Relay Server Virtual Address Mapping for VPN Routing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing process of setting up a virtual private network (VPN) requires frequent updates to the gateway table, which is complex and inefficient, as the address of a communication partner through the VPN is often only revealed after VPN establishment.
Innovation Solution
A relay server configuration that includes an address filter information storage part, a virtual address registration information storage part, and a control part, which allows for the association of virtual addresses with routing object addresses, eliminating the need for a gateway table update each time a VPN is built by establishing a routing session and assigning virtual addresses.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a gateway table is used to manage packet routing between VPN and non-VPN communication, then communication functionality is achieved, but the system complexity increases due to frequent gateway table updates required each time a VPN is built
Solution Approach 1:
The patent introduces a relay server as an intermediary device that mediates between communication terminals in different LANs. The relay server maintains a routing table that maps virtual addresses to actual terminal addresses, acting as a mediator that handles address translation and packet forwarding. This eliminates the need for each terminal to maintain complex gateway tables, as the relay server centralizes the routing management functionality.
Solution Approach 2:
The patent enables automatic address discovery and routing table update mechanisms where the relay server automatically learns terminal addresses through VPN establishment notifications and self-updates its routing table without manual intervention. This self-service approach eliminates the need for manual gateway table updates, allowing the system to adapt to changing VPN configurations automatically while reducing operational complexity.
2Manufacturing precision
If manual gateway table updates are performed each time a VPN is built, then routing accuracy is maintained, but time consumption increases due to the repetitive update process
Solution Approach 1:
The patent implements preliminary configuration where communication terminals are pre-assigned virtual addresses before VPN establishment. The relay server is pre-configured with the structure of the routing table and the relationships between virtual addresses and LANs. This preliminary setup ensures that when a VPN is established, the routing information can be automatically populated and updated without manual intervention, maintaining routing accuracy while eliminating the time-consuming manual update process.
Solution Approach 2:
The patent establishes a feedback mechanism where the relay server receives notifications about VPN establishment and terminal address information, automatically updates its routing table based on this feedback, and maintains accurate routing information. The system continuously monitors VPN status and adjusts routing tables dynamically, ensuring routing accuracy is maintained without requiring manual updates, thus eliminating time loss.
3Adaptability or versatility
If virtual addresses are assigned to terminals in different LANs, then communication flexibility is improved, but address management complexity increases
Solution Approach 1:
The patent introduces a universal virtual address scheme where communication terminals are assigned virtual addresses that can be used consistently across different LANs and VPN configurations. The relay server provides a universal address translation service that handles mappings between virtual addresses and various actual terminal addresses in different network environments. This universal approach improves communication flexibility while the relay server centralizes the complexity of address management, preventing terminals from needing to handle complex address translation themselves.
Data Source
Figure 1
Figure 2~3
Figure 4
AI summary
A relay server 3 stores a routing apparatus belonging to a VPN group to which the relay server 3 itself belongs, a second routing object address that is an address of the routing apparatus, and the like. The relay server 3 stores the relationship of assignment of a virtual address to the second routing object address. The virtual address is an address that does not overlap with addresses of any other apparatuses. The relay server 3 performs a control for, upon reception of a packet from a routing session, converting a source of the packet from an actual address into the virtual address, and forwarding the packet to a routing object device of the relay server 3 itself. The relay server 3 performs a control for, upon reception of a packet from the routing object device of the relay server 3 itself, converting a destination of the packet from the virtual address into an actual address, and forwarding the packet to the routing session.