Understanding Carrier-Grade NAT (CGNAT) on Hyperoptic, Community Fibre & 5G
Learn how to test if your ISP places your router behind RFC 6598 CGNAT (`100.64.0.0/10`) and how SWEEPR VPN prevents CGNAT UDP port exhaustion and IP reputation blocks.
Technical Overview & Network Indicators
Learn how to test if your ISP places your router behind RFC 6598 CGNAT (`100.64.0.0/10`) and how SWEEPR VPN prevents CGNAT UDP port exhaustion and IP reputation blocks.
When you run the SWEEPR VPN Free 30-Second Home Wi-Fi Scanner (~3.7 MB native Rust client), it inspects local ARP tables, IEEE OUI hardware vendor prefixes, and mDNS service broadcasts on your LAN, then cross-references outbound DNS queries against our Smart-TV ACR & ISP diagnostic rulebase:
# Verified Indicator / Rule:
RFC 6598 Shared Address Space (100.64.0.0/10)
# Verified Indicator / Rule:
UDP Session Table Exhaustion
# Verified Indicator / Rule:
PersistentKeepalive = 25
# Verified Indicator / Rule:
Dedicated 10Gbps WireGuard ExitStep-by-Step Remediation With SWEEPR VPN
- Step 1 — Run the Free 30-Second Home Wi-Fi Audit: Download SWEEPR VPN (~3.7 MB) and click Scan My Home Wi-Fi to identify every active IP, MAC vendor, and Smart TV on your local network.
- Step 2 — Enable 10Gbps RAM-Only WireGuard + In-Tunnel DNS (
10.66.0.1): Route traffic throughUK-LON-01(4ms) orNL-AMS-01(8ms) with calibrated MTU. - Step 3 — Activate SWEEPR Wi-Fi Radar & Smart-TV Shield: Block Automatic Content Recognition (ACR) telemetry domains and receive instant alerts whenever an unknown MAC address joins your Wi-Fi.
Transparent Anchor Pricing & 30-Day Money-Back Guarantee
Unlike legacy VPNs that trap you in 24-month renewals or 250 MB bloated installers, SWEEPR VPN offers straightforward pricing with an instant free 30-second Home Wi-Fi Device Scanner:
| Plan Tier | Billing Cycle | Effective Monthly Cost | Included Features |
|---|---|---|---|
| Yearly Plan (Core Cash Cow — Save 50%) | £74.99 / year ($95.99 USD | €89.99 EUR) | £6.25 / mo | 10Gbps RAM-Only WireGuard (UK, NL, DE, SE, CH, US), 10 Devices, Kernel Kill-Switch, 30-Day Guarantee |
| 6-Monthly Plan (Mid-Tier Anchor — Save 35%) | £48.99 / 6 months ($61.99 USD | €58.99 EUR) | £8.17 / mo | All 10Gbps WireGuard Core Locations, In-Tunnel DNS, Port-Forwarding & Streaming Support |
| Monthly Plan (Flexible + £1.99 1st Month) | £1.99 1st Month, then £12.49 / mo | £12.49 / mo | Cancel anytime in 1 click, full 10Gbps WireGuard & Wi-Fi diagnostic access |
| SWEEPR Wi-Fi Radar & Smart-TV Shield Add-On | +£14.99/yr | +£9.99/6mo | +£1.99/mo | Optional Add-On | 24/7 Unknown Wi-Fi Intruder Alerts + Samsung/LG/Sony/Roku/Fire TV ACR Spy Blocker |
Frequently Asked Questions
Will blocking Smart-TV ACR telemetry break Netflix, BBC iPlayer, or YouTube?
No. SWEEPR Smart-TV Shield only sinks Automatic Content Recognition (ACR) screenshot and ad-tracking endpoints while leaving CDN video delivery streams untouched.
Does the SWEEPR 30-Second Wi-Fi Scanner work on Windows, macOS, and Linux?
Yes. The SWEEPR desktop scanner is built in Rust + Tauri v2 (~3.7 MB) and runs natively on Windows 10/11, macOS (Apple Silicon & Intel), and Linux.
How can I test if my ISP is still intercepting my DNS requests?
Open our free browser IP, DNS & WebRTC Leak Test at https://sweeprvpn.com/tools/leak-test to verify that your resolver matches SWEEPR VPN's encrypted in-tunnel DNS.