Automation
Your address changes. Nothing breaks.
Home and office connections get a new address whenever the provider likes. InfraNest notices and keeps your DNS records and firewall rules up to date. If an update fails, you hear about it and can fix it with one button.
Free plan · No credit card · Works with the router you already have
- Your name keeps pointing at home
- Firewall rules follow your address
- Failed updates reach Home, with a fix
- Works with the router you already have
IPv4
84.24.117.62
IPv6
2a02:a44f:12c3:1:9ad3:74be:5f01:2c18
Network
Utrecht · KPN B.V.
Last seen
1 minute ago
When it checks in, these update
Safety
DNS records
Firewall rules
Your router tells InfraNest what your address is. Put the details below into your router’s Dynamic DNS settings, and everything you’ve linked follows it automatically.
Server
Just the address — no https:// in front
dyn.infranest.ioHostname
Any name your router accepts — we update whatever you linked below
vpn.northwyndr.comUsername
Identifies this Dynamic IP. It is not a password
dyn-4m2qhv7kPassword
Treat this like a password — only your router needs it
••••••••••••••••••••••••Your router reached us 1 minute ago and everything worked.
- northwind-bastion (in|tcp|22) now allows 84.24.117.62/321m
- vpn.northwyndr.com now points to 84.24.117.621m
- IPv4 changed from 84.24.109.7 to 84.24.117.621m
- IPv6 changed from 2a02:a44f:12c3:1:6c81:2f0a:bb14:9d33 to 2a02:a44f:12c3:1:9ad3:74be:5f01:2c1819h
- IPv4 changed from 84.24.98.211 to 84.24.109.79d
- First IPv4 address reported: 84.24.98.21161d
Works with your DNS providers
Point a name at your home or office, and it stays right
A server at home or in the office is easy to reach, until the address changes. In InfraNest, open a DNS record and pick your connection under Points to. The record now follows that connection, so you stop editing it by hand. If the connection has an IPv6 address too, a matching AAAA record can follow it.
- Set it from the record itself
- New addresses reach visitors within minutes
- One connection can keep many records current
Points to
Points to
Time to live set to 5 minutes, so the change reaches visitors within minutes when your address changes.
Keep your firewall open to you and closed to everyone else
Most dynamic DNS tools stop at the name. InfraNest also keeps your firewall rules current, so a new address does not lock you out. In the rule, choose Track with a Dynamic IP. When your address changes, your entry changes with it. Every other address in the rule stays as it was.
- Only your own entry ever changes
- Reads the live rule before each change
- Firewall rules are on Pro and up
northwind-bastionInbound ←
SSH from the office
Source IPs
Protocol
TCPPort
22Track with a Dynamic IP
Link this rule to a Dynamic IP so its allowed address updates automatically when your IP changes.
Starts from your current IP (84.24.117.62), then follows the Dynamic IP as it changes.
When an update fails, you hear about it and can fix it
A silent updater looks fine until your name points at an address that now belongs to someone else. InfraNest treats that as a problem. If an update fails or a connection stops reporting, it appears on Home, and on the DNS overview when records are affected. Press Recheck now to send your current address out again. It says what it will do first.
- Says which records and rules are out of date
- Alerts you after two days of silence
- Flags a connection that moves to a datacenter
Needs you · 3
Start here
Amsterdam office’s old address is still published
1 target did not take the new address and still points to the old one. Your internet provider can give that address to someone else, and this traffic would then reach them.
Sends Amsterdam office’s current address to every target again, now. Targets that accept it stop pointing to the old one.
Do itCancelRotterdam line stopped reporting
Warehouse VPN is reporting from a datacenter
Set it up on your router in a few minutes
Most routers already have a Dynamic DNS setting. Pick your device and InfraNest shows the exact boxes to fill in, with the values ready to copy. Then it tells you when your router got through. The agent is optional: if a machine on that connection already runs it, you can use that instead and leave the router alone.
- FRITZ!Box, UniFi, Synology and most other routers
- Or ddclient, or one command on a computer
- Nothing to install on your router
Which device are you setting up?
Set the service to “Custom” and fill in the boxes below. Works on OPNsense, pfSense, ASUS, MikroTik and most others. Step-by-step guide
What to type into your router
Server
dyn.infranest.ioHostname
vpn.northwyndr.comUsername
dyn-4m2qhv7kPassword
••••••••••••••••••••Under Internet › Permit Access › DynDNS, choose “Custom”. Paste the update address, then fill in the other boxes. Step-by-step guide
What to type into your router
Update URL
https://dyn.infranest.io/••••••••••••••••••••?ipv4=<ipaddr>&ipv6=<ip6addr>Hostname
vpn.northwyndr.comUsername
dyn-4m2qhv7kPassword
••••••••••••••••••••Under Internet › Dynamic DNS, choose service “Custom”. The Server box takes the address and path together. Step-by-step guide
What to type into your router
Server
dyn.infranest.io/nic/update?hostname=%h&myip=%iHostname
vpn.northwyndr.comUsername
dyn-4m2qhv7kPassword
••••••••••••••••••••In DSM, Control Panel › External Access › DDNS › Customize provider. Paste the query URL, then add your details. Step-by-step guide
What to type into your router
Query URL
https://dyn.infranest.io/nic/update?hostname=__HOSTNAME__&myip=__IP__Hostname
vpn.northwyndr.comUsername
dyn-4m2qhv7kPassword
••••••••••••••••••••Add this to /etc/ddclient.conf. Anything that speaks dyndns2 works the same way. Step-by-step guide
Configuration to copy
protocol=dyndns2 server=dyn.infranest.io ssl=yes login=dyn-4m2qhv7k password='••••••••••••••••••••' vpn.northwyndr.com
Run it from a cron job every few minutes, or from a script when your connection comes up. Step-by-step guide
Configuration to copy
curl -sS -u 'dyn-4m2qhv7k:••••••••••••••••••••' 'https://dyn.infranest.io/'
A machine on this connection already runs the InfraNest agent. Its check-ins carry the address, so nothing needs setting up in the router.
