A rotating mobile proxy pool routes each new connection through a different real phone on a live carrier network, so the destination site sees a fresh 4G/5G IP every time. That single property — constant IP churn on a trusted carrier range — is either your most powerful tool or an active liability, depending on the job. This guide breaks down exactly when rotation earns its keep, when it makes things worse, and how Nodetonet's token groups let you mix rotating and sticky behaviour on the same endpoint.
TL;DR: use rotating mobile proxies for large-scale scraping, anti-fingerprinting and geographic spread; switch to sticky or single-device mode for anything that needs a persistent identity — logins, checkouts, WebSocket connections, or low-volume one-off requests.
By the end you will know:
- How token groups work and how the device-selection algorithm picks a phone
- The four scenarios where rotation genuinely pays off
- The four scenarios where rotation actively hurts
- How to combine rotation and sticky sessions on the same proxy endpoint
- Comparison of rotation modes side by side
- Per-client controls that let you throttle, filter and scope a rotating pool
How rotating mobile proxies work under the hood
Every mobile proxy you create on Nodetonet is backed by one or more Android devices running the agent app, each paired with a unique token. When you want rotation you do not need a different product — you simply group the tokens.
On the token groups page you create a named pool (for example vodafone-tr-pool) and drop any number of tokens into it. You then create a proxy and point it at the group instead of a single token. The panel binds the proxy listener to the group, and every incoming connection is resolved to a live device at request time using two selection rules:
- Least-connections first. The device currently handling the fewest in-flight connections is chosen. This distributes bandwidth evenly and prevents one phone from becoming a hot spot while others sit idle.
- Round-robin on ties. When two or more devices are tied on connection count the router cycles through them in order, so the distribution stays uniform.
Devices that go offline, enter an ERROR state, or are mid-IP-rotation are automatically excluded from the eligible pool and re-admitted the moment they recover — no manual intervention required. The detailed selection algorithm is unpacked in the round-robin device selection post.
Because each device sits on a real SIM with real carrier-grade NAT, the exit IP pool you get is a slice of genuine carrier CGNAT ranges — the hardest class of IP to block without collateral damage. For a primer on why that matters see what is a mobile proxy.
Rotation modes at a glance
| Mode | How to enable | IP changes when | Best for | Watch out for |
|---|---|---|---|---|
| Rotating (default) | Point proxy at a token group; no suffix | Every new TCP connection | Bulk scraping, ad-verification sweeps, spreading fingerprint | Stateful sessions break on each new connection |
| Sticky / rotating | Append -session-XXXX to proxy username |
After TTL expires (default 600 s) | Login flows, checkout, multi-step forms, account management | One device absorbs all session load until TTL expires |
| Single-device | Point proxy at one token instead of a group | Only on manual IP-change or airplane-mode rotation | Long-lived WebSocket subscriptions, SSH tunnels, small-volume work | All eggs in one basket — if the phone drops, the proxy drops |
| Rotating + upstream | Enable upstream forwarding on the proxy | Per device's carrier schedule or manual reset | Residential chaining through a mobile egress for double-hop trust | Added latency; upstream billing compounds with device cost |
When rotation earns its keep
The honest rule: rotation only helps when a stable IP is actively working against you. There are four common scenarios where it pays off.
1. Scraping at scale
A single mobile device has one carrier uplink. As soon as your scraper hammers a target at volume, the site's rate limiter sees a flood of requests from one IP. With a token group of N devices you get N independent carrier IPs and N independent uplinks. The same crawler runs at full speed without any single IP tripping a threshold, and the bandwidth overhead is spread across the entire pool.
Pair this with the rotating proxy mode and each HTTP connection gets a fresh device. Use our proxy checker to confirm the IP changes between requests before you scale up.
