Work from home, VPN and gaming: check uploads, latency and CGNAT

More upload capacity helps—but does not eliminate bufferbloat

A busy upload can fill a bottleneck queue and delay interactive traffic. IETF’s queue-management guidance [1] explains why managing queues matters as well as link capacity. More upload headroom may reduce how often a given workload saturates the line, but a symmetrical fiber plan can still be saturated and can still experience queueing delay.

Compare idle and loaded latency while a normal cloud backup or upload runs. Repeat using the same device and destination at relevant busy hours. Ask about supported router queue management and application scheduling; do not assume an ISP switch is the only remedy. A label’s typical latency is not a guarantee to your employer VPN or game server.

CGNAT, public IPv4, IPv6 and outbound VPNs are separate questions

RFC 6598 [2] defines the shared IPv4 address range used for carrier-grade NAT. A provider-side NAT can prevent a household router’s IPv4 port-forwarding rule from making an inbound service publicly reachable. An outbound connection from a corporate VPN client is a different path; CGNAT alone does not prove that it will fail.

A public dynamic IPv4 address is different from a static IP. Public IPv6 reachability depends on routing, firewall rules and support at both ends. Wired fiber or cable does not automatically guarantee a public address, an available static-IP option or employer-approved VPN operation. Ask the provider about the exact product, addressing policy, gateway and inbound restrictions; let employer IT confirm compatibility and any required allowlists.

Use product-specific facts instead of a universal carrier rule

T-Mobile’s support page [3] says VPN connections are possible, directs users to their VPN developer or IT department, and describes dynamic addressing plus gateway restrictions on NAT/port-forwarding and static-IP settings. Those limitations are not the same as “all work VPNs fail on 5G.”

Starlink’s addressing guidance [4] distinguishes default IPv4 CGNAT from public-address options and IPv6. Eligibility and restrictions depend on the plan. Do not assume every residential or satellite product includes public IPv4, or that an IPv6 prefix permits unrestricted inbound access.

AT&T’s gateway guidance [5] illustrates why settings are model-specific. For AT&T Fiber, Kinetic, Spectrum and any other wired option, ask for the actual address-qualified product and its current network policy. Do not borrow one gateway’s procedure or static-IP terms for another provider.

Employer requirements are not universal thresholds. Microsoft’s Teams network guidance [7] is an application-specific reference; follow your actual employer’s standards rather than prescribing one latency or upload minimum to all remote workers.

Test wired first without bypassing protections or provider setup

Use a supported Ethernet port on the normal router or gateway, then repeat in the room where you work or game over Wi-Fi. Google’s internet/Wi-Fi test guidance [6] helps distinguish the upstream connection from the indoor path. Keep the device, destination, workload and time comparable.

Do not disconnect an ONT, bypass authentication, expose a computer directly to the internet, or change a corporate security configuration merely to run a speed test. A direct ONT/modem test requires the provider’s supported procedure and the right protective setup. Comparing normal gateway Ethernet with room Wi-Fi often provides a useful starting point without changing the service topology.

1. Record normal wired download/upload, latency and work or game behavior.
2. Repeat while a representative upload or backup runs.
3. Repeat on room Wi-Fi with the same device and workload.
4. If only the VPN or one application fails, ask employer IT or the application provider to review the path.
5. If the issue persists on wired devices, provide the dated results to the ISP rather than diagnosing the line from one Wi-Fi test.

Use the four-question connection troubleshooter, Broadband Facts checklist and cost calculator to organize a decision. These tools do not benchmark your line automatically or approve employer compliance.