INTELLIGENT NETWORK ADDRESS TRANSLATOR AND METHODS FOR NETWORK ADDRESS TRANSLATION

• US 20110035479A1
• Filed: 10/20/2010
• Published: 02/10/2011
• Est. Priority Date: 10/15/2002
• Status: Active Grant

• Current Assignee: Nomadix, Inc. (Nippon Telegraph and Telephone Corporation)
• Original Assignee: Nomadix, Inc. (Nippon Telegraph and Telephone Corporation)
• Inventors: Singh, Bikramjit, Paunikar, Amit
• Granted Patent: US 8,051,206 B2
• Time in Patent Office: Days
• US Class Current: 709/222
• CPC Class Codes: H04L 45/745 Address table lookup; Address filtering
• CPC Class Codes: H04L 61/106 across networks, e.g. mapping telephone numbers to data network addresses
• CPC Class Codes: H04L 61/25 of the same type
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 61/2557 Translation policies or rules
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 61/5046 Resolving address allocation conflicts; Testing of addresses testing when self-assigning an address H04L61/5092

Abstract

An intelligent network address translation system and methods for intelligent network address translation. In one embodiment, a network packet is received from a host device, and a stored record associated with the host device is identified. The stored record includes information relating to connection parameters associated with the host device. Using the stored record, a processor determines whether the network packet should be assigned a dedicated address. If so, then the network packet is transmitted using communication parameters including a dedicated IP address. If the packet should not be assigned a dedicated address, then the packet is transmitted using connection parameters including a default public IP address and a port number.

Claims

1. A method of network address translation, performed using a local network system associated with a shared public IP address and at least one dedicated public IP address, the method comprising:

receiving a network packet at a network port;

determining, using a processor in communication with the network port, whether the network packet should be assigned a shared public IP address or a dedicated public IP address, the determination being based at least in part on data relating to a host device associated with the network packet; and

transmitting the network packet to an external network system, using communication parameters including either a dedicated public IP address if the network packet should be assigned a dedicated public IP address based on the determination, or a shared public IP address if the network packet should be assigned a shared public IP address based on the determination.

2. The method of claim 1, wherein the data relating to the host device associated with the network packet comprises data stored in a connection lookup table, the data indicating communication parameters associated with an address in the network packet, the address being indicative of the host device.

3. The method of claim 2, wherein the connection lookup table further comprises information indicating which host computers require a dedicated address.

4. The method of claim 2, further comprising:

receiving an incoming data packet from the external network system;

locating stored connection parameters in the connection lookup table corresponding to the incoming data packet; and

transmitting the incoming data packet, using the stored connection parameters.

5. The method of claim 1, wherein transmitting the network packet from the computer system comprises transmitting an outgoing packet based on the network packet, the outgoing packet comprising a header address information different from the address information of the network packet.

6. A network address translation system configured to provide network address translation services in a communications network, the system comprising:

a processor;

a computer readable storage device in communication with the processor;

one or more network interfaces in communication with the processor, at least one of the network interfaces being associated on the network address translation system with a shared public IP address; and

an address selector module configured to perform, on the processor, a method comprising;

receiving a packet from a local network via one of the network interfaces;

identifying a host computer associated with the received packet;

identifying a record stored in the computer readable storage device, the stored record associating an identifier of the host computer with an indicator of public IP address usage; and

determining whether to transmit the received packet using the shared public IP address and a selected port, or whether to transmit the received packet using a different public IP address, the determination being based on the indicator of public IP address usage of the identified stored record.

7. The network address translation system of claim 6, wherein the information included in the received packet identifies the host device.

8. The network address translation system of claim 6, wherein the stored record further indicates that the different public IP address is dedicated to the host device.

9. The network address translation system of claim 6, further comprising an outgoing connection lookup module that communicates with a connection lookup table to identify the stored record, wherein the stored record further comprises connection parameters associated with the host device.

10. The network address translation system of claim 8, further comprising a connection creation routine that stores the stored record in the connection lookup table.

11. The network address translation system of claim 8, further comprising:

an incoming connection lookup module that communicates with the connection lookup table to determine connection parameters for incoming data packets based on the source address of the incoming data packets; and

a reverse translator module that performs reverse network address translation on the incoming data packets based on the stored record in the connection lookup table.

12. The network address translation system of claim 6, further comprising a packet type detection module configured to receive an initial outgoing data packet from a host, determine whether the initial outgoing data packet is associated with a protocol requiring a globally unique IP address, and allocate a dedicated IP address to the host if the initial outgoing data packet is associated with a protocol requiring a globally unique IP address.

13. A method of translating data packets being sent between a private network and a public network, the method comprising:

receiving a data packet from the private network;

determining, using a processor, whether a host device associated with the received data packet is associated with a Network Address Translation scheme or a Network Port Address Translation scheme, the determination being based on data stored in a computer-readable storage device in communication with the processor, the data including an identifier of the host device;

translating the received data packet in accordance with a Network Address Translation scheme or a Network Port Address Translation scheme based on the determination, thereby producing a translated packet; and

transmitting the translated packet to the public network.

14. The method of claim 13, wherein translating the received data packet in accordance with a Network Port Address Translation scheme comprises:

allocating a source port; and

generating the translated packet based on the received data packet, wherein the source IP address of the translated packet is a shared public IP address, and wherein the source port of the translated packet is the allocated source port.

15. The method of claim 13, wherein translating the received data packet in accordance with a Network Address Translation scheme comprises:

identifying a public IP address from a public IP address pool; and

generating the translated packet based on the received data packet, wherein the source IP address of the translated packet is the identified public IP address.

16. The method of claim 13, wherein the data stored in the computer-readable storage device comprises data indicating an association between the host device and a previous selection of a Network Address Translation scheme or a Network Port Address Translation scheme.

17. The method of claim 13, wherein the data stored in the computer-readable storage device comprises data stored in a connection lookup table.

18. The method of claim 13, wherein the determination is further based on a protocol associated with the received data packet.

19. The method of claim 13, further comprising:

receiving a second data packet from the public network;

reverse-translating, using the processor, the second data packet, based on the data stored in the computer-readable storage device, thereby producing a reverse-translated second packet; and

transmitting the reverse-translated second packet to the private network.

20. The method of claim 19, wherein reverse-translating the second data packet comprises generating the reverse-translated second packet based on the second data packet, the reverse-translated second packet indicating the host device as the intended recipient.