IPv4-IPv6 FTP application level gateway

• US 7,391,768 B1
• Filed: 05/13/2003
• Issued: 06/24/2008
• Est. Priority Date: 05/13/2003
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Moon, Bruce D., Samprathi, Ravikanth V.
• Primary Examiner(s): Kizou; Hassan
• Assistant Examiner(s): Rutkowski; Jeffrey M
• Application Number:
  US10/437,490
• Time in Patent Office: 1,869 Days
• Field of Search: 370/351, 370/389, 370/401, 370/352, 709/220, 709/219, 709/223
• US Class Current: 370/389
• CPC Class Codes: H04L 45/52 Multiprotocol routers
• CPC Class Codes: H04L 45/583 Stackable routers
• CPC Class Codes: H04L 61/251 between different IP versions
• CPC Class Codes: H04L 61/2542 involving dual-stack hosts
• CPC Class Codes: H04L 61/2564 for a higher-layer protocol, e.g. for session initiation protocol [SIP]
• CPC Class Codes: H04L 61/2585 through application level gateway [ALG]
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]

Abstract

Disclosed are methods and apparatus for handling FTP (file transfer protocol) control packets. In general terms, mechanisms are provided for facilitating FTP sessions between devices utilizing different protocols, such as IPv4 and IPv6. For example, FTP control packets from an IPv6 client to an IPv4 server are handled to facilitate such communication. Likewise, FTP control packets from an IPv4 client to an IPv6 server are handled to facilitate such communication. Communication is also facilitated when either or both of the client or server is in the form of a dual-stack device. To facilitate FTP session between devices having different protocols, FTP control packets between two different protocol devices are translated from one protocol to another protocol when required, e.g., from an IPv6 to an IPv4 format or visa versa.

Claims

1. A method for handling file transfer protocol (FTP) packets, comprising:

receiving an FTP packet that is being sent between an FTP client and an FTP server in a current FTP session, wherein the FTP client and FTP server use a different IPv4 or IPv6 protocol;

determining whether the FTP packet is being sent using an IPv4 protocol or an IPv6 protocol;

translating any addresses and FTP commands or replies from an IPv4 format to an IPv6 format or visa versa, based on the determination as to whether the FTP packet is being sent using an IPv4 protocol or an IPv6 protocol;

updating a next (NXT) value with the FTP packet'"'"'s SEQ value plus a size of the payload after translation, wherein the NXT value represents an expected ACK value of a return FTP packet sent in response to the FTP packet;

prior to updating the NXT value, determining that the FTP packet is valid if the FTP packet'"'"'s ACK value equals the NXT value;

updating a first offset value for translating from IPv4 to IPv6 or a second offset value for translating from IPv6 to IPv4 to correspond to a change in payload size of the FTP packet due to the translation if any;

prior to updating the first or second offset value, updating a SEQ value or an ACK value of the FTP packet based on the first or second offset value; and

forwarding the translated FTP packet to its destination if the FTP packet is determined to be valid.

2. A method as recited in claim 1, wherein the translation includes translating an active type FTP command or reply or translating a passive FTP command or reply.

3. A method as recited in claim 1, wherein the translation includes translating an FTP command that is an IPv4 PORT command into an IPv6 EPRT command or visa versa.

4. A method as recited in claim 3, wherein the translation includes translating an FTP command that is an IPv4 PASV command into an IPv6 EPSV command or visa versa.

5. A method as recited in claim 4, wherein the translation includes translating an IPv4 227 reply into an IPv6 229 reply or visa versa.

6. A method as recited in claim 5, wherein the translation includes translating an FTP command that is an IPv6 EPRT command into an IPv4 PORT command or visa versa.

7. A method as recited in claim 6, wherein the translation includes translating an FTP command that is an IPv6 EPSV command into an IPv4 PASV command or visa versa.

8. A method as recited in claim 7, wherein the translation includes translating an IPv6 229 reply into an IPv4 227 reply or visa versa.

9. A method as recited in claim 1, further comprising:

for each received FTP packet of the current FTP session, repeating the operations for determining, translating, updating the NXT value, determining whether the FTP packet is valid, updating the first or second offset value, updating the SEQ or ACK value of the FTP packet, and forwarding.

10. A method as recited in claim 9, wherein the first and second offset values are equal to zero at the start of the current FTP session and the first and the second offset value both remain constant if the size of the payload does not change for the each FTP packet.

11. A computer system operable to handle FTP packets, the computer system comprising:

one or more processors;

one or more memory, wherein at least one of the processors and memory are adapted for;

receiving an FTP packet that is being sent between an FTP client and an FTP server in a current FTP session, wherein the FTP client and FTP server use a different IPv4 or IPv6 protocol;

determining whether the FTP packet is being sent using an IPv4 protocol or an IPv6 protocol;

translating any addresses and FTP commands or replies from an IPv4 format to an IPv6 format or visa versa, based on the determination as to whether the FTP packet is being sent using an IPv4 protocol or an IPv6 protocol;

updating a next (NXT) value with the FTP packet'"'"'s SEQ value plus a size of the payload after translation, wherein the NXT value represents an expected ACK value of a return FTP packet sent in response to the FTP packet;

prior to updating the NXT value, determining whether the FTP packet is valid if the FTP packet'"'"'s ACK value equals the NXT value;

updating a first offset value for translating from IPv4 to IPv6 or a second offset value for translating from IPv6 to IPv4 to correspond to a change in payload size of the FTP packet due to the translation if any;

prior to updating the first or second offset value, updating a SEQ value or an ACK value of the FTP packet based on the first or second offset value; and

forwarding the translated FTP packet to its destination if the FTP packet is determined to be valid.

