T-Mobile Home Internet. Starlink. Cellular hotspots. Some apartment Wi-Fi. These commonly put you behind CGNAT — carrier-grade NAT — which prevents the direct inbound connection many self-hosted WireGuard setups expect.
PacketMole uses Tailscale, which can fall back to its DERP relay network when a direct path is unavailable. Actual connectivity still depends on both internet connections and the local network allowing Tailscale traffic. On a CGNAT connection, the public IP that sites see is your internet provider's shared address, which can change; it's the same address your devices get at home.
When the tunnel is connected and selected, internet traffic through the Away unit exits from your home connection. Services that use IP address see that home IP; they may still use GPS, device, account, or other signals.
To be clear, PacketMole isn't a privacy VPN — it makes you look like home, not anonymous, and your traffic still exits through your own home internet. How they differ →