Remote access guide
How to access a home server behind CGNAT
CGNAT means your router may not receive a unique public IPv4 address, so normal port forwarding has nowhere useful to send inbound traffic.
SymptomYour router WAN IP does not match the public IP seen from the internet.
What breaksInbound connections cannot reach the home network directly.
What helpsUse an outbound tunnel or relay that creates the public side for you.
What still works behind CGNAT
- Outbound tunnel connections
- Relay endpoints hosted elsewhere
- Web access through Public Tunnel
- TCP access through Static-IP Relay
Which DNSExit path fits?
If you only need to expose a local web app, Public Tunnel is the simpler starting point. If you need SSH, VPN, RDP, cameras, or another TCP service, Static-IP Relay is the stronger fit because it gives outside clients a stable endpoint to reach.
Need the concept first?
Start with what CGNAT is if you want the network explanation before choosing a workaround. If your router can still accept inbound traffic, compare Public Tunnel with port forwarding before changing your setup.
Behind CGNAT and tired of dead ends?
Apply for the Remote Access and tell us which service you are trying to reach from outside.