Traversal method for universal firewall based on Socks5 protocol

Abstract

The invention provides a traversal method for a universal firewall based on an Socks5 (sessions traversal across firewall securely 5) protocol, and belongs to the field of firewall traversal. A universal Socks5 client is arranged on a VoIP (voice over internet protocol) system client side in the firewall of an enterprise; the universal Socks5 client is independent of a VoIP system client, can grab, analyze and agent signaling and media messages sent by the VoIP system client, and can be communicated with an Socks5 server positioned outside the firewall of the enterprise; and the traversal of the firewall of the enterprise is achieved in a message agency mode. The method provides different VoIP systems with a universal mode for conducting enterprise firewall traversal and message agency, the agency process of Socks5 is completed without affecting the existing protocol stack of the client, and the coupling degree between the Socks5 client and the original VoIP system client is reduced.

Description

technical field [0001] The invention belongs to the field of firewall traversal, and in particular relates to a general firewall traversal method based on the Socks5 protocol. Background technique [0002] The English name of the firewall is "FireWall", which is currently one of the most important network protection devices. From a professional point of view, a firewall is a set of components located between two (or more) networks and implementing access control between networks. [0003] The initial design idea of ​​the firewall is to always trust the internal network, but always distrust the external network, so the initial firewall only filters the incoming communication from the outside, and does not restrict the communication sent by the internal network users. Of course, the current firewall has also changed in the filtering mechanism. Not only the communication connection sent by the external network needs to be filtered, but also some connection requests and data pa...

AI Technical Summary

Problems solved by technology

[0087] It can be seen from the above analysis that the existing technical solutions need to add a Socks5 client module to the existing VoIP client. If the signaling messages and media messages in different VoIP clients are different, a new Socks5 client needs to be built. Module, that is, the module is highly coupled with a specific VoIP client and has no versatility, which leads to additional development costs for the enterprise firewall traversal function when different VoIP clients are connected to the VoIP system

[0088] In addition, looking at VoIP clients from a finer-grained perspective, signaling and media messages are sent by a complete protocol stack module. In the initial stage of protocol stack design, the requirements for traversal of enterprise firewalls are generally not considered. As a result, to introduce the above process (TCP / UDP-based traversal process) into the protocol stack module, it is necessary to modify the existing protocol stack, which often brings a lot of workload, and also often affects the protocol stack. Original completeness and original intent of the design phase

Images