WO2022116848A1

WO2022116848A1 - Packet transmission method and apparatus, computer device, and storage medium

Info

Publication number: WO2022116848A1
Application number: PCT/CN2021/131445
Authority: WO
Inventors: 周娜; 黄华桥; 谭国权
Original assignee: 武汉绿色网络信息服务有限责任公司
Priority date: 2020-12-01
Filing date: 2021-11-18
Publication date: 2022-06-09
Also published as: CN112333298A; CN112333298B

Abstract

Disclosed in the present application are a packet transmission method and apparatus, a computer device, and a storage medium, the packet transmission method comprising: on the basis of 5-tuple information of a forward packet, acquiring a corresponding public network IP address and a public network port; respectively converting the source IP address and source port of the forward packet to the corresponding public network IP address and public network port, establishing a forward flow table on the basis of the 5-tuple information of the forward packet, establishing a reverse flow table on the basis of the destination IP address, destination port, and transport layer protocol of the forward packet and the corresponding public network IP address and public network port, and associating the forward flow table and the reverse flow table; and sending the NAT translated forward packet to a corresponding public network device. By means of associating the destination IP address and destination port of a forward packet with a public network IP address and public network port during a NAT translation process, the present application enables a private network device to access multiple different public network devices by means of one public network IP address, in order to reduce the occupied public network IP address resources.

Description

Message transmission method, device, computer equipment and storage medium

technical field

The present application relates to the field of communication technologies, and in particular, to a message transmission method, device, computer equipment and storage medium.

Background technique

As the number of computers connected to the Internet continues to soar, public IP address resources are increasingly stretched. Generally, even for large-scale local area network users with hundreds of computers, when they apply for public network IP addresses, the allocated public network IP addresses are only a few or a dozen. Obviously, such a small number of public network IP addresses cannot meet the needs of network users at all, so the Network Address Translation (NAT) technology was born.

NAT is the process of converting an IP address in a data packet header to another IP address. Currently, when NAT technology is used for packet transmission, the same private network device can only communicate with one public network device through a public network IP address and public network port. When a private network device needs to access multiple public network devices, it needs to occupy multiple public network IP addresses and public network ports, which speeds up the consumption of public network IP address resources.

SUMMARY OF THE INVENTION

Embodiments of the present application provide a message transmission method, device, computer equipment, and storage medium, so as to solve the problem that when a private network device needs to access multiple public network devices, it needs to occupy multiple public network IP addresses and public network ports, thereby speeding up It solves the technical problem of the consumption of public network IP address resources.

In a first aspect, the present application provides a message transmission method, which is applied to a NAT conversion device, and the message transmission method includes:

Receive forward packets sent by private network devices;

Obtain the corresponding public network IP address and public network port according to the quintuple information of the forward message;

NAT conversion is performed on the forward message to convert the source IP address of the forward message into a corresponding public network IP address, and the source port of the forward message is converted into a corresponding public network port, And establish a forward flow table according to the quintuple information of the forward message, and establish a reverse flow table according to the destination IP address, destination port and transport layer protocol of the forward message and the corresponding public network IP address and public network port. a forward flow table, associating the forward flow table with the reverse flow table;

According to the destination IP address of the NAT-translated forward packet, send the NAT-translated forward packet to the corresponding public network device;

Receive the reverse packet sent by the corresponding public network device according to the forward packet converted by NAT, obtain the corresponding reverse flow table according to the quintuple information of the reverse packet, and obtain the corresponding reverse flow table according to the corresponding reverse flow table. Get the forward flow table associated with the corresponding reverse flow table;

Obtain the private network IP address and private network port of the corresponding private network device from the forward flow table associated with the corresponding reverse flow table, and perform NAT translation on the reverse packet to convert the reverse packet Convert the destination IP address of the reverse packet into the private network IP address of the corresponding private network device, and convert the destination port of the reverse packet into the private network port of the corresponding private network device;

According to the destination IP address of the reversed packet after the NAT transformation, the reversed packet after the NAT transformation is sent to the private network device.

In some embodiments, the private network device is a user terminal, and the public network device is a server.

In some embodiments, the message transmission method includes:

receiving a first forward packet sent by the first user terminal;

Obtain the first public network IP address and the first public network port according to the quintuple information of the first forward packet;

Perform NAT translation on the first forward packet, so as to convert the source IP address of the first forward packet into the first public network IP address, and convert the source port of the first forward packet Convert to the first public network port, and establish a first forward flow table according to the quintuple information of the first forward packet, according to the destination IP address of the first forward packet, destination port and The transport layer protocol, the first public network IP address and the first public network port establish a first reverse flow table, and associate the first forward flow table with the first reverse flow table;

According to the destination IP address of the first forward packet after the NAT transformation, the first forward packet after the NAT transformation is sent to the first server;

Receive a first reverse packet sent by the first server according to the first forward packet after NAT conversion, obtain a first reverse flow table according to the quintuple information of the first reverse packet, and The first reverse flow table obtains a first forward flow table associated with the first reverse flow table;

Obtain the first private network IP address and first private network port of the first user terminal from the first forward flow table, and perform NAT translation on the first reverse packet, so as to convert the first reverse Converting the destination IP address of the message to the first private network IP address, and converting the destination port of the first reverse message to the first private network port;

Send the NAT-translated first reverse packet to the first user terminal according to the first private network IP address.

