Pros and cons Application proxy Basically TCP only (transaction-based services) Server per service Duplicated TCP connection setup time Endhost configuration necessary Simple to implement/deploy TCP relay TCP only Service independent Duplicated TCP connection setup time Header converter Both TCP/UDP are possible Service independent Fragmented packets/ICMP are hard to translate Pick the most appropriate one for your site