Skip to content
uencoder

Symmetric NAT

Symmetric NAT assigns a different public port for every distinct external destination; it is the strictest type, and P2P traversal needs a TURN relay.

Purpose

It offers the highest security but is the hardest to traverse: per-destination mappings prevent STUN from predicting ports.

Mechanism

The same internal endpoint maps to different public ports for different external destination IP/port pairs. Outside parties cannot predict the mapped port, hole punching fails, and a TURN server relay is required.

Use cases

  • Strict enterprise NAT
  • P2P TURN relaying
  • NAT type analysis

Related tools

References