2. Anti-fingerprinting and rate-limit evasion
Sophisticated anti-bot systems build a per-IP reputation score. A single IP accumulates requests over time, and once the score crosses a threshold the IP is challenged or blocked. With a rotating pool your traffic is spread across N IPs — no individual IP ever accumulates enough requests to score poorly. Because each IP sits on a carrier CGNAT range shared with thousands of genuine subscribers, even a challenged IP is less likely to be hard-blocked (the vendor risks banning real customers).
The wider the pool, the thinner the per-IP footprint. Even a small group of two or three devices meaningfully dilutes the signal.
3. Surviving soft bans
When a target temporarily bans an IP — for example after a CAPTCHA failure — only that one device is affected. The selector automatically stops routing to it (it enters ERROR state or the proxy handler drops it from eligibility) and the remaining N-1 devices continue working. From your scraper's perspective the error rate bumps briefly then the pool self-heals. You do not need to restart anything or swap credentials. For a related pattern see automatic failover for mobile proxies.
4. Geographic and carrier diversity
Mobile IPs carry real location and carrier metadata. If you build a group from devices on different carriers — say Turkcell, Vodafone and Türk Telekom — your rotating pool surfaces traffic from three independent egress ASNs in a single session. Combine that with geo-targeting username modifiers and you can steer the selector toward a specific carrier or city without changing your endpoint. This is invaluable for ad verification, price monitoring and SERP localisation tasks that need to see the exact view a carrier subscriber in a given city would see. See how Nodetonet routes traffic for the full modifier syntax.
When rotation is the wrong call
Rotation hurts when a stable identity is a requirement, not a preference. Four situations to avoid.
1. Logged-in account management
Anti-fraud engines track the IP history attached to an account. If your session starts on a Turkcell exit in Ankara and ten minutes later makes a request from a Vodafone exit in Istanbul, the platform sees that as a geographic anomaly — potentially an account-takeover signal. Use sticky sessions or a single-device proxy for anything that requires a live login. The -session-XXXX suffix pins a specific device for the group's TTL window (default 600 seconds) even inside a rotating pool. Details in sticky sessions explained.
2. Long-lived stateful connections
WebSocket subscriptions, IRC connections, persistent SSH tunnels and streaming APIs are bound to a single TCP session. If the router sends the next reconnect attempt through a different device the socket is coming from a different IP — the remote end will reject it or close the session. Use a single-device proxy for anything that must maintain a persistent connection. See single-device proxies explained for the architecture differences.
3. Low-volume or small-target work
If the task sends a handful of requests to a small site, the overhead of a pool adds latency with no benefit. There is nothing to spread, no fingerprint to dilute. A single device with the right carrier and geo targeting is faster to configure, cheaper to run and easier to debug.
4. Rate-limited APIs with per-key quotas
Some APIs enforce quotas per API key rather than per IP. Rotating the exit IP does nothing for you here — you will hit the key's limit regardless of how many devices you have. Solve this with multiple API keys or per-client proxy credentials instead.
If your workload would notice the IP changing mid-session, you want single-device or sticky. If you need to look like many different people making independent requests, you want a rotating pool.
Combining rotation and sticky sessions
Pure rotation and strict single-device are the two extremes. Real workflows usually sit somewhere in between, and Nodetonet lets you express that on the same endpoint by varying the username suffix.
The sticky suffix format is -session-<anyid> where <anyid> is any string you choose — a user ID, a session token, a random UUID. Two requests with the same suffix go to the same device; two requests with different suffixes go to different devices (subject to the least-connections selector). Example:
# Rotating — different device per TCP connection (no suffix)
curl -x http://u8x2:p7q1@sub42.nodetonet.com:48888 https://api.ipify.org
# Sticky — same device for TTL window (600 s default)
curl -x http://u8x2-session-user123:p7q1@sub42.nodetonet.com:48888 https://api.ipify.org
# Different user — different device
curl -x http://u8x2-session-user456:p7q1@sub42.nodetonet.com:48888 https://api.ipify.org
A practical pattern for browser-automation tasks: send the discovery crawl without a session suffix (rotating, maximum spread) and then switch to -session-<taskid> for the login + action steps so each task stays on one IP throughout. See token groups — creating pools for the panel UI walkthrough on assembling and managing groups.
