Why IP Address Space Is a Line Item for Any VPN

A VPN provider does not generate its exit addresses; it acquires them. IPv4 address space is a finite resource that changes hands on a secondary market, and address reputation degrades with use, which makes it a consumable rather than a one-off purchase. Both facts land directly on what a free tier can afford to give you.

This is an economics post, not a networking one. What an address reveals about you is a separate question; what it costs the provider is this one.

Addresses are acquired, not created

Every server a VPN runs needs at least one publicly routable address to be the exit point for your traffic. Providers obtain those addresses in a few ways: from the hosting company along with the server, leased from a broker or a regional registry allocation, or bought outright as a block.

All of those are costs, and the last two are ongoing ones. A provider that wants a lot of exit addresses in a lot of countries is buying or leasing in each of those markets separately, at local rates.

IPv4 is the constrained part. The original address space was allocated long before anyone needed billions of endpoints, and the free pools at the regional registries have effectively been exhausted for years. What exists now is a transfer market: addresses move between organisations that already hold them. Scarcity plus demand makes address blocks an asset with a market rate, which is why hosting providers charge separately for additional addresses.

IPv6 does not fully solve it in practice. There is no shortage of IPv6 addresses. The complication is that a large share of the internet’s services, networks, and captive Wi-Fi still behave better over IPv4, so a consumer VPN generally needs IPv4 exits regardless of how modern its own network is.

Reputation is the part that wears out

The subtler cost is that an address’s usefulness depends on how the rest of the internet treats it, and that changes over time.

Anti-fraud systems, content platforms, banks, and comment systems all keep scores against address ranges. An address that many people share, or that has been used for something abusive, accumulates a worse score. The consequences are familiar to anyone who has used a VPN: extra CAPTCHAs, blocked sign-ups, “unusual activity” prompts, refused checkouts, and occasional outright blocks.

This is a cost in two ways. Providers spend effort managing reputation — spreading load, rotating ranges, responding to complaints — and they spend money replacing addresses that have become too degraded to be useful. Address space is therefore closer to a consumable input than to a durable one.

What that means for free tiers

Because addresses are scarce and reputation is finite, providers have to decide how to allocate their good address space. Free users are not the tier that gets the newest blocks.

More sharing per address. Free tiers concentrate more users behind fewer exits. That is the cheapest way to serve them, and it directly increases the number of people whose behaviour affects your CAPTCHA rate.

Fewer locations. Each additional country means addresses in that country. A short server list on a free tier is partly a bandwidth decision and partly an address-space one.

Older or busier ranges. Where a provider segments its network, the ranges with better reputation are worth more to paying customers.

No dedicated addresses. A dedicated exit address is sold as a paid add-on precisely because it is a per-unit cost the provider incurs on your behalf.

None of this is a provider behaving badly. It is the same allocation logic as prioritising paying customers during congestion, applied to a different scarce input.

What you can observe from the outside

You cannot see a provider’s address spend, but you can see its consequences, and they are useful signals:

• A free tier where sites constantly challenge you is a heavily shared exit. That tells you about the tier’s cost position, not about the provider’s honesty.
• A free tier offering many locations with no cap is claiming an expensive configuration. Worth asking what funds it — see the arithmetic of an unlimited free VPN.
• A service selling residential-quality addresses to business customers has found a way to monetise address space directly, and in the free-VPN world that frequently means your connection is the product. That model is bandwidth resale.

That last point is the one worth internalising. Residential addresses are commercially valuable because they carry better reputation than data-centre ranges. Any business built on supplying them has an incentive to acquire access to ordinary people’s connections, and a free app is an efficient way to do that.

Questions worth asking

1. Does the free tier share exits more heavily than the paid one? Providers rarely publish this, but the CAPTCHA rate answers it experimentally within a day of use.
2. How many locations does the free tier actually include? A handful is normal and honest. A very long list on a free tier is a claim about spending.
3. Is a dedicated address offered as a paid extra? If so, the provider is telling you that address space has a per-unit cost — which is consistent with the rest of the model.
4. Does anything in the terms mention using your connection or your address? That is the signal that the address economics run in the opposite direction.

The takeaway

Address space is one of the clearest illustrations of the site’s one idea. It is a purchased, scarce, degrading input that scales with how many exits a provider needs and how hard its users lean on them. A free tier’s short server list and heavy sharing are the visible shape of that expense, and a free service that shows no sign of the constraint is worth a second look at how it is funded — the patterns are in how free VPNs make money.