In some embodiments, the message transmission method further includes:

receiving a second forward packet sent by the first user terminal;

The first public network IP address and the first public network port are obtained according to the quintuple information of the second forward packet, and the destination IP address of the second forward packet is the same as the first public network port. The destination IP address of the packet is different;

Perform NAT translation on the second forward packet, so as to convert the source IP address of the second forward packet into the first public network IP address, and convert the source port of the second forward packet Convert to the first public network port, and establish a second forward flow table according to the quintuple information of the second forward packet, according to the destination IP address of the second forward packet, destination port and The transport layer protocol, the first public network IP address and the first public network port establish a second reverse flow table, and associate the second forward flow table with the second reverse flow table;

According to the destination IP address of the second forward packet after the NAT transformation, the second forward packet after the NAT transformation is sent to the second server;

Receive a second reverse packet sent by the second server according to the second forward packet after NAT conversion, obtain a second reverse flow table according to the quintuple information of the second reverse packet, and obtain a second reverse flow table according to The second reverse flow table obtains a second forward flow table associated with the second reverse flow table;

Obtain the first private network IP address and first private network port of the first user terminal from the second forward flow table, and perform NAT translation on the second reverse packet to convert the second reverse Converting the destination IP address of the message to the first private network IP address, and converting the destination port of the second reverse message to the first private network port;

Send the NAT-translated second reverse packet to the first user terminal according to the first private network IP address.

In some embodiments, the corresponding reverse flow table is obtained according to the quintuple information of the forward packet, and the forward flow table associated with the corresponding reverse flow table is obtained according to the corresponding reverse flow table The steps include:

Query the reverse flow table according to the quintuple information of the reverse packet;

If there is a reverse flow table hit by the reverse packet, obtain a forward flow table associated with the reverse flow table hit by the reverse packet according to the reverse flow table hit by the reverse packet to the flow table.

In some embodiments, the message transmission method further includes:

Delete the reverse flow table that is not hit by the reverse packet within the preset time, and delete the forward flow table associated with the reverse flow table that is not hit by the reverse packet within the preset time.

In some embodiments, the step of deleting the NAT entry in the NAT flow table that is not hit by the forward message within a preset time includes:

The preset time is determined according to the transport layer protocol of the forward packet recorded in the reverse flow table.

In a second aspect, the present application also provides a message transmission device, which is applied to a NAT conversion device, and the message transmission device includes a receiving unit, a NAT unit and a forwarding unit, wherein:

The receiving unit is configured to receive the forward message sent by the private network device;

The NAT unit is used to obtain the corresponding public network IP address and public network port according to the quintuple information of the forward message;

The NAT unit is further configured to perform NAT conversion on the forward message, so as to convert the source IP address of the forward message into a corresponding public network IP address, and convert the source port of the forward message For the corresponding public network port, establish a forward flow table according to the quintuple information of the forward message, according to the destination IP address, destination port and transport layer protocol of the forward message and the corresponding public network IP The address and the public network port establish a reverse flow table, and associate the forward flow table with the reverse flow table;

The forwarding unit is used to send the forward message after the NAT conversion to the corresponding public network device according to the destination IP address of the forward message after the NAT conversion;

The NAT unit is further configured to receive a reverse message sent by the corresponding public network device according to the forward message converted by the NAT, obtain a corresponding reverse flow table according to the quintuple information of the reverse message, and Obtain the forward flow table associated with the corresponding reverse flow table according to the corresponding reverse flow table;

The NAT unit is also used to obtain the private network IP address and the private network port of the corresponding private network device from the forward flow table associated with the corresponding reverse flow table, and perform NAT translation on the reverse message to obtain the corresponding private network IP address and private network port. Convert the destination IP address of the reverse packet to the private network IP address of the corresponding private network device, and convert the destination port of the reverse packet to the private network port of the corresponding private network device;

The forwarding unit is further configured to send the NAT-translated reverse packet to the private network device according to the destination IP address of the NAT-translated reverse packet.

In a third aspect, the present application also provides a computer device, the computer device comprising:

one or more processors;

memory; and

one or more applications;

The one or more application programs are stored in the memory and configured to be executed by the processor to implement any one of the above message transmission methods.

In a fourth aspect, the present application further provides a computer-readable storage medium on which a computer program is stored, and the computer program is loaded by a processor to execute the steps in any of the foregoing message transmission methods.

In this application, the source IP address, source port, destination IP address and destination port of the forward packet are translated during the NAT translation process, so that the same private network device can use a public network IP address and a public network port to many-to-many access to different public network devices, thereby reducing the occupied public network IP address resources.

Description of drawings

In order to illustrate the technical solutions in the embodiments of the present application more clearly, the following briefly introduces the drawings that are used in the description of the embodiments. Obviously, the drawings in the following description are only some embodiments of the present application. For those skilled in the art, other drawings can also be obtained from these drawings without creative effort.

FIG. 1 is a schematic diagram of a scenario of a message transmission system in an embodiment of the present application;

2 is a schematic flowchart of a message transmission method in an embodiment of the present application;

3 is a schematic flowchart of a message transmission method in an embodiment of the present application;

FIG. 4 is a schematic flowchart of a message transmission method in an embodiment of the present application;

FIG. 5 is a schematic structural diagram of a message transmission apparatus in an embodiment of the present application;

FIG. 6 is a schematic structural diagram of a computer device provided in an embodiment of the present application.

Reference number:

100, private network equipment; 200, NAT conversion equipment; 300, public network equipment; 400, message transmission device; 401, receiving unit; 402, NAT unit; 403, forwarding unit; 501, processor; 502, memory; 503 , a power supply; 504, an input unit.

Detailed ways

The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, but not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative work fall within the protection scope of the present application.

In the description of this application, it should be understood that the terms "center", "longitudinal", "lateral", "length", "width", "thickness", "upper", "lower", "front", " The orientation or positional relationship indicated by "rear", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", "outside", etc. is based on the orientation shown in the drawings Or the positional relationship is only for the convenience of describing the present application and simplifying the description, rather than indicating or implying that the indicated device or element must have a specific orientation, be constructed and operated in a specific orientation, and therefore should not be construed as a limitation on the present application. In addition, the terms "first" and "second" are only used for descriptive purposes, and should not be construed as indicating or implying relative importance or implying the number of indicated technical features. Thus, features defined as "first", "second" may expressly or implicitly include one or more of said features. In the description of the present application, "plurality" means two or more, unless otherwise expressly and specifically defined.

