KosmosBridge routes your WireGuard tunnel through a satellite uplink — giving operators a clean, non-datacenter residential exit that bypasses CGNAT without touching a VPN provider.
Complete Stripe checkout. You receive an API key tied to your billing account. No ongoing subscription — you pay per MB consumed.
Run wg genkey | tee privkey | wg pubkey > pubkey on your system. Keep the private key local — only your public key leaves your machine.
POST /provisionPOST your public key with your API key as the bearer token. The API returns a complete wg-quick config file. No back-and-forth.
Run wg-quick up client.conf. Traffic exits via Starlink. Verify with curl ipinfo.io/ip — you should see a residential 98.97.x.x address.
| Ingress endpoint | 62.238.105.232:51820 (UDP) |
| Protocol | WireGuard (kernel module or userspace) |
| Operator subnet | 10.50.0.0/24 — isolated assignment per operator |
| Exit IP range | 98.97.0.0/16 (Starlink, dynamic, ARIN residential) |
| Back-tunnel | wg-back-a, persistent keepalive 25s, Hetzner → craigpi |
| Billing unit | Bytes (rx + tx), converted to MB, reported to Stripe every 60s |
| Meter event | agora_transport_mb · price_1U3So2HI4Bbp4yAzPP6mjWcO |
| Provisioning API | POST https://transport.eclesia.app/provision |
| Auth | Authorization: Bearer <api-key> |
| Config format | wg-quick compatible INI — bring up with wg-quick up client.conf |
Complete Stripe checkout to receive your API key. Takes under two minutes from checkout to tunnel up.