Types of Proxies: Datacenter, ISP, Resi & Mobile
The four IP origins compared on provenance — who owns the address, who else shares it, how long it stays yours, and a four-lookup recipe for proving which one you were actually sold.
- Four IP origin tiers — datacenter, static ISP, peer residential, and 4G/5G mobile.
- ASN reputation & scoring — why fraud algorithms flag hosting ASNs immediately.
- Four-lookup recipe — how to prove ASN, connection type, and route provenance yourself.
- Cost vs trust matrix — matching your workload to the right proxy tier.
Hosted in colocation racks with gigabit throughput and fixed lease durations.
Cellular carrier IPs shared across thousands of subscribers via CGNAT.
‘Proxy Type’ Is Four Questions Wearing One Name — This Page Answers the IP-Origin One
Every proxy has a value on four independent properties at once, and the word “type” is used for all four interchangeably. That is why a buyer can ask for one thing, be sold something that honestly matches the label they used, and still end up with an address that fails on the property they actually cared about.
The four questions, and where each one is settled:
- Origin — who the exit address is registered to: a hosting company, a consumer ISP, a household, or a mobile carrier. This page answers that one, and nothing else.
- Protocol — how your client talks to the proxy: HTTP/HTTPS, or SOCKS5 as defined in RFC 1928, which conventionally listens on TCP port 1080. Settled on HTTP vs SOCKS5 proxies.
- Header behaviour — transparent, anonymous or elite, meaning what the proxy does with the Forwarded header standardised in RFC 7239 and the older X-Forwarded-For it documents. That, and the forward-versus-reverse distinction, are settled on what a proxy server is.
- Connection behaviour — rotating, dedicated, static, shared or backconnect. Settled on the proxy types hub, which sorts mobile proxies by how the address behaves rather than where it came from.
Those are four axes, not four categories on one list — a single proxy sits on all of them simultaneously. A mobile IP can be delivered over SOCKS5 or HTTP, held dedicated or rotated on a timer, and it is a mobile IP throughout. Origin is the axis worth learning first for one reason only: it is the single property you can verify yourself, from outside, without trusting anything the seller wrote on the product page.
The Four Origins Side by Side — and How to Check Which One You Actually Bought
Most comparisons of these four sort them by price and by how much a target trusts them. Both are real, and both are somebody else’s judgement about the address. What follows sorts them by provenance instead — facts recorded in public registries that you can look up for any address in about a minute.
| Origin | Registered to (RIR / WHOIS) | Who else is behind it right now | How long it stays yours | Where traffic physically terminates | What an IP-intelligence lookup returns |
|---|---|---|---|---|---|
| 数据中心 | A hosting or cloud organisation | Nobody, or whoever shares the port on a shared plan | As long as the lease runs | A hosting rack | Hosting flag |
| 互联网服务提供商 / 静态住宅IP | A consumer ISP | Nobody — it is yours for the lease | The subscription term | A hosting rack, under an ISP registration | ISP with no hosting flag — the registration-versus-route mismatch is the seam |
| 住宅 | A consumer ISP, assigned to a household | One household and its devices | One session, bounded by that device’s uptime | A real home router | 住宅 |
| 4G/5G移动网络 | A mobile network operator | Hundreds to low thousands of genuine subscribers, via CGNAT | Until rotation or carrier reassignment | A modem on a cell tower | Cellular |
Deliberately absent from that table: cost, what each tier is best for, and where each one fails. Those are a different comparison with a different answer, and they are worked through on choosing a proxy tier for web scraping and, for the two tiers furthest apart, on datacenter vs mobile proxies. Read this table for what an address is; read those for what it is worth.
The Last Column Is Not an Opinion — It Is a Database Field
The reason this taxonomy is worth trusting is that it is not a marketing invention. Commercial IP-intelligence databases ship it as a typed field. MaxMind’s Enterprise database exposes a user_type whose documented values include business, cafe, cellular, college, consumer privacy network, content delivery network, government, hosting, library, military, residential, router, school, search engine spider and traveler — and a separate connection_type that is one of Cable/DSL, Cellular, Corporate or Satellite. Hosting, residential and cellular are three of the four origins on this page, sitting in a fixed enumeration that anti-bot vendors, ad platforms and fraud systems query millions of times a day.
That is what makes the origin axis checkable rather than rhetorical. When a target classifies your traffic, it is reading fields like these. So can you.
Four Lookups That Prove What You Were Sold
- Get the exit address
Send one request through the proxy to any IP-echo endpoint and record what comes back. Everything else keys off this address, not off the hostname you connect to — a backconnect gateway’s own address tells you nothing about the exit.
