5 ms·

Not unless you want to get through firewalls seamlessly. UDP "state" tracking is a thing, and if my firewall sees a UDP packet destined for it without knowing t

Not unless you want to get through firewalls seamlessly. UDP "state" tracking is a thing, and if my firewall sees a UDP packet destined for it without knowing the remote IP address it's going to drop it.

vertex-four 8y ago
Which is yet another reason to migrate to IPv6, which doesn’t require stateful NAT.
- wmf 8y ago
  Although stateful connection tracking is still a best practice for IPv6 firewalls and home routers.
- greglindahl 8y ago
  There are a ton of IPv4 firewalls and middleboxes that have stateful tracking even when NAT is not in use.
- X-Istence 8y ago
  My firewall doesn't do NAT yet is still stateful for IPv6. Also, most firewalls on end-point devices (think built-in to the OS) are stateful firewalls.
bb88 8y ago
If the client side changes it's IP address, it's a lot easier say than if the server side does. Typically because the server won't reject new UDP packets coming in from the internet. The load balancer will route any ongoing sessions with the session id, and not the ip address.
- X-Istence 8y ago
  Absolutely, but the original commenter was stating that it would allow either endpoint to their their IP easily (and thus making load balancing easier). I was disputing that.
  - bb88 8y ago
    Ah... apologies for my confusion. Thanks for the clarification.
amaccuish 8y ago
I think it's more about the client changing their IP, i.e. moving wifi networks or from wifi to mobile. Not so much the server changing.
- X-Istence 8y ago
  Client changing their IP address is fine, the comment I was replying to was stating that it would allow both sides to change their IP at will (and allow for better load balancing). I was disputing that.
algesten 8y ago
You can solve that with STUN which is how WebRTC does it. Each end sends a STUN packet to get the NAT statefullness going. Granted, it requires transferring of ICE connection candidates out of band (via the horrors of SDP)

vertex-four 8y ago

Which is yet another reason to migrate to IPv6, which doesn’t require stateful NAT.

wmf 8y ago
Although stateful connection tracking is still a best practice for IPv6 firewalls and home routers.
greglindahl 8y ago
There are a ton of IPv4 firewalls and middleboxes that have stateful tracking even when NAT is not in use.
X-Istence 8y ago
My firewall doesn't do NAT yet is still stateful for IPv6. Also, most firewalls on end-point devices (think built-in to the OS) are stateful firewalls.

bb88 8y ago

If the client side changes it's IP address, it's a lot easier say than if the server side does. Typically because the server won't reject new UDP packets coming in from the internet. The load balancer will route any ongoing sessions with the session id, and not the ip address.

X-Istence 8y ago
Absolutely, but the original commenter was stating that it would allow either endpoint to their their IP easily (and thus making load balancing easier). I was disputing that.
- bb88 8y ago
  Ah... apologies for my confusion. Thanks for the clarification.

amaccuish 8y ago

I think it's more about the client changing their IP, i.e. moving wifi networks or from wifi to mobile. Not so much the server changing.

X-Istence 8y ago
Client changing their IP address is fine, the comment I was replying to was stating that it would allow both sides to change their IP at will (and allow for better load balancing). I was disputing that.

algesten 8y ago

You can solve that with STUN which is how WebRTC does it. Each end sends a STUN packet to get the NAT statefullness going. Granted, it requires transferring of ICE connection candidates out of band (via the horrors of SDP)