Mobile 4G/5G Gateways

Carrier and mobile IPs generally score well in reputation databases, and CGNAT makes per-IP blocking costly for the blocker because one address is shared with many real subscribers. An Exit Gateway behind a SIM and modem exits as mobile.

Limitations & Use Case

This is a strong position, not an immune one. Mobile ASNs are identifiable, CGNAT ranges do get blocked, and acceptance varies by target service — so treat the unblock-rate test below as a deployment condition rather than a nice-to-have.

Cost is per-device. A modem or router plus a data plan for every node. For comparison, the proxy market prices dedicated mobile IPs at roughly $27/mo and up.

CGNAT means no inbound reachability. That is fine for an outbound exit path, but Nym network requires to handle NAT for the gateway's own reachability. The Swiss setup documents in detail what goes wrong when a Nym node sits behind translation, and much of that experience transfers here.

Per-SIM data caps and throttling hurt a high-throughput exit. Mobile plans are not built for sustained gateway traffic.

This design does not scale to hundreds of nodes. It can be used for a handful of high-value un-blockable exits in specific countries, where nothing else gets through and the per-node cost is justified by the access it buys.

Possible Test

Buy one mobile-gateway setup in a target country and compare real-world unblock rates against an ISP-tier box, tested on the actual services users complain about. That gives you a like-for-like number rather than a trust-score abstraction.

References