A Distributed Network Address Translation System

Abstract

The invention provides a distributed network address translation system. The distributed network address translation system comprises an access layer, a multiplex layer and a control layer; middle nodes of the access layer are APs (Access Point); middle nodes of the multiplex layer are MPs (Multiplex Point); middle nodes of the control layer are CPs (Control Point); every AP is an access server; the functions of every AP comprise communicating with an internal network host, selecting public IP (Internet Protocol) resources for the internal network host, communicating with the MP owning the selected public IP resources and performing address translation; every MP is a multiplex server; the respectively owned public IP resources are maintained through every MP and meanwhile every MP is communicated with an external network through the respectively owned public IP resources; every CP comprises an IPS (IP Selector) and a CC (Control Center); every IPS is used for maintaining the public IP address resources of the MPs in the system; every CC is used for performing configuration on every layer of nodes; the APs, the MPs and the CPs are connected with each other through a tunnel which is a transmission layer connecting tunnel. The distributed network address translation system is used for performing the distributed network address translation and accordingly the utilization rate of the IP resources in the NAT (Network Address Translation) system can be improved.

Description

technical field

[0001] The invention relates to the technical field of network communication, in particular to a distributed network address translation NAT (Network Address Translation) system. Background technique

[0002] The Internet Assigned Numbers Authority (IANA) specifies three types of private IP address space: 10.0.0.0-10.255.255.255, 172.16.0.0-172.31.255.255 and 192.168.0.0-192.168.255.255. These three types of IP addresses can only be used on the internal network and are not allowed to be used on the Internet. The network using private IP addresses is called an internal network, referred to as "intranet"; the network using public IP addresses is called an external network, referred to as "external network" or "Internet".

[0003] NAT technology is a technology that appears when IPv4 addresses are increasingly exhausted. It is mainly used to realize the function of internal network accessing external network, and was released as an RFC document in 1994. NAT pr...

Examples

Embodiment 1

[0052] The invention provides a distributed network address translation NAT system, which is suitable for the NAT environment including one or more different public IP resources, and the system includes an access layer, a multiplexing layer and a control layer. The architecture of the system is as Figure 5 As shown in the figure, the access layer is close to the intranet host and provides a transparent access environment for the upper application intranet host. The multiplexing layer aggregates system resources so that resources can be shared. The control layer implements system configuration and resource allocation.

[0053] The node in the access layer is an access server, which is recorded as an access point AP (Access Point); the AP has the functions of communicating with the host on the internal network and address translation. The access layer includes one or more access points AP.

[0054] The nodes in the multiplex layer are multiplex servers, which are recorded as...

Embodiment 2

[0066] In this embodiment, aiming at the solution provided in Embodiment 1, in order to solve the problem of route selection and session consistency in the distributed NAT system, the function of the distributed NAT system is extended.

[0067] Fine-grained public IP address allocation

[0068]The traditional NAT system monopolizes a single public IP address. The distributed NAT system in this embodiment reduces the allocation granularity of public IP addresses to the port level in consideration of the shortage of public IP addresses. For example: for a specific public IP address, there are [a,b] a total of (b-a+1) ports available, the distributed NAT system divides a single public IP address into [a,x] according to the upper application requirements and [x+1,b] two segments (a≤x<b), which are assigned to different LAN environments. This method reduces the distribution granularity of public IP addresses, and is an effective method to solve the problem of Internet access when ...

Embodiment 3

[0086] On the basis of the solutions provided in Embodiment 1 or Embodiment 2, this embodiment provides a data interaction mode between nodes at the access layer, the multiplexing layer, and the control layer.

[0087] Among them, nodes in the access layer, multiplexing layer, and control layer use three types of data streams for data interaction, and the three types of data streams are public IP submission streams, public IP acquisition streams, and system data streams; system data streams include configuration stream, log stream and business data stream. The direction, trigger mode and content of each data flow are shown in Table 3.

[0088] table 3

[0089]

[0090]

[0091] The processing process and steps of each data stream are as follows:

[0092] Public IP submission flow:

[0093] The public IP submission flow is a way to maintain resources within the system. The data direction of the public IP submission flow is from the multiplexing point MP to the resourc...

technical field

[0001] The invention relates to the technical field of network communication, in particular to a distributed network address translation NAT (Network Address Translation) system. Background technique

[0002] The Internet Assigned Numbers Authority (IANA) specifies three types of private IP address space: 10.0.0.0-10.255.255.255, 172.16.0.0-172.31.255.255 and 192.168.0.0-192.168.255.255. These three types of IP addresses can only be used on the internal network and are not allowed to be used on the Internet. The network using private IP addresses is called an internal network, referred to as "intranet"; the network using public IP addresses is called an external network, referred to as "external network" or "Internet".

[0003] NAT technology is a technology that appears when IPv4 addresses are increasingly exhausted. It is mainly used to realize the function of internal network accessing external network, and was released as an RFC document in 1994. NAT pr...

Examples

Embodiment 1

[0052] The invention provides a distributed network address translation NAT system, which is suitable for the NAT environment including one or more different public IP resources, and the system includes an access layer, a multiplexing layer and a control layer. The architecture of the system is as Figure 5 As shown in the figure, the access layer is close to the intranet host and provides a transparent access environment for the upper application intranet host. The multiplexing layer aggregates system resources so that resources can be shared. The control layer implements system configuration and resource allocation.

[0053] The node in the access layer is an access server, which is recorded as an access point AP (Access Point); the AP has the functions of communicating with the host on the internal network and address translation. The access layer includes one or more access points AP.

[0054] The nodes in the multiplex layer are multiplex servers, which are recorded as...

Embodiment 2

[0066] In this embodiment, aiming at the solution provided in Embodiment 1, in order to solve the problem of route selection and session consistency in the distributed NAT system, the function of the distributed NAT system is extended.

[0067] Fine-grained public IP address allocation

[0068]The traditional NAT system monopolizes a single public IP address. The distributed NAT system in this embodiment reduces the allocation granularity of public IP addresses to the port level in consideration of the shortage of public IP addresses. For example: for a specific public IP address, there are [a,b] a total of (b-a+1) ports available, the distributed NAT system divides a single public IP address into [a,x] according to the upper application requirements and [x+1,b] two segments (a≤x<b), which are assigned to different LAN environments. This method reduces the distribution granularity of public IP addresses, and is an effective method to solve the problem of Internet access when ...

Embodiment 3

[0086] On the basis of the solutions provided in Embodiment 1 or Embodiment 2, this embodiment provides a data interaction mode between nodes at the access layer, the multiplexing layer, and the control layer.

[0087] Among them, nodes in the access layer, multiplexing layer, and control layer use three types of data streams for data interaction, and the three types of data streams are public IP submission streams, public IP acquisition streams, and system data streams; system data streams include configuration stream, log stream and business data stream. The direction, trigger mode and content of each data flow are shown in Table 3.

[0088] table 3

[0089]

[0090]

[0091] The processing process and steps of each data stream are as follows:

[0092] Public IP submission flow:

[0093] The public IP submission flow is a way to maintain resources within the system. The data direction of the public IP submission flow is from the multiplexing point MP to the resourc...

Images