Systems and methods for virtualizing customer-premises equipment

• US 10,200,282 B1
• Filed: 11/16/2016
• Issued: 02/05/2019
• Est. Priority Date: 03/26/2014
• Status: Active Grant

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: Sidebottom, Greg, Pascucci, Jason R., Mallya, Raghavendra, Lima, Paulo, Ries, Steffen, Gao, Yue
• Primary Examiner(s): Kim, Hee Soo
• Application Number:
  US15/352,831
• Time in Patent Office: 811 Days
• Field of Search: 709238
• CPC Class Codes: H04L 2101/622 Layer-2 addresses, e.g. medium access control [MAC] addresses
• CPC Class Codes: H04L 45/72 Routing based on the source address
• CPC Class Codes: H04L 45/74 Address processing for routing
• CPC Class Codes: H04L 61/103 across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP]
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 61/2525 Translation at a client
• CPC Class Codes: H04L 61/255 Maintenance or indexing of mapping tables
• CPC Class Codes: H04L 61/2567 for reachability, e.g. inquiring the address of a correspondent behind a NAT server

Abstract

An apparatus may (1) receive, at the service provider'"'"'s network, at least one flow of network traffic from a remote device included in a user'"'"'s private network, (2) identify, within the flow of network traffic, at least one potentially non-unique private address that represents the remote device with respect to the user'"'"'s private network, (3) determine, at least one unique routable address that represents the remote device with respect to the service provider'"'"'s network based at least in part on a network interface assigned to the user'"'"'s private network, the potentially non-unique private address, and the address-translation table, and then (4) translate, in response to determining the unique routable address, the potentially non-unique private address to the unique routable address to facilitate routing return network traffic to the remote device in connection with the flow of network traffic. Various other apparatuses, systems, and methods are also disclosed.

Claims

1. An apparatus comprising:

a storage device that stores an address-translation table that specifies unique routable addresses that represents remote devices with respect to a service provider'"'"'s network; and

at least one processing unit communicatively coupled to the storage device, wherein the processing unit;

receives, at the service provider'"'"'s network, at least one flow of network traffic from a remote device included in a user'"'"'s private network;

identifies, within the flow of network traffic, at least one potentially non-unique private address that represents the remote device with respect to the user'"'"'s private network;

determines at least one unique routable address that represents the remote device with respect to the service provider'"'"'s network based at least in part on a network interface assigned to the user'"'"'s private network, the potentially non-unique private address, and the address-translation table;

translates, in response to determining the unique routable address, the potentially non-unique private address to the unique routable address to facilitate routing return network traffic to the remote device in connection with the flow of network traffic; and

forwards the return network traffic to the remote device based at least in part on the unique routable address.

2. The apparatus of claim 1, wherein the processing unit:

identifies the address-translation table at the network interface assigned to the user'"'"'s private network; and

determines, by looking up the potentially non-unique private address in the address-translation table, the unique routable address.

3. The apparatus of claim 1, wherein the processing unit maintains the address-translation table in connection with the network interface assigned to the user'"'"'s private network.

4. The apparatus of claim 1, wherein the processing unit forwards, upon translating the potentially non-unique private address to the unique routable address, the flow of network traffic to a service delivery gateway included in the service provider'"'"'s network to facilitate servicing the flow of network traffic.

5. The apparatus of claim 4, wherein the processing unit:

identifies, within the flow of network traffic at the service delivery gateway, at least one request for a device-specific service provided by the service provider'"'"'s network;

determines, based at least in part on the unique routable address, a media access control address of the remote device included in the user'"'"'s private network;

determines, based at least in part on the request and the media access control address of the remote device, the device-specific service that corresponds to the remote device included in the user'"'"'s private network; and

provides, in response to determining the device-specific service, the device-specific service to the remote device via the network interface.

6. The apparatus of claim 4, wherein the processing unit:

determines, at the service delivery gateway, that the flow of network traffic is destined for the Internet;

translates, in response to determining that the flow of network traffic is destined for the Internet, the unique routable address to a globally routable address to enable the Internet to route return network traffic to the remote device in connection with the flow of network traffic; and

forwards, upon translating the unique routable address to a globally routable address, the flow of network traffic to the Internet to facilitate servicing the flow of network traffic.

7. The apparatus of claim 1, wherein processing unit:

receives, at the service provider'"'"'s network, at least one additional flow of network traffic destined for a remote device included in the user'"'"'s private network;

identifies, within the additional flow of network traffic, the unique routable address that represents the remote device with respect to the service provider'"'"'s network;

determines, based at least in part on the unique routable address, that the network interface is assigned to the user'"'"'s private network;

determines, based at least in part on the network interface and the unique routable address, the potentially non-unique private address that represents the remote device with respect to the user'"'"'s private network; and

translates, in response to determining the potentially non-unique private address, the unique routable address to the potentially non-unique private address to facilitate routing the additional flow of network traffic from the network interface to the remote device included in the user'"'"'s private network.

