与传统VPN相比，包路由和包分发要灵活得多。
In comparison to the traditional VPN, the routing and distribution of packets is much more flexible.
很多观察家摒弃了在坏的、老的电路交换和好的、新的包路由之间极化内部网电话的想法。
Many observers reject the idea of polarizing Intranet telephony between bad, old circuit switching and good, new packet routing.
从成本角度出发，包路由的巨大优势是其共享资源：很多通话的包都是在同一条电线上传输。
From a cost perspective, the great advantage of packet routing is that it shares resources: Packets from many conversations travel in the same wire.
这种攻击不仅可以使目标服务器发生问题，还可以使整个Internet瘫痪，因为它通过许多不同的路径来将包路由到目的地。
This attack not only causes the target site to experience problems, but also the entire Internet as the number of packets is routed via many different paths to the target.
从某种意义上说，这种技术支持任意规模的大型设备网络，该网络可以包含服务器、终端设备和交换机(用于设备发现和包路由)。
In a sense, this permits arbitrarily large networks of devices, including servers, end devices, and switches (complete with device discovery and packet routing).
路由器将其目的地址换成它保存在地址转换表中的那个，然后将数据包发送到那台计算机。
It changes the destination address to the one saved in the address translation table and sends it to that computer.
如果只显示您主机发送的数据包，这也表明从目标主机发送回的通信流有问题，因此反向路由有问题。
If only packets sent by your host are shown, this is another indication that the problem is with traffic sent back by the target and therefore the route back.
如果其目的地址不在这个路由表里，路由器就将数据包丢弃。
If the destination address is not in the routing table, the packet is dropped.
这台计算机接收来自路由器的数据包，并且只要这台计算和外部网络通信，此过程就会重复执行。
The computer receives the packet from the router and the process repeats as long as the computer is communicating with the external system.
路由器可以创建或维护一个包含可用路由及其状态的路由表，同时根据这些信息，利用距离和成本算法为数据包选择最佳路由。
A router may create or maintain a table of the available routes and their conditions and use this information along with distance and cost algorithms to determine the best route for a given packet.
当一台在存根域 (网络) 中被分配了内部本地地址的计算机想要和外部网络通信时，数据包就会像通常一样被路由到其默认网关，此时网管充当NAT路由器功能。
When a computer on the stub domain that has an inside local address wants to communicate outside the network, the packet goes to one of the NAT routers by way of normal routing to the default-gateway.
文档路由由过程、工作节点、工作列表和工作包组成。
Document routing consists of processes, work nodes, work lists, and work packages.
这些硬件设备本质上类似于路由器和交换机等网络设备，因为它们都将软硬件合并到一个可以立即投入使用的包中。
These hardware devices are similar in nature to network devices like routers and switches in that they combine hardware and software in a turnkey package.
这样任何一台处于外部网络的计算机都会在发送给它的数据包里找到NAT的IP地址和由路由器分配的端口号。
So any external network sees the NAT router's IP address and the port number assigned by the router as the source computer information on each packet.
这个nat路由器检查它的路由表，查看有没有包含这个数据包目的地址的条目。
The NAT router checks the routing table to see if it has an entry for the destination address.
路由器并不会直接转发数据包到未注册地址，因为它们使用未注册地址就意味着这些网络是私有的，并不想被外界所知道。
Routers do not forward packets to unregistered addresses since those networks are meant for private use and are not supposed to be advertised to outside world.
点击任何一个红色按钮是发送一个带有非法地址而被路由器丢弃的数据包。
Click on one of the red buttons to send a packet that is dropped by the router because of an invalid address.
如果这条目存在，路由器就验证这个数据包是否是从内部网络到外部网络，并检查其是否满足转换规则。
If an entry is available, it verifies whether the packet is traveling from the inside to the outside network and checks if the packet matches the criteria specified for translation.
该表包含一些规则来标记用于高级路由的信息包，该表包含PREROUTING和OUT put链。
This table contains rules to mark packets for advanced routing and it consists of PREROUTING and OUTPUT chains.
IP地址在整个全球因特网中路由数据包，而MAC地址则帮助数据包在两个硬件设备间做狭小的局部的传递。
IP addresses route a packet across the whole global Internet, while MAC addresses help the packet make the small, local hop between hardware devices.
NAT路由器将这个数据包中的内部全局地址 (即其目的地址，译者)转换成内部本地地址后再查看路由表。
The NAT router translates the inside global address of the packet to the inside local address and then checks the routing table before it sends it to the destination computer.
通常，一个数据包要途经大量路由器网络节点，然后才抵达目的地。
Typically, a packet may travel through a number of network points with routers before arriving at its destination.
请求包通过不同的路由被发送。
如果仅仅是配置了静态NAT且没有这样的条目存在，路由器就会不转换地址而直接转发数据包。
If static NAT alone is configured and no entry is found, it sends the packet without translation.
首先，攻击者需要确保假的信息包确实被路由到目标机器。
First, the attacker needs to make sure that the fake packets will actually be routed to the target.
这使得膝上型电脑可以在一个对等网络中(无需单独的路由器)彼此自主地传送包。
This allows laptops to autonomously route packets between themselves in a peer-to-peer network (without the need for a separate router).
IPv4也有一个针对移动的变种，依赖于三角路由——简单来说，老的网络连接充当数据包的中继，每当你移动数据包就暗中增加。
IPv4 also had a mobile variant, which relied on triangular routing-in simple terms, the old network acted as a relay for packets, which added latency every time you moved.
服务基础结构中的ipsec路由器对IP数据包进行解密，并将其转发到服务所在的计算机中进行处理。
An IPSec router in the service infrastructure decrypts the IP packets and forwards them to the machine hosting the service for processing.
IP位于下一层，在OSI的网络层，即第三层，把每个包的发送者和接收者地址告诉一路上各个路由器。
IP, located one layer down, at the OSI network layer, or layer 3, communicates the addresses of each packet's sender and receiver to the routers along the way.
这就是说一个数据包从一个未注册地址能够达到一台有注册地址的计算机，但是其响应数据包将会在它到达的第一个路由器就被丢弃 (这里说的是不是用 NAT 的情况，译者) 。
What this means is that a packet from a computer with an unregistered address could reach a registered destination computer, but the reply would be discarded by the first router it came to.
应用推荐