otonat is a 1:1 NAT implementation for FreeBSD. Unlike other solutions that keep state for individual user connections even for 1:1 NAT, otonat is completely stateless as far as user connections are concerned. This allows it to scale much better and provide protection against misbehaving clients that may consume a lot of server memory by opening too many connections.
