Method and apparatus for discovering Internet addresses

• US 20060120293A1
• Filed: 12/07/2004
• Published: 06/08/2006
• Est. Priority Date: 12/07/2004
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Wing, Daniel G.
• Granted Patent: US 7,483,393 B2
• Time in Patent Office: Days
• US Class Current: 370/241
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/2564 for a higher-layer protocol, e.g. for session initiation protocol [SIP]
• CPC Class Codes: H04L 61/2575 using address mapping retrieval, e.g. simple traversal of user datagram protocol through session traversal utilities for NAT [STUN]
• CPC Class Codes: H04L 61/2578 without involvement of the NAT server

Abstract

Local address return services reduce the burden on central address return servers. A local client determines whether an intermediary Network Address Translator (NAT) resides between a local NAT and a public Internet network. The local address return service is enabled when no intermediary NAT resides between the local NAT and the public Internet network. The local address return service is disabled and the central address return service is used when an intermediary NAT resides between the local NAT and the public Internet network. In one embodiment, the local client is a Simple Traversal of User Datagram Protocol (UDP) Through Network Address Translators (NATS) (STUN) client and the local and central address return services are STUN servers.

Claims

1. A method for discovering Internet Protocol (IP) addresses, comprising:

determining whether an intermediary Network Address Translator (NAT) resides between a local NAT and a public Internet network;

enabling a local address return service when no intermediary NAT resides between the local NAT and a public Internet network; and

disabling the local address return service and using a remote address return service when the intermediary NAT resides between the local NAT and a public Internet network.

2. The method according to claim 1 including:

sending a packet through the local NAT to the remote address return service;

enabling the local address return service when a returned IP address from the remote address return service matches an IP address assigned to the local NAT; and

disabling the local address return service and using the remote address return service when the returned IP address does not match the IP address assigned to the local NAT.

3. The method according to claim 1 including using Simple Traversal of User Datagram Protocol (UDP) Through Network Address Translators (NATS) (STUN) servers for both the local address return service and the remote address return service.

4. The method according to claim 3 including operating a STUN client in the local NAT to determine whether the intermediary NAT resides between the local NAT and the public Internet network.

5. The method according to claim 4 including using the local STUN server to listen for address return requests over an internal private interface in the local NAT and not listening for address return requests over a public interface in the local NAT.

6. The method according to claim 1 including:

using the local address return service to identify an IP address and port number for the local NAT when the local address return service is enabled; and

using the remote address return service to identify an IP address and port number for the intermediary NAT when the local address return service is disabled.

7. The method according to claim 1 including:

trying to contact one or more public address return services;

enabling the local address return service when none of the public address return services are available;

trying periodically to re-contact the one or more public address return services; and

disabling the local address return service and using one of the public address return services when one of the public address return services is contacted and the intermediary NAT resides between the local NAT and the public Internet network.

8. A network processing device, comprising:

a processor operating a client that determines whether the network processing device operates within a public network or operates within a private network, the processor enabling or disabling a local address discovery service depending upon whether the network processing device operates within the public network or within the private network.

9. The network processing device according to claim 8 wherein the processor operates a Network Address Translator (NAT) that receives Internet Protocol (IP) packets from endpoints, reformats the IP packets with an IP address and User Datagram Protocol (UDP) port number associated with the NAT, and sends the reformatted packets to the local address discovery service when the NAT operates within the public network.

10. The network processing device according to claim 8 including an internal interface for connecting to the private network and a public interface for connecting directly or indirectly to the public network.

11. The network processing device according to claim 10 wherein the local address discovery service only listens for address discovery requests through the internal interface.

12. The network processing device according to claim 8 wherein the local address discovery service is a Simple Traversal of User Datagram Protocol (UDP) Through Network Address Translators (NATS) (STUN) service and the client operating in the network processing device is a STUN client.

13. A network processing device according to claim 9 wherein the STUN service, the STUN client, and the NAT all reside within the network processing device.

14. The network processing device according to claim 8 wherein the processor enables the local address discovery service when a remote address discovery service cannot be contacted and conducts address discovery operations for endpoints on the private network until the remote address discovery service becomes available.

