The Free CGNAT Solution: Install Tailscale on your game server machine and have your friends install Tailscale. It establishes an encrypted WireGuard peer-to-peer tunnel directly through CGNAT firewalls using STUN and encrypted DERP relays, requiring zero router port forwarding or public static IP fees.
How to Detect If Your Router Is on CGNAT
Compare the WAN/Internet IP address shown inside your router's admin status page against the public IP shown on an IP checking tool. If your router's WAN IP is in the RFC 6598 Shared Address range (100.64.0.0/10, from 100.64.0.0 to 100.127.255.255), your ISP is using CGNAT.
Alternative CGNAT Tunnels
- Playit.gg: Instant TCP/UDP reverse proxy with custom global domain names for Minecraft and Palworld.
- Cloudflare Tunnels (cloudflared): Free HTTPS tunnel for web servers, Nextcloud, and Home Assistant.
- IPv6 Native Routing: If your ISP assigns a dynamic
/64or/56IPv6 prefix, configure router IPv6 firewall rules instead of IPv4 NAT.
🛡️ Router Portal Verification & Safety Standard
Our networking steps are lab-tested against standard RFC 1918 private networking protocols across Windows 11 (24H2), macOS Sequoia (15.1), iOS 18, and Android 15. We verify physical device labels and firmware release documentation before publishing gateway instructions. Router Portal is strictly read-only and never requests, intercepts, or logs router passwords.