Method and equipment for NAT (network address translation) processing during distribution of multiple service boards in distributed system

Abstract

The embodiment of the invention discloses a method and equipment for NAT (network address translation) processing during distribution of multiple service boards in a distributed system, and the method and the equipment are applied to the technical field of network safety and can be used for guaranteeing a forward message and a reverse message to be distributed to the same service board and solving the problem of conflict between message ports in the service boards. The method comprises the following steps: performing address translation on an IP (internet protocol) address of a message according to an NAT strategy matched with the forward IP message; performing translation on a source port number in an IP message quaternion according to a preset hash constraint condition, wherein the preset hash constraint condition is that a hash value of the message quaternion after address translation and port translation of the IP message is equal to a hash value of the message quaternion before address translation and port translation of the IP message; creating an NAT session table item of the IP message according to the translation process of the IP message.

Description

technical field [0001] The invention relates to the fields of network communication and network security, in particular to a NAT processing method and equipment for multi-service board distribution in a distributed system. Background technique [0002] refer to figure 1 As shown, it is a schematic diagram of the network equipment structure under the distributed system architecture. The network equipment (such as routers, switches, and firewalls, etc.) of the distributed system architecture is mainly composed of equipment racks and plug boards on the racks. Including: the main control board, the interface board and the service board, and the boards are connected through the switching network. The main control board is mainly responsible for the management and version production and upgrading of various plug-in boards on the rack; the interface board is responsible for receiving, forwarding and sending messages (such as IP messages); the service board realizes various busines...

AI Technical Summary

Problems solved by technology

[0005] After a lot of research, the inventor found that there are the following problems in implementing the NAT function in the existing distributed system: First, for the same host, the message sent by it has been processed by NAT, resulting in the occurrence of quaternion information in the message. As a result, the hsah value calculated before and after the packet conversion may be different. After the packet address translation, the forward packet may be distributed to a different service board from the reverse packet, and the forward packet cannot be found for the reverse packet. The NAT session entry created by the file, so that the reverse packet cannot be successfully sent back to the original host

Images