In this application, the word "exemplary" is used to mean "serving as an example, illustration, or illustration." Any embodiment described in this application as "exemplary" is not necessarily to be construed as preferred or advantageous over other embodiments. The following description is presented to enable any person skilled in the art to make and use the present application. In the following description, details are set forth for the purpose of explanation. It is to be understood that one of ordinary skill in the art can realize that the present application may be practiced without the use of these specific details. In other instances, well-known structures and procedures have not been described in detail so as not to obscure the description of the present application with unnecessary detail. Therefore, this application is not intended to be limited to the embodiments shown but is to be accorded the widest scope consistent with the principles and features disclosed herein.

The following first introduces some basic concepts involved in the embodiments of the present invention:

In practical applications, NAT technology is mainly used to realize the function of private network accessing public network. This way of representing more private IP addresses by using a small number of public IP addresses will help to slow down the exhaustion of available public IP addresses. The private IP address refers to the IP address of the internal network or host, and the public IP address refers to the globally unique IP address on the Internet.

Embodiments of the present application provide a message transmission method, device, server, and storage medium, which are described in detail below.

As shown in FIG. 1, FIG. 1 is a schematic diagram of a scenario of a message transmission system in an embodiment of the present invention. The message transmission system may include a private network device 100, a NAT translation device 200 for network address translation, and a public network device 300 .

It should be noted that, in this embodiment of the present application, the private network device 100 refers to a device located on a private network (intranet), and the public network device 300 refers to a device located on an external network (public network).

In the embodiment of the present application, the NAT conversion device 200 is mainly used to obtain forward packets sent by the private network device 100 , perform NAT translation on the forward packets and forward them to the public network device 300 , and receive the public network device 300 The sent reverse packet is sent to the private network device 100 after NAT translation is performed on the reverse packet, so as to realize packet transmission between the private network device 100 and the public network device 300 . The NAT function in the NAT conversion device 200 may be implemented by a NAT device such as a router or a firewall.

It can be understood that, after the public network device 300 receives the forward message transmitted by the NAT conversion device 200, the public network device 300 will respond accordingly according to the received forward message, so as to send a reverse direction corresponding to the forward message. The packet is sent to the NAT translation device 200. After the NAT translation device 200 performs NAT translation on the reverse packet, it forwards the translated reverse packet to the corresponding private network device according to the destination IP address of the NAT-translated reverse packet. 100.

It should be noted that the NAT device may be a router or a firewall and other devices. From the perspective of translation mode, NAT can be divided into PAT (Port Address Translation, address translation with port) and NO-PAT (Not Port Address Translation, address translation without port). Among them, in NO-PAT mode, an external network IP address can only be assigned to one internal and external IP address for translation at the same time; while in PAT mode, one external network IP address can be assigned to multiple intranet IP addresses at the same time. The NAT that appears in this application refers to the PAT mode.

Those skilled in the art can understand that the application scenario shown in FIG. 1 is only an application scenario of the solution of the present application, and does not constitute a limitation on the application scenario of the solution of the present application. Other application environments may also include other application scenarios than those shown in FIG. More private network devices 100 are shown. For example, FIG. 1 only shows that the message transmission system includes one private network device 100. It can be understood that the message transmission system may also include multiple other private network devices that can access the server. 100, which is not specifically limited here.

It should be noted that the schematic diagram of the scenario of the message transmission system shown in FIG. 1 is only an example. The message transmission system and the scenario described in the embodiments of the present invention are for the purpose of illustrating the technical solutions of the embodiments of the present invention more clearly, not It constitutes a limitation on the technical solutions provided by the embodiments of the present invention. Those of ordinary skill in the art know that, with the evolution of the message transmission system and the emergence of new service scenarios, the technical solutions provided by the embodiments of the present invention are similar to similar technical problems. Be applicable.

First, an embodiment of the present invention provides a message transmission method. The execution body of the message transmission method is the message transmission apparatus 400 and is applied to the NAT translation device 200 .

As shown in FIG. 2, FIG. 2 is a schematic flowchart of a message transmission method in an embodiment of the present invention, and the message transmission method includes:

S101. Receive a forward packet sent by the private network device 100.

S102: Acquire a corresponding public network IP address and public network port according to the quintuple information of the forward packet.

It can be understood that the quintuple is a communication term, and the quintuple information of the forward packet refers to the source IP address, source port, destination IP address, destination port and transport layer protocol of the forward packet.

The source IP address of the forward packet refers to the private network IP address of the private network device 100 that sends the forward packet, the source port refers to the private network port from which the private network device 100 sends the forward packet, and the destination IP address is Indicates the address of the terminal to be accessed by the forward packet, the destination port refers to the access port of the terminal to be accessed by the forward packet, and the transport layer protocol refers to the TCP/IP protocol suite (TCP/IP Protocol Suite, TCP/IP) or the user Datagram Protocol (User Datagram Protocol, UDP) and other communication protocols.

For example, as shown in Table 1, the meaning is that a private network device 100 with a source IP address of 192.168.1.1 communicates with a terminal with an IP address of 121.14.88.76 and an access port of 80 through the source port 10000 using the TCP protocol. to connect.

源IP地址source IP address	源端口source port	目的IP地址destination IP address	目的端口destination port	传输层协议transport layer protocol
192.168.1.1192.168.1.1	1000010000	121.14.88.76121.14.88.76	8080	TCPTCP

Table 1

S103. Perform NAT translation on the forward packet, so as to convert the source IP address of the forward packet into a corresponding public network IP address, and convert the source port of the forward packet into a corresponding public network port, and establish a forward flow table according to the quintuple information of the forward message, according to the destination IP address, destination port and transport layer protocol of the forward message and the corresponding public network IP address and public network port A reverse flow table is established, and the forward flow table is associated with the reverse flow table.

It can be understood that, after receiving the forward packet, the NAT translation device 200 performs NAT translation on the source IP address and source port of the forward packet, and simultaneously establishes a forward flow table, a reverse flow table, and a forward flow table and the forward flow table. The corresponding relationship of the reverse flow table, so as to associate the destination IP address and destination port of the forward packet with the corresponding public network IP address and public network port. The forward flow table provides the basis for the forwarding of forward packets, and the reverse The forward flow table provides the basis for forwarding reverse packets.

