Security IT/NAT

nat was created as a response to the shrinking pool of IP addresses. in short, we get one variable IP address from an ISP defined from a specific APN, goes through the router and directs to a specific computer in own WAN network with private addresses.

bypass NAT restrictions edit

a few words explaining

Full-cone NAT edit

usually do not need to do here, sometimes must use port forwarding

(Address)-restricted-cone NAT edit

Run uPnP/NAT-PMP/UPnP-IGD/PCP
Set static private IP, optionally DDNS.
if doesn't work, use port forwarding
If doesn't work, use Port Triggering
If doesn't work, use DMZ

Port-restricted cone NAT edit

Symmetric NAT edit

sequential hole punching
Use Supernode

Cgnat edit

Investigation

The only reliable solution that I've found so far has been to use IPsec VPNs initiated from behind the NAT.
ZeroTier can traversable CGNAT. If you follow the recommendations) (It mainly boils down to opening the port in the firewall) it is the probability that value

"tcpFallbackActive": false

For all types NAT (probably) edit

Install zerotier and set bridge mode. It possible bypass NAT and open port

External links edit

NAT problem on vuze wiki