What is an egress IP?
An egress IP is the public IP address that external servers see when your traffic leaves your device or network. It's the address that gets logged, checked, and allowlisted — and for most people, it changes without warning.
Every outbound connection reveals your IP address
When your browser, app, or service makes a request to an external server, that server records where the request came from. That 'where' is your egress IP.
Your device has two kinds of IP address:
- Private IP — the address your router assigns within your local network (e.g. 192.168.1.10). This is only visible inside your home or office. External servers never see it.
- Public IP (egress IP) — the address your ISP assigns to your internet connection. This is what every external server records when you connect to it.
When people talk about "egress IP," they mean the public IP that external services see as the source of your outbound traffic. It identifies your connection on the internet.
Most connections use a dynamic IP that changes constantly
Home and business internet connections typically use dynamic IP addresses — the address your ISP assigns changes each time your router reconnects. For browsing, that's invisible. For access control and consistent identity, it's a serious problem.
SaaS allowlists break
AWS, Salesforce, Atlassian, HubSpot, and most enterprise SaaS platforms let administrators restrict access to specific IP addresses. If your IP changes every time your router reconnects, you're updating that allowlist constantly — or abandoning it entirely.
Fraud systems flag your logins
Banks, payment processors, and security-conscious platforms flag access from unfamiliar IP addresses. A dynamic IP that shifts regularly looks like a new, unknown source every session — triggering extra verification steps or account locks.
Remote workers appear to move constantly
Your remote team works from home offices, cafés, and co-working spaces. Each location gives them a different IP. To an allowlist-based access control system, each looks like a separate, unknown user.
Geo-restriction becomes inconsistent
Region-locked streaming services, news archives, and government portals check your IP to determine your country. A dynamic IP can shift between ISP address pools in different regions, causing unpredictable access.
A static egress IP — one address that never changes
A static egress IP stays the same regardless of where you are, what network you're on, or when you connect. Add it to an allowlist once, and it keeps working.
With a static egress IP you can:
- Allowlist it in your SaaS tools. Add the IP once to your AWS security group, Salesforce trusted IP list, or internal tool — and it never needs updating.
- Satisfy compliance requirements. Security audits, SOC 2 reviews, and enterprise contracts often require that access to cloud resources comes from a documented IP range. A static egress IP is the cleanest way to meet that requirement.
- Stabilise banking and government portal access. Consistent source IP means the portal recognises your connection as normal, rather than flagging it as suspicious.
- Control geo-access reliably. A static IP in a specific country gives you consistent, predictable access to region-specific content.
Not all static egress IPs are equal
The type of egress IP matters. A shared proxy IP is used by thousands of strangers; a team egress IP is shared only within your group.
Dynamic ISP IP (no gateway)
Changes on every reconnect. Useless for allowlisting. Fine for casual browsing where consistent identity doesn't matter.
Shared commercial proxy
Used by potentially thousands of unrelated users. Often already on blocklists maintained by fraud systems and CDNs. Not suitable for corporate access control.
Team gateway egress IP (TYO Reach)
Shared only within your team or organisation — not with strangers. Fixed address, hosted in a specific region. Add it to your allowlist and it works for every team member, from any location.
Dedicated egress IP
Used exclusively by one organisation. Eliminates any risk of being affected by other users. Higher cost, but the cleanest solution for high-security environments.
When organisations rely on a static egress IP
Here are the practical situations where having a fixed, known outbound address makes the difference.
AWS security groups
Lock down inbound access to your EC2 instances or RDS databases to a single IP. Add the team egress IP once — no more "which of my developers' IPs do I allowlist today?"
Salesforce and CRM access
Salesforce trusted IP ranges prevent logins from unknown addresses. A static egress IP means your entire team logs in from the same known address, regardless of their home network.
Government and regulatory portals
Many Australian government portals used by accountants, lawyers, and financial advisers apply suspicious-activity rules based on source IP. A consistent address from an Australian exit node keeps access smooth.
Streaming and content libraries
Australian content libraries, news archives, and broadcaster catchup services are available only to Australian IP addresses. A static Australian egress IP provides reliable, consistent access.
Create a TYO Reach account
Sign up free — no card needed. Your first 500 MB is included.
Find your egress IP in the dashboard
After signing in, your static egress IP is shown on the dashboard. Add it to any allowlist right away.
Invite your team
Every team member who signs in and routes traffic through Reach exits from the same IP. One address to manage, for the whole team.
How do I find my current egress IP?
Visit any "what is my IP" service from the device or network you want to check — the address shown is your current egress IP. If Reach is active, you'll see the gateway's IP rather than your device's real address.
Can multiple people share one egress IP?
Yes — this is exactly what a team gateway provides. All traffic from every team member routes through the same gateway exit, presenting one address to external services. It's the address you add to your allowlist.
What's the difference between my egress IP and my device's IP?
Your device's private IP (e.g. 192.168.1.10) exists only inside your local network. Your egress IP is the public address your router or gateway uses when communicating with the internet. External servers never see your private IP — only the public egress address.
Does my egress IP change when I switch gateway regions?
Yes — each gateway region has its own fixed exit IP. If you switch from the Sydney gateway to Hong Kong, your egress IP changes to the Hong Kong exit address. Your dashboard shows the IP for each region.
Is a static egress IP the same as a VPN?
No. A VPN tunnels all your traffic; a static egress IP is simply a fixed, consistent outbound address. TYO Reach provides a static egress IP through selective routing — only the apps and domains you choose exit through the gateway. You get a stable address without routing everything through a tunnel.