Relay Server NAT Traversal via Intermediary Mapping
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing NAT traversal techniques, such as STUN and TURN protocols, face challenges in establishing reliable media channels between private and public clients across multiple networks due to security risks and resource constraints, particularly when deploying relay servers directly in public networks.
Innovation Solution
Implementing an enhanced relay server mapping protocol that uses dedicated NAT devices for relay servers, allowing them to map ports transparently and operate behind NATs, thereby reducing the need for opening large port ranges on public firewalls and enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a relay server is directly exposed to a public network to provide media relay services, then connectivity between public and private peers is improved, but security risks are elevated
Solution Approach 1:
The patent introduces a NAT device as an intermediary between the relay server and the public network. The relay server operates in a private network behind the NAT, which translates its private address to a public address for external communication. This mediator enables the relay server to provide public accessibility and media relay services without being directly exposed to the public network, thus maintaining security while achieving connectivity.
2Adaptability or versatility
If a relay server opens a range of ports on the public side to facilitate peer communication, then media channel establishment is improved, but resource consumption increases
Solution Approach 1:
The NAT device performs multiple functions: it provides address translation, enables port mapping for the relay server, and facilitates media channel establishment between peers. By making the NAT device multi-functional, the system avoids the need for the relay server to open and manage separate port ranges for different purposes, reducing overall resource consumption while maintaining media channel establishment capabilities.
3Productivity
If STUN protocol is used for NAT traversal, then public client address discovery is improved, but reliability is reduced due to topological conditions
Solution Approach 1:
The relay server acts as an intermediary that supplements the STUN protocol. While STUN helps public clients discover their transport addresses, the relay server provides a fallback mechanism for cases where STUN addresses are not usable due to network topological conditions. The relay server can relay media packets between peers when direct connectivity fails, ensuring reliable communication regardless of NAT configuration or network topology.
Data Source
AI summary
Techniques to manage a relay server and a network address translator are described. A system may include a relay server having a first private network interface operative to communicate with a private client, a second private network interface operative to communicate with a network address translator, and an enhanced relay manager module operative to receive a message from the private client over the first private network interface or a remote client over the second private network interface and through the network address translator, the enhanced relay manager module further operative to retrieve a public transport address and a mapped port for the network address translator from a mapped address attribute stored by the relay server, and send a response to the message with the public transport address and the mapped port to the private client or the remote client. Other embodiments are described and claimed.