nanog mailing list archives
RE: NAT IP and Google
From: "Tony Wicks" <tony () wicks co nz>
Date: Wed, 21 May 2014 08:58:32 +1200
Some of the networks I work with do the "everything behind NAT" thing and
get bitten by this. Using a pool of addresses helps but... This is only going to get more painful with more people doing >"Carrier Grade"
NAT...
I Run CGN with tens of thousands of broadband users being translated behind /24 pools and experience no issues with Google whatsoever. (APNIC ran out of IP's some time ago) Occasionally there are issues with things like banks and universities firewall rules who get confused when hundreds of users are accessing them from one or two IP addresses, but this is not often. The biggest issue is the DDOS attacks have a much bigger effect if the upstream's block our destination IP before we can take the target out of the NAT pool. But that is an education thing primarily. Blocking ddestination IP's for DDOS mitigation is going to have to be phased out, its really just laziness and it rewards the attacker.
Current thread:
- NAT IP and Google Pui Edylie (May 20)
- Re: NAT IP and Google William Waites (May 20)
- Re: NAT IP and Google Harald Koch (May 20)
- Re: NAT IP and Google William Waites (May 20)
- RE: NAT IP and Google Tony Wicks (May 20)
- Re: NAT IP and Google Harald Koch (May 20)
- Re: NAT IP and Google William Waites (May 20)
- Re: NAT IP and Google Mark Andrews (May 20)
- Re: NAT IP and Google Owen DeLong (May 21)
- RE: NAT IP and Google Tony Wicks (May 21)
- Re: NAT IP and Google Valdis . Kletnieks (May 21)
- Re: NAT IP and Google Ca By (May 21)
- Re: NAT IP and Google Ca By (May 21)
- IPv6 at 50% for VZW (Re: NAT IP and Google) Jared Mauch (May 21)
- Re: IPv6 at 50% for VZW (Re: NAT IP and Google) Livingood, Jason (May 22)
- Re: IPv6 at 50% for VZW (Re: NAT IP and Google) Jared Mauch (May 22)
- Re: IPv6 at 50% for VZW (Re: NAT IP and Google) Christopher Morrow (May 22)
- RE: NAT IP and Google Tony Wicks (May 21)