This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DNAT vs Generic Proxy

I am trying to figure out the main difference between these two. I have just been using DNAT but this makes it seem like it is the real port forwarder. Is there any reason to use the generic proxy?

Thank you.


A generic proxy, also known as a port forwarder, combines both features of DNAT and masquerading, forwarding all incoming traffic for a specific service to an arbitrary server. The difference to standard DNAT, however, is that a generic proxy also replaces the source IP address of a request with the IP address of the interface for outgoing connections. In addition, the destination (target) port number can be changed as well.


This thread was automatically locked due to age.