{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,25]],"date-time":"2025-10-25T14:10:25Z","timestamp":1761401425852,"version":"3.41.0"},"reference-count":11,"publisher":"Association for Computing Machinery (ACM)","issue":"1","license":[{"start":{"date-parts":[[2008,12,31]],"date-time":"2008-12-31T00:00:00Z","timestamp":1230681600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["SIGCOMM Comput. Commun. Rev."],"published-print":{"date-parts":[[2008,12,31]]},"abstract":"<jats:p>A Stream Control Transmission Protocol (SCTP) capable Network Address Translation (NAT) device is necessary to support the wider deployment of the SCTP protocol. The key issues for an SCTP NAT are SCTP's control chunk multiplexing and multi-homing features. Control chunk multiplexing can expose an SCTP NAT to possible Denial of Service attacks. These can be mitigated through the use of chunk and parameter processing limits.<\/jats:p>\n          <jats:p>Multiple and changing IP addresses during an SCTP association, mean that SCTP NATs cannot operate in the way conventional UDP\/TCP NATs operate. Tracking these multiple global IP addresses can help in avoiding lookup table conflicts, however, it can also result in circumstances that can lead to NAT state inconsistencies. Our analysis shows that tracking global IP addresses is not necessary in most expected practical installations.<\/jats:p>\n          <jats:p>We use our FreeBSD SCTP NAT implementation, alias_sctp to examine the performance implications of tracking global IP addresses. We find that typical memory usage doubles and that the processing requirements are significant for installations that experience high association arrival rates.<\/jats:p>\n          <jats:p>In conclusion we provide practical recommendations for a secure stable SCTP NAT installation.<\/jats:p>","DOI":"10.1145\/1496091.1496095","type":"journal-article","created":{"date-parts":[[2009,1,20]],"date-time":"2009-01-20T14:41:13Z","timestamp":1232462473000},"page":"23-33","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":11,"title":["Issues with network address translation for SCTP"],"prefix":"10.1145","volume":"39","author":[{"given":"David A.","family":"Hayes","sequence":"first","affiliation":[{"name":"Swinburne University of Technology, Hawthorn, Victoria, Australia"}]},{"given":"Jason","family":"But","sequence":"additional","affiliation":[{"name":"Swinburne University of Technology, Hawthorn, Victoria, Australia"}]},{"given":"Grenville","family":"Armitage","sequence":"additional","affiliation":[{"name":"Swinburne University of Technology, Hawthorn, Victoria, Australia"}]}],"member":"320","published-online":{"date-parts":[[2008,12,31]]},"reference":[{"issue":"2","key":"e_1_2_1_1_1","article-title":"A retrospective view of NAT","volume":"3","author":"Zhang L.","year":"2007","journal-title":"IETF Journal"},{"key":"e_1_2_1_2_1","doi-asserted-by":"crossref","unstructured":"R. Stewart and M. T\u00fcxen \"Stream control transmission protocol (SCTP) network address translation \" Internet-Draft Jul. 2008.  R. Stewart and M. T\u00fcxen \"Stream control transmission protocol (SCTP) network address translation \" Internet-Draft Jul. 2008.","DOI":"10.17487\/rfc5061"},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.2008.4626229"},{"key":"e_1_2_1_4_1","unstructured":"D. A. Hayes and J. But \"Alias sctp NAT module \" viewed 30 October 2008. {Online}. Available: http:\/\/caia.swin.edu.au\/urp\/sonata\/downloads.html  D. A. Hayes and J. But \"Alias sctp NAT module \" viewed 30 October 2008. {Online}. Available: http:\/\/caia.swin.edu.au\/urp\/sonata\/downloads.html"},{"key":"e_1_2_1_5_1","doi-asserted-by":"crossref","unstructured":"R. Stewart \"Stream control transmission protocol \" IETF RFC 4960 Sep. 2007.  R. Stewart \"Stream control transmission protocol \" IETF RFC 4960 Sep. 2007.","DOI":"10.17487\/rfc4960"},{"volume-title":"Addison-Wesley","year":"2002","author":"Stewart R. R.","key":"e_1_2_1_6_1"},{"key":"e_1_2_1_7_1","doi-asserted-by":"crossref","unstructured":"P. Ferguson and D. Senie \"Network ingress filtering: Defeating denial of service attacks which employ ip source address spoofing \" IETF RFC 2827 May 2000.   P. Ferguson and D. Senie \"Network ingress filtering: Defeating denial of service attacks which employ ip source address spoofing \" IETF RFC 2827 May 2000.","DOI":"10.17487\/rfc2827"},{"key":"e_1_2_1_8_1","doi-asserted-by":"crossref","unstructured":"P. Srisuresh and M. Holdrege \"IP network address translator (NAT) terminology and considerations \" IETF RFC 2663 Aug. 1999.   P. Srisuresh and M. Holdrege \"IP network address translator (NAT) terminology and considerations \" IETF RFC 2663 Aug. 1999.","DOI":"10.17487\/rfc2663"},{"key":"e_1_2_1_9_1","doi-asserted-by":"crossref","unstructured":"P. Srisuresh and K. Egevang \"Traditional IP network address translator (traditional NAT) \" IETF RFC 3022 Jan. 2001.   P. Srisuresh and K. Egevang \"Traditional IP network address translator (traditional NAT) \" IETF RFC 3022 Jan. 2001.","DOI":"10.17487\/rfc3022"},{"key":"e_1_2_1_10_1","unstructured":"CAIA \"SONATA -- SCTP over NAT adaptation \" viewed 28 August 2008. {Online}. Available: http:\/\/caia.swin.edu.au\/urp\/sonata  CAIA \"SONATA -- SCTP over NAT adaptation \" viewed 28 August 2008. {Online}. Available: http:\/\/caia.swin.edu.au\/urp\/sonata"},{"key":"e_1_2_1_11_1","unstructured":"I. A. N. A. (IANA) \"Port numbers \" viewed 23 October 2008 Oct. 2008. {Online}. Available: http:\/\/www.iana.org\/assignments\/port-numbers  I. A. N. A. (IANA) \"Port numbers \" viewed 23 October 2008 Oct. 2008. {Online}. Available: http:\/\/www.iana.org\/assignments\/port-numbers"}],"container-title":["ACM SIGCOMM Computer Communication Review"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1496091.1496095","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1496091.1496095","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T12:45:43Z","timestamp":1750250743000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1496091.1496095"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2008,12,31]]},"references-count":11,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2008,12,31]]}},"alternative-id":["10.1145\/1496091.1496095"],"URL":"https:\/\/doi.org\/10.1145\/1496091.1496095","relation":{},"ISSN":["0146-4833"],"issn-type":[{"type":"print","value":"0146-4833"}],"subject":[],"published":{"date-parts":[[2008,12,31]]},"assertion":[{"value":"2008-12-31","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}