Mis on NAT (Network Address Translation)?

NAT (Network Address Translation) is a mechanism for converting IP addresses within a private network (such as a home or office network) to one or more IP addresses of the external network (internet), and vice versa.

Working principle:

1. Devices in the private network use private IP addresses (for example, from ranges 192.168.x.x, 10.x.x.x).
2. When requesting an external resource (internet), packets pass through a NAT device (router).
3. The NAT device replaces the private IP address and sender's port with its public IP address and a unique port.
4. The translation information is stored in the NAT table.
5. The packet is sent to the external network with the public IP address.
6. When the response packet arrives at the NAT device's public IP address, it looks into its table.
7. Based on the information in the table, the NAT device determines which internal device the packet is for, and replaces its public IP address and port with the private IP address and port of that device.
8. The packet is delivered to the destination device in the private network.

// Example of a NAT table entry (simplified)
// Internal IP:Port -> External IP:Port NAT -> External destination IP
// 192.168.1.10:54321 -> 203.0.113.1:60001 -> 8.8.8.8:53
// This means the packet from 192.168.1.10:54321 was translated to 203.0.113.1:60001

Types of NAT:

• Static NAT: One private IP address is permanently mapped to one public IP address. Used rarely, mainly for servers that need to be accessible from the internet.
• Dynamic NAT: A group of private IP addresses is dynamically mapped to a pool of public IP addresses from the available range.
• PAT (Port Address Translation) / NAPT (Network Address Port Translation) / Masquerading: The most common type. Multiple devices with private IPs use a single public IP, distinguished by the port used.

Advantages:

• Conservation of public IP addresses: Allows using one public IP address for multiple devices in the private network.
• Enhanced security: Hides the internal network structure from the outside world. Devices in the private network are by default inaccessible from the internet.

Disadvantages:

• Restrictions on incoming connections: Direct incoming connections from the internet to devices in the private network are more difficult (port forwarding needs to be configured).
• Issues with some protocols: Some protocols that embed IP addresses in packet data may not work correctly with NAT.
• Diagnostics are more complex: It is harder to trace which internal device generated specific traffic.