0 views collected around this technical thread.
This guide explains Linux's built‑in netfilter firewall framework, its five hook points, the relationship between tables and chains, and how to use iptables (and firewalld) to define, view, modify, and persist traffic‑filtering rules, implement NAT, and create custom chains for advanced network security.
This guide explains the concepts, mechanisms, and primary uses of SNAT and DNAT in network address translation, and provides step‑by‑step iptables commands for implementing source and destination address translation in typical networking scenarios.
This article explains a VPC NAT solution that lets function compute pods in a shared Kubernetes VPC securely access services in overlapping business VPCs by using NAT ENIs, MAC adjustments, VXLAN encapsulation, and SNAT/DNAT rules.
Although IPv6, standardized in 1998, offers a 128‑bit address space, its global rollout remains sluggish—only about 40 % of users have IPv6, early tunneling methods proved unreliable, and NAT and CDNs lessen urgency—so experts predict a dual‑stack Internet persisting until roughly 2045, with a gradual shift toward a name‑centric architecture rather than a rapid replacement of IPv4.
This article explains the technical distinctions between IPv6 and IPv4, clarifies common misconceptions, describes IPv6's addressing scheme, auto‑configuration, lack of NAT, security implications, and practical challenges, while also presenting viewpoints from developers on its real‑world impact.
The article provides a detailed code-level walkthrough of F2FS’s superblock, Segment Information Table, Node Address Table, Summary Area, and Main Area structures, explaining each field, entry layout, and their roles in managing segments, inodes, and data within the filesystem.
This article explains the fundamentals of iptables, detailing how rules, tables, and chains work together to filter packets, the role of NAT, and provides practical command examples for configuring Linux firewalls effectively.
This article explains why home networks use private 192.168.x.x addresses, how NAT devices translate private to public IPs, the roles of SNAT and DNAT, the extension to NAPT with port translation, and techniques such as NAT traversal and hole punching that enable inbound connections from the Internet.
This article provides a comprehensive overview of iptables, detailing its host‑type filter table, limitations, the four main tables (filter, nat, mangle, raw), their respective chains, common command examples, and explains NAT concepts such as SNAT, DNAT, and MASQUERADE for Linux network security.
This article explains the concepts of public and private IP addresses, NAT techniques, and the principle of intranet penetration, then demonstrates how to set up and analyze the open‑source FRP framework, including configuration files and core Go code for both server and client components.
This article uses a restaurant analogy to demystify Keepalived's routing mechanisms, detailing the NAT, TUN, and Direct Routing (DR) modes, their configurations, underlying LVS architecture, performance trade‑offs, and practical deployment considerations for high‑availability load balancing.
This article uses a restaurant analogy to demystify Keepalived’s routing mechanisms, detailing the three routing modes—NAT, TUN, and Direct Routing (DR)—their configurations, underlying principles, advantages, limitations, and practical deployment considerations within load‑balancing environments.
This article provides a comprehensive guide to iptables, explaining its hierarchical structure of tables, chains, and rules, detailing the built‑in tables (filter, nat, mangle, raw) and their chains, describing rule syntax and target actions, and offering practical command examples for listing, flushing, saving, setting default policies, and configuring SSH, HTTP, NAT, and IP‑based restrictions.
Learn how to virtualize network resources on a single Linux host using network namespaces, virtual Ethernet devices, bridges, and NAT, enabling isolated containers to communicate with each other, the host, and the external internet without complex code, while covering setup, routing, and port publishing.
This tutorial explains how to isolate, virtualize and connect container network stacks on a single Linux host using network namespaces, virtual Ethernet pairs, a Linux bridge, routing, NAT and iptables rules, and shows how to expose container services to the external world.
The article explains four‑tier load balancer fundamentals, detailing its OSI‑layer‑4 topology, then derives and compares the NAT and Direct Route (DR) models, highlighting their mechanisms, advantages, drawbacks, and deployment constraints, with illustrative network diagrams.
This article explains the fundamental mechanisms of computer networking—including IP addressing, MAC addresses, ARP, DHCP, subnetting, routing, and NAT—using clear analogies and detailed diagrams to help readers grasp how data travels from one host to another across local and wide-area networks.
This guide walks through building isolated single‑host container networks on Linux using network namespaces, virtual Ethernet pairs, bridges, routing and NAT, showing step‑by‑step commands to create, connect, and expose containers, troubleshoot connectivity, and understand Docker’s networking models.
This article explains how to virtualize and isolate Linux network resources for containers using network namespaces, virtual Ethernet devices, bridges, routing, and NAT, providing step‑by‑step commands to connect containers, expose ports, and enable external internet access without relying on Docker.
This article provides a comprehensive guide to using iptables for port forwarding, explains the four tables and five chains, details common command syntax, match criteria, actions, additional modules, and includes practical examples for NAT configuration and protecting against small‑scale attacks.