As shown in Table 2, for example, when the private network device 100 sends the public network device 300 whose IP address is 121.14.88.76 and the access port is 80, the source IP address of the forward packet is 192.168.1.1, and the forward packet The source port of the forward packet is 10000, the destination IP address of the forward packet is 129.88.88.88, the destination port of the forward packet is 50, and the public IP address assigned to the forward packet is 61.159.62.130. The public network port to which the document is allocated is 30. Table 2 is the forward flow table established during NAT translation.

As shown in Table 3, after NAT translation is performed on the forward packets, the source IP address of the forward packets is 61.159.62.130, the source port of the forward packets is 30, and the destination IP address of the forward packets is 129.88.88.88, the destination port of forward packets is 50.

As shown in Table 4, Table 4 is a reverse flow table established during NAT translation of forward packets.

源IP地址source IP address	源端口source port	目的IP地址destination IP address	目的端口destination port	传输层协议transport layer protocol
192.168.1.1192.168.1.1	1000010000	129.88.88.88129.88.88.88	5050	TCPTCP

Table 2

源IP地址source IP address	源端口source port	目的IP地址destination IP address	目的端口destination port	传输层协议transport layer protocol
61.159.62.13061.159.62.130	3030	129.88.88.88129.88.88.88	5050	TCPTCP

table 3

公网IP地址Public IP address	公网端口public network port	目的IP地址destination IP address	目的端口destination port	传输层协议transport layer protocol
61.159.62.13061.159.62.130	3030	129.88.88.88129.88.88.88	5050	TCPTCP

Table 4

S104: Send the NAT-translated forward packet to the corresponding public network device 300 according to the destination IP address of the NAT-translated forward packet.

It can be understood that the destination IP address of the forward packet after NAT translation is the destination IP address of the forward packet before NAT translation, and the NAT translation device 200 can use the destination IP address of the forward packet after NAT translation. , and send the NAT-translated forward packet to the corresponding public network device 300 .

S105: Receive a reverse packet sent by the corresponding public network device 300 according to the forward packet converted by NAT, obtain a corresponding reverse flow table according to the quintuple information of the reverse packet, and obtain a corresponding reverse flow table according to the corresponding reverse packet. Get the forward flow table associated with the corresponding reverse flow table from the flow table.

It can be understood that the reverse packet is a reply packet sent by the public network device 300 after receiving the forward packet sent by the private network device 100, and the source IP address of the reverse packet is the purpose of the corresponding forward packet. IP address, the source port of the reverse packet is the destination port of the corresponding forward packet, so the corresponding reverse flow table can be obtained according to the quintuple information of the reverse packet, and then the corresponding reverse flow table can be obtained. The forward flow table associated with the corresponding reverse flow table.

S106: Obtain the private network IP address and private network port of the corresponding private network device 100 from the forward flow table associated with the corresponding reverse flow table, and perform NAT translation on the reverse packet to convert the reverse The destination IP address of the reverse packet is converted into the private network IP address of the corresponding private network device 100 , and the destination port of the reverse packet is converted into the private network port of the corresponding private network device 100 .

It should be noted that the source IP address and source port of the corresponding forward packet are recorded in the forward flow table, and the source IP address of the forward packet is the private network of the private network device 100 that sends the forward packet. IP address, the source port of the forward packet is the private network port of the private network device 100 that sends the forward packet, that is, the private network IP address of the private network device 100 is the same as the source IP address of the forward packet, and the private network device 100 is the same as the source IP address of the forward packet. The network port is the same as the source port of forward packets.

As shown in Table 5, for example, the source IP address of the reverse packet is 121.14.88.76, the source port of the reverse packet is 80, and the destination IP address of the reverse packet is the public IP address, that is, 61.159.62.130. The destination port of the reverse packet is the public network port, which is 30. The IP address of the private network device 100 to be accessed by the reverse packet is the address of the private network device 100 that sends the forward packet, which is 192.168.1.1. The port of the private network device 100 that needs to be accessed by the reverse packet is the port through which the private network device 100 sends the forward packet, that is, 1000.

As shown in Table 6, after the reverse packet is NATed, the source IP address of the reverse packet is 121.14.88.76, the source port of the reverse packet is 80, and the destination IP address of the reverse packet is 192.168.1.1, the destination port of the first forward packet is 1000.

源IP地址source IP address	源端口source port	目的IP地址destination IP address	目的端口destination port	传输层协议transport layer protocol
121.14.88.76121.14.88.76	8080	61.159.62.13061.159.62.130	3030	TCPTCP

table 5

Table 6

源IP地址source IP address	源端口source port	目的IP地址destination IP address	目的端口destination port	传输层协议transport layer protocol
121.14.88.76121.14.88.76	8080	192.168.1.1192.168.1.1	1000010000	TCPTCP

S107: Send the NAT-translated reverse packet to the private network device 100 according to the destination IP address of the NAT-translated reverse packet.

It should be noted that in this application, the source IP address and source port of the forward packet are subjected to NAT translation during the NAT translation process, and the destination IP address and destination port of the forward packet are compared with the public network IP address and public network IP address. The network ports are associated, so that the same private network device 100 can access multiple different public network devices 300 through one public network IP address and public network port, thereby reducing occupied public network IP address resources.

In one embodiment, the private network device 100 is a user terminal, and the public network device 300 is a server.

In this embodiment of the present application, the user terminal is a terminal located in a private network (intranet), and the user terminal may be a general-purpose computer device or a special-purpose computer device. In a specific implementation, the user terminal may be a desktop computer, a portable computer, a network server, a PDA (Personal Digital ASistant, PDA), a mobile phone, a tablet computer, a wireless terminal device, a communication device, an embedded device, etc., which is not limited in this embodiment. Type of user terminal.

In the embodiment of the present application, the server is a server on an external network (public network). The server may be an independent server, or a server network or server cluster composed of multiple servers. For example, the server described in the embodiment of the present invention, It includes, but is not limited to, a computer, a network host, a single network server, a set of multiple network servers, or a cloud server composed of multiple servers. Among them, the cloud server is composed of a large number of computers or network servers based on cloud computing.

As shown in FIG. 3, FIG. 3 is a schematic flowchart of a message transmission method according to an embodiment of the present invention. The message transmission method includes:

S201. Receive a first forward packet sent by a first user terminal.

It should be noted that the first user terminal may be any user terminal, and the first forward packet is any forward packet sent by the first user terminal.

S202. Acquire a first public network IP address and a first public network port according to the quintuple information of the first forward packet.

It should be noted that the first public network IP address refers to the public network IP address allocated when the first user terminal accesses the server on the external network, and the first public network port refers to the public network IP address allocated when the first user terminal accesses the server on the external network. public network port.

S203. Perform NAT translation on the first forward packet, so as to convert the source IP address of the first forward packet into the first public network IP address, and convert the source IP address of the first forward packet into the first public network IP address. The source port is converted into the first public network port, and a first forward flow table is established according to the quintuple information of the first forward packet, and the destination IP address, destination The port and the transport layer protocol, the first public network IP address and the first public network port establish a first reverse flow table, and associate the first forward flow table with the first reverse flow table.

S204. Send the first forward packet after the NAT transformation to the first server according to the destination IP address of the first forward packet after the NAT transformation.

It can be understood that the first server is a server that needs to be accessed by the first forward packet, and the first server may be any server among many servers.

S205. Receive a first reverse packet sent by the first server according to the first forward packet converted by NAT, and obtain a first reverse flow table according to the quintuple information of the first reverse packet, and obtain a first forward flow table associated with the first reverse flow table according to the first reverse flow table.

It can be understood that the first reverse packet is a reply packet made by the first server according to the received first forward packet, and the first private network IP address of the first user terminal is the same as the first forward packet. The source IP addresses are the same, and the first private network port is the same as the source port of the first forward packet.

S206. Obtain the first private network IP address and the first private network port of the first user terminal from the first forward flow table, and perform NAT translation on the first reverse packet to convert the first The destination IP address of the reverse packet is converted into the first private network IP address, and the destination port of the first reverse packet is converted into the first private network port.

S207. Send the NAT-translated first reverse packet to the first user terminal according to the first private network IP address.

As shown in FIG. 4, FIG. 4 is a schematic flowchart of a message transmission method in an embodiment of the present invention, and the message transmission method further includes:

S301. Receive a second forward packet sent by a first user terminal.

It should be noted that the second forward packet is any forward packet other than the first forward packet among the forward packets sent by the first user terminal.

S302. Acquire the first public network IP address and the first public network port according to the quintuple information of the second forward packet, and the destination IP address of the second forward packet is the same as the first public network port. The destination IP addresses of a forward packet are different.

It can be understood that the destination IP address of the second forward packet is different from the destination IP address of the first forward packet, that is, the IP address of the server that the second forward packet needs to access is different from that of the first forward packet. The IP address of the accessed server is different.

S303. Perform NAT translation on the second forward packet, so as to convert the source IP address of the second forward packet into the first public network IP address, and convert the source IP address of the second forward packet into the first public network IP address. The source port is converted into the first public network port, and a second forward flow table is established according to the quintuple information of the second forward packet, and the destination IP address and destination of the second forward packet are The port and the transport layer protocol and the first public network IP address and the first public network port establish a second reverse flow table, and associate the second forward flow table with the second reverse flow table.

S304. Send the second forward packet after the NAT transformation to the second server according to the destination IP address of the second forward packet after the NAT transformation.

S305. Receive a second reverse packet sent by the second server according to the second forward packet converted by NAT, and obtain a second reverse flow table according to the quintuple information of the second reverse packet, and obtain a second forward flow table associated with the second reverse flow table according to the second reverse flow table.

S306. Obtain the first private network IP address and the first private network port of the first user terminal from the second forward flow table, and perform NAT translation on the second reverse packet to convert the second The destination IP address of the reverse packet is converted to the first private network IP address, and the destination port of the second reverse packet is converted to the first private network port.

S307. Send the NAT-translated second reverse packet to the first user terminal according to the first private network IP address.

It should be noted that different forward packets sent by the same user terminal can access different servers through a public network IP address and a public network port, thereby reducing the occupied public network IP address resources.

In one embodiment, the step S105 includes:

In one embodiment, the message transmission method further includes:

It can be understood that by periodically clearing the reverse flow table that has not been hit by reverse packets for a long time and the forward flow table associated with the reverse flow table that has not been hit by reverse packets for a long time, the storage of the NAT flow table can be reduced. pressure.

In an embodiment, the preset time is determined according to the transport layer protocol of the forward packet recorded in the reverse flow table.

It should be noted that the reverse flow table records the transport layer protocol of the reverse packet. Generally speaking, the preset time of the NAT entry of the forward packet using the TCP transport layer protocol is longer, and the UDP transport layer is used. The preset time of the NAT entry of the forward packet of the protocol is relatively short, and the specific preset time can be selected according to the actual situation.

In order to better implement the message transmission method in the embodiment of the present invention, on the basis of the message transmission method, a message transmission apparatus 400 is further provided in the embodiment of the present invention, and the message transmission apparatus 400 is applied to a NAT conversion device 200.

In one embodiment, the NAT translation device 200 may be a NAT translation device 200 in a home network system.

As shown in FIG. 5 , the message transmission apparatus 400 includes a receiving unit 401, a NAT unit 402 and a forwarding unit 403, wherein:

The receiving unit 401 is configured to receive the forward message sent by the private network device 100;

The NAT unit 402 is configured to obtain the corresponding public network IP address and public network port according to the quintuple information of the forward message;

The NAT unit 402 is further configured to perform NAT translation on the forward packet, so as to convert the source IP address of the forward packet into a corresponding public network IP address, and convert the source port of the forward packet into a corresponding public network IP address. Convert to the corresponding public network port, and establish a forward flow table according to the quintuple information of the forward message, according to the destination IP address, destination port and transport layer protocol of the forward message and the corresponding public network The IP address and the public network port establish a reverse flow table, and associate the forward flow table with the reverse flow table;

The forwarding unit 403 is configured to send the forward message converted by the NAT to the corresponding public network device 300 according to the destination IP address of the forward message converted by the NAT;

The NAT unit 402 is further configured to receive a reverse packet sent by the corresponding public network device 300 according to the forward packet converted by NAT, and obtain a corresponding reverse flow table according to the quintuple information of the reverse packet. , and obtain the forward flow table associated with the corresponding reverse flow table according to the corresponding reverse flow table;

The NAT unit 402 is further configured to obtain the private network IP address and private network port of the corresponding private network device 100 from the forward flow table associated with the corresponding reverse flow table, and perform NAT translation on the reverse packet. , so as to convert the destination IP address of the reverse packet into the private network IP address of the corresponding private network device 100, and convert the destination port of the reverse packet into the private network port of the corresponding private network device 100 ;

The forwarding unit 403 is further configured to send the NAT-translated reverse packet to the private network device 100 according to the destination IP address of the NAT-translated reverse packet.

In one embodiment, the private network device 100 is a user terminal, the public network device 300 is a server, and the NAT translation device 200 may be a NAT translation device 200 in a home network system.

In one embodiment, the receiving unit 401 is configured to receive the first forward packet sent by the first user terminal;

The NAT unit 402 is configured to obtain the first public network IP address and the first public network port according to the quintuple information of the first forward packet;

The NAT unit 402 is further configured to perform NAT translation on the first forward packet, so as to convert the source IP address of the first forward packet into the first public network IP address, and convert the first forward packet into the first public network IP address. The source port of a forward packet is converted to the first public network port, and a first forward flow table is established according to the quintuple information of the first forward packet, and according to the first forward packet The destination IP address, destination port and transport layer protocol as well as the first public network IP address and the first public network port establish a first reverse flow table, and the first forward flow table and the first reverse flow table Associated;

The forwarding unit 403 sends the first forward message after the NAT conversion to the first server according to the destination IP address of the first forward message after the NAT conversion;

The NAT unit 402 is further configured to receive the first reverse packet sent by the first server according to the first forward packet converted by NAT, and obtain the first reverse packet according to the quintuple information of the first reverse packet. a reverse flow table, and obtain a first forward flow table associated with the first reverse flow table according to the first reverse flow table;

The NAT unit 402 is further configured to obtain the first private network IP address and the first private network port of the first user terminal from the first forward flow table, and perform NAT translation on the first reverse packet, To convert the destination IP address of the first reverse packet to the first private network IP address, and convert the destination port of the first reverse packet to the first private network port;

The forwarding unit 403 is further configured to send the NAT-translated first reverse packet to the first user terminal according to the first private network IP address.

In one embodiment, the receiving unit 401 is configured to receive a second forward packet sent by the first user terminal, where the destination IP address of the second forward packet is the same as the destination IP address of the first forward packet. different addresses;

The NAT unit 402 is configured to acquire the first public network IP address and the first public network port according to the quintuple information of the second forward packet;

The NAT unit 402 is further configured to perform NAT translation on the second forward packet, so as to convert the source IP address of the second forward packet into the first public network IP address, and convert the second forward packet into the first public network IP address. The source port of the second forward packet is converted to the first public network port, and a second forward flow table is established according to the quintuple information of the second forward packet, and according to the second forward packet The destination IP address, destination port and transport layer protocol as well as the first public network IP address and the first public network port establish a second reverse flow table, and the second forward flow table and the second reverse flow table Associated;

The forwarding unit 403 is used to send the second forward message after the NAT conversion to the second server according to the destination IP address of the second forward message after the NAT conversion;

The NAT unit 402 is further configured to receive a second reverse packet sent by the second server according to the second forward packet converted by the NAT, and obtain the first reverse packet according to the quintuple information of the second reverse packet. Two reverse flow tables, and obtain a second forward flow table associated with the second reverse flow table according to the second reverse flow table;

The NAT unit 402 is further configured to obtain the first private network IP address and the first private network port of the first user terminal from the second forward flow table, and perform NAT translation on the second reverse packet, To convert the destination IP address of the second reverse packet to the first private network IP address, and convert the destination port of the second reverse packet to the first private network port;

The forwarding unit 403 is further configured to send the NAT-translated second reverse packet to the first user terminal according to the first private network IP address.

In one embodiment, the NAT unit 402 is further configured to query the reverse flow table according to the quintuple information of the reverse packet;

In one embodiment, the NAT unit 402 is further configured to delete the reverse flow table that is not hit by the reverse message within the preset time, and delete the reverse flow table that is not hit by the reverse message within the preset time. The forward flow table associated with the flow table.

The embodiment of the present application also provides a computer device that integrates any NAT conversion device provided by the embodiment of the present application, and the computer device includes:

one or more processors 501;

memory 502; and

one or more applications;

The one or more application programs are stored in the memory 502 and are configured to be performed by the processor 501 to execute the steps of the message transmission method described in any of the foregoing message transmission method embodiments .

The embodiments of the present application further provide a computer device that integrates any of the message transmission apparatuses provided by the embodiments of the present application. As shown in FIG. 6 , it shows a schematic structural diagram of a computer device involved in an embodiment of the present application, specifically:

The computer device may include a processor 501 of one or more processing cores, a memory 502 of one or more computer-readable storage media, a power supply 503 and an input unit 504 and other components. Those skilled in the art can understand that the computer device structure shown in FIG. 6 does not constitute a limitation to the computer device, and may include more or less components than the one shown, or combine some components, or arrange different components. in:

The processor 501 is the control center of the computer equipment, and uses various interfaces and lines to connect various parts of the entire computer equipment, by running or executing the software programs and/or modules stored in the memory 502, and calling the software programs stored in the memory 502. Data, perform various functions of computer equipment and process data, so as to conduct overall monitoring of computer equipment.

Optionally, the processor 501 may include one or more processing cores; preferably, the processor 501 may integrate an application processor and a modem processor, wherein the application processor mainly processes the operating system, user interface, and application programs, etc. , the modem processor mainly deals with wireless communication. It can be understood that, the above-mentioned modulation and demodulation processor may not be integrated into the processor 501 .

The memory 502 can be used to store software programs and modules, and the processor 501 executes various functional applications and data processing by running the software programs and modules stored in the memory 502 . The memory 502 may mainly include a stored program area and a stored data area, wherein the stored program area may store an operating system, an application program (such as a sound playback function, an image playback function, etc.) required for at least one function, and the like; Data created by the use of computer equipment, etc. Additionally, memory 502 may include high-speed random access memory, and may also include non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other volatile solid state storage device. Accordingly, the memory may also include a memory controller to provide access to the memory 502 by the processor 501 .

The computer equipment also includes a power supply 503 for supplying power to various components. Preferably, the power supply 503 can be logically connected to the processor 501 through a power management system, so that functions such as charging, discharging, and power consumption management are implemented through the power management system. Power source 503 may also include one or more DC or AC power sources, recharging systems, power failure detection circuits, power converters or inverters, power status indicators, and any other components.

The computer device may also include an input unit 504 that may be used to receive input numerical or character information and generate keyboard, mouse, joystick, optical, or trackball signal input related to user settings and functional control.

Although not shown, the computer device may also include a display unit and the like, which will not be described herein again. Specifically, in this embodiment, the processor 501 in the computer device loads the executable files corresponding to the processes of one or more application programs into the memory 502 according to the following instructions, and the processor 501 executes them and stores them in the memory 502 . The application program in the memory 502, thereby realizing various functions, as follows:

Receive the forward message sent by the private network device 100;

According to the destination IP address of the NAT-translated forward packet, the NAT-translated forward packet is sent to the corresponding public network device 300;

Receive a reverse packet sent by the corresponding public network device 300 according to the forward packet converted by the NAT, obtain a corresponding reverse flow table according to the quintuple information of the reverse packet, and obtain a corresponding reverse flow table according to the corresponding reverse flow table obtains the forward flow table associated with the corresponding reverse flow table;

Obtain the private network IP address and private network port of the corresponding private network device 100 from the forward flow table associated with the corresponding reverse flow table, and perform NAT translation on the reverse packet to convert the reverse packet The destination IP address of the message is converted into the private network IP address of the corresponding private network device 100, and the destination port of the reverse message is converted into the private network port of the corresponding private network device 100;

The NAT-translated reverse packet is sent to the private network device 100 according to the destination IP address of the NAT-translated reverse packet.

Those of ordinary skill in the art can understand that all or part of the steps in the various methods of the above embodiments can be completed by instructions, or completed by instructions that control relevant hardware, and the instructions can be stored in a computer-readable storage medium, It is loaded and executed by the processor 501 .

To this end, an embodiment of the present application provides a computer-readable storage medium, and the storage medium may include: a read-only memory (ROM, Read Only Memory), a random access memory (RAM, Random Access Memory), a magnetic disk or an optical disk, etc. . A computer program is stored thereon, and the computer program is loaded by the processor 501 to execute the steps in any message transmission method provided by the embodiments of the present application. For example, the computer program loaded by the processor 501 may perform the following steps:

Receive the forward message sent by the private network device 100;

Receive the reverse packet sent by the corresponding public network device 300 according to the forward packet converted by the NAT, obtain the corresponding reverse flow table according to the quintuple information of the reverse packet, and obtain the corresponding reverse flow table according to the corresponding reverse flow table obtains the forward flow table associated with the corresponding reverse flow table;

In the above-mentioned embodiments, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, reference may be made to the above detailed description of other embodiments, and details are not repeated here.

During specific implementation, the above units or structures can be implemented as independent entities, or can be arbitrarily combined to be implemented as the same or several entities. For the specific implementation of the above units or structures, reference may be made to the foregoing method embodiments. No longer.

For the specific implementation of the above operations, reference may be made to the foregoing embodiments, and details are not described herein again.

The embodiments of the present application are described in detail above, and specific examples are used in this paper to illustrate the principles and implementations of the present application. The descriptions of the above embodiments are only used to help understand the methods and core ideas of the present application; at the same time, for Those skilled in the art, based on the idea of the present application, may have changes in the specific implementation manner and application scope. In conclusion, the contents of this specification should not be construed as a limitation on the present application.

Claims

A message transmission method, characterized in that, applied to a NAT conversion device, the message transmission method comprising:

Receive forward packets sent by private network devices;

Obtain the corresponding public network IP address and public network port according to the quintuple information of the forward message;

NAT conversion is performed on the forward message to convert the source IP address of the forward message into a corresponding public network IP address, and the source port of the forward message is converted into a corresponding public network port, And establish a forward flow table according to the quintuple information of the forward message, and establish a reverse flow table according to the destination IP address, destination port and transport layer protocol of the forward message and the corresponding public network IP address and public network port. a forward flow table, associating the forward flow table with the reverse flow table;

According to the destination IP address of the NAT-translated forward packet, send the NAT-translated forward packet to the corresponding public network device;

Receive the reverse packet sent by the corresponding public network device according to the forward packet converted by NAT, obtain the corresponding reverse flow table according to the quintuple information of the reverse packet, and obtain the corresponding reverse flow table according to the corresponding reverse flow table. Get the forward flow table associated with the corresponding reverse flow table;

Obtain the private network IP address and private network port of the corresponding private network device from the forward flow table associated with the corresponding reverse flow table, and perform NAT translation on the reverse packet to convert the reverse packet Convert the destination IP address of the reverse packet into the private network IP address of the corresponding private network device, and convert the destination port of the reverse packet into the private network port of the corresponding private network device;

