I’m looking for a mobile broadband provider (preferably prepaid) that doesn’t restrict me with CGNat. Do any provide a routable IP? Doesn’t need to be static.
Mobile Broadband (Preferably Prepaid) without CGNat?
jaydisc on 10/09/2024 - 19:43
Comments
Any reason to not just find the best carrier and plan that works for you and just use Tailscale/Headscale, etc
Because CG-NAT is absolutely crap for trying to reach the CG-NATed network (depends on your location, and carrier's NATing process also). This would probably be the same if you like use a DDNS routing also (since you got a heavy CG-NAT)
I used to get like 300Kbps-450Kbps download/upload connection with tailscale to my home with CG-NATed Vodafone 5G home broadband. (cheapest NBN 12 plan could help me reach home faster than this CG-NATed network.
Anyway OP, for you, simple answer is NO, it doesn't exists yet with major providers as far as I know (nor has anyone in past been able to give me a dedicated Public IP from mobile broadband like 4G or 5G home internet).
Sounds like confusing CGNAT and crap mobile band speed.
CGNAT is carrier grade NAT and doe not slow things down.Optus used to have a business mobile plan or could be broadband that had and extra add on $$$ that gave a public IP. This was 8 years ago, so yes no maybe they have it….
https://www.reddit.com/r/torrents/comments/17l61hv/behind_a_…
https://www.purevpn.com/au/blog/cgnat-gaming/
oh and on top of slowing things down, with CG NAT you dont normally get open public ports (to share stuff like xbox gaming server or minecraft or some website or torrent (etc. But the work around is the Tailscale/Twingate/DDNS etc. but they will all be slow, think yourself, internet has to be routed from your home assuming CG-NAT at home, then go to ISP servers which can be multiple, then finally your DDNS or VPN provider's public address, then you can reach the other end of client via some more routes like their home to their ISP to your ddns/vpn provider's public address).
@USER DC: DDNS = dynamic dns, it basically assign a web address to your ip on the fly, so even your IP address changes the web link will resolve to your new IP.
DDNS will not work with CGNAT. it's not a tunnel. it only resolves weblink to ip address, and you have no real IP address behind CGNAT.
Tailscale along with other tunnels/VPNs on the otherhand can work with CGNAT, essencially use a self hosted server as your relay.
No GCNAT === pay for a real internet connection to be able to run a web site etc.
CGNAT and Ngrok === you google NGROk and read up.Telstra.extranet APN on some business wireless services can get a publicly routeable IP, or at least used to. Check Whirlpool for details.
Each APN can have its own ip range and routing rules, some enterprise customers run their own apn so they can specify the ip address range assigned .
I don’t think anyone does it for single consumers tho.Not on mobile broadband, I’ll wager.
Ops, didn't realise OP is looking for mobile broadband haha
We use to re-sell an Optus Wholesale based Layer 2 Mobile Broadband service 3+ years ago that used the "exetel1" APN. That was provided with a Public/Static IPv4 address which we sold to the Business and Residential market. In fact, it was the first MBB service Exetel sold from 2005 (when I sold it to them/us!).
I believe there are still some Optus Wholesale MVNO's that still sell the Layer 2 MBB service and may provide a Public/Static IPv4 address - possibly Vocus (Dodo/Primus) and 2SG/Vonex plus maybe some others I'm not familiar with you'll have to call them and discuss.
Move to ipv6. No more cgnat!
I never applied for mobile broadband, but I have used plenty mobile phone sim card in 4G/5G routers.
ALL (retial/prepaid) 4G/5G SIM come with ipv4 CGNAT.
Telstra and telstra mvnos are the only one provide ipv6 ip address, but unfortunately they only provides a /128, yep, a single ipv6 address.
if you really wanted you can play with NATv6 to port map your service out.
if you need ipv4, maybe checkout Oracle Free Hosting + FRP (fast reverse proxy).
if you want fullcone network for your entire subnet, checkout tinyFECVPN.
if you want single client, I have wrote a Dockerfile myself to host all 3 software in a single docker instance:
KCPTun (TCP over UDP tunnel with error correction) + UDPSpeeder (UDP tunnel with error correction) + Shadowsocks (VPN)which will enable fullcone network with error correction (elimate packet drop at the cost of double data usage) and fullcone VPN.
if FEC error correction is not requried, then you may want to check Shadowsocks-rust (server side) + Netch (client side), this provides fullcone too.
Get a VPN with a Static IP, then get a mobile router that supports VPN Site to Site. Probably solved. All traffic routed via the VPN with the static IP.
What's the big deal about no CGNAT?
Any reason to not just find the best carrier and plan that works for you and just use Tailscale/Headscale, etc? A decent overlay solution will disappear CGNAT conundrums