Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I sincerely hope not! ISP wide NAT is bound to cause countless issues for internet services and businesses.

The first and mose obvious examples I can think of:

* Internet services (eg websites, netfix etc) can no longer blacklist IP addresses without blocking entire ISPs.

* Businesses can no longer offer "direct to the office" VPNs for remote workers.. Actually - even site-2-site VPN's will break if both sides are behind an ISP wide NAT.



The first is a feature. The second is not true: a VPN can tunnel through TCP in the worst case, and most NATs allow VPN over UDP using some tricks.


Look on the bright side: users will have more privacy.


http://panopticlick.eff.org/

Works over NATs and proxies. And obviously the techniques from there are already used by those who want to sell your info for profit. So, please, let's put this meme to rest :-)

Blacklisting can and will happen based on other things, just that it is more costly and less performant. So the consumers will pay for that in hidden costs - less of the "useful" services delivered, etc.

The VPN part is sort-of correct - it will depend on the type of the NAT. With most of the NATs, establishing the direct connection over a pair of them is technically possible - take a look at STUN, TURN and ICE (IETF standards).




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: