3 ms·
IPsec has a tunnel mode over UDP, which is of course NAT friendly.
by gsich 8y ago
IPsec has a tunnel mode over UDP, which is of course NAT friendly.
- yjftsjthsd-h 8y agoSorry, but why would that help? I (naively) would expect udp to fare even worse over nat because the return path isn't automatically allowed... unless it is?
- isostatic 8y agoYou block outgoing udp connections? DNS? QUIC? Good luck with http/3 as it becomes standard
- yjftsjthsd-h 8y agoNo, inbound.
- mordechai9000 8y agoMost firewalls now track UDP state, either at the application layer, or simply by allowing return traffic until a timeout period with no traffic occurs.
- gsich 8y agoIt is.