CN1235368C - Address conversion method for simultaneously supporting one-to-one and many-to-many under the PAT mode - Google Patents

Address conversion method for simultaneously supporting one-to-one and many-to-many under the PAT mode Download PDF

Info

Publication number
CN1235368C
CN1235368C CN 02128928 CN02128928A CN1235368C CN 1235368 C CN1235368 C CN 1235368C CN 02128928 CN02128928 CN 02128928 CN 02128928 A CN02128928 A CN 02128928A CN 1235368 C CN1235368 C CN 1235368C
Authority
CN
China
Prior art keywords
address
conversion
port
message
array
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
CN 02128928
Other languages
Chinese (zh)
Other versions
CN1477825A (en
Inventor
王宁
瞿祥明
于光辉
李健
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Priority to CN 02128928 priority Critical patent/CN1235368C/en
Publication of CN1477825A publication Critical patent/CN1477825A/en
Application granted granted Critical
Publication of CN1235368C publication Critical patent/CN1235368C/en
Anticipated expiration legal-status Critical
Expired - Fee Related legal-status Critical Current

Links

Images

Abstract

The present invention discloses an address converting method simultaneously supporting one-to-one conversion and many-to-many conversion in a PAT mode. The method comprises the following steps: firstly, determining a protocol type supported by IP address conversion and a corresponding hashing algorithm adopted by the IP address conversion and determining the aggregation of a public network IP address pool and a public network port which are used by the IP address conversion; then, establishing a two-dimensional array for storing index pointers respectively pointing to a one-to-one address conversion unit and a port address conversion unit. Thus, when the IP address conversion is executed for a transferred message, the index pointer pointing to the corresponding address conversion unit is found out in the array according to the hashing algorithm corresponding to a protocol adopted by the message so as to complete the IP address conversion. The scheme can be suitable for the requirements of address conversion for different protocols.

