Facilitating transition of network operations from IP version 4 to IP version 6

• US 7,924,832 B2
• Filed: 11/13/2008
• Issued: 04/12/2011
• Est. Priority Date: 11/13/2008
• Status: Expired due to Fees

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: Blue Coat Systems Incorporated (Gen Digital Inc.)
• Inventors: Li, Qing, Huang, Yusheng
• Primary Examiner(s): Wilson; Robert W
• Assistant Examiner(s): Kamara; Mohamed
• Application Number:
  US12/270,043
• Publication Number:
  US 20100118869A1
• Time in Patent Office: 880 Days
• Field of Search: 370/392, 370/401, 370/466, 709/245
• US Class Current: 370/389
• CPC Class Codes: H04L 2101/659 Internet protocol version 6 [IPv6] addresses
• CPC Class Codes: H04L 45/52 Multiprotocol routers
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/161 Implementation details of TCP/IP or UDP/IP stack architecture; Specification of modified or new header fields
• CPC Class Codes: H04L 69/162 involving adaptations of sockets based mechanisms secure socket layer H04L63/168
• CPC Class Codes: H04L 69/167 Adaptation for transition between two IP versions, e.g. between IPv4 and IPv6 translation of Internet protocol [IP] addresses H04L61/2503
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support
• CPC Class Codes: H04W 80/045 involving different protocol versions, e.g. MIPv4 and MIPv6
• CPC Class Codes: H04W 88/182 Network node acting on behalf of an other network entity, e.g. proxy

Abstract

Methods, apparatuses and systems directed to facilitating transitions from IPv4 to IPv6 networks. In particular implementations, the invention facilitates or enables accessibility of network application services between IPv4 and IPv6 hosts, or traversal of network paths including both IPv6 or IPv4 domains. Particular implementations of the invention are directed to selective mapping of network layer addresses between IPv6 and IPv4 protocols and Domain Name System records under one or more policy controls. Other implementations of the invention are directed to a proxy-to-proxy based tunnel architecture allowing hosts implementing a first network layer protocol, such as IPv4, to traverse a network implementing a second network layer protocol, such as IPv6.

Claims

1. A method comprising:

receiving, at a proxy, a request from a client, wherein the request includes a host name, and wherein the request is embodied in a packet having a first network layer address, associated with the client, corresponding to a first network layer protocol;

accessing one or more data stores of mappings between host names and network layer addresses to identify one or more network layer addresses associated with the host name identified in the request, wherein one or more of the network layer addresses in the one or more data stores correspond to the first network layer protocol and other ones of the network layer addresses correspond to a second network layer protocol; and

generating a response to the request, wherein the response includes a second network layer address corresponding to the first network layer protocol, wherein the second network layer address is selected from the one or more identified network layer addresses mapped to the host name or a third network layer address based on application of one or more policies; and

forwarding the response to the client,

wherein application of the one or more policies comprises determining whether one or more of the identified network layer addresses corresponds to the second network layer protocol and selecting the third network layer address if at least one of the one or more identified network layer addresses corresponds to the second network layer protocol; and

wherein the method further comprises caching, in a mapping data structure, one of the one or more identified network layer addresses in association with the host name identified in the request, if the third network layer address is selected based on the application of the one or more policies.

2. The method of claim 1 wherein the third network layer address is a network layer address of the proxy.

3. The method of claim 1 wherein the third network layer address is a network layer address selected from a pool of network layer addresses.

4. The method of claim 1 wherein at least one of the one or more data stores is a Domain Name System (DNS) server.

5. The method of claim 3 further comprising

if the third network layer address is selected, caching, in a mapping data structure, the selected network layer address in association with the host name identified in the request.

6. The method of claim 1 further comprising

proxying a transaction between the client and a remote host associated with the host name;

wherein proxying the transaction comprises

establishing a first connection with the client according to the first network layer protocol;

establishing a second connection with the remote host; and

forwarding data received from the client on the first connection to the remote host over the second connection.

7. The method of claim 6 wherein the second connection with the remote host employs the second network layer protocol.

8. The method of claim 1 wherein the first network layer protocol is version 4 of the Internet Protocol and the second network layer protocol is version 6 of the Internet Protocol.

9. The method of claim 1 wherein the first network layer protocol is version 6 of the Internet Protocol and the second network layer protocol is version 4 of the Internet Protocol.

10. The method of claim 1 wherein the one or more policies are operative to bias selection of the second network layer address based on a preference for the first network layer protocol or the second network layer protocol.

11. The method of claim 1 wherein one of the one or more identified network layer addresses is selected for the second network layer address if the identified network layer address corresponds to the first network layer protocol.

12. The method of claim 1 wherein the third network layer address is selected for the second network layer address if at least one of the one or more identified network layer addresses corresponds to the second network layer protocol.

13. A method comprising:

receiving, at a proxy, an address lookup request from a client, wherein the address lookup request includes a host name associated with a remote host, and wherein the address lookup request is embodied in a packet having a first network layer address, associated with the client, corresponding to a first network layer protocol;

accessing one or more data stores of mappings between host names and network layer addresses to identify one or more network layer addresses associated with the host name identified in the address lookup request, wherein one or more of the network layer addresses in the one or more data stores correspond to the first network layer protocol and other ones of the network layer addresses correspond to a second network layer protocol; and

wherein, if all of the one or more identified network layer addresses correspond to the second network layer protocol, then;

selecting, from a pool of network layer addresses, a second network layer address corresponding to the first network layer protocol, and caching, in a mapping data structure, the second network layer address in association with the host name identified in the address lookup request; and

generating a response to the address lookup request that includes the second network layer address corresponding to the first network layer protocol; and

transmitting the response to the client.

14. The method of claim 13 further comprising

proxying a transaction between the client and the remote host associated with the host name;

wherein proxying the transaction comprises

establishing a first connection with the client according to the first network layer protocol;

establishing a second connection with the remote host according to the second network layer protocol; and

forwarding data received from the client on the first connection to the remote host over the second connection.

15. The method of claim 14 wherein establishing the second connection comprises

accessing the mapping data structure against the second network layer address to identify the host name;

and

looking up a third network layer address corresponding to the second network layer protocol using the host name.

16. A method, comprising:

receiving, on a first connection over a first network, a packet from a remote proxy, wherein the first network corresponds to a first network layer protocol;

determining whether the packet corresponds to a new request;

if the packet corresponds to a new request, accessing host information embodied in the request and resolving a network layer address of a remote server, wherein the network layer address corresponds to a second network layer protocol;

establishing a second connection over a second network with the remote server using the network layer address; and

forwarding the request on the second connection over the second network.

wherein resolving the network layer address of the remote server comprises performing a network address lookup in a data store that maintains mappings between host names and network layer addresses,

wherein the network address is selected from one or more network layer addresses mapped to the host information or a third network layer address based on application of one or more policies by determining whether the one or more network layer addresses corresponds to the second network layer protocol and selecting the third network layer address if at least one of the one or more network layer addresses corresponds to the second network layer protocol.

17. The method of claim 16 further comprising maintaining a mapping between the first connection and the second connection;

forwarding data received on the first connection to the remote server over the second connection; and

forwarding data received on the second connection to the remote proxy over the first connection.

18. The method of claim 16 wherein the first network layer protocol is version 6 of the Internet Protocol and the second network layer protocol is version 4 of the Internet Protocol.