Network address translation (NAT) implementing system, method and openflow switch

Abstract

The invention discloses a network address translation (NAT) implementing system which comprises a controller and an openflow switch, wherein the controller issues a flow table and an improved group table, the openflow switch receives the flow table and the improved group table, a data package which needs to conduct address translation is matched according to a matching rule of the address translation recorded by the flow table, translation between a private address and a public internet protocol (IP) address is conducted according to a rule of address translation recorded by the improved group table, and the data package is transmitted out through an address which is translated. The invention further discloses an NAT implementing method and the openflow switch. According to the NAT implementing system, only the flow table and the improved group table are transmitted to the openflow switch once, frequent intersection between the openflow switch and the controller is not required, time delay of transmission of the data package is shortened, and transmission efficiency of a network is improved.

Description

technical field [0001] The invention relates to the field of network technology, in particular to a NAT implementation system, method and Openflow switch. Background technique [0002] Network Address Translation (NAT, Network Address Translation) technology is a technology that converts private addresses into public IP addresses. This technology is widely used in Internet access methods. The internal network of the enterprise is a private network, and the private address can be used as the host address; when the host is connected to the server on the Internet (Internet), the NAT device converts the private address of the data packet into a public IP address and sends it to the server; when the server on the Internet When returning the response packet according to this public IP address, the NAT device converts the public IP address into the original private address, so that the response packet can be correctly returned to the corresponding host. NAT technology can make the...

AI Technical Summary

Problems solved by technology

[0008] As can be seen from the above, the Openflow switch completes the conversion from the private address B to the public IP address C through the flow table; in addition, when the host B' is connected to another server such as server E on the Internet, the The Openflow switch and the Controller will interact again according to the above technical solution; that is, in the prior art, whenever the host B' has a different link (the host B' is connected to a different server on the Internet), the said When the Openflow switch receives the data packet of the host B' private address, the Controller will send a flow table to the Openflow switch. When there are a large number of host data packets of the private network that need to be sent to the Internet by the Openflow switch, the Controller frequently Issuing the flow table will increase the number of interactions between the Openflow switch and the Controller, and prolong the delay of data packet forwarding. At the same time, the Internet not only transmits data packets between the host and the server, but also transmits other services, which seriously affects Internet network transmission efficiency

Images