8. The apparatus of claim 7, wherein the processing unit:

identifies, at a service delivery gateway included in the service provider'"'"'s network, a routing table that specifies a path that leads to the network interface assigned to the user'"'"'s private network;

determines, by looking up the unique routable address in the routing table, the path that leads to the network interface assigned to the user'"'"'s private network; and

forwards, upon determining the path that leads to the network interface, the additional flow of network traffic to the network interface via the path specified in the routing table.

9. The apparatus of claim 7, wherein the processing unit forwards, upon translating the unique routable address to the potentially non-unique private address, the additional flow of network traffic to the remote device included in the user'"'"'s private network via the potentially non-unique private address.

10. The apparatus of claim 1, wherein the unique routable address points to the network interface assigned to the user'"'"'s private network.

11. The apparatus of claim 1, wherein processing unit:

receives, at the service provider'"'"'s network, at least one additional flow of network traffic from an additional remote device included in an additional user'"'"'s private network;

identifies, within the additional flow of network traffic, at least one additional potentially non-unique private address that represents the remote device with respect to the additional user'"'"'s private network;

determines based at least in part on an additional network interface assigned to the additional user'"'"'s private network and the additional potentially non-unique private address, at least one additional unique routable address that represents the additional remote device with respect to the service provider'"'"'s network; and

translates, in response to determining the additional unique routable address, the additional potentially non-unique private address to the additional unique routable address to facilitate routing return network traffic to the additional remote device in connection with the additional flow of network traffic.

12. The apparatus of claim 1, wherein the processing unit statically maps the potentially non-unique private address to the unique routable address.

13. The apparatus of claim 1, wherein the flow of network traffic received from the remote device comprises at least one of:

at least one packet destined for the Internet; and

at least one packet destined for a service delivery gateway included in the service provider'"'"'s network in connection with a service provided by the service provider'"'"'s network.

14. The apparatus of claim 13, wherein the service provided by the service provider'"'"'s network comprises at least one of:

a device-specific parental-controls policy; and

a device-specific media-delivery service.

15. The apparatus of claim 1, wherein the potentially non-unique private address is unique with respect to the user'"'"'s private network and non-unique with respect to the service provider'"'"'s network.

16. The apparatus of claim 1, wherein the network interface assigned to the user'"'"'s private network is uniquely specific to the user'"'"'s private network in a one-to-one relationship.

17. A network device comprising:

a storage device that stores an address-translation table that specifies unique routable addresses that represents remote devices with respect to a service provider'"'"'s network; and

at least one processing unit communicatively coupled to the storage device, wherein the processing unit;

receives, at the service provider'"'"'s network, at least one flow of network traffic from a remote device included in a user'"'"'s private network;

identifies, within the flow of network traffic, at least one potentially non-unique private address that represents the remote device with respect to the user'"'"'s private network;

determines at least one unique routable address that represents the remote device with respect to the service provider'"'"'s network based at least in part on a network interface assigned to the user'"'"'s private network, the potentially non-unique private address, and the address-translation table;

translates, in response to determining the unique routable address, the potentially non-unique private address to the unique routable address to facilitate routing return network traffic to the remote device in connection with the flow of network traffic; and

forwards the return network traffic to the remote device based at least in part on the unique routable address.

18. The network device of claim 17, wherein the processing unit:

identifies the address-translation table at the network interface assigned to the user'"'"'s private network; and

determines, by looking up the potentially non-unique private address in the address-translation table, the unique routable address.

19. The network device of claim 17, wherein the processing unit forwards, upon translating the potentially non-unique private address to the unique routable address, the flow of network traffic to a service delivery gateway included in the service provider'"'"'s network to facilitate servicing the flow of network traffic.

20. A router comprising:

a storage device that stores an address-translation table that specifies unique routable addresses that represents remote devices with respect to a service provider'"'"'s network; and

at least one processing unit communicatively coupled to the storage device, wherein the processing unit;

receives, at the service provider'"'"'s network, at least one flow of network traffic from a remote device included in a user'"'"'s private network;

identifies, within the flow of network traffic, at least one potentially non-unique private address that represents the remote device with respect to the user'"'"'s private network;

determines at least one unique routable address that represents the remote device with respect to the service provider'"'"'s network based at least in part on a network interface assigned to the user'"'"'s private network, the potentially non-unique private address, and the address-translation table;

translates, in response to determining the unique routable address, the potentially non-unique private address to the unique routable address to facilitate routing return network traffic to the remote device in connection with the flow of network traffic; and

forwards the return network traffic to the remote device based at least in part on the unique routable address.