IP Endpoint Multiplexing With Automatic Port Conflict Resolution

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing network address translation (NAT) methods for sharing a single IP address between multiple endpoints introduce delays, require manual configuration, and cause interference with certain applications like SD-WAN, login/rsh, and Kerberos, leading to silent failures and heavy workload.

Innovation Solution

A system that dynamically allocates ports for management traffic and transparently passes all other ports, using a Link State Transfer function to adjust IP status based on interface changes, allowing multiple endpoints to share a single WAN IP address without manual configuration or IP layer manipulation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Quantity of substance

If NAT is used to share a single IP address between multiple endpoints, then IP address conservation is achieved, but application interference and silent failures occur

Engineering Contradiction:

ImproveIP address usage efficiencyVSAvoidapplication operation reliability

Core Design Contradiction:

Quantity of substanceVSReliability

Solution Approach 1:

The patent segments the network traffic into different VRF (Virtual Routing and Forwarding) instances, allowing management traffic and application traffic to be handled separately. This segmentation enables the system to share a single IP address while maintaining distinct routing paths that prevent application interference and silent failures.

Inventive Principle:

Principle #1Segmentation

2Quantity of substance

If NAT is used to share a single IP address, then IP address conservation is achieved, but manual configuration is required

Engineering Contradiction:

ImproveIP address usage efficiencyVSAvoidconfiguration complexity

Core Design Contradiction:

Quantity of substanceVSEase of operation

Solution Approach 1:

The system implements automatic VRF instance creation and configuration based on detected traffic patterns. When management traffic is detected, the system automatically creates the appropriate VRF instances and routing rules without requiring manual configuration, thereby achieving IP address conservation while eliminating configuration complexity.

Inventive Principle:

Principle #25Self-service

3Quantity of substance

If NAT is used to share a single IP address, then IP address conservation is achieved, but processing delays are introduced

Engineering Contradiction:

ImproveIP address usage efficiencyVSAvoidpacket processing time

Core Design Contradiction:

Quantity of substanceVSLoss of time

Solution Approach 1:

The system pre-creates VRF instances and configures routing rules in advance based on traffic detection. By having the routing infrastructure ready beforehand, the system eliminates the need for real-time NAT translation and rule creation, thereby achieving IP address conservation while minimizing packet processing delays.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentEP3977712B1Transparent multiplexing of IP endpoints

Publication Date: 2026.01.14 ADTRAN NETWORKS SE

Figure 1
Figure 2
Figure 3

AI summary

The disclosure relates to allowing a network function (such as a router, firewall or SD-WAN endpoint) or service chain of network functions to transparently access a network uplink, while also allowing a set of management entities to access the same link without interference or configuration. To the extent that a conflict arises between ports allocated to the management functions and to the network functions, the relevant port is automatically removed from use by management functions and allocated to network functions to end the conflict.