Subscriber-Aware NAT Router Correlation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Service provider networks face significant challenges in correlating subscriber login activity with network address translation (NAT) operations, particularly in large environments with high session rates, due to the burden on offline NAT log archive systems.
Innovation Solution
Routers are configured to automatically correlate subscriber information with NAT operations by installing subscriber identifiers and generating records that log NAT operations, offloading this task to the routers and enabling improved scalability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If offline NAT log archive systems are used to correlate subscriber login activity with NAT operations, then comprehensive logging capability is maintained, but system scalability deteriorates under high session rates
Solution Approach 1:
The patent extracts the correlation function from the offline NAT log archive system and relocates it to the router's data plane. This allows the router to correlate subscriber identifiers with NAT operations in real-time as packets are processed, eliminating the need for the archive system to perform complex correlation operations after the fact. The router now generates records that are pre-correlated with subscriber identifiers, significantly reducing the processing burden on the archive system during high session rates.
Solution Approach 2:
The patent implements preliminary action by correlating subscriber information with NAT operations at the time of packet processing in the data plane, rather than performing correlation later in an offline archiving system. The router installs subscriber identifiers in service units before NAT operations occur, and uses these identifiers to correlate with NAT operations as they happen, creating pre-correlated records that are then archived without requiring additional correlation processing.
2Productivity
If subscriber information is correlated at the router level during NAT operations, then scalability is improved, but device complexity increases
Solution Approach 1:
The patent merges the subscriber correlation function with the existing NAT operation processing in the router's data plane. Instead of adding a separate correlation system, the router uses its existing packet processing infrastructure to correlate subscriber identifiers with NAT operations. The service units that already handle NAT operations are enhanced to also perform correlation using subscriber identifiers installed in the same service units, combining multiple functions into a single processing path.
Solution Approach 2:
The router's data plane performs the correlation operation using its own existing resources and processing paths. The service units that process NAT operations also correlate subscriber information using subscriber identifiers that are installed in the same service units. This self-service approach eliminates the need for separate correlation hardware or software systems, reducing overall system complexity while improving scalability.
3Speed
If subscriber identifiers are installed in data plane service units, then correlation speed is improved, but memory requirements increase
Solution Approach 1:
The patent applies local quality by installing subscriber identifiers specifically in the service units that handle NAT operations, rather than maintaining a global database accessible by all system components. Each service unit stores only the subscriber identifiers relevant to its processing workload, allowing for localized, efficient access during correlation operations. This distributed, localized storage approach reduces the total memory footprint compared to a centralized database while maintaining fast correlation speed.
Data Source
AI summary
Techniques are described for performing subscriber-aware NAT functions. In one example, routers or other NAT-enabled devices deployed within a network are configured to auto-correlate subscriber information with NAT operations performed by the devices when forwarding network traffic. As such, the techniques offload the burden of correlating subscriber login activity with NAT operations as typically performed by offline NAT log archive systems.