NAT

jason_hu · Created Sep 17, 2021 09:28:22

Hi friend!
When hosts inside your network makes a request to a remote site, the remote site will see the connection as it’s coming from your NAT router. Some hosts implement a level of security regarding how many connections to accept from another host and they do not respond if the defined number of requests has been reached. This can degrade the performance of your network.
Because many applications and protocols depend on end-to-end functionality, your network may not be able to use some of them. As we already told you, hosts inside a NAT network are not reachable by hosts in other networks.
End-to-end IP traceability is also lost. If you need to troubleshoot your network from a remote site, you will find troubleshooting more difficult and sometimes even impossible.
Using tunneling protocols, such as IPsec, can also be a more complicated because NAT modifies values in the headers that interfere with integrity checks done by IPsec and other tunneling protocols. However, newer routers have special features to support tunneling protocols.
Services that require TCP or UDP connection initiation from the outside can also be affected and sometimes not usable at all.
Hope to help you!

DDSN · Created Sep 17, 2021 09:25:32

Hi hemin88,
Please wait patiently. Our engineers are looking for answers to your questions.

jason_hu · Created Sep 17, 2021 09:28:22

Hi friend!
When hosts inside your network makes a request to a remote site, the remote site will see the connection as it’s coming from your NAT router. Some hosts implement a level of security regarding how many connections to accept from another host and they do not respond if the defined number of requests has been reached. This can degrade the performance of your network.
Because many applications and protocols depend on end-to-end functionality, your network may not be able to use some of them. As we already told you, hosts inside a NAT network are not reachable by hosts in other networks.
End-to-end IP traceability is also lost. If you need to troubleshoot your network from a remote site, you will find troubleshooting more difficult and sometimes even impossible.
Using tunneling protocols, such as IPsec, can also be a more complicated because NAT modifies values in the headers that interfere with integrity checks done by IPsec and other tunneling protocols. However, newer routers have special features to support tunneling protocols.
Services that require TCP or UDP connection initiation from the outside can also be affected and sometimes not usable at all.
Hope to help you!

Vlada85 · Created Sep 17, 2021 09:33:37

The disadvantage of NAT

1. Translation results in switching path delays.
   2. Certain applications will not function while NAT is enabled.
   3. Complicates tunneling protocols such as IPsec.
   4. Also, the router being a network layer device, should not tamper with port numbers(transport layer) but it has to do so because of NAT.

Unicef · Created Sep 17, 2021 11:10:20

Good answer

rimon · Created Sep 17, 2021 18:30:30

Disadvantages of NAT

Decreased Performance

Whenever a guest makes a request to a remote server, it will make sure that the connection belongs to the NAT router. However some hosts implement security mechanisms on how many requests to be accepted. If the defining number exceeds, further requests will not be responded. This can create performance degrades especially in real time protocols such as VoIP.

2. Application Usage

Since hosts inside the network is unreachable at times, some applications tends to have compatibility issues with NAT. These applications depend on end to end functionality which the network fails to supply.

3. Protocol Usage

Since the value inside the headers are changed in NAT, tunneling protocols such as IPSec can be complicated to be used. Whenever the values inside the headers are modified, the integrity checks are interfered causing them to fail.

4. Service Usage

Most often when using NAT, services that require TCP or UDP are affected making them unstable. Incoming packets will have problems reaching their destinations. The only way to achieve them is by configuring NAT router.

5. Memory Usage

NAT needs to examine all the incoming and outgoing data packets converting local and global IP addresses. This makes all the translation details to be stored inside the memory. Thus, lots of memory as well as processor is consumed by the NAT.

6. Troubleshooting

Always when using NAT, the end to end traceability slowly reduces. In here the IP addresses are changed constantly over multiple NAT hops. This makes troubleshooting more difficult or almost impossible especially in remote locations.

smileymind · Created Sep 25, 2021 02:34:47

good

NAT

Best answer

Recommended answer

Third Party’s Trade Secret

My Followers

Enterprise

Consumer

Corporate

Carriers

NAT

Best answer

Recommended answer

Third Party’s Trade Secret

My Followers