topic CPU and NAT in Network Security

CPU and NAT

Wan_Whisperer — Fri, 21 Feb 2020 15:54:38 GMT

All,

Is there a way to see what percentage of my CPU is taken up by NAT?

Also is there any advantage to have my servers on private ip space and have then Natted? I understand why you pat but why would you do a one to one nat on servers?

Re: CPU and NAT

balaji.bandi — Fri, 22 Jun 2018 21:51:00 GMT

what device is this router/FW/Switch ?

There are many use case to use Public IP with Natted IP :

Main reasons

1. Save public IP space

2. Securing the host

3. Server behind a NAT cannot receive incoming connections unless incoming traffic is explicitly forwarded to the them by the router.

4. Outgoing traffic from NAT router's IP, this hides details of the machines behind the NAT from external systems, i.e. how many machines, their private IPs,

5. With 1 Public IP you can manage many Private IP's.

Re: CPU and NAT

Wan_Whisperer — Mon, 25 Jun 2018 13:05:08 GMT

ON an ASA 5510.

I understand all of you answers but still don't understand why you would not a whole class C private to a whole Class C public

Re: CPU and NAT

Florin Barhala — Mon, 25 Jun 2018 13:49:44 GMT

Due to IPv4 exhaustion concerns.

Re: CPU and NAT

Wan_Whisperer — Mon, 25 Jun 2018 13:54:02 GMT

I 100% understand NAT and how it works. I am not talking about NAT overlaod. I am talking one to one ie...

192.168.1.1 - 201.1.1.1

192.168.1.2 - 201.1.1.2

192.168.1.3 - 201.1.1.3

192.168.1.4 - 201.1.1.4

192.168.1.5 - 201.1.1.5

and on and on for the whole class C.

Re: CPU and NAT

balaji.bandi — Thu, 28 Jun 2018 05:44:08 GMT

Its all depends on what is your requirement, you need to look at the KPI by deploying...learn...consider ..change ..life cycle..