CN106936615A - A kind of message processing method and device - Google Patents
A kind of message processing method and device Download PDFInfo
- Publication number
- CN106936615A CN106936615A CN201511030374.9A CN201511030374A CN106936615A CN 106936615 A CN106936615 A CN 106936615A CN 201511030374 A CN201511030374 A CN 201511030374A CN 106936615 A CN106936615 A CN 106936615A
- Authority
- CN
- China
- Prior art keywords
- network element
- address
- network
- gateway
- common
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/02—Standardisation; Integration
- H04L41/0246—Exchanging or transporting network management information using the Internet; Embedding network management web servers in network elements; Web-services-based protocols
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L61/00—Network arrangements, protocols or services for addressing or naming
- H04L61/09—Mapping addresses
- H04L61/25—Mapping addresses of the same type
- H04L61/2503—Translation of Internet protocol [IP] addresses
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
- H04L63/0485—Networking architectures for enhanced packet encryption processing, e.g. offloading of IPsec packet processing or efficient security association look-up
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/16—Implementing security features at a particular protocol layer
- H04L63/166—Implementing security features at a particular protocol layer at the transport layer
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computing Systems (AREA)
- Computer Hardware Design (AREA)
- General Engineering & Computer Science (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
Description
技术领域technical field
本发明涉及通讯技术领域，尤其涉及一种数据通讯网络的报文处理方法及装置。The invention relates to the technical field of communication, in particular to a message processing method and device for a data communication network.
背景技术Background technique
目前采用数据通信网络(Data Communication Network，DCN)系统来为网络设备提供管理接入、管理控制信息的通信功能，从而可以在网管中完成对各个设备的远程部署和管理。现有的网关网元基于网络协议层实现TCP报文NAT转发功能，网关网元分配特殊端口号给普通网元，该端口号与该普通网元的内网IP地址对应。在管理普通网元时，在TCP三次握手过程中，网管按照网关网元分配特殊端口号规则进行计算，获取普通网元的目的端口号，此时网关网元接收到网管和普通网元的TCP协议链接请求，根据网管下发命令中包含的目的端口号按照分配特殊端口的规则计算获得特殊端口号，重新更改TCP协议的目的端口为该普通网元特殊端口号，目的IP地址为普通网元的IP地址，从而达到TCP协议报文的转发。Currently, a Data Communication Network (DCN) system is used to provide communication functions for network devices to manage access and manage control information, so that remote deployment and management of each device can be completed in the network management. The existing gateway network element implements the TCP message NAT forwarding function based on the network protocol layer, and the gateway network element assigns a special port number to the common network element, and the port number corresponds to the internal network IP address of the common network element. When managing common network elements, during the TCP three-way handshake process, the network management system calculates according to the rules for assigning special port numbers to gateway network elements, and obtains the destination port numbers of common network elements. Protocol link request, according to the destination port number contained in the command issued by the network management, the special port number is calculated according to the rules for assigning special ports, and the destination port of the TCP protocol is changed to the special port number of the common network element, and the destination IP address is the common network element IP address, so as to achieve the forwarding of TCP protocol packets.
通过上述描述可以发现，现有的网关网元在实现TCP报文NAT转发时，管理一个普通网元需要占用两个端口号，若管理多个普通网元时，会占用大量的端口资源，造成端口资源浪费。From the above description, it can be found that when the existing gateway network element implements TCP packet NAT forwarding, it needs to occupy two port numbers to manage a common network element. If it manages multiple common network elements, it will occupy a large number of port resources, resulting in Port resources are wasted.
发明内容Contents of the invention
有鉴于此，本发明的实施例期望通过提出一种报文处理方法及装置，以克服网关网元在转发网管下发给普通网元报文时造成的大量占用端口资源的问题。In view of this, the embodiments of the present invention expect to propose a message processing method and device to overcome the problem of a large number of port resources being occupied when the gateway network element forwards the message sent by the network management to the common network element.
