IoT Portfolio: IoTMail | CellTester | RoamingSIMs | Mastlink
Static IPv4 Delivery — UK B2B

Your site. Your IP.
Any connection.

4G, 5G, Starlink or hybrid. CGNAT locks most cellular and satellite connections behind a shared, non-routable address. Speedroute solves that permanently. A fixed, dedicated public IPv4 address to any UK installation over any connection type. Fixed monthly fee. Pre-configured hardware shipped zero-touch ready.

speedroute — status
# Before Speedroute
curl ifconfig.me
100.64.12.87   # CGNAT range
ERROR: no inbound routing
# With Speedroute
curl ifconfig.me
185.210.144.33  # Your static IP
STATUS: reachable from internet
# Tunnel
wg show speedroute0
endpoint: lon1.speedroute.co.uk
wan:      4G EE (eUICC ready)
uptime:  47d 6h — stable

CGNAT is blocking your installs

Carrier Grade NAT arrived when mobile networks ran out of IPv4 space. Every UK mobile operator, and Starlink, now hides devices behind a shared address pool. Your 4G router, your Starlink dish, your hybrid WAN — none of them have a routable public IP by default.

That means no inbound connections. No remote NVR access. No VPN termination. No payment terminal reach-back. No telemetry polling. No out-of-band management.

This is not a configuration problem. It is a structural one. The only solution is an IPv4 overlay that assigns a real, routable public address independent of what the underlying network does.

Read: What is CGNAT? →
CGNAT vs Speedroute
Public IPv4 address✗ Shared / CGNAT
Inbound connections✗ Blocked
Remote NVR / CCTV✗ Not possible
VPN hosting✗ Blocked
IP-whitelisted telemetry✗ Unknown IP
With Speedroute
Public IPv4 address✓ Static, dedicated
Inbound connections✓ Fully routable
Network changes / roaming✓ IP unchanged
Underlying WAN type✓ Any
~95% of UK mobile connections are behind CGNAT with no routable public IP
100% of Starlink residential connections use CGNAT — no static IP by default
1 IP Per customer tunnel. Dedicated. Static. Never shared with another device.

Simple architecture. Solid results.

1
Router Ships Pre-Configured

Ruggedised Teltonika hardware with WireGuard pre-loaded, multi-network eUICC SIM fitted. Plug in, power on. Nothing to configure on site.

2
Tunnel Established on Boot

WireGuard connects automatically to the Speedroute London hub over whatever WAN is available. 4G, 5G, Starlink or fixed broadband.

3
Static IP Assigned

Your dedicated public IPv4 is announced via BGP. It belongs to your tunnel only. Whitelist it, host on it, reach it from anywhere in the world.

4
Inbound Traffic Routed

Traffic hitting your static IP routes through the hub to your device. The WAN can change, roam or fail over. Your IP does not change.

Built for the jobs that need it

Static IPv4 matters most in sectors where remote access, telemetry and inbound connectivity are operational requirements, not optional extras.

🏗️

Construction & Temporary Sites

Site offices, welfare units, gate CCTV and machinery telemetry from day one. No fibre on site for months. Speedroute ships with the router — construction IT gets the static IP for VPN and NVR access from groundworks.

Site officesWelfare unitsGate CCTVTelematics
Learn More →
📹

CCTV & Security Installers

Remote NVR access requires an inbound-routable IP. CGNAT blocks it. Speedroute removes the wall. One SKU, one fixed monthly fee. The monitoring centre whitelists the static IP and they are in.

NVR accessRemote viewAlarm panelsAccess control
Learn More →
🛰

Starlink & Rural Enterprise

Starlink delivers the bandwidth rural businesses need but arrives with CGNAT. Plug Speedroute into the Starlink LAN port. Static IP delivered. VPN, CCTV and payment systems all work. Add 4G failover.

Starlink overlayRural business4G failover
Learn More →

Battery Storage & Renewables

BESS aggregators and DNP3/Modbus dispatch systems use IP-whitelisted polling. A CGNAT address is invisible to them. Speedroute provides the static, whitelistable IPv4 on hardened hardware built for plant environments.

BESSDNP3/ModbusSolar/wind
Learn More →
💻

MSP Out-of-Band Management

When the primary broadband fails, the MSP needs another route in. Speedroute 4G as a secondary always-on link. Whitelist the static IP in your management platform. Every broadband failure resolved remotely.

OOB managementFailoverIT managed services
Learn More →
🤖

Kiosks, Vending & Smart Retail

Parcel lockers, EV charge points and vending machines need inbound IP for firmware push, diagnostics and video retrieval. CGNAT blocks all of it. Speedroute provides the missing inbound channel.

Parcel lockersEV chargingANPR
Learn More →

Three Mobile 3internet APN: Act Now

For years, Three Mobile's 3internet APN gave installers a public IP on a cellular SIM. Thousands of CCTV installs and remote access points across the UK rely on it.

The Vodafone/Three merger changes that. Network rationalisation will move 3internet into standard CGNAT. When that happens, every installation depending on 3internet for inbound access loses connectivity simultaneously.

Speedroute is network-agnostic. It works on EE, Vodafone, O2, Three or any MVNO. Multi-network eUICC SIM included. Migrate before the window closes.

Migration Guide → Request IPv4 Guide
The old workaround

Three 3internet APN — public IP assigned directly, no CGNAT. It worked. But single-carrier and always fragile.

Now

Vodafone/Three merger approved. Integration underway. 3internet APN continuation is not guaranteed post-merger.

The risk

Hundreds of installs across the UK lose inbound connectivity when 3internet is withdrawn. CCTV, access control, telemetry — all dark simultaneously.

