https://blogs.damiendye.uk/en/tags/cgnat/ Recent content in Cgnat on Damien Dye's Blog Hugo en-GB Sun, 13 Sep 2026 09:00:00 +0100 https://blogs.damiendye.uk/en/networking/ipsec-was-a-good-idea-turn-it-off/ Sun, 13 Sep 2026 09:00:00 +0100 https://blogs.damiendye.uk/en/networking/ipsec-was-a-good-idea-turn-it-off/ IPsec bound security to the IP address, then the industry took the address away. NAT, double NAT under CGNAT, NAT64 that will not carry it at all, no ports so no load balancing, the MTU tax, L2TP, PPTP and Windows interop — with diagrams, Cisco and Juniper documentation, a full diagnostic method, and the case for retiring it. https://blogs.damiendye.uk/en/networking/we-never-ran-out-of-addresses/ Thu, 27 Aug 2026 18:00:00 +0100 https://blogs.damiendye.uk/en/networking/we-never-ran-out-of-addresses/ The UK has spent twenty years bolting workarounds onto IPv4 rather than turning on IPv6. I counted every UK network in the routing table to see who has actually done it, and the answer says this was never about money.