为了实现上述发明目的，本发明的技术方案是这样实现的：In order to realize the above-mentioned purpose of the invention, the technical solution of the present invention is achieved in that way:
本发明的实施例提出一种报文转发方法，网关网元根据接收到的网管下发的TCP报文中的普通网元ID从其数据库中读取与所述普通网元网元ID对应的内网IP地址，根据所述内网IP地址将TCP报文中的目的IP地址修改为所述普通网元的内网IP地址，将所述TCP报文转发给所述普通网元。The embodiment of the present invention proposes a message forwarding method. The gateway network element reads the information corresponding to the common network element ID from its database according to the normal network element ID in the TCP message sent by the network management. Intranet IP address, modifying the destination IP address in the TCP message to the internal network IP address of the common network element according to the internal network IP address, and forwarding the TCP message to the common network element.
进一步包括如下步骤：所述网关网元将接收到的所述普通网元发送的TCP报文中的目的IP地址修改为网管的IP地址，将报文返回给所述网管。It further includes the following steps: the gateway network element modifies the destination IP address in the received TCP message sent by the common network element to the IP address of the network manager, and returns the message to the network manager.
进一步包括如下步骤：所述网关网元接收到的网管下发的TCP报文采用SSL协议进行加密。The method further includes the following steps: the TCP message issued by the network manager received by the gateway network element is encrypted by using the SSL protocol.
进一步的，所述网关网元在接收网管下发的TCP报文之前，还包括如下步骤：通过网管配置网关网元的工作模式为网关网元模式，设置所述网关网元需要管理的普通网元的内网IP地址和网元ID；所述网关网元将通过TCP报文接收网管下发的普通网元的内网IP地址和网元ID存入数据库中。Further, before the gateway network element receives the TCP message issued by the network management, it also includes the following steps: configure the working mode of the gateway network element as the gateway network element mode through the network management, and set the normal network that the gateway network element needs to manage. The internal network IP address and network element ID of the network element; the gateway network element will receive the internal network IP address and network element ID of the common network element sent by the network management through the TCP message and store it in the database.
进一步的，还包括如下步骤：若通过网管配置网关网元的工作模式为普通网元模式，则所述网关网元正常应答网管。Further, the method further includes the following step: if the working mode of the gateway network element is configured as a normal network element mode through the network management, the gateway network element normally responds to the network management.
本发明通过网管直接配置网关网元，并在TCP协议报文的数据部分增加网元ID字段，利用普通网元的内网IP地址和网元ID的对应关系，实现网关网元对网管下发给普通网元报文的转发，克服了现有的网关网元进行NAT报文转发大量占用端口资源的问题，节省了端口资源，同时，本发明利用SSL协议对在网管和网关网元之间传输的报文进行加密，提高了网关网元和网管之间报文传输的可靠性，即网关网元模式下应用层的安全性。The invention directly configures the gateway network element through the network management, adds the network element ID field in the data part of the TCP protocol message, and uses the corresponding relationship between the internal network IP address of the common network element and the network element ID to realize the delivery of the gateway network element to the network management The forwarding of messages to common network elements overcomes the problem that a large number of port resources are occupied by NAT message forwarding by existing gateway network elements, and saves port resources. At the same time, the present invention utilizes the SSL protocol to connect The transmitted message is encrypted, which improves the reliability of message transmission between the gateway network element and the network management, that is, the security of the application layer in the gateway network element mode.
附图说明Description of drawings
图1为本发明实施例提供的DCN系统架构图；FIG. 1 is a DCN system architecture diagram provided by an embodiment of the present invention;
图2为本发明实施例提供的报文转发流程示意图；FIG. 2 is a schematic diagram of a packet forwarding process provided by an embodiment of the present invention;
图3为本发明实施例提供的一种报文转发实例的具体过程示意图。FIG. 3 is a schematic diagram of a specific process of a message forwarding example provided by an embodiment of the present invention.
具体实施方式detailed description
下面将结合本发明实施例中的附图，对本发明实施例中的技术方案进行清楚、完整地描述。The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the drawings in the embodiments of the present invention.