Description

Under the PAT pattern, support one to one address conversion method simultaneously with multi-to-multi
Technical field
The present invention relates to the address conversion method in the network system.
Background technology
The problem that causes internet address (IP address) shortage of resources of popularizing rapidly of the Internet (Internet) is given prominence to day by day; for solving the NAT technology (NAT that above-mentioned contradiction proposes; Network Address Translation) the privately owned address of local area network (LAN) internal host can be converted to the publicly-owned address of local area network (LAN) outside; i.e. globally unique IP address on the internet; can make the user capture exterior I nternet of local area network (LAN) inside like this, and a kind of " privacy " protection is provided for local area network (LAN) inside.
At present, internet address distributes the following three class network addresss reservation of organization prescribed to be used as privately owned address: from 10.0.0.0 to 10.255.255.255, from 172.16.0.0 to 172.31.255.255 and from 192.168.0.0 to 192.168.255.255.In local area network (LAN) inside, use " the privately owned address " of above-mentioned scope address as local area network (LAN) inside.By the address transition technology, can make the host access Internet of this internal lan.Described address transition Technology Need user configuration address pond and conversion regime.Address pool is by some external addresss, and promptly legal Internet address combination forms, when the packet of local area network (LAN) inside mails to external network by address transition, will select in the address pool certain address as the conversion after source address.Like this, make the main frame of local area network (LAN) inside not need all to have legal public ip address and just can visit Internet, saved legal IP address greatly.
Address transition has NAT and port address conversion (PAT, port address tranlation) dual mode.The NAT mode is common man-to-man address transition, and in this manner, each internal host will take an IP address in the address pool, when the address in the address pool is used up, just can not allow other host access Internet.Therefore, the NAT mode only allows several main frames to visit Internet simultaneously, and its number is limited to the size of address pool.The address transition of PAT mode has been used the port information of TCP/UDP, distinguish the externally difference connection of initiation of main frame of local area network (LAN) inside with " address+port ", promptly want the source address in the translation data bag also to want conversion port information, therefore many main frames of local area network (LAN) inside can be shared an IP address visit Internet, can allow more internal host to visit Internet simultaneously like this.Obviously the address transition of PAT mode only is fit to the TCP/UDP agreement.
For some special application protocol, as NetBios (NetBIOS over TCP/IP, NetBIOS based on TCP/IP) agreement, requirement can only be set up man-to-man connection between two main frames, promptly under the PAT conversion regime, connect and to cause the visit failure if distinguish difference that the main frame of internal lan externally initiates according to " address+port ".Therefore, under actual application environment, for the address transition that is configured to the PAT mode, require to support the man-to-man address transition of similar NetBios agreement simultaneously again, this can't realize in existing address conversion method.
Summary of the invention
The object of the present invention is to provide a kind of under the PAT pattern, the support simultaneously one to one and the address conversion method of multi-to-multi, use this method can adapt to different application protocol of I P address conversion requirement.
For achieving the above object, the provided by the invention support simultaneously under the PAT pattern one to one and the address conversion method of multi-to-multi comprises:
Step 1: determine the hash HASH algorithm that application protocol type that address transition supports and the pairing address transition of this agreement should adopt;
Step 2 is set up an array of indexes, this array is a two-dimensional array, and be divided into two parts, be respectively conversion portion and port address conversion PAT part one to one, wherein, the one-to-one address conversion portion is used to store the index point that points to the one-to-one address converting unit, and the port address conversion portion is used to store the index point that points to the port address converting unit.Be designated as the IP address in public network IP address pond under the one dimension of array.Another ties up subscript, conversion portion one to one for array, for supporting the protocol type of conversion one to one, find the index point that points to the address transition record according to the pairing hashing algorithm of the application protocol of this message correspondence at the conversion portion one to one of array of indexes, thereby finish man-to-man address transition; If the application protocol of message correspondence need be supported the address transition of PAT mode, hashing algorithm according to this agreement correspondence finds the index point that points to the port address converting unit at the port address conversion portion of array of indexes, thereby finishes the conversion of IP address and port.
Described step 3 also comprises: 1P protocol number and port numbers according to message are determined the application protocol type, determine the hashing algorithm that it is corresponding according to the application protocol type again.
Protocol type according to determine support, when message mails to Internet by private network, address transition is a public network IP address with private network IP address transition, to this, step 3 is described to be finished man-to-man address transition and realizes by following process: the one dimension of determining array according to the protocol type of message at the conversion portion one to one of array, in the public network IP address of this dimension, adopt the hashing algorithm of agreement correspondence to determine that one of them address is the address after shifting.
When message mails to Internet by private network, address transition is a public network IP address with private network IP address transition, to this, the described conversion of finishing IP address and port of step 3 realizes by following process: at the port address conversion portion of array, the hashing algorithm that adopts the agreement correspondence is in the one dimension by the public network IP address sign of array, determine that one of them address is the address after shifting, utilize the new port this hashing algorithm is determined conversion in another dimension of array after again.
Step 3 also comprises: set up the corresponding converting unit of this conversion, described converting unit is used for the storing IP information of address conversion, and this information comprises private network IP address, the private network port numbers of message, the public network IP address after the conversion, public network port numbers, the protocol type of message.
When the conversion of message IP address is from public network IP address during to the conversion of private network IP address, step 3 is described finishes man-to-man IP address transition, and the conversion of finishing IP address and port realizes by following process: according to the agreement and the corresponding hashing algorithm thereof of message employing, in array, find corresponding array element, index point according to this array element storage, find the converting unit of this pointed, find private network IP address and private network port numbers after the conversion according to converting unit.
Another kind provided by the invention is supported simultaneously under the PAT pattern one to one and the address conversion method of multi-to-multi, being comprised:
Steps A 1: determine hash (HASH) algorithm that application protocol type that address transition supports and the pairing address transition of this agreement should adopt;
Steps A 2: set up conversion table and port address translation (pat) table one to one, wherein, the one-to-one address conversion table is used to store the index point that points to the one-to-one address converting unit, and the port address conversion table is used to store the index point that points to the port address converting unit; For conversion table one to one, be designated as the IP address in public network IP address pond under the one dimension of this table, another ties up subscript, is to support the protocol type of conversion one to one; For the port address conversion table, be designated as the IP address in public network IP address pond under the one dimension of this table, another dimension is designated as the sign that one-to-one relationship is arranged with the public network port numbers down.
Steps A 3: when the message that transmits is carried out address transition, if the application protocol of message correspondence needs man-to-man address transition, find the index point that points to the address transition record according to the pairing hashing algorithm of the application protocol of this message correspondence at conversion table one to one, thereby finish man-to-man address transition; If the application protocol of message correspondence need be supported the address transition of PAT mode, find the index point that points to the port address converting unit according to the hashing algorithm of this agreement correspondence at the port address conversion table, thereby finish the conversion of IP address and port.
Adopt such scheme, compare with IP address transition mode one to one, its advantage is:
(1) saves the effective of IP address resource.If some IP address is allocated for man-to-man address transition, then this address can not be re-used again; If the address pool resource is depleted,, can not carry out the address transition of subsequent packet owing to there is not the IP address to use.Use method of the present invention, the message of dissimilar agreements is this address of reusable still, even these agreements need man-to-man address transition, and still can be successfully multiplexing; If certain protocol massages needs man-to-man address transition, address pool length just limits the connection sum of this kind agreement, and supported maximum number of connections equals address pool length; If a kind of connection sum of agreement has reached the upper limit, do not influence the address transition of other agreement.
(2) has better fail safe.If adopt man-to-man IP address transition mode, some addresses are used for man-to-man address transition by specific assigned, owing to do not distinguish protocol type, the message of variety of protocol all can enter internal network from the outside by this address so.Adopt method of the present invention,, have only the message of respective protocol just can find the corresponding address converting unit, make message enter internal network according to its corresponding hashing algorithm because the hashing algorithm that different agreements is used has nothing in common with each other.Like this, the address transition of PAT mode has better fail safe.
(3) use method of the present invention can adapt to the IP address transition requirement of different agreement.
Description of drawings
Fig. 1 is the embodiment flow chart of the method for the invention;
Fig. 2 is the two-dimensional array occupation mode schematic diagram that the described embodiment of Fig. 1 adopts.
Embodiment
The present invention is described in further detail below in conjunction with accompanying drawing.
Fig. 1 is the embodiment flow chart of the method for the invention.The described method of Fig. 1 adopts the hashing algorithm relevant with message protocol, with the address transition of PAT mode with used different hashing algorithms in man-to-man conversion hashes to same data structure, specifically adopt any hashing algorithm, depend on the type of application protocol.
According to Fig. 1, at first determine hash (HASH) algorithm that protocol type that address transition is supported and the pairing IP address transition of protocol type adopt in step 1, and the definite IP address transition public network IP address pond of using and the set of public network port;
Be performing step 1, embody " registration of application protocol ", in the realization of step 1, on router, create the application protocol registration table, this is the table of an overall situation, wherein every record unique identification a kind of application protocol, simultaneously the information that writes down in this record also comprises IP protocol number, well-known port number, so that can discern the type of application protocol according to IP protocol number and well-known port number.Simultaneously, in each bar record, register the sign of a hashing algorithm for each application protocol, so that in address translation process, select different hashing algorithms for use according to the algorithm registered in agreement sign, guarantee correctly to find the index point of the converting unit of this application protocol.
In step 2: set up a two-dimensional array, this array is divided into two parts, be respectively conversion portion and port address translation (pat) part one to one, described port address translation (pat) partly is multi-to-multi address transition part; Wherein, the one-to-one address conversion portion is used to store the index point that points to the one-to-one address converting unit, and the port address conversion portion is used to store the index point that points to the port address converting unit, with reference to figure 2.Among Fig. 2, the right half part of concordance list is used for index PAT mode address converting unit, and left-half is used for index one-to-one address converting unit.Among Fig. 2, the one dimension subscript of array (row subscript) is the IP address in public network IP address pond, and another ties up subscript (row subscript), for the conversion portion one to one of array, for supporting the protocol type of conversion one to one; For the port address conversion portion, for the public network port numbers sign of one-to-one relationship being arranged, this sign directly adopts the public network port numbers in this example.In the reality, for the port address conversion portion, at this moment above-mentioned another dimension subscript also can, adopt alternate manner to obtain the public network port numbers for not having the sign of one-to-one relationship with the public network port numbers.
Under the PAT mode, carry out man-to-man address transition, use the left side of array to assign to store the index point of converting unit.Because man-to-man address transition is only distinguished the address, promptly only used the first dimension Index1 of array of indexes, and the second dimension Index2 changes not, therefore will specify and use which column index converting unit when the registration hashing algorithm.As from the visit of internal host the time, will in those row of correspondence, search empty index position, if find, just create address conversioning unit and finish man-to-man address transition; If there is not free index position, show that the address in the address pool distributes, can not continue to carry out again man-to-man address transition.
PAT conversion to " address+port " pattern, the pointer that points to address conversioning unit is hashed to the right half part of array, use the hashing algorithm of PAT pattern correspondence to locate the Index1 and the Index2 of two-dimensional array, obtain IP address after the conversion according to Index1 then, calculate new port after the conversion according to Index2.
In the present embodiment, reserved the memory space of multiple row index point,, can support various protocols to change one to one like this because man-to-man address transition only needs the row in the array of indexes to come index for one-to-one address conversion.In other words, if there is another kind of agreement to need conversion one to one, as long as for this agreement reallocation passable once the pointer that is listed as the sensing converting unit of holding this agreement.For example to support ILS (Internet Locator Service, Internet positioning service) agreement, can distribute to this agreement to secondary series so and be used for index hash table.
Based on above-mentioned steps, in step 3: when the message that transmits is carried out the IP address transition, at first will determine protocol type, determine the hashing algorithm that it is corresponding according to protocol type again according to the IP protocol number and the port numbers of message.Promptly, after receiving the IP message, the type of searching agreement at the application protocol registration table according to the IP protocol number and the port numbers of message, if finding is registered agreement, then from this agreement corresponding record, obtain corresponding hashing algorithm sign, search converting unit pointer in the two-dimensional array with the hashing algorithm of this sign correspondence; If unregistered agreement then uses the hashing algorithm of acquiescence to search.
If the agreement support that message adopts is changed one to one, find the index point that points to the one-to-one address converting unit at the conversion portion one to one of array according to the hashing algorithm of message protocol correspondence, thereby finish man-to-man IP address transition; If the agreement that message adopts is supported the port address conversion, find the index point that points to the port address converting unit at the port address conversion portion of array according to the hashing algorithm of message protocol correspondence, thereby finish the conversion of IP address and port.
In above-mentioned transfer process, when the conversion of message IP address is from private network IP address during to the conversion of public network IP address, finishing man-to-man IP address transition realizes by following process: the one dimension of determining array according to the protocol type of message at the conversion portion one to one of array, in the public network IP address of this dimension, adopt the hashing algorithm of agreement correspondence to determine that one of them address is the address after shifting.
When the conversion of message IP address is from private network IP address during to the conversion of public network IP address, the conversion of finishing IP address and port realizes by following process: at the port address conversion portion of array, the hashing algorithm that adopts the agreement correspondence determines that one of them address is the address after shifting in the one dimension by the public network IP address sign of array; Utilize the new port this hashing algorithm is determined conversion in another dimension of array after again.
In this example, no matter be the IP address transition of pattern one to one, or the IP address transition of PAT pattern, when the conversion of message IP address is first from private network IP address during to the conversion of public network IP address, set up the corresponding converting unit of this conversion, described converting unit is used for the storing IP information of address conversion, and this information comprises private network IP address, the private network port numbers of message, public network IP address after the conversion, public network port numbers, the protocol type of message, change-over time etc.
When the conversion of message IP address is from public network IP address during to the conversion of private network IP address, finish man-to-man IP address transition, and the conversion of finishing IP address and port realizes by following process: according to the agreement and the corresponding hashing algorithm thereof of message employing, in array, find corresponding array element, index point according to this array element storage, find the converting unit of this pointed, find private network IP address and private network port numbers after the conversion according to converting unit, thereby finish conversion.
The invention will be further described below by the specific address transformation applications of the described embodiment of Fig. 1.Suppose the message of NAT conversion WWW, TELNET, NetBios, four kinds of application protocols of ILS, protocol number and well-known port number that these four kinds of application protocols use are as follows:
The WWW:TCP agreement, port numbers 80;
TELNET; Transmission Control Protocol, port numbers 23;
The NetBios:UDP agreement, port numbers 137;
The ILS:TCP agreement, port numbers 389;
By analyzing this several agreements, can determine that WWW, TELNET can use the address transition of PAT mode; NetBios, ILS can't carry out the conversion (using the address transition of PAT mode not have practical significance) of PAT mode because the particularity of agreement need be carried out man-to-man address transition.According to above-mentioned definite content, at first should finish the work of following three steps:
(1) registered application agreement.When router startup, create " application protocol registration table ", this is the table of an overall situation, wherein each registry key unique identification a kind of application protocol.In this list item, write down the address transition hashing algorithm (HASH algorithm) that protocol number, well-known port number and this agreement are used;
(2) configuration address conversion.The configuration address conversion is associated access list (access-list) with address pool, determined to have which legal public network address to use for address transition, at this moment creates the 2-d index array.
(3) message is carried out address transition.According to the message forwarding direction, address transition can be divided into flow process that private network internally transmits to outside public network and the flow process of transmitting to inner private network from outside public network, and these two address translation process are symmetrical.
When data message by private network when public network is transmitted:
Step 21: address conversion module judges whether and will carry out address transition to this message that if do not need conversion just directly to transmit, conversion then entering step 22 if desired according to Access Control List (ACL) after receiving the message that the IP layer transfers;
Step 22: search the application protocol registration table.For inside host access Internet server, only need search the application protocol registry key according to IP protocol number and destination interface.For example:, in the protocol registration table, search if the WWW message is got IP protocol number and destination slogan (should be well-known port 80) in the message.
Step 23: determine hashing algorithm.In step 22, find the registry key of application protocol, write down the hashing algorithm sign that this kind agreement should be used in this list item.For example: the hashing algorithm of WWW agreement is designated the address transition of PAT mode, (this hashing algorithm sign has been specified and has been used the address transition of mode one to one and the hashing algorithm of NetBios agreement is designated NAT_NetBios, and defined Hash location, suppose that first row of specifying in the two-dimensional array store), the hashing algorithm of ILS agreement is designated NAT_ILS and (has also specified the address transition of mode one to one, specify the secondary series of two-dimensional array to store), if do not find the protocol registration list item, use the hashing algorithm of acquiescence, reality has been used the PAT hash.In other words, can not register the WWW agreement, the hashing algorithm of Shi Yonging remains the PAT mode at last.
Step 24: search converting unit.Get source address (port) information of message, remove to search address conversioning unit according to the hashing algorithm sign of determining in the step 23, if do not find, just create a new address conversioning unit, the hashing algorithm sign of also having used step 23 to determine during establishment according to the address transition of configuration.Privately owned address (port) and legal Internet address (port) information have been write down in this address conversioning unit.
Step 25:, the source address of message is converted to legal Internet address according to the information of address conversioning unit record.
When data message by public network during to flow process that private network is transmitted:
Step 31: search the application protocol registration table.Because message mails to internal host from the Internet server, the source port of message should be well-known port, gets message IP protocol number and source port and searches the application protocol registry key.
Step 32: determine hashing algorithm.
Step 33: the definite address transition hashing algorithm of getting according to message of destination address, destination interface and previous step is searched the address transition record to the address conversioning unit the inside, if there is not corresponding address transition hash table, then do not carry out the NAT conversion, message is directly transmitted.
Step 34:,, be private net address with the destination address and the port translation of message according to the information of address conversioning unit record if found corresponding address conversioning unit.
Need to prove that in concrete enforcement of the present invention, described two-dimensional array also can replace with two tables, based on two tables support simultaneously under the PAT pattern that one to one it content that comprises is in the address conversion method with multi-to-multi:
Hash (HASH) algorithm that application protocol type that at first definite address transition is supported and the pairing address transition of this agreement should adopt; Set up conversion table and port address translation (pat) table one to one then, wherein, the one-to-one address conversion table is used to store the index point that points to the one-to-one address converting unit, and the port address conversion table is used to store the index point that points to the port address converting unit; Like this, when the message that transmits is carried out address transition, IP protocol number and port numbers according to message are determined the application protocol type, determine the hashing algorithm that it is corresponding according to the application protocol type again, if the application protocol of message correspondence needs man-to-man address transition, find the index point that points to the address transition record according to the pairing hashing algorithm of this message application protocol at conversion table one to one, thereby finish man-to-man address transition; If the application protocol of message correspondence need be supported the address transition of PAT mode, find the index point that points to the port address converting unit according to the hashing algorithm of message protocol correspondence at the port address conversion table, thereby finish the conversion of IP address and port.
For above-mentioned conversion table one to one, be designated as the IP address in public network IP address pond under the one dimension of this table, another ties up subscript, for supporting the protocol type of conversion one to one; For the port address conversion table, be designated as the IP address in public network IP address pond under the one dimension of this table, be designated as the public network port numbers under another dimension, can certainly be for having the sign of one-to-one relationship or other and public network port numbers not to have the sign of one-to-one relationship with the public network port numbers, when it doesn't matter, adopt other method to obtain the public network port numbers in this sign and public network port numbers.

Claims (8)

1, under the PAT pattern, support simultaneously one to one and the address conversion method of multi-to-multi, comprising:
Step 1: determine the hash HASH algorithm that application protocol type that address transition supports and the pairing address transition of this agreement should adopt;
Step 2: set up an array of indexes, this array is a two-dimensional array, and be divided into two parts, be respectively conversion portion and port address conversion PAT part one to one, wherein, the one-to-one address conversion portion is used to store the index point that points to the one-to-one address converting unit, and the port address conversion portion is used to store the index point that points to the port address converting unit; Be designated as the IP address in public network IP address pond under the one dimension of array; Another ties up subscript, for the conversion portion one to one of array, for supporting the protocol type of conversion one to one, for the port address conversion portion, for the public network port numbers sign of one-to-one relationship being arranged;
Step 3: when the message that transmits is carried out address transition, if the application protocol of message correspondence needs man-to-man address transition, find the index point that points to the address transition record according to the pairing hashing algorithm of the application protocol of this message correspondence at the conversion portion one to one of array of indexes, thereby finish man-to-man address transition; If the application protocol of message correspondence need be supported the address transition of PAT mode, hashing algorithm according to this agreement correspondence finds the index point that points to the port address converting unit at the port address conversion portion of array of indexes, thereby finishes the conversion of IP address and port.
2, method according to claim 1 is characterized in that described step 3 also comprises: IP protocol number and port numbers according to message are determined the application protocol type, determine the hashing algorithm that it is corresponding according to the application protocol type again.
3, according to the described method of claim 2, it is characterized in that, according to determined application protocol type, when message mails to Internet by private network, address transition is a public network IP address with private network IP address transition, to this, step 3 is described to be finished man-to-man address transition and realizes by following process: the one dimension of determining array according to the protocol type of message at the conversion portion one to one of array, in the public network IP address of this dimension, adopt the hashing algorithm of agreement correspondence to determine that one of them address is the address after shifting.
4, according to the described method of claim 2, it is characterized in that, when the conversion of message IP address is from private network IP address during to the conversion of public network IP address, the described conversion of finishing IP address and port of step 3 realizes by following process: at the port address conversion portion of array, the hashing algorithm that adopts the agreement correspondence is in the one dimension by the public network IP address sign of array, determine the address after one of them address is for conversion, utilize the new port this hashing algorithm is determined conversion in another dimension of array after again.
5, according to claim 3 or 4 described methods, it is characterized in that step 3 also comprises: set up the corresponding converting unit of this conversion, described converting unit is used for the storing IP information of address conversion, this information comprises private network IP address, the private network port numbers of message, public network IP address after the conversion, public network port numbers, the protocol type of message.
6, method according to claim 5, it is characterized in that, when the conversion of message IP address is from public network IP address during to the conversion of private network IP address, step 3 is described finishes man-to-man IP address transition, and the conversion of finishing IP address and port realizes by following process: according to the agreement and the corresponding hashing algorithm thereof of message employing, in array, find corresponding array element, index point according to this array element storage, find the converting unit of this pointed, find private network IP address and private network port numbers after the conversion according to converting unit.
7, under the PAT pattern, support simultaneously one to one and the address conversion method of multi-to-multi, comprising:
Steps A 1: determine the hash HASH algorithm that application protocol type that address transition supports and the pairing address transition of this agreement should adopt;
Steps A 2: set up conversion table and port address conversion pat table one to one, wherein, the one-to-one address conversion table is used to store the index point that points to the one-to-one address converting unit, and the port address conversion table is used to store the index point that points to the port address converting unit; For conversion table one to one, be designated as the IP address in public network IP address pond under the one dimension of this table, another ties up subscript, is to support the protocol type of conversion one to one; For the port address conversion table, be designated as the IP address in public network IP address pond under the one dimension of this table, another dimension is designated as the sign that one-to-one relationship is arranged with the public network port numbers down;
Steps A 3: when the message that transmits is carried out address transition, if the application protocol of message correspondence needs man-to-man address transition, find the index point that points to the address transition record according to the pairing hashing algorithm of the application protocol of this message correspondence at conversion table one to one, thereby finish man-to-man address transition; If the application protocol of message correspondence need be supported the address transition of PAT mode, find the index point that points to the port address converting unit according to the hashing algorithm of this agreement correspondence at the port address conversion table, thereby finish the conversion of IP address and port.
8, method according to claim 7, it is characterized in that described steps A 3 also comprises: IP protocol number and port numbers according to message are determined the application protocol type, determine the hashing algorithm that it is corresponding according to the application protocol type again.
CN 02128928 2002-08-21 2002-08-21 Address conversion method for simultaneously supporting one-to-one and many-to-many under the PAT mode Expired - Fee Related CN1235368C (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN 02128928 CN1235368C (en) 2002-08-21 2002-08-21 Address conversion method for simultaneously supporting one-to-one and many-to-many under the PAT mode

