Creating a VPN connection on CGNAT ISP

Note: 8-10-2026

• Mario Baldini suggested Tailscale for use with CGNAT
• GAI: will tailscale work with cgnat

How Tailscale Handles CGNAT

• Direct Connections: Most of the time, Tailscale figures out how to punch through your ISP's CGNAT to build a fast, direct peer-to-peer connection between your devices.
• DERP Relays: If the CGNAT environment is too strict for a direct connection, traffic automatically falls back to encrypted relay servers (DERP) so communication still works.
• Internal IP Assignment: It assigns your devices private IP addresses inside a secure mesh network (tailnet)

Research Links

• Gs: use vpn run srver cgnat
• Is remote access behind CGNAT possible?
• CGNAT VPN Diagram
• CGNAT VPN Diagram – LocalCopy