NAT State Synchronization for Multi-Homed Network Reliability

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional network address translation methods in multi-homed networks fail to maintain connections when routing conditions change, leading to temporary or permanent delays and disruptions due to the lack of viable alternative routes and improper handling of NAT state information across different NAT gateways.

Innovation Solution

Implementing distributed techniques in data communications devices to determine and maintain the primary data communications device responsible for a connection, allowing rerouted packets to be tunneled or dropped to ensure continuous transmission, and using metric indications to identify the preferred data communications device for handling messages, thereby maintaining connection integrity.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If NAT devices translate packet addresses in multi-homed networks, then network address translation is achieved, but connection maintenance fails when routing conditions change

Engineering Contradiction:
Improveconnection maintenanceVSAvoidrouting flexibility
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The system performs preliminary actions by establishing and maintaining NAT state information and connection tracking before routing changes occur. When routing conditions change, the pre-established state information allows the system to quickly determine the primary NAT device and redirect packets accordingly, preventing connection failures.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system implements feedback mechanisms where NAT devices monitor routing conditions and communicate their primary status to other NAT devices. This feedback loop enables dynamic adaptation when routing changes occur, allowing the system to maintain connections by redirecting packets to the appropriate primary NAT device.

Inventive Principle:
Principle #23Feedback

2Adaptability or versatility

If packets are rerouted through alternative NAT gateways, then routing flexibility is improved, but NAT state information becomes inconsistent

Engineering Contradiction:
Improverouting flexibilityVSAvoidNAT state information
Core Design Contradiction:
Adaptability or versatilityVSLoss of information

Solution Approach 1:

The system uses intermediary mechanisms where NAT devices act as mediators to share and synchronize state information. When packets are rerouted, the intermediary communication between NAT devices ensures that state information is consistently updated, preventing information loss and maintaining connection integrity.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system merges the state information from multiple NAT devices into a unified connection tracking mechanism. By combining the state data and establishing a primary NAT device for each connection, the system maintains consistent state information even when packets are routed through alternative gateways.

Inventive Principle:
Principle #5Merging (Combining)

3Reliability

If multiple NAT gateways are used in multi-homed networks, then network redundancy is improved, but connection tracking complexity increases

Engineering Contradiction:
Improvenetwork redundancyVSAvoidconnection tracking
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system segments the connection tracking function by assigning a primary NAT device for each connection while allowing secondary NAT devices to handle traffic during failures. This segmentation simplifies the tracking complexity by designating a single responsible device for each connection, reducing the burden on all NAT devices.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system applies local quality by allowing each NAT device to maintain its own simplified state information locally, rather than requiring comprehensive global tracking. Each device only needs to track connections for which it is the primary NAT, reducing individual device complexity while maintaining overall system redundancy.

Inventive Principle:
Principle #3Local quality

4Adaptability or versatility

If routing paths are reconfigured dynamically, then network adaptability is improved, but packet transmission delays increase

Engineering Contradiction:
Improverouting adaptabilityVSAvoidpacket transmission delay
Core Design Contradiction:
Adaptability or versatilityVSLoss of time

Solution Approach 1:

The system performs preliminary actions by pre-establishing NAT state information and connection tracking before routing changes occur. When routing reconfiguration is needed, the pre-established state allows for rapid packet redirection without requiring time-consuming state negotiation, thus minimizing transmission delays.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system implements a rushing through mechanism where packets are quickly redirected to the primary NAT device without undergoing complete re-negotiation of connection state. By skipping the lengthy state establishment process and relying on pre-existing state information, the system minimizes packet transmission delay during routing changes.

Inventive Principle:
Principle #21Skipping (Rushing through)

Data Source

PatentUS8451711B1Methods and apparatus for redirecting traffic in the presence of network address translation
Publication Date: 2013.05.28 CISCO TECHNOLOGY INC
  • US8451711B1 patent drawing
  • US8451711B1 patent drawing
  • US8451711B1 patent drawing

AI summary

The invention is directed to techniques for processing messages to be transferred from a first network to a second network, the method comprising the steps of receiving a message at a second data communications device coupling the first and second networks, determining that the message is associated with a data path through a first data communications device that couples the first and second networks independently from the second data communications device and processing the message to maintain a connection associated with the message, the connection existing between a first computerized device operating in the first network and a second computerized device operating in the second network.