Method and apparatus for network port address conversion

Abstract

The invention discloses a method and apparatus for network address port conversion. The method includes: receiving a current stream required Network Address Port Translation NAPT processing; allocating designated public network as source IP address of the current stream after NAPT processing; selecting one port from the port queue of the designated public network address as the source IP address of the current stream after NAPT processing; searching a session table according to a quintuple group composed of the source IP address, the source port, the current flow object IP address, the object port of the current stream and the current stream agreement to judge whether the flow with the same stream exists; if not, performing NAPT processing to the current stream according to the source IP address and the source port, storing the quintuple group of the current stream after NAPT processing in the session table, and transmitting the current stream after NAPT processing. The technical scheme of the invention greatly extends the number of a public network address capable of being used for conversion in private network address.

Description

technical field [0001] The invention relates to the technical field of network communication, in particular to a network address port conversion method and device. Background technique [0002] The Network Address Translation (NAT, Network Address Translation) protocol realizes the mutual conversion between the IP address in the private network and the IP address in the public network, and the private network address corresponds to the public network address one by one. [0003] Network Address Port Translation (NAPT, Network Address Port Translation) is a variant of NAT, allowing multiple private network addresses to be mapped to the same public network address, also known as "many-to-one address translation" or "address multiplexing". ". NAPT maps IP addresses and port numbers at the same time. The source addresses of datagrams from different private network addresses can be mapped to the same public network address, but the port numbers of these datagrams from different ...

AI Technical Summary

Problems solved by technology

[0008] In Table 1, the packets of the first 64512 flows have exhausted the port numbers in the IP_GLOBAL port queue, so when the 64513th flow will pass through the NAT conversion device, the port numbers in the IP_GLOBAL port queue are already occupied , and the combination of the converted public network address and port cannot be reused, therefore, the packet of the 64513th flow is discarded

[0009] To sum up, in the existing NAPT scheme, due to the exhaustion of port resources, the number of private addresses that a public address can be used for translation is limited

Images