3 ms·
True; at the same time, though, implementing a simple firewall on a router with equivalent security to NAT is actually simpler than implementing NAT itself: blo
by pmjordan 17y ago
True; at the same time, though, implementing a simple firewall on a router with equivalent security to NAT is actually simpler than implementing NAT itself: block incoming connection initiation packets by default, e.g. SYN packets in TCP, UDP packets whose destination & source IP & port don't match recent previous packets. (and just drop unknown transport layer protocols) That logic is identical to NAT, except the packets just need to be accepted or dropped, never rewritten.
- JoeAltmaier 17y agoStill NAT is useful for creating "virtual machines", where more than one machine maps to the same IP address. Sure, the DNS can be used to do this at a higher level. But NAT does it much more dynamically.
- deleted 17y ago[deleted]
- dlsspy 17y agoAre you describing a load balancer, or something else? If not a load balancer (which has a different job to do), I just read this as "NAT is useful because it does NAT".
- JoeAltmaier 17y agoSo, yes, a load balancer. Thus the term "virtual machine" - meaning several machines provide a single service, spread over clients, time or whatever.