Can someone with Sonic via AT&T share their setup in terms of equipment

[wwwong]

@wwong thank you, how's performance? One of my goals was to get input from everyone and figure out how AT&T is doing TLS over Ethernet for any ONT facing device which right now is their BGW210; I totally get it that it can be bypassed,

It is worth mentioning that native Sonic fiber does no such thing and one can connect anything to Sonic's Adtran ONT and there are no gimmicks, no TLS, no auth -- you get a normal public IP dhcp-assigned to your own device. Good work Sonic!

I don't have Sonic's fiber product but their IPBB (U-verse). I have a 50 mbps package and get 49.9 mbps down. Very good performance, plus I can manage my firewall and rules in the cloud with Ubiquiti Cloud Key.

[rconti]

Huh, I'm using IP Passthrough (I think.. it's been over a year since i set it up, and I can't remember which options I had) and didn't think I was double-natted... but now I see my second hop as 192.168.1.254 which must be the BGW-210. I *swear* it didn't used to do this, though.

First hop is my USG-Pro-4 which has my public IP on its WAN interface.

traceroute to google.com (172.217.164.110), 64 hops max, 52 byte packets
1 172.20.20.1 (172.20.20.1) 0.516 ms 0.221 ms 0.228 ms
2 192.168.1.254 (192.168.1.254) 0.920 ms 0.895 ms 0.863 ms
3 107-131-124-1.lightspeed.sntcca.sbcglobal.net (107.131.124.1) 2.051 ms 2.277 ms 2.141 ms
4 71.148.149.198 (71.148.149.198) 2.198 ms 2.209 ms 2.176 ms

[Sonic Guest]

@rconti, you should edit out your WAN IP on the 3rd hop. It doesn't change.

[bubba198]

So long story short - you double NAT. In itself that's not a deal breaker, just more difficult to get incoming ports mapped corerctly

[Sonic Guest]

There is no problem with port forwarding on the BGW210. Only the funky way packets leave your network from an IP Passthrough device.

[mgoldburg]

IP Passthrough with a BGW320 works as expected: no double NAT and the router behind the BGW gets a routable address. The BGW's UI allows you to inspect the BGW's NAT table. With passthrough enabled, the inside and outside IP addresses and port numbers are identical (i.e., no rewriting and no double NAT).