3 ms·

I just run my own router behind AT&T's router. Everything in the home connects to my own router. The loss of bandwidth is minimal, if any. Are there any benefi

by yumraj 6y ago

I just run my own router behind AT&T's router. Everything in the home connects to my own router. The loss of bandwidth is minimal, if any. Are there any benefits to what you're doing over just doing that? Edit: In my case, bandwidth drops from 970mbps at the ATT gateway to 930mbps at the internal router (2nd NAT). Latecy drop is higher, from 3-4ms at the ATT gateway to about 9-11ms, but most likely that is due to the Moca 2.5 that I've had to run between ATT and my internal router.

sethhochberg 6y ago
What you're describing is probably a "double NAT" situation, where both your ISP router and your own router are providing NAT. This can work fine albeit with some extra latency for simple use cases, but if you ever run any services on your home network that either rely on UPnP or port forwarding, it'll fall apart. The best-of-both-worlds solution here is to have the outer ISP-provided router put your own router into some kind of DMZ, or use a bridge mode if the ISP router provides it. This basically turns your ISP-provided router into a dumber modem, and leaves all NAT and routing to your own hardware.
- yumraj 6y ago
  Yes, you're correct, it is a double NAT. The latency measured inside is around 9-11ms, so much higher than the 3-4ms measured at the ATT gateway. I am not doing any port-forwarding, but I can definitely see it run into all kinds of problems, or require some configuration beyond my simple skills. I'll investigate your comment: The best-of-both-worlds solution here is to have the outer ISP-provided router put your own router into some kind of DMZ, or use a bridge mode if the ISP router provides it. This basically turns your ISP-provided router into a dumber modem, and leaves all NAT and routing to your own hardware.
- linux2647 6y ago
  The AT&T router I have has an "IP Passthrough" mode which basically does a DMZ with my downstream router, but the router receives a public IP address. The AT&T router is essentially "invisible", but it takes up so much physical space, power, costs me $10/month, and is one more link in the fragile chain between me and the Internet. Other comments here mention how to put the AT&T router behind a Ubiquiti gateway and proxy the authentication to it via some scripts. This reduces the reliance on the AT&T router for direct traffic, but you still need the router operational for those authentication handshakes.
errantmind 6y ago
For me the loss of bandwidth was more severe. I gained about 200mbps on my 1gbps connection after bypassing (~650mbps -> ~850mbps). I also had a significant decrease in latency (~10%). Note, these improvements were even with the DMZ+ passthrough enabled on their router The router they provided also had a tendency to both get 'congested' and drop connections. Last, they have remote access to the provided router and do automatic, remote updates, which I am opposed to. I suspect they have other features they can abuse remotely. I want to control all my own hardware.

by yumraj 6y ago

sethhochberg 6y ago

What you're describing is probably a "double NAT" situation, where both your ISP router and your own router are providing NAT. This can work fine albeit with some extra latency for simple use cases, but if you ever run any services on your home network that either rely on UPnP or port forwarding, it'll fall apart. The best-of-both-worlds solution here is to have the outer ISP-provided router put your own router into some kind of DMZ, or use a bridge mode if the ISP router provides it. This basically turns your ISP-provided router into a dumber modem, and leaves all NAT and routing to your own hardware.

yumraj 6y ago
Yes, you're correct, it is a double NAT. The latency measured inside is around 9-11ms, so much higher than the 3-4ms measured at the ATT gateway. I am not doing any port-forwarding, but I can definitely see it run into all kinds of problems, or require some configuration beyond my simple skills. I'll investigate your comment: The best-of-both-worlds solution here is to have the outer ISP-provided router put your own router into some kind of DMZ, or use a bridge mode if the ISP router provides it. This basically turns your ISP-provided router into a dumber modem, and leaves all NAT and routing to your own hardware.
linux2647 6y ago
The AT&T router I have has an "IP Passthrough" mode which basically does a DMZ with my downstream router, but the router receives a public IP address. The AT&T router is essentially "invisible", but it takes up so much physical space, power, costs me $10/month, and is one more link in the fragile chain between me and the Internet. Other comments here mention how to put the AT&T router behind a Ubiquiti gateway and proxy the authentication to it via some scripts. This reduces the reliance on the AT&T router for direct traffic, but you still need the router operational for those authentication handshakes.

errantmind 6y ago

For me the loss of bandwidth was more severe. I gained about 200mbps on my 1gbps connection after bypassing (~650mbps -> ~850mbps). I also had a significant decrease in latency (~10%). Note, these improvements were even with the DMZ+ passthrough enabled on their router The router they provided also had a tendency to both get 'congested' and drop connections. Last, they have remote access to the provided router and do automatic, remote updates, which I am opposed to. I suspect they have other features they can abuse remotely. I want to control all my own hardware.