CN114710465B

CN114710465B - Network address translation method, device, equipment and storage medium

Info

Publication number: CN114710465B
Application number: CN202210358952.5A
Authority: CN
Inventors: 魏汝翔; 晏家豪; 陈勋; 尹祖新; 刘琦; 赵广; 梁芳; 田洪宁; 杨婧雅; 黄娅
Original assignee: China United Network Communications Group Co Ltd
Current assignee: China United Network Communications Group Co Ltd
Priority date: 2022-04-07
Filing date: 2022-04-07
Publication date: 2023-05-02
Anticipated expiration: 2042-04-07
Also published as: CN114710465A

Abstract

The application provides a network address translation method, a device, equipment and a storage medium, relates to the technical field of communication, and can reduce the configuration cost of NAT44 board cards. The method comprises the following steps: the controller receives internet surfing request information of a target account, wherein the internet surfing request information is used for acquiring target data from a network; when the BRAS equipment accessed by the target account is second BRAS equipment and the IP address of the target account is a private network IP address, the controller forwards the Internet surfing request information and the IP address of the target account to first target BRAS equipment, so that the first target BRAS equipment converts the IP address of the target user into a public network IP address through a configured NAT44 board card, and obtains target data by using the public network IP address of the target user, wherein the first target BRAS equipment is one of one or more first BRAS equipment.

Description

Network address translation method, device, equipment and storage medium

Technical Field

The present disclosure relates to the field of communications technologies, and in particular, to a method, an apparatus, a device, and a storage medium for converting a network address.

Background

To ensure that a computer can access a network (internet), it is necessary to assign a public internet protocol (internet protocol, IP) address to the computer. But the number of public IP addresses is limited, resulting in a steadily decreasing number of available public IP addresses as the number of computers continues to increase. In order to reasonably utilize public IP addresses, more private IP addresses can be converted into a small number of public IP addresses by a network address translation (network address translation, NAT 44) technology, so that the use of the public IP addresses is reduced to a certain extent while the communication between a host inside a private network and the host on the Internet is realized. The NAT44 technology may refer to configuring a NAT44 board card on a broadband access server (broadband remote access serve, BRAS) device, and converting a private network IP address into a public IP address through the NAT44 board card.

Typically, NAT44 cards are configured in a distributed manner, i.e., NAT44 cards are configured on each BRAS device. However, when the number of BRAS devices is large, if the NAT44 board card is configured in a distributed manner, the cost is high.

Disclosure of Invention

The application provides a network address translation method, a device, equipment and a storage medium, so as to reduce the configuration cost of a NAT44 board card.

In order to achieve the above purpose, the present application adopts the following technical scheme:

in a first aspect, the present application provides a network address translation method, applied to a network address translation NAT44 architecture, where the NAT44 architecture includes a plurality of broadband access server BRAS devices and a controller communicatively connected to the plurality of BRAS devices, where the plurality of BRAS devices includes one or more first BRAS devices and one or more second BRAS devices, the first BRAS devices are configured with one or more NAT44 boards, the second BRAS devices are not configured with NAT44 boards, and the NAT44 boards are configured to translate a private network internet protocol IP address to a public network IP address, and the method includes: the controller receives internet surfing request information of a target account, wherein the internet surfing request information is used for acquiring target data from a network; when the BRAS equipment accessed by the target account is second BRAS equipment and the IP address of the target account is a private network IP address, the controller forwards the Internet surfing request information and the IP address of the target account to first target BRAS equipment, so that the first target BRAS equipment converts the IP address of the target user into a public network IP address through a configured NAT44 board card, and acquires target data from a network by using the public network IP address of the target user and the Internet surfing request information, wherein the first target BRAS equipment is one of one or more first BRAS equipment.

Optionally, the controller determines an IP address of the target account, including: the controller determines the grade of the target account; and the controller determines the IP address of the target account according to the grade of the target account.

Optionally, the controller determines the IP address of the target account according to the level of the target account, including: when the grade of the target account is greater than or equal to a preset grade, the controller determines that the IP address of the target account is a public network IP address; and when the grade of the target account is smaller than the preset grade, the controller determines that the IP address of the target account is the private network IP address.

Optionally, when the BRAS device accessed by the target account is the first BRAS device and the IP address of the target account is the private network IP address, the controller sends the internet access request information and the IP address of the target account to the BRAS device accessed by the target account, so that the BRAS device accessed by the target account obtains the target data from the network according to the internet access request information and the IP address.

Optionally, the controller determines a first target BRAS device according to the resource utilization rate of the one or more first BRAS devices, where when the resource utilization rate of the one or more BRAS devices is lower than a first threshold, the first target BRAS device is any one of the one or more first BRAS devices; when there is a BRAS device with a resource utilization rate higher than or equal to a first threshold value in the one or more BRAS devices, the first target BRAS device is a BRAS device with a resource utilization rate lower than the first threshold value in the one or more first BRAS devices.

Optionally, when the IP address of the target account is a public network IP address, the controller sends the IP address of the target account and the internet surfing request information to the second target BRAS device, so that the second target BRAS device obtains target data from the network according to the IP address and the internet surfing request information; when the resource utilization rate of one or more BRAS devices is smaller than a first threshold value, the second target BRAS device is the BRAS device accessed by the target account; and when the equipment with the resource utilization rate higher than or equal to the first threshold value exists in the one or more BRAS equipment, the second target BRAS equipment is the BRAS equipment accessed by the target account or is the BRAS equipment with the lowest resource utilization rate in the one or more BRAS equipment.

In a second aspect, the present application provides a network address translation device, applied to a network address translation NAT44 architecture, where the NAT44 architecture includes a plurality of broadband access server BRAS devices and a controller communicatively connected to the plurality of BRAS devices, where the plurality of BRAS devices includes one or more first BRAS devices and one or more second BRAS devices, the first BRAS devices are configured with one or more NAT44 boards, the second BRAS devices are not configured with NAT44 boards, and the NAT44 boards are configured to translate private network internet protocol IP addresses to public network IP addresses, and the network address translation device includes: a receiving unit, a determining unit and a transmitting unit; the receiving unit is used for receiving internet surfing request information of a target account, wherein the internet surfing request information is used for acquiring target data from a network; the determining unit is used for determining the IP address of the target account according to the grade of the target account; and the sending unit is used for forwarding the internet surfing request information and the IP address of the target account to the first target BRAS equipment when the BRAS equipment accessed by the target account is the second BRAS equipment and the IP address of the target account is the private network IP address, so that the first target BRAS equipment converts the IP address of the target user into the public network IP address through the configured NAT44 board card, and acquires target data from the network by using the public network IP address of the target user and the internet surfing request information, wherein the first target BRAS equipment is one of the one or more first BRAS equipment.

