Routing Device NAT Packet Processing via Forwarding Engine
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Network Address Translation (NAT) processing in routers is inefficient due to the need to examine and translate all network packets, even those with data already stored in the NAT mapping table, leading to significant computation and packet delay, especially in local networks requiring extensive NAT translation.
Innovation Solution
A routing device with a forwarding engine module and a core module processes network packets by determining if they meet NAT conditions, using the forwarding engine to perform NAT translation directly from the NAT mapping table when applicable, thereby reducing the load on the core module and accelerating packet processing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If all network packets are examined and processed through the core unit for NAT translation, then NAT translation completeness is ensured, but packet delay increases and processing efficiency deteriorates
Solution Approach 1:
The patent segments the packet processing function by dividing packets into two categories: those requiring NAT translation (matched in NAT mapping table) and those not requiring translation. The forwarding engine handles simple forwarding without NAT, while only matched packets are sent to the core unit for NAT processing. This segmentation reduces the load on the core unit and decreases packet delay for non-NAT packets.
Solution Approach 2:
The patent introduces a NAT mapping table as an intermediary between the forwarding engine and the core unit. The forwarding engine first queries the NAT mapping table to determine whether a packet requires NAT translation. This intermediary mechanism enables the forwarding engine to make intelligent routing decisions, avoiding unnecessary core unit processing for packets that don't require NAT.
2Adaptability or versatility
If all network packets are transferred to the core unit for processing, then comprehensive packet handling is achieved, but computation time and processing overhead increase significantly
Solution Approach 1:
The patent segments packet processing into two paths: simple forwarding for non-NAT packets handled by the forwarding engine, and NAT processing for matched packets handled by the core unit. This segmentation eliminates unnecessary computation time for packets that only require simple forwarding while maintaining comprehensive handling capability for all packet types.
Solution Approach 2:
The forwarding engine performs self-service by autonomously handling packet forwarding decisions for packets that do not require NAT translation. It queries the NAT mapping table and independently determines whether to forward packets directly or transfer them to the core unit, reducing the computational burden on the core unit and overall processing time.
3Measurement precision
If NAT translation is performed on all packets in local networks, then translation accuracy is maintained, but processing efficiency and throughput decrease
Solution Approach 1:
The patent segments the packet population into NAT-requiring packets (50-60% in local networks) and non-NAT packets. The forwarding engine efficiently handles non-NAT packets through direct forwarding, while the core unit processes NAT packets with full translation accuracy. This segmentation maintains translation accuracy for necessary packets while significantly improving overall processing efficiency.
Solution Approach 2:
The NAT mapping table serves as an intermediary that enables the forwarding engine to accurately identify packets requiring NAT translation. By querying this table, the forwarding engine maintains translation accuracy for matched packets while avoiding unnecessary NAT processing for non-matched packets, thereby improving overall processing efficiency and throughput.
Data Source
AI summary
A method for processing a network packet is used for a routing apparatus. The routing apparatus includes a forwarding engine module and a core module. In the method, a network packet from a source interface is received. Whether or not the network packet meets a Network Address Translation (NAT) packet condition is determined. Subsequently, the following steps are executed when the network packet meets the NAT packet condition. In these steps, transmission information of the network packet is read and a NAT mapping table is searched by using the transmission information. When a mapping entry corresponding to the transmission information is found in the NAT mapping table, the method involves enabling the forwarding engine module to update the header of the network packet according to the NAT forwarding information of the corresponding mapping entry and set a destination interface of the network packet.