Practical Networking .net
post

Why NAT?

Before we can discuss how NAT works, we must discuss the purpose of NAT and answer the question, “Why NAT?”

In the original plan for the Internet, every host was meant to have its own unique IP address. This means if you had a network which had 30 hosts, you would need 30 unique IP addresses for each host to access the Internet, or to be accessed from the Internet.

IP addresses are a finite resource – 32 bits allows for roughly 4.2 billion possible IP address combinations.

As the Internet grew in popularity, the industry realized there would one day be more hosts on the Internet than there were IP addresses available.

The long term, permanent solution was to create a larger address range, and IPv6 was born which is an addressing scheme that uses 128 bits. However, transitioning to IPv6 would prove to be a complicated and slow process, so a short term solution had to also be implemented: RFC 1918 was created to reduce the rate of IPv4 address utilization and delay the inevitable exhaustion of addresses.

 

RFC 1918

RFC 1918 designated three different address sets that were considered free to use and reuse by any organization:

  • 10.0.0.0/8      - any IP address in the range of   10 .   #   . # . #
  • 172.16.0.0/12   - any IP address in the range of  172 .[16-31]. # . #
  • 192.168.0.0/16  - any IP address in the range of  192 .  168  . # . #

These addresses were labeled as Private addresses, and were deemed unroutable on the Internet. All the remaining addresses remained Public addresses, and able to be routed on the Internet.

With RFC 1918, if you had 30 hosts on your network, all 30 of them would use 30 unique Private IP addresses, but for Internet facing traffic, all 30 could share a single Public address. Allowing you to conserve 29 Public addresses.

Why NAT? - Home WifiThis is exactly what happens on WiFi networks. Whether it is a home WiFi network, or a coffee shop, or airport, each device on the network has a private IP address from one of the private ranges above. When these devices speak to the Internet, they all share the IP address assigned to the WiFi Router.

These Private addresses can be reused with each deployment without fear of duplicate addresses on the Internet. So long as the Public address(es) they are sharing are unique.

Why Nat? - WiFi NeighborhoodFor example, a lot of home WiFi networks use the common range of 192.168.1.0/24 for their each of their internal address ranges. The home Wifi router then translates each independent set of Private 192.168.1.0/24 addresses into unique Public addresses.

The idea is anyone can use these addresses, or even re-use these addresses, for as many hosts as they like on their internal network. NAT can then translate the multitude of hosts using Private addresses into a much smaller set of Public addresses – thereby curbing the rate of which IPv4 addresses are being utilized.

Private addresses are theoretically infinite, since they can be reused with each deployment. Public addresses are finite, and tracked by the Internet Authority for Assigned Numbers (IANA) to ensure no organization inadvertently uses duplicate Public addresses.

Consequently, the concept of Network Address Translation was born to facilitate the translation between Private addresses and Public addresses.

Traditionally, NAT exists to translate Private IPv4 addresses into Public IPv4 addresses. For the sake of simplicity, this article series will describe NAT from this perspective. However, in reality, it does not matter whether the IP addresses being translated are public or private. NAT could easily occur from private addresses to other private addresses or from public addresses to other public addresses.

 

Series NavigationNAT Terminology >>
  • 6
    Shares

Comments

  1. Good job Eddie!

  2. Ashish Mishra says:

    Hey Ed,

    Your posts are always helpful.
    Will there be any post for ospf and certificates ?

    Thanku for such wonderful information

  3. Banana-Man says:

    I could never get my head around this until I read your article. Thank you!

  4. JEAN-PIERRE Ernso says:

    Nice

Speak Your Mind

*