Optionally, the determining unit is specifically configured to: when the grade of the target account is greater than or equal to a preset grade, determining that the IP address of the target account is a public network IP address; and when the grade of the target account is smaller than the preset grade, determining that the IP address of the target account is the private network IP address.

Optionally, the determining unit is further configured to: and when the BRAS equipment accessed by the target account is first BRAS equipment and the IP address of the target account is the private network IP address, determining the first target BRAS equipment according to the resource utilization rate of one or more first BRAS equipment.

Optionally, the determining unit is further configured to: determining a first target BRAS device according to the resource utilization rate of one or more first BRAS devices; when the BRAS equipment accessed by the target account is first BRAS equipment and the IP address of the target account is a private network IP address, the controller sends Internet surfing request information and the IP address of the target account to the BRAS equipment accessed by the target account, so that the BRAS equipment accessed by the target account acquires target data from a network according to the Internet surfing request information and the IP address.

Optionally, the determining unit is further configured to: when the IP address of the target account is the public network IP address, the controller sends the IP address of the target account and the internet surfing request information to the second target BRAS equipment, so that the second target BRAS equipment acquires target data from the network according to the IP address and the internet surfing request information; when the resource utilization rate of one or more BRAS devices is smaller than a first threshold value, the second target BRAS device is the BRAS device accessed by the target account; when the one or more BRAS devices have the device with the resource utilization rate higher than or equal to the first threshold value, the second target BRAS device is the BRAS device accessed by the target account or is the BRAS device with the lowest resource utilization rate in the one or more BRAS devices.

In a third aspect, the present application provides a controller comprising: a processor, a communication interface, and a memory; wherein the controller is configured to store one or more programs comprising computer-executable instructions that, when executed by the controller, cause the controller to perform the network address translation method of the first aspect and any of its various alternative implementations.

In a fourth aspect, the present application provides a computer readable storage medium having instructions stored therein which, when executed by a computer, perform the network address translation method of the first aspect and any of its various alternative implementations.

Based on the technical scheme provided by the embodiment of the application, by setting a brand new NAT44 architecture, the NAT44 architecture comprises a first BRAS device, a second BRAS device and a controller. The first BRAS device is configured with one or more NAT44 boards, the second BRAS device is not configured with NAT44 boards, and when the BRAS device accessed by the target account is the second BRAS device and the IP address of the target account is the private network IP address, the controller forwards the Internet surfing request information and the IP address of the target account to the first BRAS device, so that the first BRAS device can convert the IP address of the target user into the public network IP address through the configured NAT44 boards. That is, each BRAS device does not need to be configured with a NAT44 board while ensuring that the IP address of the account can be converted from a network address, so that the number of NAT44 boards is reduced, and the configuration cost of the NAT44 boards can be reduced.

Drawings

Fig. 1 is a schematic diagram of a network architecture according to an embodiment of the present application;

fig. 2 is a schematic diagram of another network architecture according to an embodiment of the present application;

fig. 3 is a schematic diagram of another network architecture according to an embodiment of the present application;

fig. 4 is a schematic structural diagram of a network address translation device according to an embodiment of the present application;

fig. 5 is a flow chart of a network address translation method according to an embodiment of the present application;

fig. 6 is a flowchart of a network address translation method according to an embodiment of the present application;

fig. 7 is a flowchart of a network address translation method according to an embodiment of the present application;

fig. 8a is a flowchart of a network address translation method according to an embodiment of the present application;

fig. 8b is a flowchart of a network address translation method according to an embodiment of the present application;

fig. 8c is a flowchart of a network address translation method according to an embodiment of the present application;

fig. 9 is a schematic structural diagram of a network address translation device according to an embodiment of the present application.

Detailed Description

The following describes in detail a network address translation method, device, apparatus and storage medium provided in the embodiments of the present application with reference to the accompanying drawings.

The term "and/or" is herein merely an association relationship describing an associated object, meaning that there may be three relationships, e.g., a and/or B, may represent: a exists alone, A and B exist together, and B exists alone.

The terms "first" and "second" and the like in the description and in the drawings are used for distinguishing between different objects or for distinguishing between different processes of the same object and not for describing a particular sequential order of objects.

Furthermore, references to the terms "comprising" and "having" and any variations thereof in the description of the present application are intended to cover a non-exclusive inclusion. For example, a process, method, system, article, or apparatus that comprises a list of steps or elements is not limited to only those listed but may optionally include other steps or elements not listed or inherent to such process, method, article, or apparatus.

It should be noted that, in the embodiments of the present application, words such as "exemplary" or "such as" are used to mean serving as an example, instance, or illustration. Any embodiment or design described herein as "exemplary" or "for example" should not be construed as preferred or advantageous over other embodiments or designs. Rather, the use of words such as "exemplary" or "such as" is intended to present related concepts in a concrete fashion.

In the description of the present application, unless otherwise indicated, the meaning of "a plurality" means two or more.

Before introducing embodiments of the present application, the terms in the embodiments of the present application are explained.

Private network IP address: refers to the IP address used by the intranet. Devices such as computers cannot access external networks through private network IP addresses.

In general, when a device such as a computer needs to access an external network, a private network IP address can be converted into a public network IP address by the NAT44 technology, and the external network is accessed using the public network IP address.

Public network IP address: refers to connecting an unreserved address on the internet over a public network. Computers and other devices may use public network IP addresses to directly access the internet, as well as other computers on the internet.

To ensure that a computer can access a network, it is necessary to assign a public IP address to the computer. But the number of public IP addresses is limited, resulting in a steadily decreasing number of available public IP addresses as the number of computers continues to increase.

For the above problems, the following two solutions can be adopted:

1. the NAT44 board card is configured centrally. The centralized configuration of the NAT44 board card is achieved by adopting a Core Router (CR) to mount a special NAT44 board card for IP address translation.