- Read the announcing ASN and its organisation type
Whoever announces the route into the global table is the network the traffic really leaves from. A hosting AS name here settles the question for lanes one and two of the diagram above, regardless of what the WHOIS record says.
- Read the registry’s own organisation record
Query the RIR for the block and look at the organisation and netname fields. This is the residential registration an ISP proxy is bought for — and where a datacenter address advertised as residential gives itself away immediately.
- Read an IP-intelligence classification and the reverse DNS
The classification field is what your target most likely reads. Reverse DNS is the free corroboration: hosting racks name themselves in structured, sequential patterns, while household and carrier addresses usually resolve to a generic operator pattern or to nothing at all.
# 1 — what address does the proxy actually exit from? curl -s --proxy http://user:pass@proxy.example.net:8000 https://api.ipify.org # 203.0.113.45 # 2 — which ASN announces it, and who owns that ASN? whois -h whois.cymru.com " -v 203.0.113.45" # AS | IP | AS Name # 64500 | 203.0.113.45 | EXAMPLE-HOSTING, US # 3 — what does the registry say the block is assigned to? whois 203.0.113.45 | grep -Ei "^(org-name|OrgName|netname|descr)" # 4 — reverse DNS: racks name themselves, homes rarely do dig +short -x 203.0.113.45
The mislabelling trap: a pool sold as residential whose exit address returns a hosting organisation on step 2 or step 3 is not residential, whatever the invoice says. This is the single most common misrepresentation in the proxy market, it costs nothing to detect, and it takes under a minute — so run the check during a trial, before volume is committed, not after a block wave sends you looking for a cause.
If you would rather not run the commands, the PXM2 proxy checker returns the exit address and its ISP readout for a proxy you paste in, which covers steps 1 and 3 in a browser.
Datacenter Proxies: Addresses a Hosting Company Owns Outright
A datacenter proxy is not defined by being fast, and not by living on a server. It is defined by one thing: the organisation named on the registry record is a hosting or cloud company, and that same company announces the route. Registration and network agree. Nothing is hidden, because nothing is meant to be.
That agreement is why the tier is abundant. A hosting company can acquire contiguous blocks on the open address market and put them to work immediately, so supply scales with demand rather than with the number of real households or subscribers involved — because no households or subscribers are involved at all.
It is also why identification happens in bulk. Addresses arrive in contiguous blocks, so classification tends to be applied to the block rather than to the address: your address’s neighbours inside the same range shape how it is treated before you have sent a single request. That is a property of how the space is allocated, not a judgement about your traffic.
“Shared”, “semi-dedicated” and “private” datacenter proxies are not three more origins. They are an exclusivity setting inside this one origin — how many customers are issued the same address — and the registry record is identical across all three. Exclusivity is the connection-behaviour axis, covered on the proxy types hub.
ISP Proxies: Residential Registration, Datacenter Wiring
An ISP proxy is a deliberate split between two facts that normally travel together. The registry record says a consumer ISP — the kind of organisation that sells broadband to households. The route is announced from a provider’s hosting rack. Registration and network disagree, on purpose, and that disagreement is the entire product.
The value proposition follows directly: when a target performs the lookup, it gets back the same classification it gets for that ISP’s genuine retail customers, with none of the hosting signal. The provider is not renting you a home connection. It is renting you a registration.
That framing explains the thing buyers find puzzling about the tier, which is that supply is tight and priced well above ordinary hosting space. Consumer-ISP-allocated IPv4 is scarce for a structural reason: the regional registries have nothing left to hand out. RIPE NCC made its final /22 allocation on 25 November 2019 and has run on a waiting list ever since. New ISP-registered space cannot be created — it can only change hands. A provider assembling an ISP pool is competing for a fixed stock of records, which is a very different supply problem from racking another server.
The naming trap: “ISP proxy” and “static residential proxy” are the same product under two names, and neither name is fully honest on its own. “Static residential” describes the record; “ISP proxy” describes the rack. A buyer who reads “residential” and pictures a home connection has been misled by the vocabulary rather than by the vendor — see the FAQ below, which is the most frequent version of this question.
Note that “static” here is doing origin-adjacent work but is really a rotation claim, which is a separate axis: an address can be static and datacenter-registered, or static and carrier-issued, as with 静态移动代理. Do not read a stability promise as an origin claim.
Residential Proxies: Someone Else’s Home Connection, Borrowed by Consent
Residential is the only origin whose supply chain is a consent question rather than a procurement one. The other three are bought: rack space, a registry record, a SIM and a modem. A residential pool cannot be bought, because the addresses belong to households that were never selling anything.
