Self-adapting distribution method and system of NAT address pool under distributed structure

Abstract

The present invention discloses method and system of self-adapting distribute of NAT address pool under distributed structure, and is suitable for distributed processing structure which is made up of master control board, more than one service plate and interface plate. The method includes: NAT resource item composed of paired public net IP and terminal port is unified managed in master control board, including lie idle NAT resource item and NAT resource item distributed to each service plate; master control board executes primary distribution from lie idle NAT resource item to corresponding service plate according to demand of each service plate; service plate executes secondary allocation from master control board allocated NAT resource item to processed message flow. In better embodiment, NAT resource item is management at different grades with resource blocks form: master control board executes distribution of NAT resource blocks, service plate executes distribution of NAT resource item. The present invention realizes full utilization of NAT resource, avoiding quintuple conflict after converting and having better flexibility and adaptability.

Description

technical field [0001] The invention relates to communication network technology, in particular to an adaptive allocation method and system of a NAT address pool under a distributed architecture. Background technique [0002] NAT (Network Address Translation, Network Address Translation) technology is a technology that translates private IP addresses on the intranet into public IP addresses, and is used to alleviate the current problem of IP space exhaustion. [0003] NAT technology is usually used in routers, firewalls, ISDN routers or individual NAT devices, mainly including the following three types: static NAT (Static NAT), dynamic address NAT (Pooled NAT) and NAPT (Port-Level NAT, network address port translation). [0004] With the development of the network and the improvement of the functional requirements of the equipment, the centralized equipment is often difficult to meet the actual needs, so the distributed processing architecture emerges as the times require. ...

AI Technical Summary

Problems solved by technology

[0015] (1) The scope of application is limited;

[0016] For example, since the address pool is statically divided, it cannot solve the problem of dynamic NAT, such as the five-tuple conflict in the case of Easy IP;

[0017] For another example, it is not applicable to the case where the address pool range is smaller than the number of service boards; for example, if the address pool resource is 100.1.1.1~00.1.1.5, and the number of service boards is 6, there must be one service board that cannot obtain the address pool resource allocation

[0018] (2) The processing capacity is limited;

[0020] For example, if the service board 1 has used up the allocated port resources (1025-00) due to the large number of packet flows, when it processes the newly received packet flows, the processing will fail due to port allocation failure. As a result, the packets are discarded; at the same time, due to the relatively small packet flow on the service board 2, many port resources are still unused

[0021] Obviously, the static configuration of the address pool often leads to the situation that it is difficult to process business normally when the whole machine is far from reaching the maximum specification

[0022] (3) Poor flexibility;

[0023] Since the address pool resources are statically divided, even if some service boards fail or are not in place, their address pool resources cannot be allocated to other service boards, resulting in idle and waste of address pool resources

[0024] To sum up, there are many deficiencies in the current NAT resource allocation scheme under the distributed processing architecture, and there is no proper solution in the existing technology

Images