← Hell World Blog··8 min read
Residential vs Datacenter vs ISP vs Mobile in 2026 — A Decision Tree for Picking the Right Proxy Tier
Four proxy tiers, four wildly different price points and detection profiles. Datacenter at $0.50/GB, residential at $3–5, mobile at $10+, ISP static somewhere in between. Here's the decision tree we use with customers to pick the right tier for a workload, with the failure modes that get people stuck on the wrong one.
The cheapest proxy is the wrong proxy that worked once before. The most expensive proxy is the right tier you bought too much of. Picking the wrong tier is where customers lose the most money over a year, far more than any per-GB rate negotiation, and the cost of getting it wrong shows up as failed scrapes, banned accounts, and rebuy cycles that nobody priced into the model.
This post is the decision tree we use with new customers when they ask “which one should I buy?” without giving us enough context. We’ll cover what each tier actually is at the network layer, what they cost, what they reliably bypass and what they don’t, and the workload patterns that make each one the right answer. If you’re trying to choose between residential, datacenter, ISP static, and mobile tiers — or trying to decide if you need a mix — this is the conversation in one read.
The four tiers, briefly
Datacenter. IPs owned by cloud providers and dedicated hosting companies. Cheap because they’re abundant — a /24 of datacenter IPs costs the provider basically nothing — and easy to spin up. Detection profile: every modern anti-bot system maintains a list of datacenter ASNs and flags or blocks them at the edge. Cloudflare’s “DC challenge mode” exists specifically for this. Cost: $0.50–$1.50/GB on group-buy / aggregator rates like ours, individual provider rates 2–3x that.
Residential. IPs assigned by ISPs to home users. The proxy works by routing your traffic through real residential devices — typically Android SDK partners (apps that bundle the proxy SDK and pay users a few cents/month to participate). Detection profile: indistinguishable from a real home user at the IP layer because that’s what it is. Cost: $2.50–$5.00/GB on aggregator rates, $7–12/GB at retail.
ISP static. IPs that look like residential IPs (assigned out of ISP-owned ranges) but hosted in a datacenter so they’re always on and high-speed. Best of both worlds with a caveat: anti-bot has gotten better at identifying these in 2024–2026 by cross-referencing IP-to-ASN-to-ranges and noticing that the ISP doesn’t actually have a home customer at that IP. Cost: $5–15 per static IP per month, regardless of bandwidth (price model is different from residential).
Mobile. IPs assigned to mobile carriers (Verizon, T-Mobile, China Mobile, Vodafone, etc.) and used by smartphones on 4G/5G. Detection profile: hardest to flag because the carrier NATs hundreds of users behind each IP, so even if anti-bot wants to block it they’re blocking real customers too. Cost: $8–15/GB on aggregator rates, often metered as well as port-time.
Decision dimension 1: target sensitivity
The single most important question. How much detection pressure is on the target?
Low. Static websites with no fraud team. Wikipedia, public APIs, RSS feeds, government data portals, basic SaaS dashboards. They might rate-limit you, but they’re not running Cloudflare bot management or DataDome. Use datacenter. Anything else is wasted budget.
Medium. Mainstream e-commerce, marketplaces, real-estate listings, B2B SaaS with a basic anti-bot layer. They’re using Cloudflare in standard mode, or hosted protection like Akamai Bot Manager without the premium tier. Use residential. Datacenter will get challenged or blocked; mobile is overkill.
High. Sneaker drops, ticket releases, search engines, sports betting sites, fintech KYC, social media. Cloudflare Premium, DataDome, PerimeterX, Kasada, Queue-it. Residential is the baseline. Datacenter will fail at the front door. Mobile or ISP static may be required for the hardest targets; see our anti-bot landscape guide for which targets need which.
Extreme. Account creation/farming on Twitter/Instagram/TikTok at scale. Aggressive scraping of Amazon at scale. Anything that the target has specifically hardened against bots. Mobile is often the only thing that works. Carrier NAT means the target can’t ban without collateral damage. The cost is real but it’s the only tier with this property.
Decision dimension 2: session vs request economics
The other axis. Are you doing one-and-done requests, or session-based interactions?
Per-request, stateless. Each request is independent. Scraping product listings, monitoring prices, running SEO rank checks. Cost model: pay per GB of bandwidth. Residential wins for medium/high pressure; datacenter for low. Don’t pay for sticky sessions you won’t use.
Session-based, login required. Multi-step flows, authenticated browsing, checkout. Cost model: still pay per GB but you bind a sticky session for minutes at a time. Residential sticky is the standard. Worth noting: short sessions (~10 min) burn relatively little bandwidth, so even high-touch flows don’t blow up the cost.
Always-on, single IP needed. You need one persistent IP that doesn’t rotate. Examples: hosting an outbound webhook receiver, running a long-lived bot account, doing tasks where the target has built up trust to your specific IP. ISP static is the right answer. You pay per IP per month, not per GB; bandwidth is unmetered. Our ISP product line is built for this — fixed IPs in major US cities and regions, $5–15/month per IP, no GB cap.
High volume, must look human at the device layer. Anti-bot is fingerprinting devices, not just IPs. Mobile is the only tier that gives you a real device-class IP at scale. Cost is highest but you’re buying the only product that solves the problem.
