Issues with network address translation for SCTP

摘要: A Stream Control Transmission Protocol (SCTP) capable Network Address Translation (NAT) device is necessary to support the wider deployment of SCTP protocol. The key issues for an NAT are SCTP's control chunk multiplexing and multi-homing features. can expose possible Denial Service attacks. These be mitigated through use parameter processing limits.Multiple changing IP addresses during association, mean that NATs cannot operate in way conventional UDP/TCP operate. Tracking these multiple global help avoiding lookup table conflicts, however, it also result circumstances lead state inconsistencies. Our analysis shows tracking not most expected practical installations.We our FreeBSD implementation, alias_sctp examine performance implications addresses. We find typical memory usage doubles requirements significant installations experience high association arrival rates.In conclusion we provide recommendations a secure stable installation.