Carrier-grade NAT

Carrier Grade NAT.

Carrier-grade NAT (CGN), also known as large-scale NAT (LSN), is an approach to IPv4 network design in which end sites, in particular residential networks, are configured with private network addresses that are translated to public IPv4 addresses by middlebox network address translator devices embedded in the network operator's network, permitting the sharing of small pools of public addresses among many end sites. This shifts the NAT function and configuration thereof from the customer premise to the Internet service provider network.

Carrier-grade NAT has been proposed as an approach for mitigating IPv4 address exhaustion, and easing the transition to IPv6.^[1]

Critics of carrier-grade NAT argue the following aspects:

• It breaks the end-to-end principle.^[2]
• It has significant security, scalability, and reliability problems, by virtue of being stateful.
• It makes record keeping for law-enforcement operations more difficult.
• It makes it impossible to host services on well known ports.

One use scenario of CGN can be described as NAT444, because some customer's connections to public servers would pass through three different IPv4 addressing domains: the customer's own private network, the carrier's private network, and the public Internet.

Another CGN scenario is Dual-Stack Lite, in which the carrier's network uses IPv6 and thus only two IPv4 addressing domains are needed.

See also

• Multi-level NAT
• NAT64

References

1. ^ "An Incremental Carrier-Grade NAT (CGN) for IPv6 Transition". http://tools.ietf.org/html/draft-ietf-v6ops-incremental-cgn. 
2. ^ "Assessing the Impact of NAT444 on Network Applications". http://tools.ietf.org/html/draft-donley-nat444-impacts. 

External links

• Understanding Carrier Grade NAT
• IETF Internet-Draft: Common requirements for Carrier Grade NAT (CGN)