{"id":787,"date":"2015-01-23T09:54:15","date_gmt":"2015-01-23T07:54:15","guid":{"rendered":"https:\/\/excentiscom.webhosting.be\/?p=787"},"modified":"2022-06-24T08:30:46","modified_gmt":"2022-06-24T06:30:46","slug":"the-ugly-side-of-nat","status":"publish","type":"post","link":"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/","title":{"rendered":"The ugly side of NAT"},"content":{"rendered":"<p>Today, Network Address Translators (or NAT) devices are everywhere. Their rapid rise towards universal adoption was not part of a planned effort. Instead, it was fueled by the continued growth of the internet and the corresponding depletion of the IPv4 address space. Besides obvious advantages, such as IP address reuse and hiding of internal network topologies, NAT technology has some important drawbacks as well. This blog post takes a closer look at these downsides.<\/p>\n<h2>History of NAT<\/h2>\n<p>The concept of Network Address Translation was first described in a 1994 memo (called\u00a0<a title=\"RCF 1631\" href=\"http:\/\/www.ietf.org\/rfc\/rfc1631.txt\" target=\"_blank\" rel=\"noopener\">RFC 1631<\/a>) by Kjeld Egevang and Paul Francis. The objective of\u00a0NAT was to create\u00a0a mechanism allowing IPv4 addresses to be shared across numerous devices. \u00a0Although IPv4 was capable of uniquely addressing some 4.4 billion devices, it was already evident in 1992 that the world was heading down a path of very intensive deployment of IP-based devices. IPv4 would never\u00a0be able to cover\u00a0the full range of future device deployment. Using NAT could help overcome this imminent\u00a0address exhausting.<\/p>\n<p>In addition, it was intended that NATs could be deployed incrementally within the Internet, without causing changes to hosts or other routers. After all, the original RFC describes NAT as a measure capable of\u00a0<em>\u201cproviding temporarily relief while other, more complex and far-reaching solutions are worked out.\u201d<\/em><\/p>\n<p>Two decades later, with the long term solution (IPv6) defined for over 15 years and its deployment finally commencing, NAT still dominates the edges of the internet landscape and is still being deployed.<\/p>\n<h2>Advantages (Killer features)<\/h2>\n<p>A lot of information has been written about the advantages of NAT so here is a summary:<\/p>\n<ul>\n<li>it prevents\u00a0the shortage of IPv4 addresses.<\/li>\n<li>it provides a basic level of security. Only traffic that was initiated from behind the NAT at the LAN side will be forwarded.<\/li>\n<li>it separates the internal IP network from the public IP address provided by the internet service provider (ISP), so switching between ISPs becomes easy.<\/li>\n<\/ul>\n<h2>Disadvantages (Killer issues)<\/h2>\n<p>NAT doesn\u2019t only bring good things, it\u00a0has some disadvantages as well. Because NAT was developed as a temporary technology, it was not designed with new technologies and protocols in mind. Those protocols therefore have\u00a0to add a kind of intelligence to overcome these issues.<\/p>\n<h3>No strict specification of implementation<\/h3>\n<p>IETF was not in favour\u00a0of standardizing the NAT behaviour, as this would only encourage its deployment. They saw this technology only as a \u201ctemporary measure\u201d. Therefore the original specification remained at a general level. However, this forced each NAT implementer into making local decisions as how the NAT should behave under specific circumstances.<\/p>\n<p>We now enjoy a network with widespread deployment of an active device that does not have consistent implementations and, in the worst cases, exhibits non-deterministic behavior. This has made the deployment of certain applications on the internet, such as\u00a0voice-based applications, incredibly difficult.<\/p>\n<h3>Peer-to-peer communication<\/h3>\n<p>NAT cannot support applications where the initiator lies on the \u201coutside\u201d. Because the local addresses behind the NAT\u00a0are private they can\u2019t\u00a0be routed across the internet. Therefore it&#8217;s impossible for the external device to direct any packet to that device behind the NAT in order to initiate a session. This implies that peer-to-peer services, such as voice, cannot work unaltered in a NAT environment.The protocol has to implement its own way to overcome this problem.<\/p>\n<p>The generic approach here for applications to traverse NATs in the \u201cwrong\u201d direction is for the inside device to forge a connection to the outside agent, and for the inside device to then establish what NAT translated address has been used, and the nature of the NAT in the path, and then republish this address as the local entity\u2019s published service rendezvous point. Sounds fragile? Unfortunately, it is. \u00a0Passive FTP is one of those implementations. In the VoIP world they use ICE (Interactive Connection\u00a0Establishment) and STUN servers (Session Traversal Utilities for NAT) to discover the presence of the Network Address Translator and to obtain the mapped (public) IP address (NAT address) and port number that the NAT has allocated for the application\u2019s UDP connections to remote hosts. Skype uses SuperNodes, which are on a public IP, to traverse a NAT and relay the call.