> All of the ones I've seen have allowed you to just turn that stuff off, but even if you can't, you can approximate it by setting router rules that just forwar

> All of the ones I've seen have allowed you to just turn that stuff off, but even if you can't, you can approximate it by setting router rules that just forward everything to your real router. The BGW320 gateway that AT&T provides with its 2g/2g and 5g/5g fiber services has a NAT table limited to 8192 tracked connections. Let me repeat that, a 5 gigabit symmetrical XGPON service has a NAT table that makes a 2004-era garbage tier device look good by comparison. It does not support a bridge mode, only "IP Passthrough" or the standard default NAT "DMZ" mode commonly seen on consumer hardware. Both of those rely on the tiny NAT table, so anyone who wants to establish more than 8192 connections at one time has to get a routed block of static IPs that allows the NAT to be entirely bypassed. At least officially, for now there's also a method to clone your ONT identifiers on to one that works as a plain bridge, which I have the parts for but haven't installed it yet. Their high speed DSL "U-Verse" services have a similar issue with a bad mandatory device, those require a complicated bypass involving passing through 802.1x packets to the provided router so it can authenticate while you then use your own to actually send/receive internet traffic.