What is cgnat

Last updated: April 1, 2026

Quick Answer: CGNAT (Carrier-Grade Network Address Translation) is a networking technology that allows internet service providers to conserve IPv4 addresses by mapping multiple private IP addresses from customers to shared public IP addresses. It enables ISPs to serve more customers with limited IPv4 resources.

Key Facts

Understanding CGNAT

CGNAT, or Carrier-Grade Network Address Translation, is a technology deployed by Internet Service Providers (ISPs) to manage the limited supply of IPv4 addresses. As the internet has grown exponentially, the original IPv4 address space has become insufficient for the number of connected devices. CGNAT allows ISPs to maximize their address utilization by having multiple customers share public IP addresses.

How CGNAT Works

In a traditional setup, each customer receives a unique public IP address. With CGNAT, the ISP's equipment translates traffic from multiple customers' private IP addresses to fewer shared public addresses. The ISP's network equipment tracks connections using source port numbers and other identifiers to ensure traffic is correctly routed to each customer. When a customer initiates an outgoing connection, the CGNAT device records the mapping and ensures responses return to the correct customer.

Common Problems with CGNAT

While CGNAT solves a problem for ISPs, it creates challenges for users:

Detecting CGNAT

Users can determine if they're behind CGNAT by comparing their internal IP address with their public IP address. If the internal IP is in the range 100.64.0.0 to 100.127.255.255 (the IANA-reserved CGNAT range), they are likely behind CGNAT. Some ISPs may also explicitly disclose CGNAT usage or restrictions.

Long-term Solutions

The ultimate solution to IPv4 exhaustion is IPv6 adoption, which provides an essentially unlimited address space. However, IPv6 deployment has progressed slowly. In the meantime, CGNAT enables ISPs to continue serving customers with IPv4. Some ISPs offer IPv6-only or dual-stack connections to mitigate CGNAT limitations for tech-savvy users.

Related Questions

How is CGNAT different from regular NAT?

NAT (Network Address Translation) is used at home to share one public IP among devices. CGNAT does the same at the ISP level, sharing one public IP among thousands of customers, which restricts incoming connections.

Can I bypass CGNAT?

Some ISPs offer static public IPs for an additional fee, or IPv6-only connections that bypass CGNAT. Alternatively, VPN services or port forwarding through a relay service can provide workarounds.

What is IPv4 address exhaustion?

IPv4 addresses are limited to 4.3 billion unique addresses. As the internet grew, this supply became insufficient for all devices wanting unique addresses, leading to techniques like CGNAT to extend address availability.

Sources

  1. Wikipedia - Carrier-grade NATCC-BY-SA-4.0
  2. RFC 6598 - IANA-Reserved IPv4 Prefix for Shared Address SpacePublic Domain