this post was submitted on 24 Jun 2024
683 points (97.9% liked)
Programmer Humor
32710 readers
407 users here now
Post funny things about programming here! (Or just rant about your favourite programming language.)
Rules:
- Posts must be relevant to programming, programmers, or computer science.
- No NSFW content.
- Jokes must be in good taste. No hate speech, bigotry, etc.
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
NAT still has its place in obfuscating the internal network. Also, it's easier to think about firewall/routing when you segregate a network behind a router on its own subnet, IMO.
Given how large the address space is, it's super easy to segregate out your networks to the nth degree and apply proper firewall rules.
There's no reason your clients can't have public, world routeable IPs as well as security.
Security via obfuscation isn't security. It's a crutch.
NAT is not an obsfucation, it's a proper security.
Uh, how? Fundamentally I disagree. I'd recommend reading the many other comments on this post for more context.
NAT is the basic principle behind a VPN. You isolate your machines from the network completely. I mean, if you want them to have internet access, then you don't need NAT, but if you want to isolate them and only have internal access, then why bother with IPv6 and setting up some weird firewall rules?
But I agree that NAT use cases are rare.