Carrier-Grade Network Address Translation (CGNAT) is recommended for most Neptune home Internet connections. This article explains what CGNAT is, how Neptune implements it, and when you might prefer it over a Static IP.
If you’re unsure which option is right for you, CGNAT is usually the best place to start.
What is CGNAT?
CGNAT is a networking approach where multiple services securely share a public IPv4 address, while each service is assigned its own private address within Neptune’s network.
From a customer perspective:
Your Internet connection works normally
Websites, streaming, gaming, and cloud services behave as expected
Your devices are not directly reachable from the public Internet
CGNAT is widely used across the Internet today and is well suited to how most home connections are used.
How Neptune implements CGNAT
Neptune’s CGNAT implementation is designed to support modern home Internet usage reliably and predictably.
Key details:
Each service is allocated 2,000 outbound ports
Up to 32 services share a single public IPv4 address
Each service has its own private address within Neptune’s network
All services operate in dual-stack mode, with IPv4 and IPv6 available at the same time
This is designed to support typical home Internet use, including streaming, gaming, video calls, and general web access.
IPv6 support (dual-stack connectivity)
All Neptune services are dual-stack, meaning both IPv4 and IPv6 are available.
IPv4 traffic uses CGNAT
IPv6 traffic is publicly routable, with full support for Neptune's reverse DNS features
Many modern applications and platforms prefer IPv6 automatically. When IPv6 is used, traffic can flow directly without Network Address Translation at all.
This allows modern services to work efficiently while maintaining compatibility with IPv4-only systems.
Benefits of CGNAT
Improved security by default
With CGNAT, unsolicited IPv4 inbound connections from the public Internet are blocked. This reduces exposure to automated scans, probing, and opportunistic attacks.
For many households (especially those with smart devices or general browsing needs) this provides an extra layer of protection without requiring any configuration.
Less effective IP-based tracking
With CGNAT, your service does not have a permanently assigned public IPv4 address. Because IPv4 addresses are shared and change over time, IP-based tracking used by some websites, advertisers, and analytics platforms can be less effective than it would be with a dedicated Static IP.
This doesn’t make you anonymous, but it does mean your activity is not tied to a single, persistent IPv4 address. For customers who value privacy and prefer not to have a fixed public IPv4 address associated with their connection, CGNAT can be a better fit than a Static IP.
Less configuration required
CGNAT works out of the box.
No firewall rules to manage
No port forwarding to configure
No inbound access to secure
For most customers, this means a simpler and safer setup.
Designed for modern Internet usage
CGNAT works perfectly with:
Streaming services (Netflix, YouTube, Spotify)
Video calls and conferencing
Casual online gaming
Cloud services and social platforms
General browsing and downloads
For everyday Internet use, there’s usually no noticeable difference compared to a Static IP.
Your options are always open
Your choice of either CGNAT or Static IP is included with Neptune services at no additional cost. However, you only need to consider a Static IP if you require inbound connectivity or advanced networking features.
The switch is self served through your customer portal and takes about 3-5 minutes.
CGNAT vs Static IP
While CGNAT suits most home connections, some use-cases benefit from a dedicated Static IP, especially where inbound connectivity over IPv4 is required or IPv6 support cannot be relied upon.
Feature | CGNAT | Static IP |
Public IPv4 address | Shared | Dedicated |
Inbound connections | Blocked by default | Fully supported |
Port forwarding | IPv6 only | IPv4 & IPv6 |
Hosting services | IPv6 only | IPv4 & IPv6 |
Security exposure | Lower by default | User-managed |
If you don’t know which one you need, CGNAT is usually the right choice.
Frequently asked questions
Will CGNAT affect my speed?
No. CGNAT does not reduce your download or upload speeds, and it does not introduce noticeable latency for normal use.
Will gaming work?
Yes. Most online games, consoles, and gaming platforms work normally behind CGNAT. Some peer-to-peer games or older titles may report a “moderate” or “strict” NAT status. If this is important to you, a Static IP may be a better fit.
Can I use port forwarding?
No. Because CGNAT blocks inbound connections, port forwarding is not supported.
If you need to run servers, remotely access your home network, or expose services to the Internet, a Static IP is recommended.
Does CGNAT affect streaming services?
No. Streaming platforms such as Netflix, YouTube, and Spotify work normally on CGNAT.
Is CGNAT safe?
Yes, for standard home Internet usage it benefits from a safe default network posture.
By blocking unsolicited inbound traffic, CGNAT reduces the attack surface of your home network. This is particularly helpful for households with smart devices or users who don’t want to manage firewall rules.
Who should consider a Static IP?
A Static IP may be suitable if you:
Host servers or services from home
Need direct inbound access to your network
Require port forwarding for work or testing
Prefer full control over firewall and routing behaviour
A Static IP is optional and can be added to your Neptune service in your customer portal at any time.
Can I change later?
Yes. You can switch to Static IP if your needs change. Many customers start with CGNAT and change later if they later need inbound connectivity. This is self served through your customer portal and takes 3-5 minutes.
Summary
CGNAT is recommended for most home Internet connections because it’s secure, simple, and well suited to modern internet usage.
For customers who need inbound access or advanced networking features, a Static IP is available to reserve through your customer portal.
If you’re unsure which option is right for you, starting with CGNAT is usually the best choice, and you can always change later.