QNAT: High‑Performance x86 NAT Project by 360 OPS Team

QNAT is a high‑performance x86 NAT project created by the 360 OPS team based on DPVS and DPDK, currently deployed in 360's office network and most IDC egress points to meet daily business needs.

In typical network environments, public IP scarcity and security considerations lead to the use of NAT (Network Address Translation) at network egresses. 360 operates NAT across numerous IDC data centers and office networks, encountering challenges such as performance bottlenecks, flexible NAT policies, and session logging.

Features

High‑performance NAT44 : Handles high concurrent session counts and high bps traffic.

Traffic pass‑through : Allows non‑NAT traffic to be forwarded directly.

Multiple address‑pool selection : Enables selection of different NAT address pools per source IP.

Per‑IP session limits : Restricts the maximum number of NAT sessions for a specific source IP.

NAT session logging : Records detailed information of all NAT sessions for later tracing.

Command‑line interface management : Provides device‑like CLI management for QNAT.

Architecture Diagram

Applicable Scenarios

Primarily suited for IDC environments and large‑scale office network egress points.

Deployment Guide

Refer to the project documentation (click the original article link) for detailed deployment steps.

Running QNAT

Conclusion

QNAT is an open‑source NAT project built by the 360 OPS team for its own business scenarios; it may differ from other use cases, and the team welcomes feedback and contributions.

Open‑source Repository

https://github.com/Qihoo360/qnat