← Back to Labs

NAT Translation Table

Follow one flow from inside private space through PAT, DNAT, hairpin NAT, and STUN discovery.

Inside host192.168.1.23:53122NAT gateway203.0.113.18conntrack entryNo active translation yetPublic sideWeb server 151.101.2.133:443
Step 1 / 6Private host starts with no public identity

A laptop on 192.168.1.23 wants to reach a public web server. The router must create a public-facing identity for that flow before replies can come back.

Arrow keys to navigate · R to reset

Tap dots to jump to any step

Read the full article →Take the quiz →