For example, fig. 1 shows a network architecture diagram for centrally configuring a NAT44 board card, including a plurality of backbone routers, a plurality of CR devices, a plurality of normal BRAS devices, a plurality of OLT devices, and a plurality of terminal devices in a backbone network. One backbone router may be connected to a plurality of CR devices. One CR device may be connected to multiple normal BRAS devices, each of which may be configured with one or more NAT44 cards. A common BRAS device may be connected to a plurality of optical line termination (optical line terminal, OLT) devices. One OLT apparatus may be connected to a plurality of terminal apparatuses.

Wherein backbone routers may be used to connect high-speed networks of multiple areas or regions.

CR devices may be used for data packet routing and forwarding.

The common BRAS device is used for distributing an IP address for the terminal device, the IP address can be a private network IP address or a public network IP address, and the terminal device can use the IP address to connect with a network. When the IP address is a private network IP address, the normal BRAS device may send the private network IP address to the CR device. Correspondingly, the CR equipment receives the private network IP address sent by the common BRAS equipment, and the CR equipment converts the private network IP address into the public network IP address by utilizing the NAT44 board card configured by the CR equipment.

The OLT device may be configured to relay the network access request message and the target data between the terminal device and the BRAS device.

Based on the network architecture diagram shown in fig. 1, the process of the terminal device acquiring target data from the network may include the following steps:

1. and responding to the internet surfing operation of the user, and sending an internet surfing request to the OLT equipment by the terminal equipment. Correspondingly, the OLT device receives the internet surfing request information from the terminal device.

Wherein the internet surfing request can be used for requesting to acquire target data. For example, the internet surfing request may include an identification of data, information of a user, an identification of a terminal device, and the like. The user's information may include the user's account, password, etc.

2. The OLT device forwards the internet surfing request to the accessed common BRAS device. Correspondingly, the common BRAS device receives the internet surfing request information from the OLT device.

3. The common BRAS equipment distributes a private network IP address for the terminal equipment and sends the private network IP address and internet surfing request information to CR equipment accessed by the terminal equipment. Correspondingly, the CR equipment receives the private network IP address and the internet surfing request information sent by the common BRAS equipment.

4. The CR equipment uses the configured NAT44 board card to convert the private network IP address into the public network IP address, and sends the public network IP address and the Internet surfing request information to the backbone network. Correspondingly, the backbone router receives the public network IP address and the internet surfing request information sent by the CR equipment.

5. And the backbone router acquires target data from the network according to the public network IP address.

6. The backbone router sends the target data and the public network IP address to the CR device. Correspondingly, the CR equipment receives the target data and the public network IP address sent by the backbone network.

7. The CR device converts the public network IP address into the private network IP address by using the configured NAT44 board card, and determines the terminal device and the data transmission path for receiving the target data.

It should be noted that, since the private network IP address corresponds to the terminal device, the CR device may determine the terminal device that receives the target data, and the data transmission path based on the private network IP address. As shown in fig. 1, the CR apparatus may transmit target data to the terminal apparatus through the following data transmission paths: CR equipment- & gtcommon BRAS equipment- & gtOLT equipment- & gtterminal equipment.

However, due to the limited number of CR ports, CR resources are limited, and the dedicated NAT44 card consumes a large amount of CR ports.

2. NAT44 board card is configured in a distributed manner. The distributed configuration of the NAT44 board card refers to that address translation is realized by a method of configuring the NAT44 board card on the BRAS device.

For example, FIG. 2 shows a network architecture diagram of a distributed configuration NAT44 board. The system comprises a plurality of backbone network routers, CR equipment, special BRAS equipment, OLT equipment and terminal equipment in a backbone network.

Wherein one backbone router may be connected to a plurality of CR devices. One CR device may be connected to a plurality of special BRAS devices, one special BRAS device may be connected to a plurality of OLT devices, and one OLT device may be connected to a plurality of terminal devices.

The special BRAS device may be a BRAS device with a NAT44 board card. The special BARS device may be used to assign a private network IP address or a public network IP address to the terminal device, and may also be used to translate IP addresses through a configured NAT44 card. A particular BRAS device may be configured with one or more NAT44 cards.

Based on the network architecture shown in fig. 2, the internet surfing request procedure of the terminal device may include the following steps:

Wherein the internet surfing request may be used to request acquisition of data. For example, the internet surfing request may include an identification of data, information of a user, an identification of a terminal device, and the like. The user's information may include the user's account, password, etc.

2. And the OLT equipment sends the internet surfing request information to the accessed special BRAS equipment. Correspondingly, the special BRAS equipment receives the internet surfing request information sent by the terminal equipment.

3. The special BRAS equipment distributes a private network IP address for the terminal equipment, converts the private network IP address into a public network IP address, and then sends the public network IP address and internet surfing request information to the CR equipment. Correspondingly, the CR equipment receives the public network IP address and the internet surfing request information sent by the special BRAS equipment.

4. The CR device sends a public network IP address and internet surfing request information to the backbone router. Correspondingly, the backbone router receives the public network IP address and the internet surfing request information sent by the CR equipment.

5. The backbone router forwards the public network IP address and the internet surfing request information to the Internet, and the Internet generates target data according to the internet surfing request information and sends the public network IP address and the target data to the backbone router. Correspondingly, the backbone router receives the public network IP address of the backbone router and the target data sent by the Internet.

6. The backbone router sends the target data to the CR device according to the public network IP address. Correspondingly, the CR equipment receives the target data and the public network IP address sent by the backbone network router.

7. The CR equipment sends target data and public network IP address to the special BRAS equipment. Correspondingly, the special BRAS equipment receives target data and a public network IP address sent by the CR equipment.

8. The special BRAS device converts the public network IP address into the private network IP address through the NAT44 board card, and determines the terminal device and the data transmission path for receiving the target data.

It should be noted that, since the private network IP address corresponds to the terminal device, the special BRAS device may determine the terminal device that receives the target data and the data transmission path based on the private network IP address. As shown in fig. 2, the special BRAS device may send target data to the terminal device through the following data transmission paths: special BRAS equipment- & gtolt equipment- & gtterminal equipment.

