Message processing method and NAT device

Abstract

The embodiment of the invention discloses a message processing method and an NAT device. The method comprises the following steps: a network address translation NAT device acquires header informationof a message, wherein the header information at least comprises N-tuple information and a flag bit of the message, and N is at least one integer in an interval greater than or equal to 4 and less thanor equal to 7; the NAT device determines a target NAT device among at least two NAT devices according to the N-tuple information and the flag bit of the message; and / or, the header information obtained by the NAT device is used by a switch to determine the target NAT device, wherein the target NAT device is at least the NAT device that performs address translation or inverse translation on the message.

Description

technical field [0001] The present invention relates to a message processing technology, in particular to a message processing method and a network address translation device (Network Address Translation, NAT). Background technique [0002] NAT device is a gateway device with network address translation function, which can convert private Internet Protocol (IP) addresses into public network IP addresses, and use public network IP addresses to send packets to external networks (public networks) such as the Internet (Internet). )superior. [0003] like figure 1 As shown, it is an application scenario of a NAT device. The network used by the client is a private network, and NAT devices appear in a cluster (that is, including two or more NAT devices). When a client inside the private network wants to access the external network through the NAT device, the client generates access data (packet ), and is encapsulated by the header. For example, if the private network adopts a vi...

AI Technical Summary

Problems solved by technology

In practical applications, because the network type used by the private network, such as the VPC network, is different from that used by the external network, such as the Internet, the values ​​of the elements in the quadruple or quintuple of the packet sent by the private network may be different from those of the The elements in the four-tuple or five-tuple of the feedback data received by the private network have different values, and the hash value calculated for the sent message is also different from the hash value calculated for the received feedback data, resulting in The NAT device used for outgoing data on the private network may not be the same NAT device as the NAT device used for feedback data (incoming data) for the outgoing data

In this way, it will bring great difficulty to the session connection, and even the session connection cannot be established, and the normal communication between the private network and the external network cannot be realized

Images