Static IP vs CGNAT: What Australian Internet Users Need

A practical networking guide for households deciding whether CGNAT is harmless, an opt-out is enough or a paid static IP is justified.

CompareUs Editorial TeamConsumer utilities editorial team
7 August 20269 min read
Modern wireless router representing static IP and CGNAT internet configurations.

Static IP vs CGNAT matters only after the household knows what it needs the internet connection to do. Ordinary browsing, streaming and video calls usually work behind carrier-grade network address translation. Hosting a game server, reaching a home camera directly or accepting inbound business connections can be different.

A public dynamic address, static public address and CGNAT are three separate arrangements. Providers do not describe them consistently, and IPv6 can change the solution again. This guide explains the practical differences without suggesting that every household should expose devices to the internet.

Quick answer: static IP vs CGNAT

CGNAT is fine for most browsing, streaming and outbound gaming, but it can block unsolicited IPv4 connections used by hosting, direct camera access or some peer-to-peer services. Ask whether the provider offers a public dynamic IP, free CGNAT opt-out, paid static IP or IPv6. Prefer secure vendor relay or VPN access over opening ports casually.

Key takeaways

  • CGNAT shares a public IPv4 address among multiple customers.
  • A public dynamic IP can accept inbound traffic but may change.
  • A static IP remains consistent and is useful for defined business or remote-access needs.
  • Gaming problems are not always caused by CGNAT.
  • Exposing ports creates security responsibility.

static IP vs CGNAT: side-by-side comparison

The table is a decision aid, not a substitute for an address check or current plan document. Read across the factors that match the household rather than choosing from the first row that looks favourable.

What CGNAT changes

IPv4 addresses are scarce. Under CGNAT, a provider translates connections for many customers behind shared public addresses. Outbound sessions work because the carrier tracks them, but an unsolicited inbound connection does not know which household should receive it.

This can affect manual port forwarding, some peer-to-peer matchmaking, self-hosting and IP-based allow-lists. It usually does not make downloads slow by itself. Latency and routing problems require separate evidence.

Public dynamic and static addresses

A public dynamic IPv4 address is assigned directly to the customer service but can change after reconnection or provider events. Dynamic DNS can map a hostname to the changing address. A static IP is designed to remain consistent, which simplifies allow-lists, servers and some remote-work systems.

Static addresses may cost extra or be limited to business plans. They do not make the connection faster and do not bypass a router firewall automatically. A fixed address can also make a poorly secured service easier to find repeatedly.

Gaming, cameras and remote work

Console NAT warnings may improve with a public address, but first check double NAT caused by two routers, UPnP settings, platform outages and game-specific requirements. Many modern games use relay infrastructure and work under CGNAT.

Camera apps often use vendor cloud relays that make outbound connections, avoiding manual ports. This is convenient but creates dependence on the vendor's security and service. For professional remote access, an authenticated VPN or zero-trust overlay is often safer than exposing an administration page.

How to check and what to ask

Compare the WAN address shown by the router with the address reported by a reputable external check. Private or shared ranges and a mismatch can indicate upstream translation, although provider support can confirm the arrangement. Do not publish screenshots containing addresses or credentials.

Ask whether CGNAT is default, whether opt-out is available, whether the replacement is public dynamic or static, the fee, IPv6 support and any blocked ports. Superloop's residential CIS is one current example that explicitly states default CGNAT and an opt-out on request; other providers set their own policies.

How to compare options in the real world

A high-quality comparison moves from the address to the household and then to the contract. The following checks are deliberately practical: they are the questions that expose whether an attractive plan will still make sense after installation and after the first promotion has finished.

Inbound need

Identify the exact service that must accept connections. Treat this as an eligibility gate: if the answer is uncertain, resolve it before using price as a tie-breaker. Save the address result or written provider response with the order.

Address stability

Decide whether dynamic DNS is enough or an allow-list requires static addressing. Give current, plan-specific evidence more weight than a single review or speed test from another household. Note the date because network performance and advertising can change.

Provider policy

Check CGNAT default, opt-out, fees and IPv6. Translate the specification into a household job—such as a video call, backup or game session—so it is clear what a better result would improve in practice.

Security

Prefer authenticated tunnels and least exposure. Include the equipment in the comparison rather than treating it as a free extra. Ownership, compatibility and return rules can change both performance and the cost of leaving.

Troubleshooting

Rule out double NAT, Wi-Fi and platform faults before changing plans. Put this figure into a twelve-month worksheet beside every shortlist option. That prevents an introductory offer or omitted fee from deciding the comparison by accident.