However, the distributed configuration needs to configure NAT44 boards on each BRAS device, and when the number of BRAS devices is large, the number of NAT44 boards needs to be configured is large, which is high in cost. In addition, the two above solutions may have the following problems: if there is a network access request of one BRAS device in a plurality of BRAS devices for receiving a large number of accounts within a preset period of time, and the network access requests of the accounts not received by other BRAS devices or the number of the received network access requests is small, the load of the plurality of BRAS devices may be unbalanced. For example, a BRAS device that receives internet requests for a large number of accounts runs at full load while other BRAS devices are in an idle state.

In view of this, as shown in fig. 3, embodiments of the present application provide a network architecture that may include a plurality of terminal devices 31, one or more first BRAS devices 32, one or more second BRAS devices 33, and a controller 34. The controller 34 is connected to a plurality of first BRAS devices 32 and one or more second BRAS devices 33.

A first BRAS device 32 and a second BRAS device 33 may both be connected to a plurality of terminal devices 31.

Wherein the first BRAS device 32 refers to a special BRAS device. The first BRAS device 32 may be configured to translate a private network IP address of the terminal device 31 to a public network IP address. When receiving data, the first BRAS device 32 may be configured to convert the public network IP address into a private network IP address, and then send the data to a terminal device that needs to receive the data according to the private network IP address.

The second BRAS device 33 is referred to as a normal BRAS device. The description of the second BRAS device may be referred to the above description.

The controller 34 may be configured to forward the internet surfing request of the terminal device 31 to the first BRAS device or the second BRAS device. For example, the controller 34 may be a server.

Further, as shown in fig. 3, the network architecture may further include OLT equipment 35, CR equipment 36, and backbone routers 37. The OLT apparatus 35 is communicatively connected to the terminal apparatus 31, the second BRAS apparatus 33, and the first BRAS apparatus 32, respectively. The CR device 36 may be communicatively coupled to the backbone router 37, the second BRAS device 33, and the first BRAS device 32. The controller 34 may be communicatively coupled to the second BRAS device 33 and the first BRAS device 32. For example, a wireless communication connection is possible.

Based on the network architecture shown in fig. 3, the embodiment of the application further provides a network address translation method, which includes: the controller receives internet access request information of a target account, wherein the internet access request information is used for acquiring target data from a network, and determines an IP address of the target account, and the IP address comprises a public network IP address and a private network IP address; when the BRAS equipment accessed by the target account is second BRAS equipment and the IP address of the target account is a private network IP address, the controller forwards the Internet surfing request information and the IP address of the target account to first target BRAS equipment, so that the first target BRAS equipment converts the IP address of the target user into a public network IP address through a configured NAT44 board card, and obtains target data by using the public network IP address of the target user, wherein the first target BRAS equipment is one of one or more first BRAS equipment.

It should be noted that fig. 3 is only an exemplary architecture, and the access system may further include other functional units besides the functional units shown in fig. 3, which is not limited in this embodiment of the present application.

In a specific implementation, each device in fig. 3 may adopt the constituent structure shown in fig. 4, or include the components shown in fig. 4. Fig. 4 is a schematic diagram of a network address translation device according to an embodiment of the present application, where the network address translation device includes a processor 401, a communication interface 402, a communication line 403, and a memory 404.

Processor 401 may be, among other things, a CPU, general purpose processor network processor (network processor, NP), digital signal processor (digital signal processing, DSP), microprocessor, microcontroller, programmable logic device (programmable logic device, PLD), or any combination thereof. The processor 401 may also be any other device having a processing function, such as a circuit, a device or a software unit, without limitation. In one example, processor 401 may include one or more CPUs, such as CPU0 and CPU1 in fig. 4.

Communication interface 402 for data processing with other devices or other data processing networks. The other data processing network may be an ethernet, a radio access network (radio access network, RAN) device, a wireless local area network (wireless local area networks, WLAN), etc. The communication interface may be a unit, a circuit, a communication interface or any device capable of performing data processing.

Communication lines 403 for communicating messages between the various components included in the access system.

Memory 404 for storing instructions. Wherein the instructions may be computer programs.

The memory 404 may be, but is not limited to, a read-only memory (ROM) or other type of static storage device capable of storing static messages and/or instructions, a random access memory (random access memory, RAM) or other type of dynamic storage device capable of storing messages and/or instructions, an electrically erasable programmable read-only memory (ally erasable programmable read-only memory, EEPROM), a compact disc read-only memory (compact disc read-only memory, CD-ROM) or other optical disc storage, optical disc storage (including compact disc, laser disc, optical disc, digital versatile disc, blu-ray disc, etc.), magnetic disc storage medium or other magnetic storage device, etc.

It is noted that the memory 404 may exist separately from the processor 401 or may be integrated with the processor 401. Memory 404 may be used to store instructions or program code or some network data, etc. The memory 404 may be located within the network address translation device or may be located outside the network address translation device, without limitation. The processor 401 is configured to execute instructions stored in the memory 404 to implement a network address translation method provided in the following embodiments of the present application.

As an alternative implementation, the network address translation device comprises a plurality of processors, e.g. in addition to the processor 401 in fig. 4, a processor 407 may be included.

As an alternative implementation, the network address translation apparatus further comprises an output device 405 and an input device 406. Illustratively, the input device 406 is a keyboard, mouse, microphone, or joystick device, and the output device 405 is a display screen, speaker (spaker), or the like.

In the embodiment of the application, the chip system may be formed by a chip, and may also include a chip and other discrete devices.

Further, actions, terms, etc. referred to between embodiments of the present application may be referred to each other without limitation. In the embodiment of the present application, the name of the message or the name of the parameter in the message, etc. interacted between the devices are only an example, and other names may also be adopted in the specific implementation, and are not limited.

As shown in fig. 5, the network address translation method provided in the embodiment of the present application may be applied to the network architecture shown in fig. 3, and the method may include: S501-S503.

S501, the controller receives internet surfing request information of a target account.

The target account may be an account of the login terminal device 31 in fig. 3. The controller may be the controller 34 in fig. 3, or may be a device, such as a chip, in the controller 34.

The internet surfing request information may be used to request acquisition of target data. For example, the internet surfing request information may include an identification of the target data, information of the target account, and the like. For example, the information of the target account may include an account number of the target account, a level of the target account, and the like. The rank of the account may be used to characterize the importance or priority of the target account. The higher the rank of an account, the higher the priority of the account. The rank of an account may be determined based on the amount of consumption of the account, e.g., the higher the amount of the account, the higher the rank of the account. For example, the rank of the account may include 1, etc., 2, etc., 3, etc., 4, etc., 5, etc. Of course, the target account may also include other levels, which are not limited in this application.

As a possible implementation manner, the terminal device sends the internet surfing request information to the accessed OLT device in response to a sending operation of the user. And after receiving the internet surfing request information, the OLT equipment forwards the internet surfing request information to the accessed BRAS equipment. And after receiving the internet surfing request information, the BRAS equipment forwards the internet surfing request information to an accessed controller. Correspondingly, the controller receives the internet surfing request information sent by the OLT equipment through the BRAS equipment.

S502, the controller determines the IP address of the target account.

The IP address comprises a public network IP address and a private network IP address.

As one possible implementation, when the internet surfing request information includes the target account, the controller may determine the IP address of the target account according to the level of the target account. For example, when the level of the target account is greater than or equal to a preset level, the controller determines that the IP address of the target account is a public network IP address; and when the grade of the target account is smaller than the preset grade, the controller determines that the IP address of the target account is the private network IP address. The preset level may be set as desired.

In one example, when the BRAS device accessed by the target account includes 100 public network IP addresses, and the number of accounts served by the BRAS device is 500, the controller determines to allocate a public network IP address to the account with the account level ranked front 100, and allocates a private network IP address to the account with the account level ranked back 400.

In yet another example, in combination with the example in S501, when the level of the target account is greater than or equal to level 3, the controller determines that the IP address of the target account is a public network IP address; when the high level of the target account is lower than level 3, the controller determines that the IP address of the target account is a private network IP address.

As yet another possible implementation manner, when the internet access request information includes an IP address corresponding to the target account, the controller may determine whether the IP address is a public network IP or a private network IP according to whether the IP address is located in a preset range. The preset range may be preconfigured for the controller.

For example, the preset range may refer to a range corresponding to the private network IP address. For example, the preset range may include: 10.0.0-10.255.255.255, 172.16.0.0-172.31.255.255, 192.168.0.0-192.168.255.255. When the IP address of the account is in the preset range, the IP address of the account is indicated to belong to the private network IP address; when the IP address of the account is not in the preset range, the IP address of the account is indicated to belong to the public network IP address.

For another example, the preset range may also refer to a range corresponding to a public network IP address. For example, the preset range may include: 10.255.255.255-172.16.0.0. When the IP address of the account is in the preset range, the IP address of the account is indicated to belong to the public network IP address; when the IP address of the account is not in the preset range, the IP address of the account is indicated to belong to the private network IP address.

For another example, the preset range may include a range corresponding to a private network IP address and a range corresponding to a public network IP address. When the IP address of the account is in the range corresponding to the private network IP address, the IP address of the account is indicated to belong to the private network IP address. When the IP address of the account is in the range corresponding to the public network IP address, the IP address of the account is indicated to belong to the public network IP address.

Further, when the IP address of the account does not belong to the range corresponding to the private network IP address or the public network IP address, the controller may reassign the IP address to the account. For example, the controller may determine the IP address of the account according to the level of the account, and specific reference may be made to the description of the foregoing possible embodiments, which is not repeated.

It should be noted that, in the state that the target account keeps logging in, that is, in the process that the terminal device sends multiple internet surfing requests, the terminal device is in a networking state. For example, there is no case of disconnection between the first-time internet surfing request information and the second-time internet surfing request information, and the second-time internet surfing request information includes the IP address allocated by the first-time internet surfing request information.

In the target account re-login state, namely, the condition that the target account disconnects the network exists between the first internet surfing request information and the second internet surfing request information, the second internet surfing request information does not comprise an IP address, and the controller is required to inquire the request to allocate the IP address.

And S503, when the IP address of the target account is a private network IP address and the BRAS equipment accessed by the target account is a second BRAS equipment, forwarding the Internet surfing request information and the IP address of the target account to the first target BRAS equipment by the controller so that the first target BRAS equipment converts the private network IP address of the target account into a public network IP address through the configured NAT44 board card, and acquiring target data from the network by using the public network IP address of the target account and the Internet surfing request information.

The second BRAS device may be the second BRAS device 33 in fig. 3, or may be a device, such as a chip, in the second BRAS device 33. The first BRAS device may be the first BRAS device 32 in fig. 3, or may be a device, such as a chip, in the first BRAS device 32.

The BRAS device accessed by the target account can be BRAS device in the area where the target account is located, the public network IP address of the target user is used for obtaining target data, and the first target BRAS device is one of one or more first BRAS devices. For example, the first target BRAS device may be any one of the one or more first BRAS devices, or may be the one with the lowest resource utilization rate in the one or more first BRAS devices. Specifically, reference may be made to the following description of S602.

Specifically, the process of S503 may include: and the controller sends the private network IP address of the target account and the Internet surfing request information to the first target BRAS device. Correspondingly, the first target BRAS device receives the private network IP address of the target account and the Internet surfing request information sent by the controller.

In a possible implementation manner, after receiving the internet access request information from the controller and the IP address of the target account, the first target BRAS device may convert the private network IP address of the target account into the public network IP address through the configured one or more NAT44 boards.

In one example, the first target BRAS device may determine a NAT44 board for network address translation based on the utilization of the configured one or more NAT44 boards. The utilization rate of the NAT44 card may be used to characterize the use of the NAT44 card.

For example, when the utilization rates of the one or more NAT44 cards are all higher than or equal to the preset threshold, the first target BRAS device may perform network address translation using the NAT44 card with the smallest utilization rate of the one or more NAT44 cards.

For another example, when the utilization rates of the one or more NAT44 cards are all lower than the preset threshold, the first target BRAS device may use any one NAT44 card of the one or more NAT44 cards to perform network address translation.

The method for converting the private network IP address of the target account into the public network IP address by the first target BRAS device through the configured NAT44 board card may refer to the prior art, and will not be described herein.

The method for the first target BR to acquire the target data from the network using the public network IP address of the target account and the internet access request information may refer to the process shown in fig. 1 or fig. 2, and will not be described again.

In a possible embodiment, as shown in fig. 6, the method provided in the embodiment of the present application may further include S601 described below.

S601, when the IP address of the target account is a private network IP address and the BRAS equipment accessed by the target account is a first BRAS equipment, the controller sends Internet surfing request information and the IP address of the target account to the BRAS equipment accessed by the target account, so that the BRAS equipment accessed by the target account acquires target data from a network according to the Internet surfing request information and the IP address.

The specific step of obtaining the target data from the network may refer to the above-mentioned internet surfing request process in the NAT44 board card, which is not described herein.

Based on the possible embodiment, when the BRAS device accessed by the target account can perform network address conversion and the IP address of the target account is the private network IP address, the controller can forward the IP address of the target account and the internet access request information to the BRAS device accessed by the target account, so that the controller can directly send the target data corresponding to the internet access request information to the BRAS device accessed by the target account when receiving the target data, and the controller does not need to send the target data to other BRAS devices again for performing the IP address conversion, thereby reducing the data forwarding times and saving the data transmission time.

In a possible embodiment, as shown in fig. 6 in conjunction with fig. 5, before S503, the method provided in the embodiment of the present application may further include S602.

And S602, the controller determines a first target BRAS device according to the resource utilization rate of one or more first BRAS devices.

The resource utilization rate of the BRAS device may be determined according to the number of internet surfing requests processed by the BRAS device in a unit time. For example, the number of internet surfing requests that can be processed by the BRAS device at most per second is 100, and if the number of internet surfing requests processed by the BRAS device per second in the current time period is 50, the resource utilization rate of the BRAS device in the current time period is 50%.

In one example, the first target BRAS device may be any one of the one or more first BRAS devices when the resource utilization of the one or more BRAS devices is below a first threshold. For example, the first target BRAS device may be a first BRAS device accessed by the target account.

The first threshold may be set as required, for example, may be 70%, and is not limited.

In yet another example, the first target BRAS device may be a least-utilized first BRAS device of the one or more first BRAS devices when the resource utilization of the one or more BRAS devices is greater than or equal to a first threshold.

In yet another example, when there is a BRAS device in the one or more BRAS devices that has a resource utilization that is greater than or equal to the first threshold, the first target BRAS device may be a BRAS device in the one or more first BRAS devices that has a resource utilization that is less than the first threshold.

It should be noted that, in the embodiment of the present application, the controller may further store a correspondence between the IP address of the target account and the target account. Thus, when the subsequent controller acquires the target data, the target account for receiving the data can be determined according to the corresponding relation, and the target data can be further sent to the terminal equipment logged in by the target account.

Further, when the IP address corresponding to the target account is a private network IP address, after receiving the target data and the public network IP address converted by the target account, the first target BRAS device may send the target data to the terminal device logged in by the target account through the following paths:

1. the first target BRAS device converts the public network IP address into a private network IP address of a target account, and sends target data and the private network IP address to the controller. Correspondingly, the controller receives target data and a private network IP address sent by the first target BRAS device.

2. And the controller sends the target data, the private network IP address and the corresponding relation between the target account and the private network IP address to BRAS equipment accessed by the target account according to the corresponding relation between the pre-stored target account and the private network IP address. The process of sending the target data to the terminal device by the BRAS device may refer to the process of receiving the target data of the target account in the NAT44 board card configured in the above manner, which is not described in detail.

In a possible embodiment, as shown in fig. 7, the method provided in the embodiment of the present application may further include the following S701:

and S701, when the IP address of the target account is the public network IP address, the controller sends the IP address of the target account and the internet surfing request information to the second target BRAS device, so that the second target BRAS device acquires target data from the network according to the IP address and the internet surfing request information.

The second target BRAS device may be a BRAS device accessed by the target account or a BRAS device with the lowest resource utilization rate in one or more BRAS devices.

In one example, when the resource utilization of one or more BRAS devices is less than a first threshold, the second target BRAS device is a BRAS device accessed by the target account; when there is a device with a resource utilization rate higher than or equal to the first threshold value in the one or more BRAS devices, the second target BRAS device may be a BRAS device accessed by the target account or a BRAS device with a lowest resource utilization rate in the one or more BRAS devices.

For example, taking the first threshold as 70%, when the resource utilization of the plurality of BRAS devices is less than 70%, the second target BRAS device may be a BRAS device accessed by the target account.

For another example, when the resource utilization of the plurality of BRAS devices is greater than or equal to 70%, the second target BRAS device is the second BRAS device with the lowest resource utilization.

For another example, when the resource utilization of the plurality of second BRAS devices is less than 70%, and there is a first BRAS device having a resource utilization of less than 70% in the one or more first BRAS devices, the controller determines that the second target BRAS device is the second BRAS device having the lowest resource utilization.

For another example, when the resource utilization of the one or more second BRAS devices is less than 70% and the resource utilization of the one or more first BRAS devices is greater than or equal to 70%, the controller determines that the second target BRAS device is the second BRAS device with the lowest resource utilization.

For another example, when there is a second BRAS device with a resource utilization rate higher than or equal to 70% in the one or more second BRAS devices, and there is a second BRAS device with a resource utilization rate lower than 70% in the one or more first BRAS devices, the controller determines that the second target BRAS device is the second BRAS device with the lowest resource utilization rate.

In one possible embodiment, the controller allocates BRAS devices to target accounts according to different scenarios.

Wherein, different scenarios may refer to different utilization rates of a plurality of BRAS devices. For example, the controller determines scenario one, scenario two, scenario three based on the utilization of one or more BRAS devices.

Specifically, the scenario one may mean that the resource utilization rates of one or more BRAS devices are all lower than a preset threshold.

The second scenario may mean that the resource utilization rates of the one or more second BRAS devices are all higher than or equal to a preset threshold, and the resource utilization rate of the one or more first BRAS devices is lower than the preset threshold.

The third scenario may refer to that the processing capacity utilization rate of one or more BRAS devices is higher than or equal to a preset threshold of utilization rate, or the utilization rate of one or more second BRAS devices is lower than the preset threshold, and a first BRAS device with the utilization rate lower than the preset threshold of utilization rate exists in one or more first BRAS devices; or the utilization rate of one or more second BRAS devices is lower than a preset threshold, and the utilization rate of one or more first BRAS devices is higher than or equal to the preset threshold; or, there are second BRAS devices with the utilization rate higher than or equal to the preset threshold of the utilization rate in the one or more second BRAS devices, and there are second BRAS devices with the utilization rate lower than the preset threshold of the utilization rate in the one or more first BRAS devices.

The following describes a method for allocating a BRAS device to a target account by using the first scenario to the third scenario as an example.

As shown in fig. 8a, scenario one: the method of allocating BRAS devices to target accounts may include the following S801-S805:

s801, the controller determines whether the IP address of the target account is a public network IP address.

S802, when the IP address of the target account is the public network IP address, the controller determines that the target account is accessed to the BRAS equipment accessed by the target account.

And S803, when the IP address of the target account is not the public network IP address, the controller determines whether the BRAS device accessed by the target account is the first BRAS device.

S804, when the BRAS device accessed by the target account is the first BRAS device, the controller does not change the BRAS device accessed by the target account.

And S805, when the BRAS device accessed by the target account is not the first BRAS device, the controller allocates one or more first BRAS devices to the target account.

As shown in fig. 8b, scenario two: the method for allocating BRAS devices to target accounts may include the following S806:

and S806, the controller allocates the first BRAS device with the lowest resource utilization rate for the target account.

As shown in fig. 8c, the method for allocating BRAS devices to target accounts in scenario three may include the following S807-S809:

S807, the controller determines whether the IP address of the target account is a public network IP address.

And S808, when the IP address of the target account is the public network IP address, the controller allocates a second BRAS device with the lowest resource utilization rate for the target account.

S809, when the IP address of the target account is not the public network IP address, the controller allocates a first BRAS device with the lowest resource utilization rate for the target account.

Therefore, the controller can be divided into a plurality of scenes according to the resource utilization rate of a plurality of BRAS devices, and the controller can conveniently and accurately allocate the BRAS devices for the target account according to the allocation method corresponding to each scene.

The embodiment of the present application may perform the division of the functional units or the functional units on the server according to the above method example, for example, each functional unit or the functional unit may be divided corresponding to each function, or two or more functions may be integrated in two units. The integrated units may be implemented in hardware, or in software or functional units. In this embodiment, the division of the units or the units is schematic, which is merely a logic function division, and there may be another division manner when the division is actually performed.

Fig. 9 shows a schematic diagram of one possible configuration of the network address translation device involved in the above embodiment. As shown in fig. 9, the network address translation device 90 includes: a receiving unit 901, a determining unit 902, and a transmitting unit 903.

The receiving unit 901 is configured to receive internet surfing request information of a target account, where the internet surfing request information includes a level of the target account. For example, as shown in fig. 5, the reception unit 901 may be used to perform S501.

A determining unit 902, configured to determine an IP address of the target account. For example, as shown in fig. 5, the determination unit 902 may be used to perform S502.

The sending unit 903 is configured to forward, when the BRAS device accessed by the target account is a second BRAS device and the IP address of the target account is a private network IP address, the internet surfing request information and the IP address of the target account to a first target BRAS device, so that the first target BRAS device converts the IP address of the target user into a public network IP address through a configured NAT44 board card, and obtains the target data from the network by using the public network IP address of the target user and the internet surfing request information, where the first target BRAS device is one of one or more first BRAS devices. For example, as shown in fig. 5, the transmission unit 903 may be used to perform S503.

In a possible design, the determining unit 902 is specifically configured to: when the grade of the target account is greater than or equal to a preset grade, determining that the IP address of the target account is a public network IP address; and when the grade of the target account is smaller than the preset grade, determining that the IP address of the target account is the private network IP address.

In a possible design, the sending unit 903 is further configured to: when the BRAS equipment accessed by the target account is first BRAS equipment and the IP address of the target account is a private network IP address, the Internet surfing request information and the IP address of the target account are sent to the BRAS equipment accessed by the target account, so that the BRAS equipment accessed by the target account acquires target data from a network according to the Internet surfing request information and the IP address. For example, as shown in fig. 6, the transmission unit 903 may be used to perform S601.

In a possible design, the determining unit 902 is specifically configured to: determining a first target BRAS device according to the resource utilization rate of the one or more first BRAS devices, wherein when the resource utilization rate of the one or more BRAS devices is lower than a first threshold value, the first target BRAS device is determined to be any one of the one or more first BRAS devices; and when the BRAS devices with the resource utilization rate higher than or equal to the first threshold value exist in the one or more BRAS devices, determining that the first target BRAS device is a BRAS device with the resource utilization rate lower than the first threshold value in the one or more first BRAS devices.

Optionally, the determining unit 902 is further configured to: the IP address of the target account and the internet surfing request information are sent to the second target BRAS equipment, so that the second target BRAS equipment acquires target data from a network according to the IP address and the internet surfing request information; the second target BRAS device is the BRAS device accessed by the target account or the BRAS device with the lowest resource utilization rate in one or more BRAS devices. For example, as shown in fig. 7, the determination unit 902 may be used to perform S701.

From the foregoing description of the embodiments, it will be apparent to those skilled in the art that, for convenience and brevity of description, only the above-described division of functional units is illustrated, and in practical application, the above-described functional network address conversion may be implemented by different functional units, that is, the internal structure of the apparatus is divided into different functional units to implement all or part of the functions described above. The specific working processes of the above-described systems, devices and units may refer to the corresponding processes in the foregoing method embodiments, which are not described herein.

The present application provides a computer program product comprising instructions which, when executed on a computer, cause the computer to perform the network address translation method of the method embodiments described above.

The embodiment of the application further provides a computer readable storage medium, in which instructions are stored, and when the network address translation device executes the instructions, the network address translation device executes each step executed by the network address translation device in the method flow shown in the method embodiment.

The computer readable storage medium may be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or a combination of any of the foregoing. More specific examples (a non-exhaustive list) of the computer-readable storage medium would include the following: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a random access Memory (Random Access Memory, RAM), a Read-Only Memory (ROM), an erasable programmable Read-Only Memory (Erasable Programmable Read Only Memory, EPROM), a register, a hard disk, an optical fiber, a portable compact disc Read-Only Memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing, or any other form of computer readable storage medium known in the art. An exemplary storage medium is coupled to the processor such the processor can read information from, and write information to, the storage medium. In the alternative, the storage medium may be integral to the processor. The processor and the storage medium may reside in an application specific integrated circuit (Application Specific Integrated Circuit, ASIC). In the context of the present application, a computer-readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device.

The foregoing is merely a specific embodiment of the present application, but the protection scope of the present application is not limited thereto, and any changes or substitutions within the technical scope of the present disclosure should be covered in the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the protection scope of the claims.

Claims

1. A network address translation method, applied to a network address translation NAT44 architecture, where the NAT44 architecture includes a plurality of broadband access server BRAS devices and a controller communicatively connected to the plurality of BRAS devices, where the plurality of BRAS devices includes one or more first BRAS devices configured with one or more NAT44 boards and one or more second BRAS devices not configured with NAT44 boards, and where the NAT44 boards are configured to translate private network internet protocol IP addresses to public network IP addresses, the method comprising:

the controller receives internet surfing request information of a target account, wherein the internet surfing request information is used for acquiring target data from a network;

when the BRAS device accessed by the target account is the second BRAS device and the IP address of the target account is a private network IP address, the controller forwards the internet surfing request information and the IP address of the target account to a first target BRAS device, so that the first target BRAS device converts the IP address of the target account into a public network IP address through a configured NAT44 board card, and obtains the target data from a network by using the public network IP address of the target account and the internet surfing request information, wherein the first target BRAS device is one of the one or more first BRAS devices.

2. The method according to claim 1, wherein the method further comprises:

the controller determines a level of the target account;

and the controller determines the IP address of the target account according to the grade of the target account.

3. The method of claim 2, wherein the controller determining the IP address of the target account based on the level of the target account comprises:

when the grade of the target account is greater than or equal to a preset grade, the controller determines that the IP address of the target account is a public network IP address;

and when the grade of the target account is smaller than the preset grade, the controller determines that the IP address of the target account is a private network IP address.

4. A method according to any one of claims 1-3, wherein the method further comprises:

when the BRAS device accessed by the target account is the first BRAS device and the IP address of the target account is a private network IP address, the controller sends the internet access request information and the IP address of the target account to the first BRAS device accessed by the target account, so that the first BRAS device accessed by the target account converts the IP address into a public network IP address, and obtains the target data from a network according to the internet access request information and the public network IP address.

5. A method according to any one of claims 1-3, wherein the method further comprises:

the controller determines the first target BRAS device according to the resource utilization rate of the one or more first BRAS devices;

when the resource utilization rates of the one or more first BRAS devices are all lower than a first threshold value, the first target BRAS device is any one of the one or more first BRAS devices;

when a first BRAS device with the resource utilization rate higher than or equal to the first threshold exists in the one or more first BRAS devices, the first target BRAS device is a first BRAS device with the resource utilization rate lower than the first threshold in the one or more first BRAS devices.

6. A method according to any one of claims 1-3, wherein the method further comprises:

when the IP address of the target account is a public network IP address, the controller sends the IP address of the target account and the internet surfing request information to second target BRAS equipment, so that the second target BRAS equipment acquires the target data from a network according to the IP address and the internet surfing request information;

When the resource utilization rates of the plurality of BRAS devices are all smaller than a first threshold, the second target BRAS device is the BRAS device accessed by the target account;

when the plurality of BRAS devices have BRAS devices with the resource utilization rate higher than or equal to the first threshold, the second target BRAS device is the BRAS device accessed by the target account or is the second BRAS device with the lowest resource utilization rate in the plurality of BRAS devices.

7. The network address translation device is characterized by being applied to a network address translation NAT44 architecture, wherein the NAT44 architecture comprises a plurality of broadband access server BRAS devices and a controller in communication connection with the plurality of BRAS devices, the plurality of BRAS devices comprise one or more first BRAS devices and one or more second BRAS devices, the first BRAS devices are configured with one or more NAT44 boards, the second BRAS devices are not configured with NAT44 boards, and the NAT44 boards are used for translating private network internet protocol IP addresses into public network IP addresses, and the network address translation device comprises: a receiving unit, a determining unit and a transmitting unit;

the receiving unit is used for receiving internet surfing request information of a target account, and the internet surfing request information is used for acquiring target data from a network;

The sending unit is configured to forward the internet surfing request information and the IP address of the target account to a first target BRAS device when the BRAS device accessed by the target account is the second BRAS device and the IP address of the target account is a private network IP address, so that the first target BRAS device converts the IP address of the target account into a public network IP address through a configured NAT44 board card, and obtains the target data from a network by using the public network IP address of the target account and the internet surfing request information, where the first target BRAS device is one of the one or more first BRAS devices.

8. The apparatus of claim 7, wherein the apparatus further comprises: a determining unit for:

determining a level of the target account;

and determining the IP address of the target account according to the grade of the target account.

9. The apparatus according to claim 8, wherein the determining unit is specifically configured to:

when the grade of the target account is greater than or equal to a preset grade, determining that the IP address of the target account is a public network IP address;

and when the grade of the target account is smaller than the preset grade, determining that the IP address of the target account is a private network IP address.

10. The apparatus according to any of claims 7-9, wherein the sending unit is further configured to:

when the BRAS device accessed by the target account is the first BRAS device and the IP address of the target account is a private network IP address, the controller sends the internet surfing request information and the IP address of the target account to the BRAS device accessed by the target account, so that the BRAS device accessed by the target account converts the IP address into a public network IP address, and obtains the target data from a network according to the internet surfing request information and the public network IP address.

11. The apparatus according to any one of claims 7-9, wherein the determining unit is further configured to:

determining the first target BRAS equipment according to the resource utilization rate of the one or more first BRAS equipment;

when the resource utilization rates of the one or more BRAS devices are all lower than a first threshold value, determining that the first target BRAS device is any one of the one or more first BRAS devices;

and when the BRAS equipment with the resource utilization rate higher than or equal to the first threshold value exists in the one or more BRAS equipment, determining that the first target BRAS equipment is BRAS equipment with the resource utilization rate lower than the first threshold value in the one or more first BRAS equipment.

12. The apparatus according to any one of claims 7-9, wherein the determining unit is further configured to:

when the plurality of BRAS devices have BRAS devices with the resource utilization rate higher than or equal to the first threshold, the second target BRAS device is the BRAS device accessed by the target account or is the BRAS device with the lowest resource utilization rate in the plurality of BRAS devices.

13. A controller, the controller comprising: a processor, a communication interface, and a memory; wherein the memory is configured to store one or more programs, the one or more programs comprising computer-executable instructions that, when executed by the controller, cause the controller to perform the method of any of claims 1-6.

14. A computer readable storage medium storing one or more programs, wherein the one or more programs comprise instructions, which when executed by a computer, cause the computer to perform the method of any of claims 1-6.