Smart Tunnel Union for NAT Traversal

Authors:
Tzu-Chi Huang;Ce-Kuen Shieh;Wen-Huang Lai;Yu-Ben Miao
Affiliations:
Department of Electrical Engineering, National Cheng Kung University, Ta-Hsueh Road, Tainan, Taiwan;Department of Electrical Engineering, National Cheng Kung University, Ta-Hsueh Road, Tainan, Taiwan;Department of Electrical Engineering, National Cheng Kung University, Ta-Hsueh Road, Tainan, Taiwan;Department of Electrical Engineering, National Cheng Kung University, Ta-Hsueh Road, Tainan, Taiwan
Venue:
NCA '05 Proceedings of the Fourth IEEE International Symposium on Network Computing and Applications
Year:
2005

Citing 0
Cited 3

A programmable network address translator: Design, implementation, and performance

ACM Transactions on Internet Technology (TOIT)
Network Security Alerts Management Architecture for Signature-Based Intrusions Detection Systems within a NAT Environment

Journal of Network and Systems Management
Program Ultra-Dispatcher for launching applications in a customization manner on cloud computing

Journal of Network and Computer Applications

Quantified Score

Hi-index	0.00

Visualization

Abstract

Network Address Translator (NAT) is the well-known, transitional method to mitigate the problem of IPv4 address depletion in today's Internet. However, the assignment, translation, and export of address/port in a NAT at run time affect application functions. Accordingly, application servers behind the NAT cannot accept requests directly from public networks. Sensitive applications cannot hold their end-to-end security mechanisms. Applications lose connections after the NAT reboots or changes the binding address/port. However, current proposals for NAT traversal hardly solve the problems. Against the problems, we propose Smart Tunnel Union for NAT Traversal (STUNT) in the paper. STUNT permits applications behind the NAT to be actively contacted by Internet clients, keeps end-to-end security mechanisms, and avoids the risk of exporting binding information of the NAT to connection endpoints. Meanwhile, it permits applications to traverse the NAT and keeps the NAT intact.