Intelligent network address translator and methods for network address translation

• US 7,752,334 B2
• Filed: 10/15/2002
• Issued: 07/06/2010
• Est. Priority Date: 10/15/2002
• Status: Active Grant

• Current Assignee: Nomadix, Inc. (Nippon Telegraph and Telephone Corporation)
• Original Assignee: Nomadix, Inc. (Nippon Telegraph and Telephone Corporation)
• Inventors: Singh, Bikramjit, Paunikar, Amit
• Primary Examiner(s): Jacobs; Lashonda T
• Application Number:
  US10/271,640
• Publication Number:
  US 20040073704A1
• Time in Patent Office: 2,821 Days
• Field of Search: 709/245, 709/238, 709/227, 709/229, 370/352, 370/392, 370/401
• US Class Current: 709/245
• CPC Class Codes: H04L 45/745 Address table lookup; Address filtering
• CPC Class Codes: H04L 61/106 across networks, e.g. mapping telephone numbers to data network addresses
• CPC Class Codes: H04L 61/25 of the same type
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 61/2557 Translation policies or rules
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 61/5046 Resolving address allocation conflicts; Testing of addresses testing when self-assigning an address H04L61/5092

Abstract

An intelligent network address translation system and methods for intelligent network address translation. The invention analyzes all data packets being communicated between the private address realm and the public address realm and performs a predefined mode of network address translation based on the packet type. By analyzing every packet that the network encounters and adjusting the network address translation mode based on the packet type, the system and method of the present invention is able to adjust the mode of network address translation dynamically during a network user'"'"'s ongoing network session. Additionally, by basing which mode of translation will be employed based on packet type the translation method of the present invention insures that IP addresses are distributed efficiently and distribution of the amount of addresses is minimized.

Claims

1. A network address translator device configured to provide network address translation services in a communications network, the device comprising:

a processor;

a public network interface;

an address selector module configured to be executed on the processor;

a network access translation module configured to be executed on the processor; and

a network address port translation module configured to be executed on the processor;

the address selector module configured to receive an outgoing data packet from a host device, analyze the outgoing data packet to identify an attribute of the outgoing data packet indicative of whether the packet requires a dedicated IP address, and execute either the network access translation module if the packet requires a dedicated IP address or the network address port translation module if the packet does not require a dedicated IP address;

the network access translation module configured to select a dedicated public IP address from a pool of public IP addresses and transmit the outgoing data packet via the public network interface using connection parameters based on the selected dedicated public IP address; and

the network address port translation module configured to select a port and transmit the network packet via the public network interface using connection parameters based on a default public IP address and the port.

2. The network address translator of claim 1, further comprising an outgoing connection lookup module that communicates with a connection lookup table to identify connection parameters associated with a destination address of the outgoing data packet.

3. The network address translator of claim 2, further comprising a connection creation routine that receives the connection parameters from the network access translation module or the network address port translation module and stores the connection parameters in association with a destination address of the outgoing data packet in the connection lookup table.

4. The network address translator of claim 2, further comprising:

an incoming connection lookup module that communicates with the connection lookup table to determine connection parameters for incoming data packets based on the source address of the incoming data packets; and

a reverse translator module that performs reverse network address translation on the incoming data packets based on the determined connection parameters in the connection lookup table.

5. The network address translator of claim 1, wherein identifying an attribute of the outgoing data packet indicative of whether the packet requires a dedicated IP address comprises identifying a protocol associated with the outgoing data packet and determining whether the protocol requires a globally unique IP address to function.

6. A gateway device configured to perform network address translation services, comprising:

a processor;

a public network interface;

a packet type detection module configured to be executed on the processor;

a network access translation module configured to be executed on the processor; and

a network address port translation module configured to be executed on the processor;

wherein the packet type detection module is configured to receive a network packet from a host device, identify an attribute of the network packet indicative of whether the packet requires a dedicated IP address, and execute either the network access translation module if the packet requires a dedicated IP address or the network address port translation module if the packet does not require a dedicated IP address;

wherein the network access translation module is configured to select a dedicated public IP address from a pool of public IP addresses and transmit the network packet via the public network interface using connection parameters based on the dedicated public IP address; and

wherein the network address port translation module is configured to select a port and transmit the network packet via the public network interface using connection parameters based on a default public IP address and the port.

7. The gateway device of claim 6, wherein the attribute comprises a protocol associated with the network packet.

8. The gateway device of claim 6, wherein the network access translation module is further configured to determine whether the dedicated public IP address is associated with a destination address and, if so, to select a second dedicated public IP address.

9. The gateway device of claim 6, further comprising a session table and a storage routine configured to store, in the session table, information representing an association between a destination address of the network packet and the connection parameters.

10. The gateway device of claim 6, further comprising a private network interface, and wherein the network packet is received from the host device via the private network interface.

11. A method of network address translation performed at a gateway device having a default public IP address and a plurality of dedicated public IP addresses, the method comprising:

receiving, at the gateway device, a network packet from a host device communicatively connected to the gateway device;

identifying, at the gateway device, a protocol associated with the network packet;

determining, using a processor of the gateway device, whether the protocol requires a dedicated address; and

transmitting the network packet from the gateway device, using communication parameters comprising either a dedicated public IP address selected from the plurality of dedicated public IP addresses if the protocol requires a dedicated address, or the default public IP address and a port number if the protocol does not require a dedicated address.

12. The method of claim 11, further comprising the step of storing, in a connection lookup table, the communication parameters in association with a destination address of the network packet.

13. The method of claim 12, further comprising the step of querying the connection lookup table for stored connection parameters corresponding to the network packet prior to determining whether the protocol requires a dedicated address.

14. The method of claim 12, further comprising:

receiving, at the gateway device, an incoming data packet;

locating stored connection parameters in the connection lookup table corresponding to the incoming data packet; and

transmitting the incoming data packet from the gateway device, using the stored connection parameters.

15. The method of claim 11, wherein transmitting the network packet from the gateway device comprises altering address information in the header of the network packet.