Speedroute solution

Network-agnostic static IPv4. Works on any UK network, any MVNO. Multi-network eUICC SIM included. No carrier lock-in.

The right solution for your install

Every Speedroute plan runs on a fixed monthly fee. No per-GB charges. Pre-configured hardware options across all tiers.

Core

Overlay only

  • Static IPv4 overlay service
  • Customer supplies own router
  • WireGuard config supplied
  • Compatible with Teltonika RutOS
  • Fixed monthly fee

4G

Most popular

  • Pre-configured Teltonika 4G router
  • Multi-network eUICC SIM included
  • Static IPv4 overlay
  • Zero-touch deployment
  • Rental or purchase options

5G

High bandwidth

  • Pre-configured RUTX50 or Spitz AX
  • 5G + 4G fallback
  • Static IPv4 overlay
  • Construction & ANPR primary use
  • Rental or purchase options

Hybrid

Starlink / Broadband + 4G

  • Dual-WAN router
  • Starlink or fixed primary WAN
  • 4G/5G automatic failover
  • Static IP maintained on failover
  • Rural & critical infrastructure

BESS

Energy & renewables

  • DIN-rail mount option
  • Extended temperature range
  • DNP3 / Modbus pass-through
  • IP-whitelistable static IPv4
  • Enterprise contract pricing

Deploying cellular infrastructure since 2G.

Speedroute is not a startup guessing at a connectivity problem. It is a product built by engineers who have been deploying cellular infrastructure in the field since GPRS was cutting-edge. 2G, 3G, 4G LTE, 5G NSA and SA, NB-IoT, LTE-M, LoRaWAN, Sigfox, satellite. Every generation of the technology. Every generation of the problems it creates.

We watched CGNAT arrive. We watched it become the default. We built Speedroute because the workarounds that existed — proprietary cloud relays, carrier-specific APNs, fragile L2TP tunnels — were all expensive, unreliable or single-carrier dependent.

WireGuard over a BGP-announced IPv4 block is the right architecture. Lightweight. Secure by default. Handles cellular roaming without dropping sessions. We use the same Teltonika hardware on our own infrastructure that we specify for customers.

2G / GPRS
GPRS / EDGE / HSPA
APN configuration, private IP M2M, SMS fallback. The foundations of cellular IoT.
4G / LTE
CGNAT Begins at Scale
IPv4 exhaustion forces CGNAT onto every mobile network. Shared addresses block inbound connections.
LPWAN
NB-IoT / LTE-M / LoRa
Low-power wide-area for sensor and telemetry at scale. Different constraints, same engineering rigour.
5G / Satellite
Speedroute Era
Higher bandwidth, same CGNAT problem. Speedroute solves it across all connection types.

Questions from installers and integrators

Carrier Grade NAT lets mobile networks share one public IP across thousands of subscribers. Your device gets a private address in the 100.64.0.0/10 range. There is no way to route inbound traffic to a specific device because the network does not know which one to send it to. You cannot host anything, accept any inbound connection, or be reached by a remote system without a dedicated public IP.
The 3internet APN currently provides a public IP to Three subscribers who use it instead of the standard CGNAT APN. Post-merger network integration is expected to rationalise APNs across both networks. Continuity of 3internet is not guaranteed. Installers relying on it should have a migration plan in place now, not after the change happens.
Yes. Connect the Speedroute router to the Starlink LAN port. The router tunnels over the Starlink connection and your static IP is delivered via the Speedroute hub. Inbound connections, VPN, CCTV, payment terminals all work exactly as they would on a fixed broadband line. Add 4G failover and the static IP is maintained if Starlink goes offline.
Nothing visible at the application level. The multi-network eUICC SIM in the Speedroute router switches carrier automatically. WireGuard re-establishes the tunnel over the new network path within seconds. Your static IP does not change. Inbound connections may see a brief interruption during handover but re-establish automatically.
It carries the same responsibilities as any internet-facing service. The WireGuard tunnel is encrypted using ChaCha20/Poly1305 and is silent to unauthenticated probes. Hub firewall rules restrict what reaches your device. Change default credentials, restrict inbound ports to what is required and keep device firmware current. The risks are well understood. Deploying static IPs correctly is the answer, not avoiding them.
Yes. Speedroute Core is a pure software overlay. Teltonika RutOS supports WireGuard natively. We supply the configuration profile, you apply it, and your static IP is live. Most RUT241, RUT951 and RUTX-series devices are compatible. Get in touch and we will confirm compatibility with your specific device and firmware version.
L2TP has no native encryption and creates MTU fragmentation issues on cellular. OpenVPN is heavier than needed for this application. WireGuard is kernel-native, lightweight, handles IP changes during cellular roaming without dropping sessions, and is cryptographically modern. It is a deliberate choice made by engineers who know the alternatives, not a default.
Yes. Each site gets its own dedicated static IP and WireGuard tunnel. There is no practical ceiling on site count. Installers pay a fixed monthly fee per site. Teltonika RMS provides out-of-band device management across the whole estate, independent of the Speedroute tunnel itself.

Ready to solve CGNAT permanently?

Tell us about your installs. We will recommend the right Speedroute solution and deliver your free IPv4 Field Guide.

Request Your IPv4 Guide →

Request Your Free IPv4 Guide

The CGNAT Problem: A Field Guide for UK Installers — delivered to your inbox. We will also follow up with the right Speedroute solution for your installs.

Your details are used only to send the guide and follow up on your enquiry. No spam, no data sharing.

✓ Guide Request Received

Check your inbox. We will follow up within one working day with the right solution for your installs.