Optimization method for network address translation rule configuration

Abstract

The invention discloses an optimized method for network address converting rule configuration, after the router receives the data package, it matches with the rules in the NAT according to the source address, the target address and the protocol number, and stores the connection, and suspends the rule matching with the connection onto the connection, at the same time, the connection is suspended to the rule. The connection and the rules include the pointer structure, the structure is: the head pointer of the chain head structure points to the first chain table joint, the tail pointer points to the joints of the chain tail, the prev of the first joint points to the NULL, the next point of the chain tail joint points to NULL.

Description

Technical field: [0001] The invention relates to an optimization method for network address translation rule configuration. Background technique: [0002] NAT (Network Address Translator, Network Address Translation) is used to allow multiple PCs on a private network (using a private address range, such as 10.0.x.x, 192.168.x.x, 172.x.x.x) to share a single, globally routable IPv4 (address Version 4) address of the conversion protocol, that is, NAT can use the same IPv4 address in multiple internet subnets, ensuring that a limited number of IPv4 addresses are used by as many users as possible, and NAT also supports translation of external source addresses. It receives the data packets returned from the outside, and then translates the address into an internal local IP according to the NAT table, and forwards the data packets; NAT also supports load balancing of internal servers and other related applications. [0003] When the internal host is connected to the external netw...

AI Technical Summary

Problems solved by technology

[0004] For the case of many users, the corresponding link table items may also be relatively large. When we change the rule or the rule changes, if we find the corresponding user link that uses this rule, the usual method is to traverse all the user links, specifically according to The source address translation or destination address translation of the rule matches the initial source address or destination address in the user link. If there are tens of thousands of links in the user link table entry, we need to traverse tens of thousands of times. For each user link traversed, we need to match two Secondary ip address, similarly, if we want to find the matching rules of the user link, we need to match all the source address translation rules according to the source of the original in the user link, and match all the destination address translation rules according to the purpose of the user link original Rules; it can be seen that the mutual search between links and rules is quite frequent, but the connection between rules and user links is not close enough, and the corresponding scheduling is not very convenient, especially when it comes to NAT rule changes that need to find the corresponding users , the search speed is relatively slow. When configuring static rules first, it is generally necessary to check whether there are conflicting dynamic rules. This also requires traversal search. Specifically, the shortcomings of the existing NAT rules and user links are as follows:

[0005] 1. The relationship between NAT rules and user links is not close. When certain rules in NAT change or when static rules are configured first, it needs to go through some traversal to find user link activities, which is time-consuming;

[0006] 2. The program design is unreasonable, redundant, and poor readability

Images