Not sure what you mean by SNAT. There doesn't seem to be any NAT involved, I get a public IP and I use it to host services. You can't plug more than one device into each port of the NBN device, it's not a router.

On Tuesday, March 4, 2014, Trent W. Buck <trentbuck@gmail.com> wrote:
Noah O'Donoghue wrote:
> I've got 100/40 NBN with iinet..
>
> I just used my old Asus rt-n16.. NBN gives you a plain old Ethernet with
> DHCP. No auth. Simple as.

Well, DHCP (and SNAT?) is a bit gratuitous for a point-to-point link.
I can understand why they do it, though.
Fewer derps from their non-technical customers.

> However, I tried latest openwrt trunk on my router.. Worked great but
> limited the speed to about 40Mbps.
>
> Turns out the native firmware uses 'hardware NAT' which works much better..
> (Wire speed, 95/38 on speedtest.net). Unfortunately the native firmware is
> full of bugs..
>
> This hardware NAT is a part of broadcoms binary blob, is a hack, and it's
> unlikely you'll get it to work on any open firmwares. I suspect you may
> have trouble with NBN on any router running open firmware, unless the CPU
> is ridiculously over powered.

Interesting and horrible.

I am surprised the system can't handle at least 100mbps doing NATting
in netfilter -- NAT state is not terribly expensive to maintain.

Worst case, of course, you can just put down an x86-64 whitebox
desktop as your bastion router, and relegate the WRT to doing only
switching & wifi AP.  If the bottleneck really is the CPU, that'll fix
it.

Hmm... NT-R16 is a 480MHz BCM4718, WNDR3800 is a 680MHz AR7161.
Are they of comparable speed?