NAT Traversal

Networking intermediate

NAT traversal describes techniques that let two endpoints behind Network Address Translation devices establish a direct connection with each other.

Summary

NAT traversal is a collection of techniques that allow two endpoints sitting behind Network Address Translation (NAT) devices to establish a direct connection, despite both being unreachable on a public address.

What is NAT Traversal?

Most devices today live behind NAT: home routers, mobile networks, and cloud instances translate private addresses to a shared public IP. This is fine for outbound traffic, but it breaks any protocol where two hosts behind separate NATs want to talk to each other directly.

NAT traversal solves this problem with a combination of public discovery servers and hole punching. A typical flow uses STUN to let each peer learn the public IP and port its NAT has assigned to a given outbound connection, then exchanges that information over a coordination channel. Both peers then send packets toward each other's mapped address simultaneously, "punching" matching state into both NATs so that traffic can flow.

When the NATs are too restrictive (symmetric NATs, carrier-grade NAT, strict firewalls), direct hole punching fails. In that case a TURN relay forwards traffic through a public server that both peers can reach. Modern peer-to-peer overlays and mesh VPNs combine all of these mechanisms automatically.

Why is NAT Traversal relevant?

  • Direct connections: Avoids routing all traffic through a central concentrator
  • Mesh VPN feasibility: Enables WireGuard-based and similar overlays to scale across roaming clients
  • Performance: Direct peer paths cut latency compared to relayed traffic
  • Real-time protocols: Required for WebRTC, voice/video, and many gaming protocols
  • STUN: Protocol used to discover the public mapping of a NATed endpoint
  • TURN: Relay protocol used when direct traversal cannot succeed
  • Peer-to-Peer: Network model that depends on NAT traversal to reach peers
  • Mesh VPN: VPN topology that uses NAT traversal between clients
  • WireGuard: VPN protocol typically paired with NAT traversal mechanisms

Similar Solutions

For Cloud & Infrastructure Teams

Cloud and infrastructure teams don’t deliver value because they run servers. They deliver value because systems are reliable, scalable, and secure. We work with cloud and infrastructure teams to design environments that meet business needs while enabling fast delivery. Our approach emphasizes practical automation, operational efficiency, and resilience.

Discover more

For Security & SOC Teams

Security teams don’t protect organizations because they issue reports. They protect organizations because vulnerabilities are managed continuously. We work with security and SOC teams to strengthen processes, proactively address risks, and align with compliance requirements. We focus on actionable practices, not theory.

Discover more

Related Terms

STUN (Session Traversal Utilities for NAT)

STUN is a protocol that lets a client discover the public IP address and port its NAT has mapped to an outbound connection.

Discover more

TURN (Traversal Using Relays around NAT)

TURN is a protocol that relays traffic between two endpoints when direct peer-to-peer connectivity through NAT is not possible.

Discover more

Peer-to-Peer (P2P)

Peer-to-peer (P2P) is a network model where nodes communicate directly with each other instead of routing all traffic through a central server.

Discover more

Mesh VPN

A mesh VPN is a VPN topology where every authorised client builds direct, encrypted peer-to-peer connections to every other client, with only identity and policy managed centrally.

Discover more

WireGuard

WireGuard is a modern, fast, and minimal open-source VPN protocol that uses state-of-the-art cryptography and runs in the Linux kernel and on every major operating system.

Discover more

We are here for you

You are interested in our courses or you simply have a question that needs answering? You can contact us at anytime! We will do our best to answer all your questions.

Contact us