CGN - Carrier Grade NAT - Carrier Grade Problems
summary
Carrier Grade NAT centralizes millions of users behind shared IPv4 addresses so 95% of mobile traffic is behind CGN, breaking end-to-end connectivity and hindering attribution — Europol cases show investigations stall and 49 innocent people get questioned when logs are insufficient. CGN appliances ship with defaults and misconfigurations — an A10 device exposed with default password sits on the public net for over a year — and UPnP hole punching plus overloaded NAT tables cause mass outages. Real fix is full IPv6 deployment and dual‑stack logging.
AI-written summary · about
chapters (9)
- 0:00Start
- 0:20Agenda
- 7:36Ipv6 Adaptation
- 8:49Cgn Deployment
- 14:02Legal Problems with Cgn
- 14:37Examples
- 16:53Security Issues
- 19:05Default Passwords
- 19:42Real Life Examples
related talks
56mFIRSTCON21 - June 8 | Stream 3 Part 1 (12:00-13:00 UTC)
27mAbuse of CPE Devices and Recommended Fixes
35mDeep Dive: NATS
46mNational Cyber-Aggression and Private-Sector Internet Infrastructure
29mUsing the Internet as Your Load-Balancer
13mSNI5GECT: A Practical Approach to Inject aNRchy into 5G NR
47mTales from the NOC: Going Public in Asia
45mDecisions and Revisions - The Ever Evolving Face of the Black Hat NOC