Question 1

What is NAT, and why does every home network use it?

Accepted Answer

**Network Address Translation** lets many devices share one public IP address, by rewriting addresses and ports as traffic passes through the router.

**Why it exists.** IPv4 provides around 4.3 billion addresses, far fewer than the number of connected devices. NAT was adopted as a stopgap and became universal — and it is why the address shortage has been survivable for decades without forcing IPv6 adoption.

**How it works.** Inside your home, devices have **private** addresses — typically 192.168.x.x — which are not routable on the internet. When a device sends a packet out:

**The router rewrites the source address** to its own public address, and rewrites the **source port** to a unique value.

**It records the mapping** in a translation table: this internal device and port corresponds to that external port.

**When a reply arrives** addressed to that external port, the router looks up the table and rewrites the destination back to the internal device.

Because the port is what distinguishes the sessions, the technique is more precisely **PAT** — port address translation — though everyone calls it NAT.

**The consequence that shapes everything.** The mapping is created by **outbound** traffic. An unsolicited inbound packet has no table entry, so the router does not know where to send it and discards it.

This produces two effects:

**A crude firewall.** Nothing outside can reach devices inside unprompted. This is genuinely useful security, though it is a side effect rather than a designed protection, and it is **not a substitute for a firewall** — it does nothing about outbound traffic or anything already inside.

**Inbound services need explicit configuration** — **port forwarding**, which manually creates a permanent mapping, or **UPnP**, which lets applications request one automatically. UPnP is convenient and a recognised security risk, since malware can use it too.

**NAT traversal** techniques — STUN, TURN and ICE — let two devices behind separate NATs establish direct connections, which is how video calling and peer-to-peer applications work at all.

**IPv6 removes the need for NAT**, giving every device a routable address and requiring a real firewall instead.

Question 2

What is an IP address and what is the difference between public and private?

Accepted Answer

An IP address identifies a device on a network so traffic can be routed to it. The important distinction for everyday troubleshooting is between the address your device holds on your local network

Question 3

What is CGNAT, and why does it break things?

Accepted Answer

Carrier-grade NAT is a technique ISPs use to share a single public IP address between many customers — a response to IPv4 address exhaustion, and a cause of a specific and confusing set of problems.

Question 4

What is port forwarding and when do I need it?

Accepted Answer

Port forwarding tells your router that unsolicited traffic arriving on a specific port should be sent to a specific device on your local network. It exists because address translation cannot

Question 5

What is UPnP, and why do people say to turn it off?

Accepted Answer

A set of protocols that lets a device on your network ask the router to open a port to itself, automatically and without authentication — which is exactly why it is convenient and why it is

Question 6

How do video calls actually connect?

Accepted Answer

By establishing a direct path between the two devices wherever possible, which is harder than it sounds because almost every device sits behind a router that blocks incoming connections by default.

Question 7

Why did the internet run out of IPv4 addresses, and how are they traded now?

Accepted Answer

Because the address space was fixed at 32 bits — about 4.3 billion addresses — in 1981, when the internet was a research network and nobody expected every household to hold dozens of connected

Related Questions