NatDetec
Free · nothing to install · result in 5 seconds

What is your NAT type?

Find out whether your connection is Open, Moderate or Strict, and what it means for online play on PS5, Xbox, Switch and PC.

PlayStation 5Xbox SeriesNintendo SwitchPC · Steam

NAT types compared

The six possible cases, their equivalent on each platform and what they allow.

NAT typeThis testPlayStationXboxSwitchOnline gamesVoice chatP2P / hosting
No NATPublic IP, open internet✓ Open✓ NAT 1✓ Open✓ A✓ All✓ Yes✓ Yes
Full coneFull cone NAT! Moderate*✓ NAT 2✓ Open✓ A✓ All✓ Yes✓ Yes
Restricted coneAddress-restricted cone! Moderate*✓ NAT 2! Moderate! B✓ Almost all✓ Yes! Partial
Port-restricted conePort-restricted cone! Moderate*! NAT 2! Moderate! B! Most✓ Yes! Partial
SymmetricSymmetric NAT✕ Strict✕ NAT 3✕ Strict✕ C / D! Limited! Unstable✕ No
UDP blockedFirewall, VPN, filtered network✕ UDP blocked✕ Failed✕ Teredo ✕✕ F✕ No✕ No✕ No

* A browser cannot tell the three cone variants apart: that would need a test server able to answer from another address. They therefore all show as “Moderate”. Console equivalents are indicative: UPnP or port forwarding can improve what the console shows.

How to open your NAT

Try these fixes in order, running the test again after each one.

1Restart and plug in

Restart the router, then the console. If you can, use Ethernet: Wi-Fi extenders and powerline adapters sometimes add a second NAT.

2Turn on UPnP

In the router’s settings page (often 192.168.1.1), turn on UPnP. The console then opens the ports it needs by itself. It is the simplest fix.

3Static IP and forwarding

Give the console a fixed local address (static DHCP lease), then forward the ports listed below to it.

4DMZ (last resort)

Putting the console in the DMZ sends it all incoming traffic. It works, but use it for consoles only: never for a computer.

5Avoid double NAT

Two routers in a row (ISP router + gaming router, or two ISP boxes) often cause Strict NAT. Put one of them in “bridge” mode.

6Ask for a full IPv4

Behind CGNAT (shared IP), nothing on your router helps: ask your provider for a “full stack” or static IPv4, often free from your customer account.

Ports to forward

Official ports published by the manufacturers. Forward them to your console’s local address.

PlayStation 5 / 4

TCP
80, 443, 3478, 3479, 3480
UDP
3478, 3479

Xbox Series / One

UDP
88, 500, 3074, 3544, 4500
TCP
3074
TCP/UDP
53, 80

Nintendo Switch

UDP
1–65535 (Nintendo’s recommendation)

PC · Steam

UDP
27000–27100, 3478, 4379, 4380
TCP
27015–27050

FAQ

Everything you need to know about NAT, ping and online play.

How does this test work?

Your browser contacts several public STUN servers (Google, Cloudflare) through WebRTC. Each server reports the public address and port it sees you from. If the port is the same for all servers, your NAT is a “cone” type (Moderate); if it changes, it is “symmetric” (Strict). If nobody answers, UDP is blocked.

How are ping, jitter and speed measured?

Latency is measured with very light HTTP requests to AWS data centres around the world (median of 8 tries); jitter is the average variation between two tries, and losses are requests that got no answer. Speed is measured by downloading and then uploading data to Cloudflare for about 6 seconds, over several parallel connections. The values are close to an in-game ping, but a given game server may give a different result.

Why does my console show a different result?

The console tests its own connection, with its own rules: UPnP, port forwarding or a DMZ for the console can make it NAT 1 while your computer stays NAT 2. A console on Wi-Fi and a wired PC may also go through different networks (extender, second router).

Why doesn’t the test tell the different “cone” NATs apart?

Telling full cone, restricted cone and port-restricted cone apart needs a server that answers you from a different address or port than the one you contacted. The public STUN servers a browser can use don’t allow that, so all three show as “Moderate”. We would rather say so than display an invented result.

Is the test safe?

Yes. It installs nothing, opens no ports and sends no personal data: only small network requests go to the STUN and measurement servers (AWS, Cloudflare). The result is not stored. The speed test can use up to about 200 MB on a very fast connection; on a mobile connection it only starts if you ask.