SNAT vs DNAT

PARAMETERS SNAT DNAT

Abbreviation for Source NAT Destination NAT

Destination NAT changes the destination address in IP header of a packet. It may also
SNAT changes the private IP address of the source host to public IP address. It may also
change the destination port in the TCP/UDP headers. DNAT is used when we need to
Terminology change the source port in the TCP/UDP headers. SNAT is typically used by internal users
redirect incoming packets with a destination of a public address/port to a private IP
to access the Internet.
address/port inside your network.

A Website Hosted inside Data

A client Inside LAN and
Center behind the Firewall and
Use Case behind Firewall wanted to
needs to be accessible to users
browse Internet.
over Internet.

Address Change SNAT changes the source address of packets passing through NAT device DNAT changes the destination address of packets passing through the Router

SNAT is performed after the DNAT is performed before the

Order of Operation
routing decision is made. routing decision is made.

When outside unsecured

When inside secured
Network initiates
Network initiates
Communication Flow communication with inside
communicates with outside
secured Network, DNAT
world , SNAT happens.
happens.

SNAT allows multiple hosts DNAT allows any host on the

on the “inside” network to “outside” network to get to a
Single/Multiple hosts
get to any host on the single host on the “inside”
“outside” network. network.
https://ipwithease.com