The dominant sourcing model is peer-to-peer. A proxy SDK is embedded in a consumer application, and the device owner opts in — typically in exchange for payment, an ad-free tier, or unlocked premium features — to relay other people’s traffic while the device is idle and online. When you buy residential bandwidth, that is the arrangement you are buying into, one device at a time.
Three consequences follow, and none of them are marketing:
- Pool composition and uptime are outside the provider’s control, and therefore outside yours. Nobody schedules when a stranger’s laptop is switched on.
- An exit can vanish mid-session, because it is a phone that moved out of coverage or a laptop that was closed. Session length is a property of somebody’s day, not of your plan.
- The sourcing disclosure is a real document, and you should ask for it by name before committing volume. What you want to see is consent that is explicit, revocable, and not buried behind a dark pattern in an installer flow.
That last point is not a formality. Consent quality is the whole difference between a legitimate residential pool and one assembled from users who never understood what they agreed to — and it is a question about the provider, not about the technology. A vendor who cannot describe the sourcing model in writing has answered it anyway.
Mobile Proxies: Carrier-Issued Addresses Shared Behind CGNAT
On the origin axis a mobile proxy is two registry facts and nothing more. The announcing ASN belongs to a mobile network operator, and the address sits on the public side of a carrier NAT — the deployment that RFC 6598, published as BCP 153 in April 2012, reserved the 100.64.0.0/10 range to feed. The RFC is unusually blunt about why it exists: IPv4 address space is nearly exhausted, ISPs must keep supporting IPv4 growth until IPv6 is fully deployed, and no registry can hand every service provider unique space for its subscribers.
That is the origin definition, complete. The consequence people actually care about — that an address shared by hundreds of genuine subscribers behaves differently under scrutiny than one that is yours alone — is a trust argument rather than a provenance fact, and this site argues it in full elsewhere:
- What is a mobile proxy? — the trust case, and why carrier addresses are scored the way they are.
- How mobile proxies work — the request path end to end, and the mechanism behind address rotation.
- 代理类型 — and once mobile is the right origin, which behaviour to buy: rotating, dedicated, static, shared or backconnect. That is the connection axis, and it is a genuinely different question from this page’s.
The handoff is the point. Origin tells you which kind of address to buy. Behaviour tells you how that address should act once you have it. Answering the first question does not answer the second, and a buyer who stops here has done half the job.
Compare Carrier-Grade Mobile Proxies
Looking for the highest-trust tier? PXM2 provides dedicated 4G/5G mobile modems with real carrier IPs:
法国
新加坡
印度
常见问题解答
What is the primary difference between datacenter and residential proxies?
Datacenter proxies originate from cloud hosting providers and server racks (such as AWS, OVH, or Hetzner). Their ASNs are explicitly flagged as “Hosting” in IP intelligence databases. Residential proxies originate from consumer Internet Service Providers (like Comcast, Charter, or BT), giving them genuine residential ASNs that look like real home users to anti-bot engines.
What is an ISP proxy and how does it differ from a residential proxy?
An ISP proxy (also known as a static residential proxy) is hosted on datacenter servers but assigned IP addresses registered under consumer ISPs rather than hosting companies. This provides the blazing speed, stable uptime, and fixed IP duration of a datacenter connection combined with the high reputation of a consumer ISP ASN.
Why are mobile proxies considered the most ban-resistant proxy type?
Mobile proxies route through 4G/5G cellular modems connected to telecommunications carriers. Cellular networks rely on Carrier-Grade NAT (CGNAT), where thousands of real smartphone users share a single public IPv4 address simultaneously. Because blocking a mobile IP would lock out hundreds of legitimate paying customers, anti-bot systems almost never impose hard IP bans on mobile carrier ranges.
Are peer-to-peer residential proxies safe and ethical to use?
P2P residential proxies rely on consumer devices (PCs, smart TVs, mobile apps) that run background sharing software, often bundled into free VPNs or games. While technically effective, their connection stability fluctuates wildly as peers go offline, and ethical sourcing varies significantly across providers. Dedicated mobile and ISP proxies offer much higher legal and operational reliability.
Which proxy type is the most cost-effective for large-scale web scraping?
For sites without advanced anti-bot systems, datacenter proxies are the most cost-effective due to unlimited bandwidth and low cost per IP. For protected targets (Cloudflare, DataDome, PerimeterX), mobile proxies with unlimited bandwidth often deliver the lowest cost per successful request, avoiding expensive per-gigabyte overages.
Related Guides
Proxy fundamentals
核心移动代理指南
Buy an Origin You Can Verify
PXM2 sells dedicated 4G/5G modems on real carrier SIMs — a mobile-operator ASN and a cellular classification you can confirm with the four lookups above, on your own trial, before you commit.
获取移动代理