Decision dimension 3: geo precision
How specific does the location need to be?
Country-level only. Most use cases. All four tiers offer country selection.
State / region. US state-level targeting, EU country-level (which is region-level globally). Residential and datacenter both offer this. Mobile less reliably — mobile carriers don’t map cleanly to states. ISP static is locked to the specific city of the IP.
City / zip. Required for hyper-local price scraping, ad verification, food delivery scraping. Residential is the best fit — most of the major brands (F-Geofast, Smart, Lumi, Oxylab) all expose city and zip parameters. Mobile is poor here because the same mobile IP can serve users across a metro area. Datacenter doesn’t really apply — datacenter IPs don’t map to consumer geos at all.
ASN-level. Some advanced workloads need a specific ISP (e.g., scraping Comcast-only content). Residential pools with the largest brands offer ASN targeting; smaller pools don’t.
Decision dimension 4: volume and budget
What’s the scale and what can you actually spend?
Under 50GB/month. Doesn’t really matter at this scale. Even residential costs you $125–250 total. Get residential, don’t optimize, focus on getting the workload right.
50GB–500GB/month. Optimization starts to pay. If 80% of your traffic is hitting low-pressure targets (which is common), routing those through datacenter and reserving residential for the 20% hard targets can cut your bill by 50–60%. We support this pattern at the router level — you can buy both tiers and pick per-job.
500GB+/month. Tier mixing is mandatory. Single-tier setups at this volume waste $1,000–$5,000/month. Plan to use at least datacenter (for low-pressure) + residential (for high-pressure) + a small ISP static allocation (for the always-on infrastructure).
Sneaker/checkout/ticket workloads. Volume is small (megabytes per check) but the success rate per dollar is what you optimize. Residential rotating during the release, ISP static for the seller account. Mobile may help on the hardest targets. Budget is small in GB terms but high in IP-time terms — you’re paying for unique IPs, not bandwidth.
The decision tree, in one block
1. What is the target's anti-bot sophistication?
- None / basic → Datacenter
- Cloudflare standard / Akamai standard → Residential
- Cloudflare Premium / DataDome / Kasada → Residential (and consider Mobile for hardest pages)
- Hardened account creation / social → Mobile (or Mobile + Residential mix)
2. Do you need session persistence (login, checkout)?
- No (one-and-done requests) → Rotating mode, any tier
- Yes (multi-step) → Sticky mode, residential at minimum
- Yes and always-on single IP → ISP Static
3. How precise does the geo need to be?
- Country-level → All tiers OK
- State / region → Residential or Datacenter
- City / zip → Residential
- Always specific city, no rotation → ISP Static
4. Volume?
- <50GB/month → Don't optimize, pick by 1+2
- 50–500GB/month → Optimize: mix tiers per job
- 500GB+/month → Required tier mix, plan budget
5. Edge cases:
- Need to bypass mobile-specific app fingerprint → Mobile
- Need maximum trust on one IP that grows over time → ISP Static
- Running an LLM-driven agent → Residential sticky (see our agent stack guide)
What we see go wrong most often
A few patterns from our support queue:
Buying residential when datacenter would do. Customer is scraping public US Census data or a small business directory. They pay $250 for residential bandwidth when $20 of datacenter would have worked. We catch this on the first ticket and point them at datacenter; they save 90%+ on month two.
Buying datacenter for Cloudflare-protected targets. The opposite. Customer wants to scrape Amazon product pages cheaply, picks datacenter, gets challenged on request #2. They blame the pool. We move them to residential and the same script works on the first try.
Buying ISP static for one-shot scraping. ISP static charges by IP-time, not bandwidth. Renting 20 static IPs at $10/month each to do a one-week scrape job is wasteful — you spent $200 on infrastructure you’ll abandon. Rotating residential for $50 of bandwidth would have done the same scrape.
Buying mobile because someone said “mobile is undetectable”. Sometimes true at the IP layer, but mobile is 3–5x the cost of residential and only solves problems residential can’t. If residential is working on your target, mobile is paying a premium for no improvement.
Not testing tier match before committing volume. Buy 10GB of each tier you’re considering. Run your actual script against your actual target through each. Compare success rates. Then buy 6 months of the winner. We see customers commit to 6 months of one tier and discover at month 1 it was the wrong one. The 10GB test is $50; the wrong 6-month commit is $1,500+.
A typical good setup, for reference
For a customer running a mixed-workload data pipeline with $500–1500/month proxy budget:
- 70% of traffic through residential rotating (medium-pressure target scraping).
- 20% of traffic through datacenter (low-pressure targets — public data, RSS, search engines that don’t aggressively rate-limit you).
- 5% of traffic through residential sticky (checkout flows, account interactions).
- 5% on 2–3 ISP static IPs ($20–30/month) for always-on infrastructure (webhook receivers, persistent bot accounts).
- Mobile only if the workload has a specific target that nothing else works on.
This pattern accommodates almost every customer use case we see, scales linearly with workload size, and avoids the “all-residential because it’s safe” overspend.
—
If you want help mapping your workload to a tier mix, the Discord server #stack-advice channel takes specific questions. We don’t push the most expensive tier — we’d rather you stay a customer for two years on $200/month than one quarter on $2,000.
