Dnat

Destination NAT rewrites inbound packet addresses so public listeners reach private instance ports. Floating IPs rely on DNAT at the edge while connection tracking maps return flows. Misrules cause one-way TCP hangs or blackholed UDP.