* Performing NAT 1:1 without connection tracking
@ 2023-11-21 8:52 Blažej Krajňák
2023-11-21 9:21 ` Pablo Neira Ayuso
0 siblings, 1 reply; 2+ messages in thread
From: Blažej Krajňák @ 2023-11-21 8:52 UTC (permalink / raw)
To: netfilter
Hello everyone,
I’m wondering if is it possible to perform NAT 1:1 without using conntrack table/module at all?
Of course using nftables / iptables. Because for now I see xdp/bpf as the only way.
Thanks
Blažej
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: Performing NAT 1:1 without connection tracking
2023-11-21 8:52 Performing NAT 1:1 without connection tracking Blažej Krajňák
@ 2023-11-21 9:21 ` Pablo Neira Ayuso
0 siblings, 0 replies; 2+ messages in thread
From: Pablo Neira Ayuso @ 2023-11-21 9:21 UTC (permalink / raw)
To: Blažej Krajňák; +Cc: netfilter
On Tue, Nov 21, 2023 at 09:52:33AM +0100, Blažej Krajňák wrote:
>
> Hello everyone,
>
> I’m wondering if is it possible to perform NAT 1:1 without using conntrack table/module at all?
> Of course using nftables / iptables.
There is stateless NAT, if that is what you are searching for.
https://wiki.nftables.org/wiki-nftables/index.php/Performing_Network_Address_Translation_(NAT)#Stateless_NAT
> Because for now I see xdp/bpf as the only way.
>
>
>
> Thanks
> Blažej
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2023-11-21 9:21 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2023-11-21 8:52 Performing NAT 1:1 without connection tracking Blažej Krajňák
2023-11-21 9:21 ` Pablo Neira Ayuso
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox