UDP Port Consolidation for Real-Time Communication Server
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional real-time communication (RTC) methods face challenges with poor security and difficulty in operation and maintenance due to the need for a large number of ports when integrating with content delivery networks (CDN) for live broadcasts, leading to vulnerabilities and limited client capacity.
Innovation Solution
A method where service processes on a server are configured in one-to-one correspondence with User Datagram Protocol (UDP) ports, with each service process receiving and managing requests from multiple clients through a single UDP port, ensuring that all UDP requests from the same client are routed to the same service process, and utilizing verification information to secure connections.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If each client is configured with one dedicated UDP port, then the client can be clearly identified and served, but the number of ports required becomes very large, causing difficulties in port maintenance, security vulnerabilities, and limited client capacity
Solution Approach 1:
The patent merges multiple client connections through a single UDP port by introducing a connection manager that handles multiple client sockets bound to the same port. The connection manager multiplexes traffic from different clients through a single port interface, eliminating the need for dedicated ports per client while maintaining client identification and connection management capabilities.
Solution Approach 2:
The connection manager acts as an intermediary between the UDP port and multiple clients. It receives packets on the single UDP port, identifies the target client through connection tracking, and forwards packets to the appropriate client socket. This mediator approach allows port consolidation while preserving individual client connectivity.
2Reliability
If multiple ports are opened for different clients, then each client can be distinguished, but the system becomes vulnerable to attacks and difficult to maintain
Solution Approach 1:
By merging multiple client connections into a single UDP port through the connection manager, the system reduces the attack surface. Instead of exposing numerous individual ports that can be targeted, the system presents a single port interface with centralized security control through the connection manager's connection tracking and packet forwarding mechanism.
Solution Approach 2:
The connection manager implements feedback mechanisms through connection tracking, maintaining state information about each client connection. This feedback system monitors incoming packets, verifies connection legitimacy, and dynamically manages connection states, providing reliable connection management while enhancing security through centralized control and validation.
3Productivity
If a large number of ports are configured for CDN live broadcast services, then more clients can be served, but the operation and maintenance difficulty increases significantly
Solution Approach 1:
The patent merges the management of multiple client connections into a single UDP port handled by the connection manager. This consolidation maintains the ability to serve multiple clients simultaneously while dramatically simplifying operation and maintenance, as port configuration and management are centralized in the connection manager rather than distributed across numerous individual ports.
Solution Approach 2:
The connection manager serves as a universal component that handles multiple client connections through a single port interface. It provides multi-functional capabilities including connection establishment, packet routing, connection tracking, and security validation, replacing the need for multiple dedicated port configurations and simplifying the overall system operation.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Embodiments of the present disclosure relates to the field of communication technology, which provide a method for real-time communication connection, a server, and a storage medium. The server is configured to have service processes in one-to-one correspondence with UDP ports. After receiving each respective SDP request sent by each of at least one client for resource negotiation from a TCP port of the server, the service processes send each respective SDP response to each of the at least one client based on the each respective SDP request. The each respective SDP response carries information of a UDP port corresponding to a service process that processes the each respective SDP request. The service process receives a UDP connection request sent by a client from the UDP port corresponding to the service process, and establishes a UDP connection by calling a Connect function to implement RTC connection.