AT&T Fiber is one of the strongest residential internet services in the US in 2026. It runs fiber-to-the-home (FTTH), delivering symmetric speeds on every plan: 300 Mbps, 500 Mbps, 1 Gbps, 2 Gbps, and 5 Gbps depending on your market. Unlike cable ISPs, you get the same upload and download speed — meaning a 1 Gig plan gives you 1000 Mbps up and 1000 Mbps down. This changes how you should think about router selection.
AT&T's fiber network uses an ONT (Optical Network Terminal) installed by a technician, which converts the fiber signal to Ethernet. The ONT connects to AT&T's BGW320 gateway, which handles authentication to the AT&T network. Unlike Verizon Fios, you cannot fully remove the AT&T gateway from the chain — but you can configure IP passthrough mode so your own router takes over all routing duties while the BGW320 handles only authentication in the background.
Top Picks at a Glance
| Pick | Best for | Why it stands out | Watch out for |
|---|---|---|---|
| ASUS ZenWiFi Pro ET12 | Best for AT&T 2 Gig and 5 Gig plans | Wi-Fi 6E mesh with 10G WAN port; handles multi-gig throughput with headroom to spare | Premium price; most homes do not yet saturate 2.5G let alone 10G |
| TP-Link Deco BE65 | Best mesh system for AT&T Fiber | Wi-Fi 7 mesh, 2.5G ports on each node, excellent app-based management | Wi-Fi 7 clients still maturing; 2.5G WAN sufficient for 1 Gig but not 2 Gig+ |
| ASUS RT-AX88U Pro | Best standalone router for AT&T Fiber | Dual 2.5G ports, strong Wi-Fi 6 performance, rich firmware for power users | 2.5G WAN caps throughput below 2 Gig plan maximum |
| Firewalla Gold Plus | Best security and monitoring for AT&T | Multi-gig routing, deep traffic inspection, VPN, excellent visibility dashboard | Not an all-in-one Wi-Fi router; needs separate APs for wireless coverage |
| eero Max 7 | Best for smart home and AT&T users | Wi-Fi 7, 10G WAN port, works seamlessly with Alexa and smart home devices | Limited advanced controls; eero app required for most management |
Our Picks in Detail
- Wi-Fi 6E mesh with 10G WAN port; handles multi-gig throughput with headroom to spare
- Premium price; most homes do not yet saturate 2.5G let alone 10G
- Wi-Fi 7 mesh, 2.5G ports on each node, excellent app-based management
- Wi-Fi 7 clients still maturing; 2.5G WAN sufficient for 1 Gig but not 2 Gig+
- Dual 2.5G ports, strong Wi-Fi 6 performance, rich firmware for power users
- 2.5G WAN caps throughput below 2 Gig plan maximum
- Multi-gig routing, deep traffic inspection, VPN, excellent visibility dashboard
- Not an all-in-one Wi-Fi router; needs separate APs for wireless coverage
- Wi-Fi 7, 10G WAN port, works seamlessly with Alexa and smart home devices
- Limited advanced controls; eero app required for most management
How IP Passthrough Works on the AT&T BGW320
Setting up IP passthrough on the AT&T BGW320 is straightforward. Log into the gateway's admin interface at 192.168.1.254, navigate to Firewall > IP Passthrough, and select your own router's MAC address or assign passthrough by DHCP fixed lease. Once set, the BGW320 forwards your public AT&T IP directly to your router. From that point, your router handles DHCP, NAT, firewall rules, QoS, and all the network management decisions. The BGW320 essentially becomes a transparent bridge for the authentication layer.
The performance impact of IP passthrough is minimal. AT&T's BGW320 is reasonably capable hardware and does not introduce significant latency or throughput overhead in passthrough mode. Users running the 1 Gig plan in passthrough mode regularly measure speeds above 900 Mbps on wired tests. For the 2 Gig plan, the BGW320's 10G LAN port becomes important — make sure you cable the BGW320 to your own router using the 10G port, not the standard 1G port, to avoid a bottleneck before your traffic even reaches your router.
Why Symmetric Speeds Change Router Requirements
Most router benchmarks and reviews focus on download throughput. AT&T Fiber's symmetric plans mean your upload matters just as much. A router with solid upload routing performance is important if you regularly back up to the cloud, use video conferencing, run a home server, or stream to Twitch or YouTube. Routers with strong NAT performance and hardware acceleration handle symmetric gigabit cleanly; budget routers with software-only NAT may struggle to route 1 Gbps symmetrically even if their spec sheet claims gigabit capability.
The ASUS ZenWiFi Pro ET12 and eero Max 7 both have 10G WAN ports and handle multi-gig symmetric traffic confidently. For the 1 Gig plan, the ASUS RT-AX88U Pro's 2.5G WAN port is more than sufficient and leaves room for the plan's full rated speed. If you are on the 2 Gig or 5 Gig plan, plan your router selection around 10G WAN capability from day one.
ASUS ZenWiFi Pro ET12: Best for Multi-Gig AT&T Plans
The ASUS ZenWiFi Pro ET12 is the most capable mesh system for AT&T Fiber customers who want to maximize their 2 Gig or 5 Gig plan. Each node includes a 10G Ethernet port, tri-band Wi-Fi 6E, and support for wired backhaul between nodes. The system supports ASUS AiMesh, so you can mix and match compatible ASUS hardware as nodes expand your coverage. The firmware includes the same deep feature set as ASUS's standalone routers: IPTV configuration, detailed QoS, VPN server and client, Trend Micro AiProtection, and a traffic analyzer that breaks down bandwidth by device and application.
For AT&T 2 Gig customers specifically, wiring the ET12 nodes with Ethernet backhaul and connecting the router node to the BGW320's 10G LAN port removes every bottleneck from modem to wireless client. Real-world 2 Gig speed tests on wired devices regularly hit 1.8 to 1.9 Gbps in this configuration.
Frequently Asked Questions
Can I bypass the AT&T gateway?
You cannot fully remove the AT&T BGW320 gateway from the network because AT&T uses it for authentication and ONT communication. However, you can enable IP passthrough mode on the BGW320, which forwards all traffic directly to your own router so it behaves as the primary router for your network. The BGW320 sits idle in the background handling only authentication.
What is IP passthrough mode on AT&T Fiber?
IP passthrough (also called DMZ+ mode) is a setting in the AT&T BGW320 gateway that forwards the public IP address and all inbound traffic to a single device — your router. This effectively makes your router the network gateway, while the BGW320 handles only authentication and ONT management. Your router sees the real public IP and manages all NAT and firewall functions normally.
Do I need a multi-gig router for AT&T 2 Gig?
Yes. AT&T's 2 Gig plan delivers up to 2000 Mbps symmetrically. A router with a standard 1G WAN port will cap your throughput at under 940 Mbps regardless of your plan. You need at minimum a 2.5G WAN port to partially benefit from 2 Gig speeds, and a 10G WAN port for full throughput. The BGW320-to-router cable must also use the BGW320's 10G LAN port, not the 1G ports.
Does AT&T Fiber have symmetric upload speeds?
Yes. AT&T Fiber is a true symmetric fiber service. On the 1 Gig plan you get 1000 Mbps down and 1000 Mbps up. On the 2 Gig plan you get 2000 Mbps in both directions. This makes it one of the best options for remote workers, content creators, and households that upload large files or run cloud backup services continuously.