Set up Dynamic IP

Set up a Dynamic IP so InfraNest always knows your home or office's current address — useful when your internet provider changes your IP from time to time and you still want your DNS records or firewall rules to find you.

Overview

• Creates a Dynamic IP that your router (or a computer) checks in with whenever your address changes.
• Automatically keeps chosen DNS records and firewall rules pointed at your current address.
• Works with most routers, including FRITZ!Box, UniFi, and Synology, as well as ddclient or the command line.

Create a Dynamic IP

1. Go to Dynamic IPs (under Automations) and select New Dynamic IP.
2. Give it a name you'll recognise later — "Home", "Office VPN".

That's it. The next screen has everything your router needs.

Tell your router where to send updates

1. Open the Dynamic IP and go to the Setup tab.
2. Pick your device from the list at the top — most routers, FRITZ!Box, UniFi, Synology, ddclient, or command line — and the page shows the exact value for each box that device asks for.

Almost every router calls these the same four things:

Box in your router	What to enter
Service or Provider	Choose Custom (sometimes "User-defined" or "Other")
Server	The address shown on the Setup tab — without https:// in front
Hostname	Any name your router accepts. We update whatever you linked, whichever name you type
Username	The dyn-… value shown. It identifies this Dynamic IP and is not a password
Password	Select Show to reveal it, then Copy it

Some devices — FRITZ!Box and Synology among them — ask for a single web address instead of a separate Server box. The Setup tab shows that address for those, labelled the way the device labels it.

NoteLeaving https:// in the Server box is the single most common mistake. Most routers add it themselves and end up with a broken address.

Check it worked

1. Save the settings in your router, then leave the Setup tab open.
2. Under Has your router reached us? the page watches for about a minute and updates by itself the moment your router calls in — showing when it arrived, from which address, and whether the password was right.

If it says the password was wrong, copy it again from the Password box; that's the most common cause.

Choose what follows your address

1. Go to the DNS tab and add existing A (IPv4) or AAAA (IPv6) records, or create one there.
2. Go to the Firewall tab and add inbound cloud-firewall rules, so remote access keeps working when your address changes.

One Dynamic IP can keep several records and rules up to date across different providers at once. You can also start from the other end: on a DNS record or a firewall rule, choose Track with a Dynamic IP.

Options worth knowing

• Alert me when the IP changes — get a message (email, Slack, Telegram) with the old and new address.
• Only trust the address we actually see — ignore an address your router claims and use the one the request genuinely came from. Recommended for firewall rules.
• If your router goes quiet, close the firewall opening — after about a week of silence, remove the allow-list entry so an abandoned setup can't leave a port open. You're warned before this happens.
• Replace the password — issues a new one if the old might have leaked. Your router will need the new password.

Troubleshooting

TipIf your router asks for a single web address instead of separate Service, Server and Hostname boxes, use the address shown on the Setup tab for your specific device — don't try to combine the four values yourself.

• Password rejected — go back to the Setup tab and copy the password again; it may have been mistyped or replaced.
• Nothing showing under "Has your router reached us?" — double-check the Server box doesn't include https://, and confirm the device you picked on the Setup tab matches your actual router.