According to the destination IP address of the reversed packet after the NAT transformation, the reversed packet after the NAT transformation is sent to the private network device.
The message transmission method according to claim 1, wherein the private network device is a user terminal, and the public network device is a server.
The message transmission method according to claim 2, wherein the message transmission method comprises:

receiving a first forward packet sent by the first user terminal;

Obtain the first public network IP address and the first public network port according to the quintuple information of the first forward packet;

Perform NAT translation on the first forward packet, so as to convert the source IP address of the first forward packet into the first public network IP address, and convert the source port of the first forward packet Convert to the first public network port, and establish a first forward flow table according to the quintuple information of the first forward packet, according to the destination IP address of the first forward packet, destination port and The transport layer protocol, the first public network IP address and the first public network port establish a first reverse flow table, and associate the first forward flow table with the first reverse flow table;

According to the destination IP address of the first forward packet after the NAT transformation, the first forward packet after the NAT transformation is sent to the first server;

Receive a first reverse packet sent by the first server according to the first forward packet after NAT conversion, obtain a first reverse flow table according to the quintuple information of the first reverse packet, and The first reverse flow table obtains a first forward flow table associated with the first reverse flow table;

Obtain the first private network IP address and first private network port of the first user terminal from the first forward flow table, and perform NAT translation on the first reverse packet, so as to convert the first reverse Converting the destination IP address of the message to the first private network IP address, and converting the destination port of the first reverse message to the first private network port;

Send the NAT-translated first reverse packet to the first user terminal according to the first private network IP address.
The message transmission method according to claim 3, wherein the message transmission method further comprises:

receiving a second forward packet sent by the first user terminal;

The first public network IP address and the first public network port are obtained according to the quintuple information of the second forward packet, and the destination IP address of the second forward packet is the same as the first public network port. The destination IP address of the packet is different;

Perform NAT translation on the second forward packet, so as to convert the source IP address of the second forward packet into the first public network IP address, and convert the source port of the second forward packet Convert to the first public network port, and establish a second forward flow table according to the quintuple information of the second forward packet, according to the destination IP address of the second forward packet, destination port and The transport layer protocol, the first public network IP address and the first public network port establish a second reverse flow table, and associate the second forward flow table with the second reverse flow table;

According to the destination IP address of the second forward packet after the NAT transformation, the second forward packet after the NAT transformation is sent to the second server;

Receive a second reverse packet sent by the second server according to the second forward packet after NAT conversion, obtain a second reverse flow table according to the quintuple information of the second reverse packet, and obtain a second reverse flow table according to The second reverse flow table obtains a second forward flow table associated with the second reverse flow table;

Obtain the first private network IP address and first private network port of the first user terminal from the second forward flow table, and perform NAT translation on the second reverse packet to convert the second reverse Converting the destination IP address of the message to the first private network IP address, and converting the destination port of the second reverse message to the first private network port;

Send the NAT-translated second reverse packet to the first user terminal according to the first private network IP address.
The message transmission method according to any one of claims 1 to 4, wherein the corresponding reverse flow table is obtained according to the quintuple information of the forward message, and the corresponding reverse flow table is obtained according to the quintuple information of the forward message. The step of obtaining the forward flow table associated with the corresponding reverse flow table by the flow table includes:

Query the reverse flow table according to the quintuple information of the reverse packet;

If there is a reverse flow table hit by the reverse packet, obtain a forward flow table associated with the reverse flow table hit by the reverse packet according to the reverse flow table hit by the reverse packet to the flow table.
The message transmission method according to claim 5, wherein the message transmission method further comprises:

Delete the reverse flow table that is not hit by the reverse packet within the preset time, and delete the forward flow table associated with the reverse flow table that is not hit by the reverse packet within the preset time.
The message transmission method according to claim 6, wherein,

The preset time is determined according to the transport layer protocol of the forward packet recorded in the reverse flow table.
A message transmission device, characterized in that, applied to a NAT conversion device, the message transmission device comprising a receiving unit, a NAT unit and a forwarding unit, wherein:

The receiving unit is configured to receive the forward message sent by the private network device;

The NAT unit is used to obtain the corresponding public network IP address and public network port according to the quintuple information of the forward message;

The NAT unit is further configured to perform NAT conversion on the forward message, so as to convert the source IP address of the forward message into a corresponding public network IP address, and convert the source port of the forward message For the corresponding public network port, establish a forward flow table according to the quintuple information of the forward message, according to the destination IP address, destination port and transport layer protocol of the forward message and the corresponding public network IP The address and the public network port establish a reverse flow table, and associate the forward flow table with the reverse flow table;

The forwarding unit is used to send the forward message after the NAT conversion to the corresponding public network device according to the destination IP address of the forward message after the NAT conversion;

The NAT unit is further configured to receive a reverse message sent by the corresponding public network device according to the forward message converted by the NAT, obtain a corresponding reverse flow table according to the quintuple information of the reverse message, and Obtain the forward flow table associated with the corresponding reverse flow table according to the corresponding reverse flow table;

The NAT unit is also used to obtain the private network IP address and the private network port of the corresponding private network device from the forward flow table associated with the corresponding reverse flow table, and perform NAT translation on the reverse message to obtain the corresponding private network IP address and private network port. Convert the destination IP address of the reverse packet to the private network IP address of the corresponding private network device, and convert the destination port of the reverse packet to the private network port of the corresponding private network device;

The forwarding unit is further configured to send the NAT-translated reverse packet to the private network device according to the destination IP address of the NAT-translated reverse packet.
A computer device, characterized in that the computer device comprises:

one or more processors;

memory; and

one or more application programs, wherein the one or more application programs are stored in the memory and configured to be executed by the processor to implement the messaging of any one of claims 1 to 7 method.
A computer-readable storage medium, characterized in that a computer program is stored thereon, and the computer program is loaded by a processor to execute the steps in the message transmission method according to any one of claims 1 to 7.