Network address translation (NAT)-based data routing method and device

Abstract

The invention discloses a network address translation (NAT)-based data routing method and an NAT data routing device, which are applied to an NAT multi-export networking system. The method comprises that: after receiving an Internet protocol (IP) request message transmitted from a public network client to a private network server, an NAT gateway performs address translation processing, adds an address of the NAT gateway into the IP request message subjected to the address translation processing to indicate the IP request message is forwarded by the NAT gateway, and forwards the IP request message to the private network server; and after receiving an IP response message from the private network server, the NAT gateway performs the address translation processing, and forwards the IP response message subjected to the address translation processing to the public network client. After receiving the IP request message forwarded by the NAT gateway, the private network server adds the address of the NAT gateway into the IP response message to indicate that the IP response message is forwarded to the NAT gateway. By the method and the device, a traffic path from the public network client to the private network server can be ensured to be consistent with a backward traffic path.

Description

technical field [0001] The invention relates to the technical field of communication, in particular to a NAT-based data routing method and device thereof. Background technique [0002] NAT (Network Address Translation, Network Address Translation) is the process of converting the IP address in the IP datagram header to another IP address. In practical applications, NAT is mainly used to enable private networks to access public networks. This way of using a small number of public IP addresses to represent more private IP addresses will help slow down the depletion of available IP address space. [0003] figure 1 A typical NAT networking architecture is shown, in which the private network user host uses the private network IP address 192.168.1.3, and the public network server uses the public network IP address 1.1.1.2. Based on this architecture, the information exchange process between the private network user host and the public network server is as follows: the private n...

AI Technical Summary

Problems solved by technology

The session backup technology can better solve the problem of inconsistencies in the back and forth paths, but it has the following disadvantages: the session backup function works well between two egress gateways, but it cannot be used in an environment with more than two egress gateways; devices that support session backup It is often a mid-to-high-end firewall with a higher price, which increases the cost of users

The disadvantage of this solution is also mainly reflected in the cost. The price of load balancing equipment is often high, but in fact most traffic in the network does not need to be processed by load balancing equipment. How to distinguish traffic is also a technical problem. Differentiate, the load balancing device is likely to become the bottleneck of network performance

Images