Does IPTable/Netfilter eat up ephemeral ports
I wanted to understand more about Netfilter architecture. Let's say I have a machine with 3 IPs. I configure one IP to SNAT to all 3 IPs in round robin. Can I open more than 64k connections from that IP?
Solution 1:
No, because every outgoing connection gets mapped to a source port on the one public-facing address. And there are only 64K of those.