12. A computer system as recited in claim 11, wherein the translation includes translating an active type FTP command or reply or translating a passive FTP command or reply.

13. A computer system as recited in claim 11, wherein the translation includes translating an FTP command that is an IPv4 PORT command into an IPv6 EPRT command or visa versa.

14. A computer system as recited in claim 13, wherein the translation includes translating an FTP command that is an IPv4 PASV command into an IPv6 EPSV command or visa versa.

15. A computer system as recited in claim 14, wherein the translation includes translating an IPv4 227 reply into an IPv6 229 reply or visa versa.

16. A computer system as recited in claim 15, wherein the translation includes translating an FTP command that is an IPv6 EPRT command into an IPv4 PORT command or visa versa.

17. A computer system as recited in claim 16, wherein the translation includes translating an FTP command that is an IPv6 EPSV command into an IPv4 PASV command or visa versa.

18. A computer system as recited in claim 17, wherein the translation includes translating an IPv6 229 reply into an IPv4 227 reply or visa versa.

19. A computer system as recited in claim 11, wherein at least one of the processors and memory are further adapted for each FTP session:

for each received FTP packet of the current FTP session, repeating the operations for determining, translating, updating the NXT value, determining whether the FTP packet is valid, updating the first or second offset value, updating the SEQ or ACK value of the FTP packet, and forwarding.

20. A computer system as recited in claim 19, wherein the first and second offset values are equal to zero at the start of the current FTP session and the first and the second offset value both remain constant if the size of the payload does not change for the each FTP packet.

21. A computer program product for handling FTP packets, the computer program product comprising:

at least one computer readable medium;

computer program instructions stored within the at least one computer readable medium, the instructions when executed causes a computer to perform the following steps;

receiving an FTP packet that is being sent between an FTP client and an FTP server in a current FTP session, wherein the FTP client and FTP server use a different IPv4 or IPv6 protocol;

determining whether the FTP packet is being sent using an IPv4 protocol or an IPv6 protocol;

translating any addresses and FTP commands or replies from an IPv4 format to an IPv6 format or visa versa, based on the determination as to whether the FTP packet is being sent using an IPv4 protocol or an IPv6 protocol;

updating a next (NXT) value with the FTP packet'"'"'s SEQ value plus a size of the payload after translation, wherein the NXT value represents an expected ACK value of a return FTP packet sent in response to the FTP packet;

prior to updating the NXT value, determining whether the FTP packet is valid if the FTP packet'"'"'s ACK value equals the NXT value;

updating a first offset value for translating from IPv4 to IPv6 or a second offset value for translating from IPv6 to IPv4 to correspond to a change in payload size of the FTP packet due to the translation if any;

prior to updating the first or second offset value, updating a SEQ value or an ACK value of the FTP packet based on the first or second offset value; and

forwarding the translated FTP packet to its destination if the FTP packet is determined to be valid.

22. A computer program product as recited in claim 21, wherein the translation includes translating an active type FTP command or reply or translating a passive FTP command or reply.

23. A computer program product as recited in claim 21, wherein the translation includes translating an FTP command that is an IPv4 PORT command into an IPv6 EPRT command or visa versa.

24. A computer program product as recited in claim 23, wherein the translation includes translating an FTP command that is an IPv4 PASV command into an IPv6 EPSV command or visa versa.

25. A computer program product as recited in claim 24, wherein the translation includes translating an IPv4 227 reply into an IPv6 229 reply or visa versa.

26. A computer program product as recited in claim 25, wherein the translation operations are capable of translating an FTP command that is an IPv6 EPRT command into an IPv4 PORT command.

27. A computer program product as recited in claim 26, wherein the translation includes translating an FTP command that is an IPv6 EPSV command into an IPv4 PASV command or visa versa.

28. A computer program product as recited in claim 27, wherein the translation includes translating an IPv6 229 reply into an IPv4 227 reply or visa versa.

29. A computer program product as recited in claim 21, the method further comprising for each FTP session:

for each received FTP packet of the current FTP session, repeating the operations for determining, translating, updating the NXT value, determining whether the FTP packet is valid, updating the first or second offset value, updating the SEQ or ACK value of the FTP packet, and forwarding.

30. A computer program product as recited in claim 29, wherein the first and second offset values are equal to zero at the start of the current FTP session and the first and the second offset value both remain constant if the size of the payload does not change for the each FTP packet.

31. An apparatus for handling FTP packets, comprising:

means for receiving an FTP packet that is being sent between an FTP client and an FTP server in a current FTP session, wherein the FTP client and FTP server use a different IPv4 or IPv6 protocol;

means for determining whether the FTP packet is being sent using an IPv4 protocol or an IPv6 protocol;

means for translating any addresses and FTP commands or replies from an IPv4 format to an IPv6 format or visa versa, based on the determination as to whether the FTP packet is being sent using an IPv4 protocol or an IPv6 protocol;

means for updating a next (NXT) value with the FTP packet'"'"'s SEQ value plus a size of the payload after translation, wherein the NXT value represents an expected ACK value of a return FTP packet sent in response to the FTP packet;

means for determining whether the FTP packet is valid if the FTP packet'"'"'s ACK value equals the NXT value prior to updating the NXT value;

means for updating a first offset value for translating from IPv4 to IPv6 or a second offset value for translating from IPv6 to IPv4 to correspond to a change in payload size of the FTP packet due to the translation if any;

means for updating a SEQ value or an ACK value of the FTP packet based on the first or second offset value prior to updating the first or second offset value; and

means for forwarding the translated FTP packet to its destination if the FTP packet is determined to be valid.