Project

General

Profile

Actions

Feature #16517

open

Introduce `endpoint-independent` "full-cone" NAT

Added by Christian McDonald 4 days ago. Updated about 1 hour ago.

Status:
Feedback
Priority:
Normal
Category:
Rules / NAT
Target version:
Start date:
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
25.11
Release Notes:
Default

Description

Endpoint Independent NAT enables applications behind a NAT speaking to multiple remote hosts to receive the same mappings. This allows an application without any NAT traversal mechanisms to work around NAT issues to perform peer discovery. From the remote hosts perspective the NAT is transparent and it is as-if there is no NAT at all. This form of NAT has been given several names over the last few decades and might be known as 'full-cone' NAT.

Here we introduce the GUI knobs to enable this new functionality in the pf firewall.

Actions #1

Updated by Christian McDonald 4 days ago

  • Status changed from In Progress to Pull Request Review
Actions #4

Updated by → luckman212 about 1 hour ago

Very much looking forward to testing this! Will this make it into the 25.11 dev snapshots?

Actions

Also available in: Atom PDF