Gateway traversing NAT based on P2P-VPN technology

Abstract

The invention provides a gateway for traversing NAT (Network Address Translation) based on a P2P-VPN (Peer to Peer-Virtual Private Network) technology. The gateway comprises a client interface end, NAT equipment, a P2P-VPN server, a service interface end and a control module, wherein the client interface end is used for being connected with a server of a client and receiving an IP address state information table of the server of the client; the NAT equipment is used for carrying out association mapping on a client node address and a server node address through an IP address state information table and determining a mapping address; wherein the node address comprises an intranet node IP address and an extranet node IP address; the P2P-VPN server is used for establishing a P2P tunnel between a node of a client and a node of a server through a preset P2P-VPN technology and a mapping address, and carrying out NAT traversal through the P2P tunnel; the service interface end is used for being connected with a server of the server end and sending an IP address state information table of the server of the server end; and the control module is used for controlling the client interface end, the NAT equipment, the P2P-VPN server and the service interface end.

Description

technical field [0001] The invention relates to the technical field of gateways, in particular to a gateway for traversing NAT based on P2P-VPN technology. Background technique [0002] At present, with the rapid development of the network, the number of Internet users is increasing rapidly, the scale of the IP network is getting larger and larger, and the number of IP addresses that can be allocated is decreasing, resulting in a shortage of IP addresses in the existing network. When communicating through the gateway, it is necessary to read Taking the user address, the original idea of ​​the IPv4 system is to assign a globally unique public network routable IP address to each user in the network, so that all users can communicate with other network users through the IP address. For this reason, IPv6 is proposed. protocol. However, since the existing network uses the IPv4 protocol, and the devices in the network do not support the IPv6 protocol, the transformation of the ne...

AI Technical Summary

Problems solved by technology

However, since the existing network uses the IPv4 protocol, and the devices in the network do not support the IPv6 protocol, the transformation of the network is a very complicated and huge project, and it is difficult to fully realize it at this stage. Therefore, a transitional solution is proposed—— Address translation technology (Network Address Translator, NAT), temporarily solve the problem of IP address shortage

[0003] NAT technology makes it impossible for external network hosts to actively access internal network hosts, which strengthens the security of the internal network, but at the same time restricts the use of many end-to-end communication applications. NAT devices prevent internal network hosts and external network hosts from initiating connections with each other. What's more serious is that most of the existing protocols did not consider the NAT device when they were originally designed. Therefore, after the data packet passes through the NAT device, only the address of the transport layer and the IP address of the network layer are modified, and there is no modification of the application layer protocol. The addresses contained in the address are modified, so those addresses are still private addresses. When the communication peer returns data through this address, it will be blocked by NAT, resulting in communication failure.

Images