如图1所示的DCN网络系统架构，涉及网管(EMS)，网关网元(GNE)和普通网元(NE)，所述网管、网关网元和普通网元及它们之间的连接线路或网络构成DCN系统，其中，所述网管与网关网元实现连接且互相之间可以直接访问；网关网元与多个与之直接或者间接连接的普通网元构成一个管理域，因此网关网元在通讯过程中实现普通网元与网管之间的报文转发。The DCN network system architecture as shown in Figure 1 involves network management (EMS), gateway network element (GNE) and common network element (NE), and the connection lines or The network constitutes a DCN system, wherein the network management and the gateway network element are connected and can directly access each other; the gateway network element and a plurality of ordinary network elements directly or indirectly connected to it form a management domain, so the gateway network element is in During the communication process, the message forwarding between common network elements and network management is realized.
在所述DCN系统中，所述网管，提供人机交互界面，对网关网元和普通网元进行配置和管理，网管作为TCP/IP的客户端和所有普通网元进行建链。在完成和普通网元的建链后，网管进行网关网元的配置，网管选择任一普通网元，将所述普通网元的工作模式修改为网关网元，配置所述网关网元的接入IP地址，设置所述网关网元需要管理的所有普通网元的内网IP地址和网元ID，然后网管将所述网关网元的工作模式和接入IP地址，以及所述网关网元需要管理的所有普通网元的内网IP地址和网元ID通过TCP报文发给网关网元，网关网元接收到上述信息后，将所述信息保存到数据库中。In the DCN system, the network manager provides a human-computer interaction interface to configure and manage gateway network elements and common network elements, and the network manager acts as a TCP/IP client to establish links with all common network elements. After completing the link establishment with the common network element, the network manager configures the gateway network element. The network management selects any common network element, modifies the working mode of the common network element to a gateway network element, and configures the connection of the gateway network element. Enter the IP address, set the intranet IP address and network element ID of all common network elements that the gateway network element needs to manage, and then the network management will set the working mode and access IP address of the gateway network element, and the gateway network element The intranet IP addresses and network element IDs of all common network elements that need to be managed are sent to the gateway network element through TCP messages, and after receiving the above information, the gateway network element saves the information in the database.
普通网元，作为TCP/IP的服务端可以与网管或网关网元进行建链。Ordinary NEs, as TCP/IP servers, can establish links with network management or gateway NEs.
网关网元，可以与网管或普通网元进行建链，作为TCP/IP的服务端和网管建链，建立SSL会话，对与网管之间传输的报文进行加密；作为TCP/IP的客户端和普通网元建链，建立SSL会话。所述网关网元根据接收到的网管下发的TCP报文中的普通网元ID从数据库中读取与所述普通网元网元ID对应的内网IP地址，根据所述内网IP地址将所述网管下发TCP报文转发给所述普通网元。The gateway network element can establish a link with the network management or ordinary network elements, establish a link with the network management as a TCP/IP server, establish an SSL session, and encrypt messages transmitted between the network management; as a TCP/IP client Establish a link with common NEs and establish an SSL session. The gateway network element reads the internal network IP address corresponding to the common network element network element ID from the database according to the common network element ID in the received TCP message sent by the network management, and according to the internal network IP address Forwarding the TCP message delivered by the network manager to the common network element.
通常TCP报文包括TCP报文头和数据两部分，本发明在TCP报文的数据部分增加了一字段，4字节的网元ID和4字节的网管ID。Usually a TCP message includes a TCP message header and data. The present invention adds a field to the data part of the TCP message, a 4-byte network element ID and a 4-byte network management ID.
如图2所示为本发明实施例，网关网元将网管下发的报文转发给普通网元的流程图。FIG. 2 is a flow chart of the gateway network element forwarding the message sent by the network management to the common network element according to the embodiment of the present invention.
S1，网管作为TCP/IP的客户端和所有普通网元进行建链。S1, the network management as a TCP/IP client establishes links with all common network elements.
S2，网管对网关网元进行信息配置。S2, the network management configures information on the gateway network element.
所述信息配置包括如下步骤：网管选取任一普通网元，将所述普通网元的工作模式修改为网关网元，配置所述网关网元的接入IP地址，添加所述网关网元需要管理的普通网元的内网IP地址和网元ID。The information configuration includes the following steps: the network manager selects any common network element, modifies the working mode of the common network element to a gateway network element, configures the access IP address of the gateway network element, and adds the required network element of the gateway network element. Intranet IP address and NE ID of common NEs to be managed.
