DPS (Dynamic Path Selection) provides the ability to select different paths for different types of traffic to optimize application performance.

Support for IPSec connections in a full-cone Network/Port Address Translation (NAT) environment has been added to the Dynamic Path Selection (DPS) setup. DPS optimizes application performance by selecting different paths for various types of traffic. In this configuration, STUN is used to discover the translated IP address of WAN interfaces and export it to BGP.

STUN (Session Traversal Utilities for NAT) is a client-server protocol that can be used by a network endpoint to determine the IP address and port assigned to it by a NAT device. The protocol is defined in RFC8489.

This document describes the STUN client and server capabilities in CloudEOS, and how this is used by Dynamic Path Selection (DPS) feature.