ParentFull threadLocalH·NAT is good. It's CGNAT that's bad, because that's NAT imposed on subscribers, and not NAT that they control.View on HN