CGNAT vs Direct IP
Techmedics · Internet Services

Choose the Right
Internet Connection

Not all internet connections reach the public internet in the same way. Compare CGNAT with a direct public IP connection and choose the option that best suits how you use the internet.

CGNAT — Shared Public IP
Direct Public IP — One Customer, One Address
Talk to Techmedics Compare the Options
What's the difference?

Your Connection to the Public Internet

The world has a limited number of IPv4 internet addresses — the unique numbers that identify devices on the public internet. Because there are far more customers than available addresses, many internet providers use a system called CGNAT (Carrier-Grade Network Address Translation) to allow several customers to share a single public IP address.

CGNAT helps keep connection costs down and works well for most everyday internet activities, including web browsing, email, cloud services and on-demand video streaming such as Netflix and YouTube.

A direct public IP connection gives your router its own public-facing internet address rather than sharing one through CGNAT. This creates a more direct path between your router and the public internet, and gives you greater control over how incoming connections are handled — which matters for gaming, remote access, hosting and other services that depend on inbound connectivity.

How each connection works

Understanding the Difference

These diagrams show how each connection type routes your traffic to the public internet.

CGNAT — Shared Public IP
CGNAT Shared Connection Public internet connects to a CGNAT gateway holding a shared IP address, which branches to three customers: A, B and C. All share the same public IP. PUBLIC INTERNET CGNAT GATEWAY SHARED PUBLIC IP: 203.97.x.x Private ISP addresses (100.64.x.x range) Customer A Home User Customer B Business Customer C Home User All three share the same public IP address

With CGNAT, several customers share the same public IPv4 address through the internet provider's network.

Direct Public IP Connection
Direct Public IP Connection Public internet connects directly to an individual public IP assigned to one customer's router, which then connects to the customer's devices. PUBLIC INTERNET INDIVIDUAL PUBLIC IP 203.97.x.x — Assigned to this customer only CUSTOMER ROUTER Customer Network Laptop / PC NAS / Server Camera / Device Customer Devices

With a direct public IP, the customer's router receives its own public internet address rather than sharing one through CGNAT.

Compare your options

CGNAT vs Direct Public IP

Understanding the advantages and limitations of each connection type helps you choose the one that suits how you use the internet.

CGNAT
Shared Public IP Connection

CGNAT allows an internet provider to share one public IPv4 address among several customers. It is a practical and affordable option for customers who mainly browse the web, use email, access cloud services and watch online video.

Advantages
  • Lower-cost connection option.
  • Suitable for general web browsing and email.
  • Works with most cloud-based services.
  • Suitable for Netflix, YouTube and most on-demand streaming.
  • No public-facing address directly assigned to the customer's router.
  • A practical choice for customers who do not require inbound connections or port forwarding.
Limitations
  • The public IP address is shared with several customers.
  • Traditional port forwarding generally cannot be configured through the provider's CGNAT gateway.
  • May create double-NAT conditions.
  • Can cause strict or moderate NAT types with some online games.
  • May affect peer-to-peer gaming and the ability to host multiplayer sessions.
  • Can prevent direct remote access to cameras, a NAS, a home server or other equipment.
  • Not suitable for services that require unsolicited inbound internet connections.
  • Troubleshooting IP-based blocks can be more complicated because the public IP is shared.
Best for everyday internet use and customers wanting the most affordable option.
Direct Public IP
One Public IP — One Customer

A direct public IP gives an individual customer their own public-facing internet address. This provides greater control over the connection and makes it possible to use services that require inbound access or port forwarding.

Advantages
  • A public IP is assigned to the individual customer rather than shared through CGNAT.
  • Supports port forwarding when correctly configured.
  • Better compatibility with peer-to-peer applications.
  • Can provide a more open NAT type for compatible online games.
  • Better suited to hosting multiplayer game sessions.
  • Suitable for remote-access VPNs.
  • Supports direct access to compatible cameras, NAS devices and servers.
  • Better suited to self-hosted applications and services.
  • Easier to diagnose some IP-address, NAT and connection problems.
Considerations
  • Usually costs more than a CGNAT connection.
  • Does not automatically increase the internet plan's speed or bandwidth.
  • Devices and services exposed to the internet must be configured securely.
  • A suitable firewall, strong passwords, updates and careful port-forwarding rules are essential.
  • A dynamic public IP may change unless a static IP is specifically included or purchased.
Best for gaming, remote access, hosting and applications requiring greater connection control.
Feature comparison

Quick Reference

A summary of how CGNAT and a direct public IP connection compare across common use cases.

Feature CGNAT — Shared IP Direct Public IP
Public IP assignmentShared by multiple customersAssigned to one customer
General browsing and emailExcellentExcellent
Netflix and on-demand streamingSuitableSuitable
Online gamingUsually suitable; NAT restrictions may occurBetter compatibility for NAT-sensitive games
Hosting multiplayer gamesMay be restrictedBetter suited
Port forwardingGenerally unavailable through CGNATAvailable when correctly configured
Remote camera or NAS accessMay require a cloud relay or alternative solutionDirect access can be configured
Hosting servers or websitesGenerally unsuitableSuitable when securely configured
VPN server accessMay be restrictedSupported when correctly configured
Connection costLowerHigher
Connection speed / bandwidthBased on the selected internet plan — the same for both options
Public IP assignment
CGNAT
Shared by multiple customers
Direct IP
Assigned to one customer
General browsing & email
CGNAT
✓ Excellent
Direct IP
✓ Excellent
Netflix & streaming
CGNAT
✓ Suitable
Direct IP
✓ Suitable
Online gaming
CGNAT
Usually suitable; NAT restrictions may occur
Direct IP
Better NAT compatibility
Hosting multiplayer games
CGNAT
May be restricted
Direct IP
Better suited
Port forwarding
CGNAT
Generally unavailable
Direct IP
Available when configured
Remote camera / NAS
CGNAT
May need alternative solution
Direct IP
Direct access configurable
Hosting servers
CGNAT
Generally unsuitable
Direct IP
Suitable when secured
VPN server
CGNAT
May be restricted
Direct IP
Supported when configured
Cost
CGNAT
Lower
Direct IP
Higher
Speed / bandwidth
CGNAT
Based on your internet plan
Direct IP
Based on your internet plan
Help me choose

Which Option Is Right for Me?

Choose CGNAT if you:

  • mainly browse websites and use email;
  • use social media and cloud applications;
  • watch Netflix, YouTube or other on-demand video;
  • do not need port forwarding;
  • do not remotely connect to equipment at your property;
  • want to keep the monthly cost as low as possible.

Choose a Direct Public IP if you:

  • regularly play NAT-sensitive or peer-to-peer online games;
  • want to host multiplayer gaming sessions;
  • need port forwarding;
  • need remote access to cameras, a NAS or other equipment;
  • operate a VPN server or host websites or servers;
  • need greater control over inbound internet connections.
Not sure which connection you need? Tell Techmedics how you use the internet, and we will help you select the most appropriate option without paying for features you do not require.

A note on security with a direct public IP

A direct public IP does not automatically expose every device on your network. Your router and firewall still provide protection for devices that are not intentionally opened to the internet. However, any ports or services deliberately opened to the internet must be securely configured, regularly updated and protected with strong authentication. Techmedics can advise on best practices for securing internet-accessible services on your connection.

We're here to help

Still Not Sure Which Connection You Need?

Talk to Techmedics about how you game, stream, work and connect remotely. We will help you choose the right internet connection for your requirements and budget.

Talk to Techmedics View Internet Plans