Stateless: The host is configured using RA (Router Advertisement) messages that include the information necessary to configure the link.

Stateful: They use a DHCPv6 server similar to the automatic configuration used in IPv4. The process starts when there are no RA messages from any router or when the host has been configured to do so.

In the context of a MikroTik firewall, these terms describe two different modes of operation that determine how packets are managed and processed.

Stateful Firewall

A stateful firewall, like the one found in MikroTik RouterOS, is capable of keeping track of the state of network connections. This means you can inspect incoming and outgoing traffic and keep track of the status of each connection, such as established connections, connections in the process of establishing or closing, and connections already closed.

Operation: When a packet arrives at the firewall, it verifies whether it corresponds to an already established connection or if it is part of a new connection in the process of being established. The firewall uses this information about the connection state to make decisions about whether to allow, block, or filter traffic based on predefined rules.

Advantages: A stateful firewall is smarter and more efficient at handling network traffic, as it can make decisions based on the context of the connection in progress. This allows for greater security and control over incoming and outgoing traffic.

Stateless Firewall

On the other hand, a stateless firewall, as its name implies, does not keep track of the state of network connections. Instead, each packet is filtered independently without regard to its relationship to other packets.

Operation: Each packet arriving at the firewall is evaluated individually according to defined filtering rules. There is no consideration of the state of the connection or the context of the communication.

Advantages: Stateless firewalls are typically simpler and less resource-demanding, as they do not require maintaining state tables for each connection. They are suitable for environments where fast and basic filtering of network traffic is needed.

Conclusion

In summary, while a stateful firewall is more sophisticated and capable of making more informed decisions based on the state of connections, a stateless firewall is lighter and may be better suited for environments where quick and simple filtering of traffic is needed. network. The choice between one or the other will depend on the specific security and performance requirements of the network in question.