Server running the agent
The address is the one we see the agent arrive from; the agent reports nothing extra and needs no new permissions. Over IPv4 it updates your A records, over IPv6 your AAAA records.
Has your router reached us?
Your router reached us 1 minute ago and everything worked. 84.24.117.62 · FRITZ!Box 7590
Everything else it handles
The parts that are only interesting when you need them.
Where the connection came from
Every check-in shows the country, city and network of the address, so you can see at a glance that it is still your office line.
A flag when it moves to a datacenter
A home line that reports from a hosting or VPN network may be a VPN, or someone else with its update link. Home raises it. Mark that network as expected, or look closer. An automation can close the firewall access it gave.
Close the door when it goes quiet
Switch on Fail closed and a connection silent for about a week has its firewall openings removed. An abandoned or leaked token cannot leave a port open forever, and you are warned first.
A protected password for your router
The update password is stored encrypted. Showing it again is recorded in the audit log, and your organisation can require a fresh sign-in first. You can replace it whenever you like.
Alerts in your usual channels
Hear about a new address, a silent connection or a failed update by email, Slack or Telegram. Your own systems can listen with a webhook.
A history you can read
Each connection lists every address change, what it updated and anything that failed. Everything is also in the audit log.
Watch your own connection check in
Create a connection and copy the values into your router. Nothing changes until you link a record or a rule.
A free dynamic DNS updater vs InfraNest
The difference between a name that resolves and knowing it still points at you.
A free updater
- A name that quietly points at someone else’s address
- DNS only, and the firewall is yours to remember
- Editing an allow-list by hand on a Sunday morning
- No way to tell a working updater from a stopped one
- A leaked token that leaves a port open
With InfraNest
- A warning on Home, and an alert after two days of silence
- DNS records and firewall rules from one check-in
- Your entry in the rule updated for you, and only yours
- A named failure, with Recheck now beside it
- Fail closed removes the opening, after warning you
Switching from No-IP? See No-IP vs InfraNest
One login, ten modules
Nine modules are on every plan, Free included, and firewalls start on Pro. What changes is how much of each you get, plus a few advanced features from Pro.
Build on it
The cost of doing it separately
Buy each piece from a different tool and it adds up fast:
- Uptime monitoring
- ~€26
- SSL tracking
- ~€15
- Status page
- ~€26
- Across 3 separate tools
- ~€67/mo
Also in Pro, not counted above: 100 domains with DNS, 10 servers across your cloud providers, 25 automations, Dynamic IP and Drop Catch.
Each line is that tool’s cheapest paid plan. Pro covers all of it: 50 monitors, 100 certificates and 3 status pages on your own domain.
Prices checked October 2026 · dollar prices at the ECB rate
Try it with a free tool
Frequently asked
What is dynamic DNS, and why do I need it?
Most home and small-office connections do not have a fixed public address. Your provider changes it now and then, often after a router reboot. Anything pointing at the old address stops working. Dynamic DNS notices the new address and updates what depends on it. InfraNest does that for your DNS records and your cloud firewall rules.
Will it work with my router?
Almost certainly. It uses the dyndns2 standard, which FRITZ!Box, UniFi, Synology, OPNsense, pfSense, ASUS, MikroTik and most other routers support. Pick your device and InfraNest shows the exact boxes to fill in. ddclient works too, and so does one curl command from a computer.
Do I need to install the agent?
No. The agent is optional and your router can do the job. If a machine on that connection already runs the agent, you can use its check-ins instead. It then updates A records over IPv4 and AAAA records over IPv6, depending on how it connects.
How do I connect a DNS record to my home IP?
Open the A record in InfraNest and pick your connection under Points to. The record then follows your address. You can also link records from the connection’s own Targets tab.
Can it update a firewall rule, not just DNS?
Yes, on Pro and up, for firewalls at Hetzner and DigitalOcean. In the rule, choose Track with a Dynamic IP and your entry follows your connection. Every other address in the rule stays as it was.
What happens if my router stops reporting?
After two days you get one alert and it appears on Home. It clears as soon as your router checks in again. If you switched on Fail closed, a connection silent for about a week has its firewall openings removed. You are warned before that happens.
Is it safe to let a tool change my firewall?
It only ever changes the entry it wrote, as one single address. It reads the live rule from your provider before each change, so edits made there are kept. With strict mode on, only the address you really connected from can reach a firewall rule. Every firewall change sends an alert.
Does it work behind CGNAT?
No. With carrier-grade NAT, the address your router reports cannot be reached from the internet. InfraNest will not publish it and tells you why. Your internet provider can often give you a public address if you ask.
How many Dynamic IPs can I have?
One on Free, ten on Pro and unlimited on Business. One connection can keep as many DNS records and firewall rules current as you need, and it still counts as one.
Stop updating your address by hand
Create a connection and point your router at it. One is free, and your first check-in arrives within minutes.
Free plan · No credit card required · Set up in minutes