Performing NAT 1:1 without connection tracking

Linux Netfilter discussions
 help / color / mirror / Atom feed

* Performing NAT 1:1 without connection tracking
@ 2023-11-21  8:52 Blažej Krajňák
  2023-11-21  9:21 ` Pablo Neira Ayuso
  0 siblings, 1 reply; 2+ messages in thread
From: Blažej Krajňák @ 2023-11-21  8:52 UTC (permalink / raw)
  To: netfilter

Hello everyone,

I’m wondering if is it possible to perform NAT 1:1 without using conntrack table/module at all?
Of course using nftables / iptables. Because for now I see xdp/bpf as the only way. 

Thanks
Blažej

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: Performing NAT 1:1 without connection tracking
  2023-11-21  8:52 Performing NAT 1:1 without connection tracking Blažej Krajňák
@ 2023-11-21  9:21 ` Pablo Neira Ayuso
  0 siblings, 0 replies; 2+ messages in thread
From: Pablo Neira Ayuso @ 2023-11-21  9:21 UTC (permalink / raw)
  To: Blažej Krajňák; +Cc: netfilter

On Tue, Nov 21, 2023 at 09:52:33AM +0100, Blažej Krajňák wrote:
> 
> Hello everyone,
> 
> I’m wondering if is it possible to perform NAT 1:1 without using conntrack table/module at all?
> Of course using nftables / iptables.

There is stateless NAT, if that is what you are searching for.

https://wiki.nftables.org/wiki-nftables/index.php/Performing_Network_Address_Translation_(NAT)#Stateless_NAT

> Because for now I see xdp/bpf as the only way. 
> 
> 
> 
> Thanks
> Blažej

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2023-11-21  9:21 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2023-11-21  8:52 Performing NAT 1:1 without connection tracking Blažej Krajňák
2023-11-21  9:21 ` Pablo Neira Ayuso

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox