The State of NAT Traversal
The TL;DR ZeroTier One tackles NAT traversal with a lazy approach: relaying traffic through a server while simultaneously attempting a direct UDP hole-punched connection, so only about 4% of ZeroTier traffic ends up needing relay at all. ZeroTier uses stateless connection setup and 60-second UDP broadcasts to find peers on the same local network without prior configuration. NAT history, the four
The TL;DR ZeroTier One tackles NAT traversal with a lazy approach: relaying traffic through a server while simultaneously attempting a direct UDP hole-punched connection, so only about 4% of ZeroTier traffic ends up needing relay at all. ZeroTier uses stateless connection setup and 60-second UDP broadcasts to find peers on the same local network without prior configuration. NAT history, the four NAT types and their traversability, symmetric NAT workarounds, and UPnP are all covered here, wrapped around ZeroTier’s own memorable line that NAT murders kittens. For those who don’t know, NAT…
related reading
- How NAT traversal workstailscale.com
- Double Network Address Translation (NAT)noip.com
- Bad hosts, or: how I learned to stop worrying and love the overlay networkrobinsloan.com
- The Internet explained from first principlesexplained-from-first-principles.com
- GitHub - chime/terraform-aws-alternat: High availability implementation of AWS NAT instances.github.com
- The Law of Leaky Abstractions – Joel on Softwarejoelonsoftware.com
- WireGuard: Next Generation Kernel Network Tunnelwireguard.com
- Let's code a TCP/IP stack, 1: Ethernet & ARPsaminiir.com
- Decentralized Hole Punchingresearch.protocol.ai
- Beej's Guide to Network Programmingbeej.us
- TCP and UDP | Computer Securitytextbook.cs161.org
- Tailscale: How it workstailscale.com