Not the original purpose of NAT, sure, but it achieves that goal much better then IPv6 Privacy extensions are a hack and still uniquely identify someone even i

Not the original purpose of NAT, sure, but it achieves that goal much better then IPv6 Privacy extensions are a hack and still uniquely identify someone even if it changes once a day. NAT hides them all the time. If I have 100 nodes, good luck identifying them over PNAT as an ISP, without PNAT you have nice tags per each node... they change once a day but you match to last days traffic. Onto connectivity: a) block incoming traffic - sure - blocking with firewall, NAT is redundant, its a poor mans firewall BUT if you misconfigure the firewall or is disabled, you are screwed, whereas NAT just works. b) break peer-to-peer applications. Port NAT is needed for privacy, so this is a given. I also like it breaking peer-to-peer apps I only want specific nodes to be able to host stuff if ever. For home networks STUN/TURN works just fine without having external parties know who is placing the call.