Static or Dynamic IP: When Your Business Actually Needs One

Sales staff describe it as the line between a home plan and a business one: a static public IP, for an extra monthly fee. The explanation is usually short and persuasive, "so it can be reached from outside".

That is true, but incomplete. "Reached from outside" covers several different needs, and only a small share of them genuinely demand a fixed address.

What actually differs

Every internet connection needs a public address to be reachable from beyond its own network. The difference lies only in who decides that address and how long it lasts.

With a dynamic IP, the provider hands you whichever address is free when your equipment connects. It may change, typically after a reboot, after an outage, or once a set period elapses. In everyday use the change goes unnoticed, because you are the one reaching out to services, not the other way round.

With a static IP, one address is reserved for your connection and does not change while you subscribe. Something out there can reach that address today, next month, and next year.

That difference only matters when the direction reverses: when something needs to initiate a connection towards you.

The more common problem: CGNAT

Before static versus dynamic, there is a more decisive question: whether your connection has a public address at all.

Many home plans now sit behind CGNAT, where a single public address is shared among many customers at once. In that arrangement your router holds an address valid only inside the provider's network. Port forwarding can still be configured, but it will never work, because the address reached from outside is not your router's.

Checking takes a minute. Open the router's status page and note the WAN address shown. Then open any IP-checking service from a device on that same network, and compare.

• The two match. You have a public address. Static or dynamic, port forwarding can work.
• They differ, and the router's address starts with 100.64 through 100.127, or with 10., 172.16–31., or 192.168., you are behind CGNAT.

If it is CGNAT, what you need first is not a fixed address but a public one. Some providers offer that separately, and more cheaply than a static IP package.

When a fixed address is genuinely required

A few situations do demand it, and they share one trait: some other party stores your address and refuses the connection when it changes.

• Allowlisting on a partner's side. Payment systems, service providers, or a head office that only accepts connections from named addresses. This is the least negotiable reason , when the address changes, you are locked out until their list is updated.
• A mail server or self-hosted service. Sending addresses are judged on reputation; an address that keeps moving almost certainly lands in spam folders.
• An always-on VPN between branches. A tunnel joining two offices is simpler to configure and less troublesome when both ends have fixed addresses.
• Machine-to-machine links that cannot use names. Some older equipment accepts only numeric addresses.

If your need is not on that list, you are most likely paying for something that will never be used.

What is usually enough: DDNS

The two needs mentioned most often, viewing CCTV remotely and reaching office files from home, can almost always be met without a fixed address.

DDNS (Dynamic DNS) gives your connection a name and updates that name whenever the address changes. The router reports its new address to the DDNS service, and you keep using the same name to reach it.

Nearly every router sold today includes a DDNS menu, and several manufacturers run the service free for their own hardware. Two caveats:

• DDNS does not help behind CGNAT. The name updates faithfully, but still points at an address that is not yours.
• There is a gap while an address change propagates, usually a few minutes. For checking CCTV occasionally that is irrelevant. For a service that must always answer, it matters.

For CCTV there is a simpler route still: most brands offer access through their own cloud service, requiring neither a public address nor port forwarding. Know the trade-off, footage passes through the manufacturer's servers, which is its own consideration, covered in the piece on CCTV camera security.

Weighing the cost

A static IP is sold as a fixed monthly fee, and the figure varies widely between providers. What often makes comparisons misleading: static IPs are rarely sold alone. They come attached to a business plan that also carries other things, a promised response time for faults, a more generous contention ratio, or a service level guarantee.

So the question is not "is a fixed address worth this much", but "is the whole business plan worth it". If your business stops when the internet stops, that response-time guarantee may be worth far more than the address, which merely comes along with it.

Conversely, if an outage means a few uncomfortable hours, paying for a business plan to obtain one address used to check CCTV twice a month is hard to justify.

What changes once you can be reached

One consequence sellers rarely mention: an address that stays fixed for you stays fixed for everyone else. Automated scanning sweeps the entire address space continuously, and an address that never changes accumulates a history, it gets recorded, listed, and revisited.

This is not a reason to refuse a static IP, but a reason to prepare a few things alongside it:

• Close every port not genuinely in use, and never expose the router's admin interface to the internet.
• Change default passwords on every device reachable from outside, CCTV recorders are the most frequently forgotten.
• Prefer a VPN over exposing services one by one. One guarded door is easier to maintain than five that each need remembering.
• Keep the firmware on exposed devices current, and check it on a schedule.

In short

The order of questions is simple, and answering them in order saves an unnecessary monthly bill.

1. Does anyone outside need to initiate a connection to you? If not, a dynamic address is enough and the discussion ends here.
2. Does your connection have a public address, or does it sit behind CGNAT? Check before buying anything.
3. Does that outside party store your address and refuse it when it changes? If so, a fixed address is genuinely needed. If not, DDNS solves it at no monthly cost.

A static IP is the right tool for some situations, and a standing expense that returns nothing in most others. What separates the two is not the size of the business, but whether anyone needs to find you at the same address tomorrow.

Frequently asked questions