Can I self-host on my Canadian internet?
A free check for running a home server, VPN, cameras or remote access. It shows what we can detect from here, helps you check for CGNAT, can test inbound ports on your own public IP if you ask it to, and shows what public sources say about your ISP.
Your result so far
Checking your connection…
1. Your connection
| Public IPv4 | … |
|---|---|
| Public IPv6 | … |
| Network (from Cloudflare) | … |
| Approximate location | … |
Your IP address is shown only to you. We don't store it. Rate limits and optional shared results use a one-way hash of it.
2. Are you behind CGNAT?
A website can't see your router's own internet (WAN) address, only the address your traffic comes out of. If those two differ, something between your router and the internet, usually your ISP's carrier-grade NAT, is sharing one public address among many customers. Port forwarding can't work through that over IPv4.
Where do I find my router's WAN IP?
Log into your router (often 192.168.0.1, 192.168.1.1 or 10.0.0.1, or the ISP's app) and look for WAN, Internet or Public IP on the status page. If you use your own router behind the ISP's modem, check your own router first.
This comparison runs in your browser. The address you type is never sent to us.
3. Test inbound ports (optional)
We can try to open a TCP connection from the internet to your own public IP on ports you choose, the way a visitor would. We only ever test the address your request comes from, never another host.
What the results mean
- Open: something at your address accepted the connection. Either the port is forwarded to a service that's running, or a device such as the ISP modem answered.
- Closed: the connection was refused or rejected right away. Usually nothing is listening or forwarded on that port, or a firewall actively rejects it.
- Filtered: no reply within 4 seconds. A firewall (yours, the modem's or the ISP's) is silently dropping it, or CGNAT is in the way.
- A port is only "open" if a service is listening. Start the service and forward the port before testing.
- Port 25: our test runs on Cloudflare Workers, which can't connect to port 25, so we can't test it. Many ISPs also block outbound port 25 (sending mail from home), which is separate from inbound. See your ISP's row below.
- Limits: up to 5 ports per test, 10 tests per hour and 30 per day per connection. A human-verification check (Cloudflare Turnstile) runs first.
4. What our database says about your ISP
Choose your ISP above.
Prefer to do it by hand? See the manual CGNAT guide or submit a reading.