Questions tagged [nat]

Network Address Translation (NAT) is a method of connecting multiple computers to the Internet (or any other IP network) using one IP address.

Network Address Translation (NAT) is a method of connecting multiple computers to the Internet (or any other IP network) using one IP address.

NAT is also known as IP masquerading.

RFC 2663 - IP Network Address Translator (NAT) Terminology and Considerations

1160 questions
9
votes
0 answers

WebRTC fails to connect P2P even though peers can send UDP packets to each other

I was under the impression that WebRTC goes to great lengths to achieve P2P connectivity despite NATs. [1][2] That's why I was surprised to learn that WebRTC fails to connect peers in some situations where a P2P connection is easy to achieve. I…
Atte Juvonen
  • 4,922
  • 7
  • 46
  • 89
9
votes
6 answers

Transparent Proxy for IPv6 traffic under Linux

When maintaining networks, it is often an expedient thing to do to run a transparent proxy. By transparent proxy I mean a proxy that 'hijacks' outgoing connections and runs them through a local service. Specifically I run a linux firewall with squid…
Jerub
  • 41,746
  • 15
  • 73
  • 90
9
votes
1 answer

Docker's NAT table output chain rule

i am trying to understand one of the rules in the iptables: $ sudo iptables -t nat --list -v ... Chain OUTPUT (policy ACCEPT 618 packets, 31267 bytes) pkts bytes target prot opt in out source destination 0 0…
otm
  • 685
  • 2
  • 9
  • 21
9
votes
4 answers

How to provide "reverse ssh" to a shell?

Scenario: Many embedded devices (running Linux) out in the fields, behind routers so NAT'd and we can't make connections to them. We need for a support person to be able to initiate a terminal/shell session on any of the devices. Their local…
The Archetypal Paul
  • 41,321
  • 20
  • 104
  • 134
8
votes
3 answers

Port Forwarding

I have a simple requirement of a software level port forwarding/tunnelling of socket based communication. I have a source server and port using Sockets. This is a java program which works both in windows and linux and this is irrelevant. I have…
Muthu
  • 2,675
  • 4
  • 28
  • 34
8
votes
2 answers

How to use cloud NAT in public GKE cluster pods using sourceIP

As per GCP documentation on Cloud NAT, Regular (non-private) GKE clusters assign each node an external IP address, so such clusters cannot use Cloud NAT to send packets from the node's primary interface. Pods can still use Cloud NAT if they send…
Saras
  • 163
  • 3
  • 5
8
votes
5 answers

Azure SNAT exhaustion - how do I know when it is happening?

We think we are having Azure SNAT exhaustion issues with a group of virtual machines within Cloud Foundry. The machines are not going through a load balancer. I've been through this…
T. Bowman
  • 141
  • 1
  • 1
  • 6
8
votes
0 answers

How to forward source IPs to Docker containers without letting Docker mess with iptables

if you run something (e.g. nginx) in a Docker container and publish one of the exposed ports to the outside world (like docker run -p 80:80 nginx) then Docker will expose the port to the public set up iptables so that if something connects to the…
Mate Varga
  • 3,144
  • 2
  • 14
  • 17
8
votes
2 answers

Iptables forward port range to another port range on a different host

I want to redirect incomming requests on a port range ( 30000 to 40000 ) to a different host on a different port range ( 10000-20000 ) mapping them 1 to 1. ( 30000 to 10000, 40000 to 20000 etc ) If the port range is the same i.e.: iptables -t nat -I…
Alexandru Eftimie
  • 149
  • 1
  • 1
  • 11
8
votes
1 answer

under what scenarios does SERVER REFLEXIVE and PEER REFLEXIVE addresses/candidates differ from each other?

I was going through the ICE/STUN specification and had a question. If I am located behind a NAT which could be a Full Cone, Restricted or Port Restricted but not a symmetric NAT and considering I am using UDP, then in this case my SERVER REFLEXIVE…
soupybionics
  • 4,200
  • 6
  • 31
  • 43
8
votes
1 answer

Router vs Switch (Network Address Translation)

I understand that a router uses NAT to translate the public IP we get from the ISP to say 300 local IPs. Does a switch perform the same function? If not, how's it different?
Vishnu Vivek
  • 1,819
  • 1
  • 20
  • 30
8
votes
1 answer

Linux nat/iptables configuration for this setup

I have an experimental setup, of 4 linux (CentOS) machines: All 4 machines are internally connected using different networks and can ping eachother directly connected interfaces. However only PC4 has access to internet. I am trying to setup iptable…
Space Rocker
  • 787
  • 3
  • 11
  • 25
8
votes
3 answers

how to upnp forward ports via two levels of routers

i am using the java sbbi library to forward ports. but my router is conected to another router, so the external ip of the first router is a ip that was given by the second router dhcp. is there a way to forward the ports on the second router as…
Dima
  • 8,586
  • 4
  • 28
  • 57
8
votes
2 answers

How to fix "a connection attempt failed because the connected party did not properly respond after a period of time ..." error?

I'm making a game in C# and I want to display the progress (movements and so on) of opponent. So I send events in game via TCP protocol to opponent. I've already tried my application on localhost and it works but when I try to use my external…
MartyIX
  • 27,828
  • 29
  • 136
  • 207
8
votes
3 answers

HTTP Server behind NATs

I'm trying to make an (apache) server behind multi-layered NAT to be accessible from Internet. Restrictions: Avoid relay. There is a public server (we call him the OldMan) for login / stun, but its bandwidth is too poor to carry relay data. I have…
Smith.Lai
  • 142
  • 1
  • 8