A kind of nat conversion method, device and nat equipment

Abstract

The present application provides a NAT conversion method, device and NAT equipment. The method includes: obtaining a target IP address and a reference port of the target IP address from a NAT resource pool, where the reference port is a port in a continuous port range of the target IP address; based on the target IP address, The reference port and the original quintuple of the message generate a first quintuple corresponding to the message, and mask the first type of bits of the two types of ports in the first quintuple, Obtain the second five-tuple; Based on the hash result of the second five-tuple, determine non-conflicting target five-tuples in a plurality of consecutive hash buckets of the hash table; in the hash table and the corresponding The target quintuple and the original quintuple are recorded in a result table, and NAT processing is performed on the packet based on the target quintuple. Through this solution, the problem of poor new performance in the prior art can be solved.

Description

technical field [0001] The present application relates to the technical field of network communication, in particular to a NAT conversion method, device and NAT equipment. Background technique [0002] After the NAT (Network Address Translation, Network Address Translation) device receives the message, if the message needs to be processed by NAT and the message meets the conditions for creating session information, it will execute the creating process. [0003] In the prior art, taking the conversion of the source IP (Internet Protocol, a protocol for interconnection between networks) address as an example, the basic processing idea of ​​the new process is as follows: [0004] Select an IP address and a port of the IP address from the NAT resource pool, utilize the IP address and the port to replace the source IP address and the source port in the original five-tuple of the message to form a new five-tuple; and then , query the hash table stored in the session table of the ...

AI Technical Summary

Problems solved by technology

[0005] Although the above-mentioned new process can realize NAT conversion, there are the following problems: based on the data storage method of the hash table of the existing session table, each trial can only test whether a new five-tuple is a non-conflicting five-tuple, When the new 5-tuple is a conflicting 5-tuple, multiple trials will be generated, and since there will be an interface delay every time the storage medium where the session table is read, this will undoubtedly lead to poor new performance.

Images