Bridge Mode on an ISP-owned modem (e.g., Fiber modem, Cable Modem, DSL modem) turns a device into Layer 2 bridge (e.g., Fiber-to-Ethernet). Most modems today come packaged with routing, firewall, and wireless capabilities. But when you configure your modem for Bridge mode, you assign the perimeter firewall functionality to a downstream device: your trusted perimeter firewall (e.g., pfSense).
💡
Check with your ISP to determine if they use Carrier Grade NAT or Disallow self-hosting before deploying Sovereign Stack!
When you're using Sovereign Stack, you want to turn all that extra stuff off on the modem and convert your "router/firewall" into a bridge (e.g., fiber-to-ethernet). The responsibility of the ISP modem then is the provide an uplink to the Internet, and ultimately, a DHCP address to the firewall WAN/outside interface.
- Configuring your AT&T Fiber router for IP-Passthrough Mode.
- Bridge mode for XFinity.