<\/p>\n<h3>IP Fragmentation and out-of-order<\/h3>\n<p>When an IP packet is bigger than the Maximum Transmission Unit (<a href=\"http:\/\/en.wikipedia.org\/wiki\/Maximum_transmission_unit\">MTU<\/a>) of the interface, it gets fragmented into smaller frames. The TCP or UDP header is found\u00a0only in the initial IP fragment\u00a0<em>(see Frame 1 on picture below)<\/em>\u00a0. The subsequent IP packet fragments do not contain a copy of the transport layer packet header\u00a0<em>(Frame 2 to Frame N)<\/em>.<\/p>\n<p><img fetchpriority=\"high\" decoding=\"async\" class=\"alignnone wp-image-788 size-full\" src=\"https:\/\/www.excentis.com\/wp-content\/uploads\/nat_ip_fragmentation.png\" alt=\"\" width=\"849\" height=\"590\" srcset=\"https:\/\/www.excentis.com\/wp-content\/uploads\/nat_ip_fragmentation.png 849w, https:\/\/www.excentis.com\/wp-content\/uploads\/nat_ip_fragmentation-300x208.png 300w, https:\/\/www.excentis.com\/wp-content\/uploads\/nat_ip_fragmentation-768x534.png 768w\" sizes=\"(max-width: 849px) 100vw, 849px\" \/><\/p>\n<p>NAT devices do not have a clear and uniform response to this fragmentation, as they normally rely on the (now missing) TCP\/UDP header of each arriving frame for translation. Some of them\u00a0attempt packet reassembly as if they were the end host and perform the NAT translation only when the original IP packet is reassembled. Of course the reassembled packet may itself be too large to be forwarded, in which case the NAT is forced to further fragment the packet. Other NAT devices do not attempt packet reassembly, but rely on a\u00a0<em>packet fragment translation state<\/em>\u00a0indicating how subsequent fragments must be translated.<\/p>\n<p>This form of behavior becomes a problem when IP fragments arrive out of order, i.e. when some fragments are received before the first IP packet fragment. In such cases, the NAT often has little choice but to silently discard the out of order fragments.<\/p>\n<h3>IPSEC<\/h3>\n<p><a href=\"http:\/\/en.wikipedia.org\/wiki\/IPsec\">IPSec<\/a>\u00a0(<b>I<\/b>nternet\u00a0<b>P<\/b>rotocol\u00a0<b>Sec<\/b>urity) uses a cryptographic hash value for data integrity. But NAT changes the IP packet, thus invalidating those integrity checks.<\/p>\n<p>There is a solution, however, in NAT Traversal or NAT-T. Basically, NAT-T (RFC 3947 and 3948) detects the presence of any NAT devices between two hosts and encapsulates the IPsec traffic in a possible second UDP using a non-IPsec port number. Now when this packet arrives at the NAT, it can safely alter the IP header and UDP header for its translation without invalidating the IPSec integrity checks.<\/p>\n<p><img decoding=\"async\" class=\"alignnone wp-image-789 size-full\" src=\"https:\/\/www.excentis.com\/wp-content\/uploads\/ip_sec_nat_t-2.png\" alt=\"\" width=\"960\" height=\"297\" srcset=\"https:\/\/www.excentis.com\/wp-content\/uploads\/ip_sec_nat_t-2.png 960w, https:\/\/www.excentis.com\/wp-content\/uploads\/ip_sec_nat_t-2-300x93.png 300w, https:\/\/www.excentis.com\/wp-content\/uploads\/ip_sec_nat_t-2-768x238.png 768w\" sizes=\"(max-width: 960px) 100vw, 960px\" \/><\/p>\n<h2>Conclusion<\/h2>\n<p>Despite their shortcomings, despite the problems NATs create for numerous applications and their users, and despite a\u00a0lack of standardization, NAT continues to be an important part of the future of the internet. The benefits still seem to outweigh the disadvantages\u00a0and its widespread adoption in turn creates a major incentive for application developers to take NAT into account and cope with its inherent problems.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Today, Network Address Translators (or NAT) devices are everywhere. Their rapid rise towards universal adoption was not part of a planned effort. Instead, it was fueled by the continued growth of the internet and the corresponding depletion of the IPv4 address space. Besides obvious advantages, such as IP address reuse and hiding of internal network &hellip;<\/p>\n","protected":false},"author":4,"featured_media":788,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"_genesis_block_theme_hide_title":false,"footnotes":""},"categories":[61],"tags":[],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.4 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>The ugly side of NAT - Excentis<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The ugly side of NAT - Excentis\" \/>\n<meta