5 ms·
CGNAT is hell. Here I had to choose between crap bandwidth or CGNAT. I chose crap bandwidth.
by neepi 1y ago
CGNAT is hell. Here I had to choose between crap bandwidth or CGNAT. I chose crap bandwidth.
- immibis 1y agoHell for hosting, but if you're doing adversarial interoperability as a client, it does help you avoid being IP-banned. (At least in Western countries. I hear that Africa and Latin America tend to just get their CGNAT gateways banned because site operators don't give a shit about whether users from those regions can use their sites)
- neepi 1y agoNot quite. I'm in the UK and some of our customers get blocked by overzealous CDNs and they're all on CGNAT.
- dkjaudyeqooe 1y agoIt's not really overzealous since not banning the CGNAT IPs just gives the abusers safe harbor.
- immibis 1y agoAnd banning them makes an entire country unable to use your site. That might be tolerable (to the site owner, but not in general) if the country is Argentina. Not if the site is France. Which is why Argentina gets blocked a lot more than France and if you want to scrape things you'd do better on a CGNAT network in France.
- jeroenhd 1y agoThe client feature only works for websites that care about making exceptions for CGNAT users. Plenty of them simply ban the shared addresses. That's part of the reason why countries like India are getting so many CAPTCHAs: websites don't care for the reason behind lackluster IP plans from CGNAT ISPs. If the ISP offered IPv6 support, people wouldn't have so many issues, but alas, apparently there's money for shitty CGNAT boxes but not IPv6 routers.
- dkjaudyeqooe 1y ago> it does help you avoid being IP-banned Actually all it does is get everyone behind the CGNAT banned. I've lost access to the WSJ and NYT recently, and other websites over time. For every Cloudflare backed website, I have to pass a captcha on every access. Fuck those people doing "adversarial interoperability as a client", AI scraping, et al, who take away from thousands of people for profit, then move on to the next pool of victims.
- rzzzt 1y agoYouTube showed me a "this household watches suspiciously many videos" once when the provider moved us behind a CGNAT (because 100 households were suddenly watching from the same address, not just one). It also messes a bit with geolocation, we frequently teleport to different places within the country.
- immibis 1y agoYeah, but in this case, the negotiation between the ISP and YouTube typically ends with the IP being unblocked. It's not like when one household is actually watching as much as 100 people, when the IP stays blocked.
- jaoane 1y agoCGNAT is completely irrelevant to the average person. It’s only an issue if you expect others to connect to you, which is something that almost all people don’t need. (inb4 but the internet was made to receive connections! Well yes, decades ago maybe. But that’s not the way things have evolved. Get with the times.)
- juergbi 1y agoCloudflare sometimes preventing access to some sites and annoying CAPTCHA challenges due to CGNAT are relevant to the average person. Full IPv6 support should be a requirement for both ISPs as well as websites and other servers.
- jaoane 1y ago> Cloudflare sometimes preventing access to some sites and annoying CAPTCHA challenges due to CGNAT are relevant to the average person. They would be, but thankfully CGNAT doesn’t cause that.
- messe 1y agoIt contributes to it, because now you're behind the same public IP address as X other people. You're then X-times more likely to get flagged as suspicious and need to enter a CAPTCHA X-times more frequently.
- jaoane 1y agoCloudflare easily detects that using your discrete external port range and knows better than to show you a CAPTCHA.
- orangeboats 1y agoAnecdotal experience (I know, of course... this is sample size n=1) tells me that you can't be further from the truth. Putting CF aside, anyone who has tried to edit Wikipedia anonymously should understand the pain of CGNAT.