S3，网管通过TCP报文将所述网关网元的工作模式、接入IP地址、普通网元的内网IP地址和网元ID发送给网关网元，所述网关网元将接收到的前述信息保存到数据库中。S3, the network management sends the working mode of the gateway network element, the access IP address, the internal network IP address of the common network element and the network element ID to the gateway network element through the TCP message, and the gateway network element will receive the aforementioned The information is saved to the database.
S4，网管利用SSL协议对下发给普通网元的TCP报文进行加密。S4. The network manager encrypts the TCP message sent to the common network element by using the SSL protocol.
S5，网关网元对接收到的TCP报文利用SSL协议进行解密。S5. The gateway network element decrypts the received TCP message using the SSL protocol.
S6，网关网元读取数据库中的配置信息，获取工作模式，若是普通网元模式，则正常应答网管，若是网关网元模式，则判断接收到的TCP报文中的网元ID是否为当前网元的网元ID，若是，网关网元对所述TCP报文进行处理，若不是，则该网元ID为普通网元的网元ID，根据所述网元ID在数据库中查找对应的普通网元的内网IP地址，将TCP报文中的目的IP地址修改为所述普通网元的内网IP地址，并将所述TCP报文转发给所述普通网元。S6. The gateway network element reads the configuration information in the database to obtain the working mode. If it is in the normal network element mode, it will respond to the network management normally. If it is in the gateway network element mode, it will be judged whether the network element ID in the received TCP message is the current The network element ID of the network element, if so, the gateway network element processes the TCP message, if not, the network element ID is the network element ID of a common network element, and the corresponding network element ID is searched in the database according to the network element ID. The intranet IP address of the ordinary network element, modifying the destination IP address in the TCP message to the intranet IP address of the ordinary network element, and forwarding the TCP message to the ordinary network element.
S7，普通网元接收到TCP报文后，将报文中目的IP地址修改为网关网元的IP地址，将报文发送给网关网元。S7. After receiving the TCP message, the common network element modifies the destination IP address in the message to the IP address of the gateway network element, and sends the message to the gateway network element.
S8，网关网元收到普通网元上报的TCP报文，将报文中的目的IP地址修改为网管的IP地址，将报文返回给网管。S8, the gateway network element receives the TCP message reported by the common network element, modifies the destination IP address in the message to the IP address of the network management, and returns the message to the network management.
如图3所示，网管的IP地址设置为10.1.1.1网管ID设置为1，网关网元的IP地址设置为10.1.1.2，网元ID设置为2，普通网元的IP地址设置为2.2.2.2，网元ID设置为3。As shown in Figure 3, the IP address of the network management system is set to 10.1.1.1, the network management ID is set to 1, the IP address of the gateway network element is set to 10.1.1.2, the network element ID is set to 2, and the IP address of the common network element is set to 2.2. 2.2, the network element ID is set to 3.
网管下发利用SSL协议加密的TCP报文给网关网元，网关网元对接收到TCP报文进行解密处理，获得该报文的源IP地址是网管的IP地址(10.1.1.1),目的IP地址是网关网元的IP地址(10.1.1.2),网元ID是3，网管ID是1，判断接收到的TCP报文中的网元ID不是当前网关网元的ID，网关网元接收到所述TCP报文后进行处理，此时TCP报文的源IP地址是网管的IP地址(10.1.1.1),目的IP地址是普通网元的IP地址(2.2.2.2),网元ID是3，网管ID是1，所述网关网元将所述TCP报文转发给普通网元。接收到TCP报文后，普通网元对所述TCP报文处理，此时TCP报文的源IP地址是普通网元的IP地址(2.2.2.2),目的IP地址是网关网元的IP地址(10.1.1.2),网元ID是3，网管ID是1，将所述TCP报文发给网关网元，所述网关网元对TCP报文处理，此时TCP报文的源IP地址是普通网元的IP地址(2.2.2.2),目的IP地址是网管的IP地址(10.1.1.1),网元ID是3，网管ID是1，将所述TCP报文转发给网管。The network management sends the TCP message encrypted by the SSL protocol to the gateway network element, and the gateway network element decrypts the received TCP message to obtain the source IP address of the message is the IP address of the network management (10.1.1.1), and the destination IP The address is the IP address of the gateway NE (10.1.1.2), the NE ID is 3, and the network management ID is 1. If it is judged that the NE ID in the received TCP message is not the ID of the current gateway NE, the gateway NE receives the Described TCP message is processed after, and the source IP address of TCP message this moment is the IP address (10.1.1.1) of network management, and destination IP address is the IP address (2.2.2.2) of common network element, and network element ID is 3 , the network management ID is 1, and the gateway network element forwards the TCP message to a common network element. After receiving the TCP message, the ordinary network element processes the TCP message. At this time, the source IP address of the TCP message is the IP address of the ordinary network element (2.2.2.2), and the destination IP address is the IP address of the gateway network element (10.1.1.2), the network element ID is 3, and the network management ID is 1, and the TCP message is sent to the gateway network element, and the gateway network element processes the TCP message. At this time, the source IP address of the TCP message is The IP address (2.2.2.2) of the common network element, the destination IP address is the IP address (10.1.1.1) of the network management, the network element ID is 3, and the network management ID is 1, and the TCP message is forwarded to the network management.
以上所述，仅为本发明的具体实施方式，但本发明的保护范围并不局限于此，任何熟悉本技术领域的技术人员在本发明揭露的技术范围内，可轻易想到变化或替换，都应涵盖在本发明的保护范围之内。因此，本发明的保护范围应以所述权利要求的保护范围为准。The above is only a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Anyone skilled in the art can easily think of changes or substitutions within the technical scope disclosed in the present invention. Should be covered within the protection scope of the present invention. Therefore, the protection scope of the present invention should be determined by the protection scope of the claims.
Claims (5)
Priority Applications (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201511030374.9A CN106936615A (en) | 2015-12-31 | 2015-12-31 | A kind of message processing method and device |
| PCT/CN2016/109074 WO2017114128A1 (en) | 2015-12-31 | 2016-12-08 | Method and device for processing packets |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201511030374.9A CN106936615A (en) | 2015-12-31 | 2015-12-31 | A kind of message processing method and device |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN106936615A true CN106936615A (en) | 2017-07-07 |
Family
ID=59224461
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201511030374.9A Pending CN106936615A (en) | 2015-12-31 | 2015-12-31 | A kind of message processing method and device |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN106936615A (en) |
| WO (1) | WO2017114128A1 (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110445770A (en) * | 2019-07-18 | 2019-11-12 | 平安科技（深圳）有限公司 | Attack Source positioning and means of defence, electronic equipment and computer storage medium |
| CN111917621A (en) * | 2019-05-10 | 2020-11-10 | 烽火通信科技股份有限公司 | Communication method and system for network management server and network element of communication equipment |
| CN112637068A (en) * | 2020-12-04 | 2021-04-09 | 广州爱浦路网络技术有限公司 | Network data forwarding method, computer device, computer network and storage medium |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101094104A (en) * | 2007-07-30 | 2007-12-26 | 中兴通讯股份有限公司 | Method and device for carrying out device management through proxy of security network management |
| CN101141281A (en) * | 2006-09-06 | 2008-03-12 | 中兴通讯股份有限公司 | A method for network management and non-gateway network element communication |
| US20090201832A1 (en) * | 2008-02-07 | 2009-08-13 | Frederick Brown | Methods and systems for preventing the misconfiguration of osrp and osi/isis networks using a network management system |
| CN101834742A (en) * | 2010-05-06 | 2010-09-15 | 烽火通信科技股份有限公司 | Method for remotely configuring network element through network management server |
| CN102308523A (en) * | 2011-07-27 | 2012-01-04 | 华为技术有限公司 | Data communication network configuration method, gateway network element and data communication system |
| CN103379187A (en) * | 2012-04-28 | 2013-10-30 | 中兴通讯股份有限公司 | Data processing method and gateway network element |
-
2015
- 2015-12-31 CN CN201511030374.9A patent/CN106936615A/en active Pending
-
2016
- 2016-12-08 WO PCT/CN2016/109074 patent/WO2017114128A1/en not_active Ceased
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101141281A (en) * | 2006-09-06 | 2008-03-12 | 中兴通讯股份有限公司 | A method for network management and non-gateway network element communication |
| CN101094104A (en) * | 2007-07-30 | 2007-12-26 | 中兴通讯股份有限公司 | Method and device for carrying out device management through proxy of security network management |
| US20090201832A1 (en) * | 2008-02-07 | 2009-08-13 | Frederick Brown | Methods and systems for preventing the misconfiguration of osrp and osi/isis networks using a network management system |
| CN101834742A (en) * | 2010-05-06 | 2010-09-15 | 烽火通信科技股份有限公司 | Method for remotely configuring network element through network management server |
| CN102308523A (en) * | 2011-07-27 | 2012-01-04 | 华为技术有限公司 | Data communication network configuration method, gateway network element and data communication system |
| CN103379187A (en) * | 2012-04-28 | 2013-10-30 | 中兴通讯股份有限公司 | Data processing method and gateway network element |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111917621A (en) * | 2019-05-10 | 2020-11-10 | 烽火通信科技股份有限公司 | Communication method and system for network management server and network element of communication equipment |
| CN110445770A (en) * | 2019-07-18 | 2019-11-12 | 平安科技（深圳）有限公司 | Attack Source positioning and means of defence, electronic equipment and computer storage medium |
| CN112637068A (en) * | 2020-12-04 | 2021-04-09 | 广州爱浦路网络技术有限公司 | Network data forwarding method, computer device, computer network and storage medium |
| CN112637068B (en) * | 2020-12-04 | 2021-09-21 | 广州爱浦路网络技术有限公司 | Network data forwarding method, computer device, computer network and storage medium |
Also Published As
| Publication number | Publication date |
|---|---|
| WO2017114128A1 (en) | 2017-07-06 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| JP7641276B2 (en) | Method, system, and computer-readable medium for providing a multi-tenant software-defined wide area network (SD-WAN) node | |
| EP3834393B1 (en) | Systems and methods for server cluster network communication across the public internet | |
| US9215131B2 (en) | Methods for exchanging network management messages using UDP over HTTP protocol | |
| US8296437B2 (en) | Server-mediated setup and maintenance of peer-to-peer client computer communications | |
| US9231918B2 (en) | Use of virtual network interfaces and a websocket based transport mechanism to realize secure node-to-site and site-to-site virtual private network solutions | |
| EP3979559A1 (en) | Rule-based network-threat detection for encrypted communications | |
| US10841206B2 (en) | Flow modification including shared context | |
| US20170034174A1 (en) | Method for providing access to a web server | |
| JP5679343B2 (en) | Cloud system, gateway device, communication control method, and communication control program | |
| US9769011B2 (en) | Bidirectional forwarding detection over network virtualization using generic routing encapsulation | |
| CN110661858A (en) | Websocket-based intranet penetration method and system | |
| US12506639B2 (en) | Remote connection resumption with previous secure tunnel IP address | |
| CN108259356B (en) | Routing control method and device | |
| CN115442121B (en) | A flow transmission method, system, device and storage medium | |
| US8554935B2 (en) | Relay server and relay communication system | |
| CN106936615A (en) | A kind of message processing method and device | |
| CN109743316B (en) | Data transmission method, egress router, firewall and dual firewall system | |
| WO2025124258A1 (en) | System and method for supporting wireguard devices in port sharing and ip binding | |
| WO2024073113A1 (en) | System and method for creating a private service access network | |
| CN113824808A (en) | Method and system for network address translation traversal using an intermediary encounter agent | |
| US20250350579A1 (en) | Websocket connections supporting system management communications | |
| JP5875507B2 (en) | Relay device, program, information processing method, and information processing device | |
| JP5758461B2 (en) | Communication method, external information processing apparatus, internal information processing apparatus, and program | |
| WO2016062085A1 (en) | Virtual network realization method, nve and nva device and system | |
| JP2016096578A (en) | Relay device, information processing method, and program |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20170707 |
|
| RJ01 | Rejection of invention patent application after publication |