15. A network device, comprising:

memory storing a list of address locations for address discovery devices used for identifying addresses for Network Address Translators (NATs); and

a processor using a remote address discovery device to discover the address for an intermediate NAT when the intermediate NAT resides between a local NAT and a public network and using a local address discovery device to discover the address for the local NAT when no intermediate NAT resides between the local NAT and the public network.

16. The network device according to claim 15 wherein the processor first attempts to access the local address discovery device and then uses the remote address discovery device when the local address discovery device is disabled.

17. The network device according to claim 15 wherein the processor conducts Internet Protocol (IP) phone calls over a local private network using the local NAT address identified by the local address discovery device when no remote address discovery devices can be contacted.

18. The network device according to claim 15 wherein the processor sends a packet out to a selected one of the local or remote address discovery devices and receives back a reply packet that identifies a public address and port number associated with the local NAT or intermediate NAT that connects the network device to the public network.

19. The network device according to claim 17 wherein the local and remote address discovery device are Simple Traversal of User Datagram Protocol (UDP) Through (NATS) (STUN) servers.

20. A method for discovering an Internet Protocol (IP) address, comprising:

sending an inquiry through a local Network Address Translator (NAT) first to a local address return server to identify a public address for the local NAT; and

alternatively sending the inquiry through a remote NAT to a remote address return server to identify a public address for the remote NAT when the remote NAT is located between the local NAT and a public network.

21. The method according to claim 20 including sending the inquiry to the remote address return sever whenever the local address return server is disabled.

22. The method according to claim 20 including:

attempting to contact one or more remote address return servers operating on the public network;

sending an inquiry to the local address return server for the IP address of the local NAT when none of the remote address return servers can be contacted; and

using the IP address of the local NAT to conduct IP communications over a private network when the remote address servers cannot be contacted.

23. The method according to claim 20 including using Simple Traversal of User Datagram Protocol (UDP) Through Network Address Translators (NATS) (STUN) servers for the local and remote address return servers.

24. A system for discovering an Internet Protocol (IP) address, comprising:

means for sending an inquiry through a local Network Address Translator (NAT) first to a local address return server to identify a public address for the local NAT; and

means for alternatively sending the inquiry through a remote NAT to a remote address return server to identify a public address for the remote NAT when the remote NAT is located between the local NAT and a public network.

25. The system according to claim 24 including means for sending the inquiry to the remote address return sever whenever the local address return server is disabled.

26. The system according to claim 24 including:

means for attempting to contact one or more remote address return servers operating on the public network;

means for sending an inquiry to the local address return server for the IP address of the local NAT when none of the remote address return servers can be contacted; and

means for using the IP address of the local NAT to conduct IP communications over a private network when the remote address servers cannot be contacted.

27. The system according to claim 24 including means for using Simple Traversal of User Datagram Protocol (UDP) Through Network Address Translators (NATS) (STUN) servers for the local and remote address return servers.

28. An article of machine-readable media containing instructions for discovering an Internet Protocol (IP) address, the instructions when executed:

sending an inquiry through a local Network Address Translator (NAT) first to a local address return server to identify a public address for the local NAT; and

alternatively sending the inquiry through a remote NAT to a remote address return server to identify a public address for the remote NAT when the remote NAT is located between the local NAT and a public network.

29. The article of machine-readable media according to claim 28 including instructions when executed sending the inquiry to the remote address return sever whenever the local address return server is disabled.

30. The article of machine-readable media according to claim 28 including instructions when executed:

attempting to contact one or more remote address return servers operating on the public network;

sending an inquiry to the local address return server for the IP address of the local NAT when none of the remote address return servers can be contacted; and

using the IP address of the local NAT to conduct IP communications over a private network when the remote address servers cannot be contacted.

31. The article of machine-readable media according to claim 28 including instructions when executed using Simple Traversal of User Datagram Protocol (UDP) Through Network Address Translators (NATS) (STUN) servers for the local and remote address return servers.