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN 02128928 CN1235368C (en) 2002-08-21 2002-08-21 Address conversion method for simultaneously supporting one-to-one and many-to-many under the PAT mode

Publications (2)

Publication Number Publication Date
CN1477825A CN1477825A (en) 2004-02-25
CN1235368C true CN1235368C (en) 2006-01-04

Family

ID=34143886

Family Applications (1)

Application Number Title Priority Date Filing Date
CN 02128928 Expired - Fee Related CN1235368C (en) 2002-08-21 2002-08-21 Address conversion method for simultaneously supporting one-to-one and many-to-many under the PAT mode

Country Status (1)

Country Link
CN (1) CN1235368C (en)

Families Citing this family (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN100461823C (en) * 2006-06-08 2009-02-11 华为技术有限公司 Monocast addressing system and method in digital TV network
CN103024089B (en) * 2011-09-20 2016-02-17 中国电信股份有限公司 Method for network address translation and equipment
WO2013053407A1 (en) * 2011-10-14 2013-04-18 Telefonica, S.A A method and a system to detect malicious software
CN102594942B (en) * 2012-02-23 2014-05-14 汉柏科技有限公司 Method and system for achieving network address translation
CN103945014B (en) * 2013-01-21 2017-09-26 中国科学院声学研究所 Multiplexed port method and network address translation apparatus under a kind of PAT patterns
CN105356618B (en) * 2015-12-04 2018-06-26 国网冀北电力有限公司 the fault oscillograph networking method of integrated monitoring system
WO2018018607A1 (en) * 2016-07-29 2018-02-01 深圳市赛亿科技开发有限公司 Method and device for fixed conversion of transmission protocol based on message protocol identification
CN106789666B (en) * 2016-11-22 2020-05-08 东软集团股份有限公司 Method and device for determining converted port
CN111083247B (en) * 2019-12-06 2022-07-12 北京天融信网络安全技术有限公司 Address conversion method, device, equipment and storage medium

Also Published As

Publication number Publication date
CN1477825A (en) 2004-02-25

Similar Documents

Publication Publication Date Title
CN1118167C (en) System and method for using domain names to route data sent to a destination on a network
CN1170401C (en) Apparatus and method for distributing interconnected network protocol address to network interface card
CN1217520C (en) Device for converting internet protocol address and household network system using same
CN1255975C (en) Method for selecting route for grouping in route apparatus
CN1564989A (en) High speed MAC address search engine
CN1235368C (en) Address conversion method for simultaneously supporting one-to-one and many-to-many under the PAT mode
CN1889572A (en) Internet protocol address distributing method and dynamic main machine configuration protocol relay
CN102098355B (en) Cloud service-based IPv6 (internet protocol version 6)/IPv4 (internet protocol version 4) translation method with communication initiated by IPv6 party
CN1859304A (en) Method for realizing neighbour discovery
CN1297927C (en) Message intermediate item system possessing level topological structure and message transmission method
CN1926840A (en) Address and port number abstraction when setting up a connection between at least two computational devices
CN101075933A (en) Method for studying MAC address and network element apparatus
CN1567907A (en) A method for utilizing network address resource
CN1753411A (en) Improved method for assigning network identifiers using interface identifiers
CN1878147A (en) Method for balancing load between multi network cards of network file system server
CN1157898C (en) method for internet communication
CN101030934A (en) Method for spanning heterogeneous network mobile telecommunication based on two-way tunnel
CN1992675A (en) Method for guarantying interconnection between network address conversion apparatus and external network
JP2000112851A (en) Dynamic domain name system and method for managing dynamic domain name
CN1152516C (en) Method for finding out IP network node
CN1398090A (en) Tunnel encapsulation method for wireless VPN
CN1697396A (en) Method for realizing local virtual private network based on firewall
CN1499781A (en) Second layer exchanging and processing method to second layer frame spreading virtual local net label
CN1859420A (en) Device and method for obtaining IPV6 prefix
CN1525713A (en) Sorting addresses in a domain name server

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
C17 Cessation of patent right
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20060104

Termination date: 20110821