TURN Server Private Network Traversal via WebSocket Multiplexing

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Firewalls that only open an HTTP port and allow HTTP-formatted data packets to pass through prevent communication between communications terminals in local area networks and remote nodes, limiting the ability to send signaling and communication data to different ports of a TURN server, thereby restricting private network traversal.

Innovation Solution

A method where messages between a TURN server and a communications terminal in a local area network are transmitted through a pre-established WebSocket connection, allowing the TURN server to allocate relay addresses and resource ports, and using multiplexing identifiers to facilitate communication with multiple remote nodes by encapsulating communication data in TURN data packets.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a firewall only opens an HTTP port and allows only HTTP-formatted data packets to pass through, then network security is improved, but communication between communications terminals and remote nodes is blocked

Engineering Contradiction:

Improvenetwork securityVSAvoidcommunication capability

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent uses WebSocket as an intermediary protocol that operates over HTTP port 80. The WebSocket connection acts as a mediator that allows TURN server communication to pass through the firewall by disguising the communication as HTTP traffic, thereby maintaining network security while enabling communication capability.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent changes the communication protocol parameter from traditional TURN protocols (UDP/TCP) to WebSocket protocol. This parameter change allows the communication to be formatted in a way that is compatible with HTTP-only firewalls, transforming the data packet format to match HTTP expectations while maintaining the underlying TURN functionality.

Inventive Principle:

Principle #35Parameter changes

2Adaptability or versatility

If multiple different ports are opened on the TURN server to communicate with different remote nodes, then communication versatility is improved, but firewall restrictions prevent this from working

Engineering Contradiction:

Improvecommunication with multiple remote nodesVSAvoidfirewall compliance

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent makes the single HTTP port 80 serve multiple functions by using WebSocket connections. Instead of requiring different ports for different remote nodes, the same port handles all communications through multiplexed WebSocket connections, each identified by unique connection identifiers. This universal approach maintains firewall compliance while achieving communication versatility.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent moves from using different ports (vertical dimension) to using different WebSocket connection identifiers (horizontal dimension) to distinguish communications with different remote nodes. This dimensional shift allows multiple simultaneous communications through a single port by adding the connection identifier dimension to differentiate traffic streams.

Inventive Principle:

Principle #17Another dimension (Dimensionality change)

3Adaptability or versatility

If traditional TURN protocols (UDP/TCP) are used, then communication functionality is maintained, but HTTP-only firewalls block these protocols

Engineering Contradiction:

ImproveTURN server communicationVSAvoidfirewall blocking

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

WebSocket serves as an intermediary layer between the TURN server and the HTTP-only firewall. The WebSocket protocol encapsulates TURN communication within an HTTP-compatible framework, allowing the traditional TURN functionality to pass through the firewall without direct exposure to the blocking rules.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent changes the protocol parameter from UDP/TCP to WebSocket over HTTP. This parameter transformation modifies the packet structure and transmission characteristics to match HTTP expectations, thereby eliminating the firewall blocking issue while preserving TURN server communication functionality.

Inventive Principle:

Principle #35Parameter changes

Data Source

PatentUS8885649B2Method, apparatus, and system for implementing private network traversal

Publication Date: 2014.11.11 HUAWEI TECH CO LTD

AI summary

A method, an apparatus, and a system for implementing private network traversal are disclosed, where a message exchanged between a TURN server in a public network and a communications terminal in a local area network is transmitted through a pre-established websocket connection. The method includes: receiving, by the TURN server, a resource allocate request sent by the communications terminal, allocating a relay address and a resource port for the communications terminal; receiving a TURN data packet sent by the communications terminal, where the TURN data packet includes communication data and a multiplexing identifier, and sending the communication data to the remote node through the communications channel identified by the multiplexing identifier, thereby solving a problem in an existing TURN technology that in case that a firewall only opening an HTTP port is deployed, communication between a communications terminal in a local area network and a remote node cannot be implemented.