Test the service, not the marketing

Start with evidence from the exact address. Broadband products are delivered to premises, not suburbs in the abstract, and two homes on the same street can have different access technology, signal conditions or installed equipment. Save the address-check result and the plan document shown when you order; they provide a much stronger benchmark than a national maximum or a neighbour's experience.

Next separate the internet service from the network inside the home. A controlled Ethernet test shows what reaches the router, while a Wi-Fi test shows what reaches a particular room and device. Both results matter to the household, but they point to different fixes. Changing provider cannot repair a poorly placed access point, and buying a mesh kit cannot create wholesale capacity that is missing upstream.

Finally test at the time the connection matters. An evening streaming household, a daytime remote worker and a creator running overnight transfers can see different constraints. Keep several results rather than the most flattering or disappointing test. A useful comparison describes a pattern, not a screenshot chosen to prove a prior opinion.

Household examples

These examples show how the same market information can produce different answers. They are not recommendations for a particular provider; availability, prices and equipment must still be checked for the individual address.

Ordinary streaming home

The household browses, streams and uses cloud apps. CGNAT is unlikely to justify changing provider or paying extra. Investigate only if a specific service fails. The sensible next step is to confirm the address and current terms, then test the result during the household's busiest period.

Home game server

Friends need to connect directly to a server hosted inside the home. Request a public IP arrangement and configure a secure narrow port rule. Patch the server and understand the exposure. Here, a stable connection and suitable home network are more valuable than the largest number printed on the plan card.

Business allow-list

A client permits login only from a known source IP. A static public IP may be the simplest compatible option. Use VPN and multi-factor controls as well; an IP is not identity. This decision should be reviewed after activation because equipment, signal conditions and actual household behaviour can overturn a paper comparison.

A practical sign-up checklist

  1. Qualify the exact address and note the access technology, available tiers and any installation work.
  2. Choose the household's required download, upload, latency and reliability before looking at provider promotions.
  3. Compare typical busy-period information and read the current Critical Information Summary for each shortlisted plan.
  4. Calculate twelve months of plan charges, setup, delivery and hardware, then record the normal ongoing price.
  5. Check router compatibility, port speeds, Wi-Fi coverage, voice requirements and equipment return conditions.
  6. Read the fault, complaint, cancellation and switching process before the service is under pressure.
  7. Keep the existing connection until the replacement is active and tested when continuity is important.

This process may feel slower than clicking the first discount, but it usually takes less time than disputing a surprise modem charge or diagnosing a plan that was never suitable. A comparison is complete only when speed, support, equipment and exit terms have all been considered.

Common mistakes to avoid

  • Paying for a static IP to improve raw speed.
  • Blaming every game issue on CGNAT.
  • Opening broad port ranges without security controls.
  • Confusing a public dynamic address with CGNAT.
  • Posting router address screenshots publicly.

Most of these mistakes come from comparing one visible number while leaving the harder details unexamined. The remedy is simple: use the same address, tier, time period and household workload for every option, and give written plan documents more weight than sales shorthand.

Compare internet plans with CompareUs

Use the CompareUs internet comparison to review suitable plans, then check the internet provider directory and the NBN speed calculator. The internet value calculator can help turn promotions, hardware and ongoing charges into a fair cost comparison. For technology and address context, use the NBN availability calculator.

Plan availability, prices and performance claims can change. Confirm the current offer with the provider before ordering, keep the Critical Information Summary and schedule a review when any discount expires. CompareUs provides general information and does not assume one provider or technology is best for every household.

Sources and methodology

This guide prioritises Australian regulators, network operators, current provider documents and other first-party technical sources. Provider pages were used for product conditions, not as independent proof that one provider is superior. Sources were checked for this August 2026 publication batch.

Where should you go next?

FAQs

Does CGNAT slow internet down?

It is not normally the main speed limit. Provider routing, congestion, access technology and home Wi-Fi are more likely causes of poor throughput.

Is CGNAT bad for gaming?

Many games work normally, but direct hosting, peer-to-peer matchmaking or strict NAT requirements can be affected. Diagnose the specific game first.

Do I need a static IP for cameras?

Usually not when the camera uses a secure vendor relay. Direct hosting may use a public address, dynamic DNS or preferably a secure VPN.

Can I opt out of CGNAT?

Some providers allow a free or paid opt-out, while others require a static IP or business product. Ask for current written terms.

Is a static IP more secure?

No. It is predictable, not inherently secure. Firewalls, patches, authentication and limited exposure provide security.

Does IPv6 solve CGNAT?

IPv6 reduces the need for IPv4 address sharing, but both the provider and application path must support it and a firewall is still essential.