CN109743414B - Method for improving address translation availability using redundant connections and computer readable storage medium - Google Patents

Method for improving address translation availability using redundant connections and computer readable storage medium Download PDF

Info

Publication number
CN109743414B
CN109743414B CN201910122412.5A CN201910122412A CN109743414B CN 109743414 B CN109743414 B CN 109743414B CN 201910122412 A CN201910122412 A CN 201910122412A CN 109743414 B CN109743414 B CN 109743414B
Authority
CN
China
Prior art keywords
connection
formal
downlink
public network
data packet
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
CN201910122412.5A
Other languages
Chinese (zh)
Other versions
CN109743414A (en
Inventor
黄道超
沈时军
张鸿
刘欣然
张树壮
王凯峰
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
National Computer Network and Information Security Management Center
Original Assignee
National Computer Network and Information Security Management Center
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by National Computer Network and Information Security Management Center filed Critical National Computer Network and Information Security Management Center
Priority to CN201910122412.5A priority Critical patent/CN109743414B/en
Publication of CN109743414A publication Critical patent/CN109743414A/en
Application granted granted Critical
Publication of CN109743414B publication Critical patent/CN109743414B/en
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Landscapes

  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The invention discloses a method for improving address translation availability by utilizing redundant connection and a computer readable storage medium, wherein the method comprises the following steps: receiving an uplink data packet, inquiring a connection tracking table, if no connection exists, selecting a corresponding number of public network IPs from a public network IP cache according to the downlink mapping number of the connection established by the network session, and translating a source address of the uplink packet by using the public network IPs; storing the public network IP and the corresponding downlink mapping thereof, inquiring the downlink mapping corresponding to the downlink data packet when receiving a first downlink data packet returned by the network session, determining the downlink mapping as a formal downlink mapping of the network session, and determining the corresponding public network IP as a formal outlet IP of the network session; all uplink packets of the network session are translated by using a formal exit IP (Internet protocol) to carry out source address division, only downlink data packets matched with formal downlink mapping are processed, and other downlink data packets mapped redundantly are discarded; and storing the uplink and downlink mapping information in a connection tracking table.

Description

Method for improving address translation availability using redundant connections and computer readable storage medium
Technical Field
The present invention relates to the field of communications, and in particular, to a method and computer-readable storage medium for improving address translation availability using redundant connections.
Background
The NAT technology is a technology that appears when IPv4 addresses are gradually exhausted, is mainly used to implement a function of an internal network to access an external network, and is released as an RFC document in 1994. NAT provides a mechanism to map an IP address from addressing domain P to addressing domain Q. Addressing domain P is usually called a private IP address domain, which is only allowed for internal network use, and addressing domain Q is a public IP address domain that can be routed over the internet.
The most widely used types of network address translation are currently three: static NAT, dynamic NAT, network address port translation NAPT. The private IP of the internal host in static nat (static nat) is permanently mapped to the public IP one-to-one. The static NAT has no concept of state, does not need to record the conversion information of the previous data packet, and only needs to process the current data packet. Dynamic NAT (Poolled NAT) establishes a dynamic mapping relation between private IP addresses and public IP addresses, all public IP addresses are put into an address pool, when an internal host needs to access the Internet, an available public IP address is selected from the address pool according to an address selection algorithm, and mapping is established between the public IP addresses and the private IP addresses. The response message and the subsequent message are converted by using the mapping table item. Network Address Port translation (napt) is currently the most popular NAT method, and is commonly applied in access devices, and can hide an internal network behind one or several public IP addresses. Unlike the first two network address translations that only modify IP addresses, NAPT extends the mapping to port level, different ports of a single public IP address can establish mapping with multiple private IP addresses, and network address port translation involves the network layer and the transport layer.
The currently used NAT scheme is based on the assumption that the public network egress IP address held by the system is fully available and does not consider the case where the system holds a large number of public network egress IPs. And performing one-to-one translation and connection tracking on the data packet of the user. If the outlet IP address is not available at present, the new connection of the user will fail, and at this time, even if there is an available IP address in the system, the user needs to initiate a new connection request again, which may affect the normal operation of the user service.
Disclosure of Invention
Embodiments of the present invention provide a method and a computer-readable storage medium for improving address translation availability using redundant connections, so as to solve the above problems in the prior art.
The embodiment of the invention provides a method for improving address translation availability by utilizing redundant connection, which comprises the following steps:
step 1, receiving an uplink data packet, inquiring a connection tracking table, if the uplink data packet has no connection, establishing a downlink mapping quantity of connection according to network session, selecting a corresponding quantity of public network IP from a preset public network IP cache, and using the public network IP to translate and send a source address of the uplink data packet in sequence;
step 2, storing the public network IP and the corresponding downlink mapping thereof, inquiring the downlink mapping corresponding to the downlink data packet when receiving a first downlink data packet returned by the network session, determining the downlink mapping as a formal downlink mapping of the network session, and determining the public network IP corresponding to the formal downlink mapping as a formal exit IP of the network session;
step 3, all the uplink packets of the network session are translated by using the formal exit IP to carry out source address sub-translation, only the downlink data packets matched with the formal downlink mapping are processed, and other downlink data packets mapped redundantly are discarded;
and 4, storing the uplink and downlink mapping information of the connection in a connection tracking table.
Preferably, step 4 specifically comprises;
the uplink mapping and the row mapping in the connection tracking table both store a pointer pointing to the same memory block, and the memory block stores public information of the connection, where the public information specifically includes: and counting the number of formal outlet IPs, downlink natIPs, all redundant outlet IPs and corresponding downlink data packets, wherein the index of the connection tracking table comprises quintuple information of the uplink and downlink data packets, and the index of the downlink mapping is derived from the selected redundant outlet IPs and the quintuple information of the uplink data packets.
Preferably, the step 1 further comprises:
receiving an uplink data packet, acquiring quintuple information of the uplink data packet, inquiring the connection tracking table according to the quintuple information, and if connection exists and a formal exit IP is determined, replacing a source address by using the formal exit IP and performing subsequent processing; if the connection exists but the formal outlet IP is not determined, performing source address replacement by using all redundant outlet IPs, and performing subsequent processing on the data packet after each outlet IP is replaced; if the connection does not exist, determining that the connection is the first uplink packet of the network session, selecting a redundancy outlet IP with a quantity meeting the requirement from the public network IP cache to establish new connection, performing source address replacement once by using all the redundancy outlet IPs, and performing subsequent processing on each data packet after the replacement of the outlet IP.
Preferably, the step 2 further comprises:
after receiving a downlink data packet, acquiring quintuple information of the downlink data packet, searching a connection tracking table according to the quintuple information, discarding the packet if connection tracking cannot be found, updating the downlink data packet quantity statistics of an outlet IP corresponding to the packet in a redundant outlet IP in the connection tracking table if connection tracking is found, and then:
if the formal export IP is already clear and the destination IP of the downlink data packet is the same as the formal export IP, the formal export IP is used for replacing the destination address and carrying out subsequent processing;
if the formal exit IP is already clear but the destination IP of the downlink data packet is not the same as the formal exit IP, discarding the packet;
if the formal export IP is not clear, the downlink data packet is determined to be the downlink data packet returned by the first in the session, the destination IP is set as the formal export IP of the connection, and then the destination address is replaced by using the downlink nat IP and the subsequent processing is carried out.
Preferably, the method further comprises:
traversing the current connection tracking table at regular intervals, wherein one uplink index corresponds to one connection, and only an uplink node is judged, when one connection is traversed, whether the connection has already definite formal exit IP is judged, if not, the next connection is continuously traversed, and if the formal exit IP is already definite, whether the connection has already been counted in the previous traversal is continuously judged: if the statistics is already carried out, judging whether other redundant outlet IPs except the formal outlet IP are available, wherein the judgment criteria comprise: if the connection exceeds a certain time after being established, the number of downlink data packets of other redundant IP including the formal export IP is not 0, namely the downlink data packets are connected in the whole, but the redundant IP has no downlink data packet, the redundant IP is unavailable, and the IP in the IP address pool of the public network is marked as unavailable; if the connection is not counted, adding 1 to the total connection number corresponding to the formal export IP, recording the total connection number in the IP information record in the public network IP address pool, marking the connection as being counted, and finally judging the availability of the redundant IP.
Preferably, the method further comprises:
and updating the public network IP cache once from the public network IP address pool at regular intervals according to a preset rule.
Preferably, the predetermined rule specifically includes:
if a plurality of public network IP caches exist, the updating time of the public network IP caches is staggered;
when an IP is selected from the public network IP address pool for the public network IP cache, the IP marked as unavailable is not selected;
after the IP meeting the attribute is selected, the IP is sorted according to the connection tracking quantity corresponding to the IP from small to large, and the public network IP meeting the cache quantity is intercepted from the head.
An embodiment of the present invention further provides a computer-readable storage medium, where an implementation program for information transfer is stored, and when the program is executed by a processor, the program implements the steps of the method for improving address translation availability by using redundant connections.
By adopting the embodiment of the invention, the high-availability address translation system is constructed by using the strategic utilization system to hold a large number of unreliable public network outlet IP addresses. When address translation is performed for a newly-established connection of a user, a plurality of different egress IPs are selected for translation to form a plurality of connection tracking items, a plurality of translated packets are simultaneously transmitted to a target, one of the connections which can be responded is selected as a use connection for subsequent communication, and the other connection is abandoned. The availability of the address translation system is greatly improved.
The foregoing description is only an overview of the technical solutions of the present invention, and the embodiments of the present invention are described below in order to make the technical means of the present invention more clearly understood and to make the above and other objects, features, and advantages of the present invention more clearly understandable.
Drawings
Various other advantages and benefits will become apparent to those of ordinary skill in the art upon reading the following detailed description of the preferred embodiments. The drawings are only for purposes of illustrating the preferred embodiments and are not to be construed as limiting the invention. Also, like reference numerals are used to refer to like parts throughout the drawings. In the drawings:
FIG. 1 is a schematic diagram of a redundant connection in an embodiment of the present invention;
FIG. 2 is a diagram of a connection tracking table according to an embodiment of the present invention;
FIG. 3 is a diagram illustrating upstream packet processing in an embodiment of the present invention;
FIG. 4 is a diagram illustrating downstream packet processing according to an embodiment of the present invention;
fig. 5 is a schematic diagram of address pool public network IP maintenance in an embodiment of the present invention.
Detailed Description
Current NAT technology does not consider the case where the number of public network egress IP addresses held by the system is large and unreliable. In this case, when the user accesses the external network, the success rate of the new connection cannot be guaranteed. The invention designs a method for translating redundant connection addresses. When a user initiates a new session connection, the address translation system simultaneously establishes a plurality of address translation mappings for the session, and the mappings use a plurality of different IP addresses, thereby forming a plurality of connection instances. One data packet is translated into a plurality of data packets and simultaneously sent to the Internet, when the response packet of the opposite side arrives, one connection with the highest speed is selected to complete the subsequent communication, and the rest session connections are abandoned. By using the redundant connection mode, the success rate of new connection is improved and the availability of address translation is improved under the condition that the IP address of the outlet is unreliable.
Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. While exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be embodied in various forms and should not be limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the disclosure to those skilled in the art.
Before describing the embodiments of the present invention in detail, the terms involved will be explained in detail:
public network IP address pool: storing all public network IP information and public information of the whole system;
public network IP caching: a certain amount of public network IP information is stored for direct use when a new connection is established, and an NAT system holds the public network IP information;
connecting: the method comprises the steps of storing a structure of network session uplink mapping information and downlink mapping information, wherein the structure comprises 1 uplink mapping and a plurality of downlink mappings;
uplink mapping: storing information required for address translation of the uplink packet;
downlink mapping: storing information required for address translation of the downlink packet;
and (3) uplink natIP: the formal outlet IP is used for selecting a public network IP for performing source IP replacement on the uplink packet from a plurality of redundant outlet IPs, and after the uplink natIP is clear, the source IP replacement is performed on the subsequent uplink packet according to the IP;
downlink natIP: an intranet IP used for carrying out target IP replacement on the downlink packet;
redundant egress IP: and selecting a plurality of IPs for carrying out source IP replacement on the first uplink packet from the public network IP cache when the connection is newly established.
The overall scheme of the method of the invention is shown in fig. 1, and in view of the fact that the number of public network IPs may be large and special requirements may exist on certain attributes of the export IP, if it is possible that the efficiency is low to obtain the required IP from the address pool at present during address translation, a public network IP cache is set, and when NAT operation is performed, the required number of IPs are directly obtained from the public network IP cache for address translation, and the public network IP cache is updated from the public network IP address pool at regular intervals according to the attribute requirements.
Assuming that the number of downlink mappings established for connection of a network session is 3, the number of required public network IPs is 3, when a connection is newly established, three IPs are selected from a buffer, the three IPs are used for sequentially replacing source addresses of uplink packets and sending out, the 3 IPs and the mappings corresponding to the 3 IPs are all stored, when a first downlink packet returned by the session is received, the corresponding downlink mapping is inquired, the mapping is fixed as a formal downlink mapping of the network session, the corresponding public network IP is fixed as a formal outlet IP (uplink nat IP) of the network session, the uplink packets of the session are translated by the source addresses by the formal outlet IP, only the downlink packets matched with the formal downlink mappings are processed, and the downlink packets of other redundant mappings are discarded.
1. And (3) connection tracking table processing:
as shown in fig. 2, the uplink mapping occupies 1 node, the downlink mapping occupies 3 nodes, each of which stores a pointer pointing to the same memory block, and the memory block stores some common information of the connection, such as an uplink natIP (formal egress IP, which is 0 when a connection is newly established and is determined from redundant egress IPs after receiving a first downlink packet of a session), a downlink natIP (intranet IP, where a downlink packet is used to replace a destination IP, and can be assigned when a connection is newly established), and statistics of the number of all the redundant egress IPs and their corresponding downlink packets. The index of the connection tracking table is composed of quintuple information of the uplink and downlink data packets, and the three indexes of the downlink mapping are derived from the selected three redundant outlet IPs and the quintuple information of the uplink data packets.
2. Upstream packet processing
As shown in fig. 3, after receiving an uplink data packet, the NAT engine first obtains the quintuple information, and searches the connection tracking table according to the information:
1) if connection exists and the uplink natIP is determined, the uplink natIP is used for replacing the source address and carrying out subsequent processing;
2) if connection exists but the uplink natIP is not determined, performing source address replacement by using all redundant outlet IPs, and performing subsequent processing on the data packet after each outlet IP is replaced;
3) if no connection exists, the connection is the first uplink packet of the session, then the redundant outlet IPs with the number meeting the requirement are selected from the public IP cache to establish new connection, all the redundant outlet IPs are used for carrying out source address replacement once, and the data packet after the replacement of each outlet IP is subjected to subsequent processing.
3. Downlink packet processing
As shown in fig. 4, after receiving a downlink data packet, the NAT engine first obtains the quintuple information of the downlink data packet, searches the connection tracking table according to the information, discards the packet if the connection tracking cannot be found, updates statistics on the number of downlink packets of the egress IP corresponding to the packet in the redundant egress IP if the connection tracking is found, and then:
1) if the uplink natIP value is already determined and the destination IP of the downlink packet is the same as the uplink natIP value, the downlink natIP is used for replacing the destination address and carrying out subsequent processing;
2) if the uplink natIP value is already clear but the destination IP of the downlink packet is different from the uplink natIP value, discarding the packet;
3) if the upstream natIP is not clear, the data packet is a downstream data packet returned by the first session, the destination IP is set as the connected upstream natIP, namely a formal outlet IP, and then the downstream natIP is used for carrying out destination address replacement and subsequent processing.
4. Public network IP address pool maintenance and cache update
As shown in fig. 5, the current connection tracking table is traversed at regular intervals, and only the uplink node is determined because one uplink index can correspond to one connection. When traversing a connection, judging whether the connection has already definite uplink natIP, if not, continuing traversing the next connection, if so, continuing judging whether the connection has already been counted in the previous traversal:
if the statistics is carried out, judging whether other redundant outlet IPs except the uplink natIP are available, wherein the judgment standard is that the connection exceeds a certain time after the connection is established, the number of downlink packets of other redundant IPs including the uplink natIP is not 0, namely the downlink packets are connected in the whole connection, but the redundant IP does not have the downlink packets, the redundant IP is unavailable, and the IP in the public network IP address pool is marked as unavailable;
if not, adding 1 to the total connection number corresponding to the uplink natIP, recording the total connection number in the IP information record in the public network IP address pool, marking the connection as being counted, and finally performing the redundant IP availability judgment.
The public network IP cache updating follows the following rules:
1) if a plurality of caches exist, the updating time needs to be staggered;
2) when an IP is selected from the public network IP address pool for caching, the IP marked as unavailable is not selected;
3) after the IP which accords with the attribute is selected, the IP is sorted from small to large according to the connection tracking quantity corresponding to the IP, and the public network IP which meets the cache quantity is intercepted from the head so as to disperse the available IP and improve the service efficiency of the whole IP.
In summary, in the above embodiments of the present invention, when performing address translation for a newly-created connection of a user, multiple address translation instances are initiated, multiple session connections are formed by using multiple egress IP addresses, a data packet is translated into multiple packets and then sent at the same time, and then a connection capable of responding is selected to perform a subsequent session, so as to improve the availability of the address translation system. In the process of address translation and completion of subsequent sessions according to the conditions of response data packets, the static addresses are evaluated, ip addresses with high success rate are preferentially selected as candidate objects, strategic use is supported, and the interest rate efficiency of the ip addresses is improved.
The invention constructs a highly available address translation system by strategically utilizing the system to hold a large number of unreliable public network egress IP addresses. When address translation is carried out on the newly-built connection of the user, a plurality of different outlets ip are selected for translation to form a plurality of connection tracking items, a plurality of translated data packets are simultaneously sent to a target, then one of the connections which can be responded is selected as a use connection for subsequent communication, and other connections are abandoned. The availability of the address translation system is greatly improved.
In addition, in the using process of the whole engine, the IP addresses are marked, the unavailable IP addresses are marked and removed, and the available IP addresses are dispersed as much as possible when the first-step subsequent connection selection is carried out, so that the using efficiency of the whole IP address is improved.
The computer-readable storage medium of this embodiment includes, but is not limited to: ROM, RAM, magnetic or optical disks, and the like.
It will be apparent to those skilled in the art that the modules or steps of the present invention described above may be implemented by a general purpose computing device, they may be centralized on a single computing device or distributed across a network of multiple computing devices, and alternatively, they may be implemented by program code executable by a computing device, such that they may be stored in a storage device and executed by a computing device, and in some cases, the steps shown or described may be performed in an order different than that described herein, or they may be separately fabricated into individual integrated circuit modules, or multiple ones of them may be fabricated into a single integrated circuit module. Thus, the present invention is not limited to any specific combination of hardware and software.
The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention, and various modifications and changes may be made by those skilled in the art. Any modification, equivalent replacement, or improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims (7)

1. A method for improving address translation availability using redundant connections, comprising:
step 1, receiving an uplink data packet, inquiring a connection tracking table, if the uplink data packet has no connection, establishing a downlink mapping quantity of connection according to network session, selecting a corresponding quantity of public network IP from a preset public network IP cache, and using the public network IP to translate and send a source address of the uplink data packet in sequence;
step 2, storing the public network IP and the corresponding downlink mapping thereof, inquiring the downlink mapping corresponding to the downlink data packet when receiving a first downlink data packet returned by the network session, determining the downlink mapping as a formal downlink mapping of the network session, and determining the public network IP corresponding to the formal downlink mapping as a formal exit IP of the network session;
step 3, translating source addresses of all the subsequent uplink packets of the network session by using the formal exit IP, only processing the downlink data packets matched with the formal downlink mapping, and discarding other downlink data packets subjected to redundant mapping;
step 4, storing the uplink and downlink mapping information of the connection in a connection tracking table;
traversing the current connection tracking table at regular intervals, wherein one uplink index corresponds to one connection, and only an uplink node is judged, when one connection is traversed, whether the connection has already definite formal exit IP is judged, if not, the next connection is continuously traversed, and if the formal exit IP is already definite, whether the connection has already been counted in the previous traversal is continuously judged: if the statistics is already carried out, judging whether other redundant outlet IPs except the formal outlet IP are available, wherein the judgment criteria comprise: if the connection exceeds a certain time after being established, the number of downlink data packets of other redundant IP including a formal export IP is not 0, or the whole connection is connected with the downlink data packets, but the redundant IP has no downlink data packet, the redundant IP is unavailable, and the IP in the IP address pool of the public network is marked as unavailable; if the connection is not counted, adding 1 to the total connection number corresponding to the formal export IP, recording the total connection number in the IP information record in the public network IP address pool, marking the connection as being counted, and finally judging the availability of the redundant IP.
2. The method according to claim 1, wherein step 4 specifically comprises;
the uplink mapping and the downlink mapping in the connection tracking table both store a pointer pointing to the same memory block, and the memory block stores public information of the connection, where the public information specifically includes: and counting the number of formal outlet IPs, downlink natIPs, all redundant outlet IPs and corresponding downlink data packets, wherein the index of the connection tracking table comprises quintuple information of the uplink and downlink data packets, and the index of the downlink mapping is derived from the selected redundant outlet IPs and the quintuple information of the uplink data packets.
3. The method of claim 2, wherein step 1 further comprises:
receiving an uplink data packet, acquiring quintuple information of the uplink data packet, inquiring the connection tracking table according to the quintuple information, and if connection exists and a formal exit IP is determined, replacing a source address by using the formal exit IP and performing subsequent processing; if the connection exists but the formal outlet IP is not determined, performing source address replacement by using all redundant outlet IPs, and performing subsequent processing on the data packet after each outlet IP is replaced; if the connection does not exist, determining that the connection is the first uplink packet of the network session, selecting a redundancy outlet IP with a quantity meeting the requirement from the public network IP cache to establish new connection, performing source address replacement once by using all the redundancy outlet IPs, and performing subsequent processing on each data packet after the replacement of the outlet IP.
4. The method of claim 2, wherein the step 2 further comprises:
after receiving a downlink data packet, acquiring quintuple information of the downlink data packet, searching a connection tracking table according to the quintuple information, discarding the packet if connection tracking cannot be found, updating the downlink data packet quantity statistics of an outlet IP corresponding to the packet in a redundant outlet IP in the connection tracking table if connection tracking is found, and then:
if the formal export IP is already clear and the destination IP of the downlink data packet is the same as the formal export IP, using the formal export IP as a destination address and carrying out subsequent processing;
if the formal exit IP is already clear but the destination IP of the downlink data packet is not the same as the formal exit IP, discarding the packet;
if the formal export IP is not clear, the downlink data packet is determined to be the downlink data packet returned by the first in the session, the destination IP is set as the formal export IP of the connection, and then the destination address is replaced by using the downlink nat IP and the subsequent processing is carried out.
5. The method of claim 1, wherein the method further comprises:
and updating the public network IP cache once from the public network IP address pool at regular intervals according to a preset rule.
6. The method according to claim 5, wherein the predetermined rules specifically comprise:
if a plurality of public network IP caches exist, the updating time of the public network IP caches is staggered;
when an IP is selected from the public network IP address pool for the public network IP cache, the IP marked as unavailable is not selected;
after the IP meeting the attribute is selected, the IP is sorted according to the connection quantity corresponding to the IP from small to large, and the public network IP meeting the cache quantity is intercepted from the head.
7. A computer-readable storage medium, having stored thereon a program for implementing information transfer, which when executed by a processor implements the steps of any one of claims 1 to 6.
CN201910122412.5A 2019-02-18 2019-02-18 Method for improving address translation availability using redundant connections and computer readable storage medium Expired - Fee Related CN109743414B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201910122412.5A CN109743414B (en) 2019-02-18 2019-02-18 Method for improving address translation availability using redundant connections and computer readable storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201910122412.5A CN109743414B (en) 2019-02-18 2019-02-18 Method for improving address translation availability using redundant connections and computer readable storage medium

Publications (2)

Publication Number Publication Date
CN109743414A CN109743414A (en) 2019-05-10
CN109743414B true CN109743414B (en) 2021-12-31

Family

ID=66367738

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201910122412.5A Expired - Fee Related CN109743414B (en) 2019-02-18 2019-02-18 Method for improving address translation availability using redundant connections and computer readable storage medium

Country Status (1)

Country Link
CN (1) CN109743414B (en)

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110365807A (en) * 2019-06-11 2019-10-22 北京邮电大学 A kind of network session flow alignment methods based on address translation
CN111404732B (en) * 2020-03-05 2023-04-07 广东睿江云计算股份有限公司 NAT gateway disaster recovery implementation method and system thereof
CN112416514B (en) * 2020-11-19 2022-11-08 山东可信云信息技术研究院 Virtual machine starting credibility measuring method, system, storage medium and equipment
CN112637374B (en) * 2020-12-15 2022-07-01 杭州迪普科技股份有限公司 Method, device and equipment for processing converted address and computer readable storage medium
CN113992631B (en) * 2021-12-28 2022-04-29 北京智讯天成技术有限公司 IP address management method, device, equipment and computer readable storage medium

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102752141A (en) * 2012-06-29 2012-10-24 杭州迪普科技有限公司 Method and device for detecting accessibility of IP (internet protocol) address
CN102932346A (en) * 2012-10-26 2013-02-13 杭州迪普科技有限公司 Method and device for detecting unavailable addresses in network address translator (NAT) address pool
CN107547689A (en) * 2017-09-20 2018-01-05 新华三技术有限公司 A kind of network address translation CGN method and apparatus of carrier-class
CN107682470A (en) * 2017-10-16 2018-02-09 杭州迪普科技股份有限公司 The method and device of public network IP availability in a kind of detection nat address pool
CN109120746A (en) * 2018-09-30 2019-01-01 新华三技术有限公司 Method for network address translation, device and address-translating device

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7752334B2 (en) * 2002-10-15 2010-07-06 Nomadix, Inc. Intelligent network address translator and methods for network address translation

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102752141A (en) * 2012-06-29 2012-10-24 杭州迪普科技有限公司 Method and device for detecting accessibility of IP (internet protocol) address
CN102932346A (en) * 2012-10-26 2013-02-13 杭州迪普科技有限公司 Method and device for detecting unavailable addresses in network address translator (NAT) address pool
CN107547689A (en) * 2017-09-20 2018-01-05 新华三技术有限公司 A kind of network address translation CGN method and apparatus of carrier-class
CN107682470A (en) * 2017-10-16 2018-02-09 杭州迪普科技股份有限公司 The method and device of public network IP availability in a kind of detection nat address pool
CN109120746A (en) * 2018-09-30 2019-01-01 新华三技术有限公司 Method for network address translation, device and address-translating device

Also Published As

Publication number Publication date
CN109743414A (en) 2019-05-10

Similar Documents

Publication Publication Date Title
CN109743414B (en) Method for improving address translation availability using redundant connections and computer readable storage medium
US5815664A (en) Address reporting device and method for detecting authorized and unauthorized addresses in a network environment
US8542686B2 (en) Ethernet forwarding database method
US9705799B2 (en) Server-side load balancing using parent-child link aggregation groups
US10608866B2 (en) Forwarding Ethernet packets
US7197574B1 (en) Domain name system inquiry apparatus, domain name system inquiry method, and recording medium
JP2014511089A (en) Private address and public address mapping
CN101656765A (en) Address mapping system and data transmission method of identifier/locator separation network
CN107547346B (en) Message transmission method and device
CN110012118B (en) Method and controller for providing Network Address Translation (NAT) service
US9485179B2 (en) Apparatus and method for scalable and flexible table search in a network switch
CN109413224B (en) Message forwarding method and device
US20170012874A1 (en) Software router and methods for looking up routing table and for updating routing entry of the software router
WO2021218984A1 (en) Data routing method and related apparatus
US7693075B2 (en) Updating address tables
CN110932983B (en) TCP load balancing method, device, equipment and medium
CN114785733B (en) Method for realizing session tracing in cross-VPC network flow forwarding
JP2006174399A (en) Communication method in group, system and recording medium
US9853891B2 (en) System and method for facilitating communication
CN110636005B (en) Knowledge routing method and device of knowledge center network
CN111797341B (en) Programmable switch-based in-network caching method
JPH0934816A (en) Large scale ip network
KR20040054957A (en) A Method for Managing the Forwarding Table of Network Processor according to Address Learning in the Linecard Processor composing of Multiple Network Processors and Multiplexing/Demultiplexing Module
JP3570606B2 (en) Data retrieval apparatus and method
US11924102B2 (en) Minimizing deviation from average latency of table lookups

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20211231

CF01 Termination of patent right due to non-payment of annual fee