS if you want to see how it holds up.

Sources

• Olilo WireGuard tunnel
• Olilo L2TP tunnel
• Olilo prices and charges