heiher/natmap

Health v2 · maintenance only

Adoption not part of the score

1950 stars · 149 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

NATMap is a C-based CLI tool that establishes TCP/UDP port mappings from an ISP NAT public address to a local private address using STUN and HTTP keep-alive techniques. It works when all NAT layers are full-cone (NAT-1), enabling external access to internal services.

Use cases

• expose a home server behind carrier-grade NAT to the internet
• map a public TCP/UDP port to a local private service
• discover the public mapped address via STUN and update DNS automatically
• run self-hosted services when the ISP uses full-cone NAT
• keep NAT port bindings alive with periodic keep-alive traffic

When to choose

• your ISP NAT is full-cone (NAT-1) and you want direct inbound access without a relay
• you need a lightweight native tool with bind mode where traffic bypasses the program
• you want automatic notification of the mapped public address via a callback script

When to avoid

• your NAT is symmetric or restricted-cone, where full-cone mapping cannot be established
• you need NAT traversal across arbitrary network conditions; use a VPN or tunnel like WireGuard or frp instead
• you require encrypted tunneling rather than plain port mapping

Facets

cli-tool · maturity active

networking proxy developer-tools networking self-hosted privacy windows bsd cli nat-traversal full-cone-nat port-mapping stun hole-punching linux macos android

Member repositories

For agents

markdown · JSON · MCP: product_card(name="heiher/natmap")