← Back to Labs

NAT Translation Table

Follow one flow from private space through PAT, DNAT, hairpin NAT, and STUN-based public mapping discovery.

Inside host192.168.1.23:53122NAT gateway203.0.113.18conntrack entryNo active translation yetPublic sideWeb server 151.101.2.133:443
Step 1 / 6A private host starts with no public tuple

A laptop on 192.168.1.23 wants to reach a public web server. Before any reply can come back, the router has to create a public source address and port for that flow.

Arrow keys to navigate · R to reset

Tap dots to jump to any step

Read the full article →Take the quiz →