IPv6 NAT66 Prefix Translation for SD-WAN Direct Internet Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional WAN topologies experience packet latency, drops, and jitter due to backhauling all Internet traffic to data centers, leading to increased costs and complex management, especially as the number of branch offices and devices increases.
Innovation Solution
The implementation of a system and method for translating IPv6 packets for direct internet access (DIA) in a software-defined wide area network (SD-WAN) environment, using a router that determines a common prefix pool, identifies a service VPN prefix, and generates a dynamic NAT66 prefix translation for efficient and scalable DIA.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If all Internet traffic is backhauled to data centers through traditional WAN topology, then centralized control and security policy enforcement are improved, but packet latency, packet drops, and jitter increase
Solution Approach 1:
The patent segments Internet traffic from enterprise traffic by implementing direct Internet access (DIA) at branch offices. Internet-bound traffic is routed directly to the Internet through local DIA connections, while enterprise traffic continues to flow through the centralized WAN to data centers. This segmentation eliminates the need to backhaul all traffic to data centers, thereby reducing packet latency and jitter for Internet traffic while maintaining centralized control for enterprise traffic.
2Reliability
If all Internet traffic is backhauled to data centers through traditional WAN topology, then centralized security policy enforcement is improved, but network costs and device complexity increase
Solution Approach 1:
The patent introduces an intermediary mechanism in the form of automated DIA provisioning and configuration systems that work with service providers to establish direct Internet connections at branch offices. This intermediary layer handles the complexity of DIA deployment, including coordination with Internet service providers, automatic configuration of local Internet access, and integration with existing WAN infrastructure. This reduces network management complexity while maintaining security policy enforcement through centralized control planes that can still monitor and manage Internet traffic flows.
3Adaptability or versatility
If dynamic NAT66 prefix translation is implemented for DIA, then scalability and adaptability are improved, but translation table management complexity increases
Solution Approach 1:
The patent implements dynamic NAT66 prefix translation where translation entries are automatically created, modified, and removed based on real-time DIA connection states. When DIA connections are established at branch offices, the system dynamically allocates IPv6 prefixes from available pools and creates corresponding NAT66 translation entries. These entries are automatically updated as connections are established or terminated, enabling the system to adapt to changing DIA deployment scenarios without manual configuration. This dynamic approach enhances scalability while the automation reduces translation table management complexity.
4Adaptability or versatility
If the number of branch offices and devices increases, then network coverage and service capability are improved, but packet latency, jitter, and network costs worsen
Solution Approach 1:
The patent adds a new dimension to network architecture by implementing direct Internet access connections at the branch office level, creating a multi-dimensional network topology. Instead of a single centralized path through data centers, the network now has both centralized WAN paths for enterprise traffic and direct local paths for Internet traffic. This dimensional change allows branch offices to access the Internet directly without traversing the centralized WAN infrastructure, thereby reducing packet latency and jitter as the number of branch offices increases, while maintaining expanded network coverage.
Data Source
AI summary
In one embodiment, a method includes determining, by a router, a common prefix pool from a transport interface associated with a transport virtual private network (VPN). The method also includes identifying, by the router, a prefix associated with a service VPN and generating, by the router, an IPv6-to-IPv6 Network Address Translation (NAT66) prefix translation using the common prefix pool and the prefix. The NAT66 prefix translation includes a predetermined prefix length. The method further includes automatically installing, by the router, the NAT66 prefix translation into a translation table.