Per-client controls on a rotating pool
Rotation is not all-or-nothing. Nodetonet gives you fine-grained controls on top of any pool through the proxy clients system:
- IP allowlisting. Restrict which source IPs can use the proxy endpoint — useful when you are handing a rotating pool credential to a specific server or team.
- Domain allow/deny lists. Scope the pool to only certain target domains, or block categories of destinations — see domain restrictions.
- Thread limits. Cap the maximum concurrent connections per client credential. This prevents one runaway scraper from monopolising the pool's devices. See thread limits per client.
- Bandwidth quotas. Set a GB cap per client so a rotation job cannot run unbounded. Details in quota limits per client.
- Expiry. Issue time-limited credentials for a fixed campaign window — see time-limited proxy clients.
These controls compose: you can hand a client an IP-locked, domain-scoped, thread-capped, bandwidth-quoted credential that still rotates devices automatically inside those bounds.
Building and sizing your first rotating pool
Practical guidance for getting started:
- Start small. Two or three devices in a group already eliminate the single-IP rate-limit problem for most use cases. Add more phones as volume grows.
- Match carriers to your target audience. If the target is a Turkish e-commerce site, a mix of Turkcell, Vodafone and Türk Telekom devices mirrors the real visitor spread more convincingly than ten phones all on one operator.
- Monitor per-device health. The panel dashboard shows each device's status in real time. Devices that stay in
ERRORfor long periods should be investigated (connectivity issue, SIM data exhaustion, battery drain). See device health — what online means. - Verify the rotation. Before scaling a job, spot-check a handful of requests with our What is my IP tool or the proxy checker to confirm different IPs are being served.
- Plan the sticky window. If any step in your flow needs state, decide the TTL in advance. The default is 600 seconds; that covers most login-and-act workflows. Very long checkout flows may need a longer window.
Rotating mobile vs rotating residential vs rotating datacenter
| Pool type | Trust tier | IP source | Block risk on hard targets | Typical cost model |
|---|---|---|---|---|
| Rotating mobile | Highest | Real phones on 4G/5G CGNAT | Lowest | Per device you control; prepaid credit on Nodetonet |
| Rotating residential | High | Real home ISP connections (often peer SDK) | Low, but rising as pools are well-known | Per GB ($8–15 typical) |
| Rotating datacenter | Low | Cloud/server IPs (AWS, OVH, etc.) | High — entire ASNs blocked | Per IP (cheap) |
The practical gap between rotating mobile and rotating residential widens on well-defended targets. Carrier-grade NAT means a ban on one mobile IP risks affecting thousands of paying subscribers, so anti-bot vendors rarely hard-block full carrier ranges. A residential pool, by contrast, is drawn from known SDK participants that fraud-detection vendors increasingly fingerprint at the ASN level. For a detailed head-to-head on one major provider see Nodetonet vs Smartproxy.
Protocol support: HTTP and SOCKS5
All Nodetonet rotating pools serve both HTTP/HTTPS and SOCKS5 on the same device fleet. HTTP is the right choice for browsers and most scraping frameworks. SOCKS5 forwards raw TCP for non-web tools — game clients, custom network tools, bulk mailers — with optional username/password auth. The choice does not affect the rotation behaviour; it only determines the tunnel protocol. See HTTP vs SOCKS5 — which to pick for a decision guide. If you need SOCKS5 with auth specifically, see SOCKS5 with authentication.
What is next
- Sticky sessions explained — how to pin a device for a TTL window inside a rotating pool.
- Round-robin device selection — the routing internals and eligibility rules.
- Token groups — creating pools — the panel UI walkthrough for assembling a group.
- Set up a rotating mobile proxy from scratch — end-to-end step guide.
- How to use Nodetonet — the quickstart pillar for new users.
- Rotating proxies feature overview — what the panel exposes and how billing works.