property=\"og:description\" content=\"Today, Network Address Translators (or NAT) devices are everywhere. Their rapid rise towards universal adoption was not part of a planned effort. Instead, it was fueled by the continued growth of the internet and the corresponding depletion of the IPv4 address space. Besides obvious advantages, such as IP address reuse and hiding of internal network &hellip;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/\" \/>\n<meta property=\"og:site_name\" content=\"Excentis\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Excentis\/\" \/>\n<meta property=\"article:published_time\" content=\"2015-01-23T07:54:15+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-06-24T06:30:46+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.excentis.com\/wp-content\/uploads\/nat_ip_fragmentation.png\" \/>\n\t<meta property=\"og:image:width\" content=\"849\" \/>\n\t<meta property=\"og:image:height\" content=\"590\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Bram\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@excentis\" \/>\n<meta name=\"twitter:site\" content=\"@excentis\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Bram\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/\"},\"author\":{\"name\":\"Bram\",\"@id\":\"https:\/\/www.excentis.com\/#\/schema\/person\/14a2ac99879eb7b7d4c1a8d666b7a119\"},\"headline\":\"The ugly side of NAT\",\"datePublished\":\"2015-01-23T07:54:15+00:00\",\"dateModified\":\"2022-06-24T06:30:46+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/\"},\"wordCount\":1073,\"commentCount\":2,\"publisher\":{\"@id\":\"https:\/\/www.excentis.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.excentis.com\/wp-content\/uploads\/nat_ip_fragmentation.png\",\"articleSection\":[\"NAT\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/\",\"url\":\"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/\",\"name\":\"The ugly side of NAT - Excentis\",\"isPartOf\":{\"@id\":\"https:\/\/www.excentis.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.excentis.com\/wp-content\/uploads\/nat_ip_fragmentation.png\",\"datePublished\":\"2015-01-23T07:54:15+00:00\",\"dateModified\":\"2022-06-24T06:30:46+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/#primaryimage\",\"url\":\"https:\/\/www.excentis.com\/wp-content\/uploads\/nat_ip_fragmentation.png\",\"contentUrl\":\"https:\/\/www.excentis.com\/wp-content\/uploads\/nat_ip_fragmentation.png\",\"width\":849,\"height\":590},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.excentis.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The ugly side of NAT\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.excentis.com\/#website\",\"url\":\"https:\/\/www.excentis.com\/\",\"name\":\"Excentis\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/www.excentis.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.excentis.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.excentis.com\/#organization\",\"name\":\"Excentis\",\"url\":\"https:\/\/www.excentis.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.excentis.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.excentis.com\/wp-content\/uploads\/logo_excentis_001_1200dpi_sRGB.png\",\"contentUrl\":\"https:\/\/www.excentis.com\/wp-content\/uploads\/logo_excentis_001_1200dpi_sRGB.png\",\"width\":3237,\"height\":450,\"caption\":\"Excentis\"},\"image\":{\"@id\":\"https:\/\/www.excentis.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/Excentis\/\",\"https:\/\/twitter.com\/excentis\",\"https:\/\/www.linkedin.com\/company\/excentis\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.excentis.com\/#\/schema\/person\/14a2ac99879eb7b7d4c1a8d666b7a119\",\"name\":\"Bram\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.excentis.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/c2703bf3f7122d24e15d1eba9b10077d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/c2703bf3f7122d24e15d1eba9b10077d?s=96&d=mm&r=g\",\"caption\":\"Bram\"},\"url\":\"https:\/\/www.excentis.com\/author\/excentis_super_admin\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"The ugly side of NAT - Excentis","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/","og_locale":"en_US","og_type":"article","og_title":"The ugly side of NAT - Excentis","og_description":"Today, Network Address Translators (or NAT) devices are everywhere. Their rapid rise towards universal adoption was not part of a planned effort. Instead, it was fueled by the continued growth of the internet and the corresponding depletion of the IPv4 address space. Besides obvious advantages, such as IP address reuse and hiding of internal network &hellip;","og_url":"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/","og_site_name":"Excentis","article_publisher":"https:\/\/www.facebook.com\/Excentis\/","article_published_time":"2015-01-23T07:54:15+00:00","article_modified_time":"2022-06-24T06:30:46+00:00","og_image":[{"width":849,"height":590,"url":"https:\/\/www.excentis.com\/wp-content\/uploads\/nat_ip_fragmentation.png","type":"image\/png"}],"author":"Bram","twitter_card":"summary_large_image","twitter_creator":"@excentis","twitter_site":"@excentis","twitter_misc":{"Written by":"Bram","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/#article","isPartOf":{"@id":"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/"},"author":{"name":"Bram","@id":"https:\/\/www.excentis.com\/#\/schema\/person\/14a2ac99879eb7b7d4c1a8d666b7a119"},"headline":"The ugly side of NAT","datePublished":"2015-01-23T07:54:15+00:00","dateModified":"2022-06-24T06:30:46+00:00","mainEntityOfPage":{"@id":"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/"},"wordCount":1073,"commentCount":2,"publisher":{"@id":"https:\/\/www.excentis.com\/#organization"},"image":{"@id":"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/#primaryimage"},"thumbnailUrl":"https:\/\/www.excentis.com\/wp-content\/uploads\/nat_ip_fragmentation.png","articleSection":["NAT"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/","url":"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/","name":"The ugly side of NAT - Excentis","isPartOf":{"@id":"https:\/\/www.excentis.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/#primaryimage"},"image":{"@id":"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/#primaryimage"},"thumbnailUrl":"https:\/\/www.excentis.com\/wp-content\/uploads\/nat_ip_fragmentation.png","datePublished":"2015-01-23T07:54:15+00:00","dateModified":"2022-06-24T06:30:46+00:00","breadcrumb":{"@id":"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/#primaryimage","url":"https:\/\/www.excentis.com\/wp-content\/uploads\/nat_ip_fragmentation.png","contentUrl":"https:\/\/www.excentis.com\/wp-content\/uploads\/nat_ip_fragmentation.png","width":849,"height":590},{"@type":"BreadcrumbList","@id":"https:\/\/www.excentis.com\/blog\/the-ugly-side-of-nat\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.excentis.com\/"},{"@type":"ListItem","position":2,"name":"The ugly side of NAT"}]},{"@type":"WebSite","@id":"https:\/\/www.excentis.com\/#website","url":"https:\/\/www.excentis.com\/","name":"Excentis","description":"","publisher":{"@id":"https:\/\/www.excentis.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.excentis.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.excentis.com\/#organization","name":"Excentis","url":"https:\/\/www.excentis.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.excentis.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.excentis.com\/wp-content\/uploads\/logo_excentis_001_1200dpi_sRGB.png","contentUrl":"https:\/\/www.excentis.com\/wp-content\/uploads\/logo_excentis_001_1200dpi_sRGB.png","width":3237,"height":450,"caption":"Excentis"},"image":{"@id":"https:\/\/www.excentis.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/Excentis\/","https:\/\/twitter.com\/excentis","https:\/\/www.linkedin.com\/company\/excentis\/"]},{"@type":"Person","@id":"https:\/\/www.excentis.com\/#\/schema\/person\/14a2ac99879eb7b7d4c1a8d666b7a119","name":"Bram","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.excentis.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/c2703bf3f7122d24e15d1eba9b10077d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/c2703bf3f7122d24e15d1eba9b10077d?s=96&d=mm&r=g","caption":"Bram"},"url":"https:\/\/www.excentis.com\/author\/excentis_super_admin\/"}]}},"featured_image_src":"https:\/\/www.excentis.com\/wp-content\/uploads\/nat_ip_fragmentation-600x400.png","featured_image_src_square":"https:\/\/www.excentis.com\/wp-content\/uploads\/nat_ip_fragmentation-600x590.png","author_info":{"display_name":"Bram","author_link":"https:\/\/www.excentis.com\/author\/excentis_super_admin\/"},"_links":{"self":[{"href":"https:\/\/www.excentis.com\/wp-json\/wp\/v2\/posts\/787"}],"collection":[{"href":"https:\/\/www.excentis.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.excentis.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.excentis.com\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.excentis.com\/wp-json\/wp\/v2\/comments?post=787"}],"version-history":[{"count":1,"href":"https:\/\/www.excentis.com\/wp-json\/wp\/v2\/posts\/787\/revisions"}],"predecessor-version":[{"id":1959,"href":"https:\/\/www.excentis.com\/wp-json\/wp\/v2\/posts\/787\/revisions\/1959"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.excentis.com\/wp-json\/wp\/v2\/media\/788"}],"wp:attachment":[{"href":"https:\/\/www.excentis.com\/wp-json\/wp\/v2\/media?parent=787"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.excentis.com\/wp-json\/wp\/v2\/categories?post=787"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.excentis.com\/wp-json\/wp\/v2\/tags?post=787"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}