Redundancy support for network address translation (NAT)

• US 7,647,427 B1
• Filed: 10/18/2002
• Issued: 01/12/2010
• Est. Priority Date: 10/18/2002
• Status: Active Grant

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Foundry Networks Incorporated (Broadcom, Inc.)
• Inventors: Devarapalli, Sridhar J.
• Primary Examiner(s): Meky; Moustafa M
• Application Number:
  US10/273,657
• Time in Patent Office: 2,643 Days
• Field of Search: 709/245, 709/208, 709200-203, 709217-227
• US Class Current: 709/245
• CPC Class Codes: G06F 15/16 Combinations of two or more digital computers each having at least an arithmetic unit, a program unit and a register, e.g. for a simultaneous processing of several programs coordinating program control therefor G06F9/52; in regulating and control system G05B
• CPC Class Codes: H04L 45/28 using route fault recovery
• CPC Class Codes: H04L 45/586 of virtual routers
• CPC Class Codes: H04L 49/354 for supporting virtual local area networks [VLAN]
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 69/40 for recovering from a failure of a protocol instance or entity, e.g. service redundancy protocols, protocol state redundancy or protocol service redirection management of faults, events, alarms or notifications in data switching networks H04L41/06

Abstract

Stateful failover redundancy support is provided for network address translation (NAT). A master NAT device is backed-up with at least one back-up NAT device. Existing sessions are synchronized between the two NAT devices, such as via a dedicated link between them. In the event of a failover where the master NAT device is unable to perform its NAT functions, ownership of Internet protocol (IP) addresses is transferred from the master NAT device to the back-up NAT device. The back-up NAT device, which is now owner of the IP addresses, assumes the NAT functionality associated with these IP addresses and continues the existing sessions, as well as processing new sessions.

Claims

1. An article of manufacture, comprising:

a storage medium having instructions stored thereon that are executable by a back-up device to;

share, by said back-up device with a master device, a base address corresponding to a first pool of first addresses that are owned by said master device;

perform network address translation (NAT) and routing, by said back-up device, for a second pool of second addresses while said master device is active;

detect, by said back-up device, a failure of said master device; and

assert ownership, by said back-up device, of all of said first addresses of said first pool corresponding to said base address, in response to detection by said back-up device of said failure.

2. The article of manufacture of claim 1 wherein said instructions to assert ownership by said back-up device include instructions stored on said storage medium and executable by said back-up device to:

send a message, by said back-up devices, to peer NAT devices that provides notification that said back-up device is a new master device that owns all of said first addresses of said first pool corresponding to said base address.

3. The article of manufacture of claim 2 wherein said message is a gratuitous address resolution protocol (ARP) message.

4. The article of manufacture of claim 1 wherein said storage medium further includes instructions stored thereon that are executable by said back-up device to:

receive, by said back-up device from said master device, heartbeat messages while said master device is active, said heartbeat messages being received by said back-up device on a separate virtual local area network (VLAN) connection different from a VLAN connection used to carry traffic.

5. The article of manufacture of claim 1 wherein said storage medium further includes instructions stored thereon that are executable by said back-up device to:

receive, by said back-up device from said master device, session synchronization information while said master device is active, said session synchronization information being received by said back-up device on a separate virtual local area network (VLAN) connection different from a VLAN connection used to carry traffic.

6. The article of manufacture of claim 1 wherein said storage medium further includes instructions stored thereon that are executable by said back-up device to:

share, by said back-up device with a peer NAT device, a base address corresponding to said second pool of second addresses, which are owned by said back-up device;

provide, by said back-up device to said peer NAT device, heartbeat messages and session synchronization information associated with said NAT and routing performed by said back-up device for said second pool of second addresses, said heartbeat messages and session synchronization information being provided by said back-up device to said peer NAT device via at least one virtual local area network (VLAN) connection different than a VLAN used to carry traffic,

wherein if there is a failure of said back-up device, said failure of said back-up device is detectable from an absence of said heartbeat messages and wherein said session synchronization information provided by said back-up device is usable by said peer NAT device to continue a session that is being carried by said back-up device prior to said failure of said back-up device.

7. The article of manufacture of claim 1 wherein said back-up device is a switch.

8. An article of manufacture, comprising:

a storage medium having instructions stored thereon that are executable by a master device to;

share, by said master device with a back-up device that performs routing while said master device is active, a base address corresponding to a first pool of first addresses that are owned by said master device; and

perform network address translation (NAT) and routing, by said master device, for said first pool of first addresses,

wherein if there is a failure of said master device with respect to any one of said first addresses, ownership of all of said first addresses of said first pool corresponding to said base address belongs to said back-up device.

9. The article of manufacture of claim 8 wherein said storage medium further includes instructions stored thereon that are executable by said master device to:

send, by said master device to said back-up device, heartbeat messages while said master device performs NAT and routing for said first pool of addresses, said heartbeat messages being sent by said master device on a separate virtual local area network (VLAN) connection different from a VLAN connection used to carry traffic.

10. The article of manufacture of claim 8 wherein said storage medium further includes instructions stored thereon that are executable by said master device to:

send, by said master device to said back-up device, session synchronization information while said master device performs NAT and routing for said first pool of addresses, said session synchronization information being sent by said master device on a separate virtual local area network (VLAN) connection different from a VLAN connection used to carry traffic.

11. The article of manufacture of claim 8 wherein said master device is a switch having a separate chassis from said slave device.