Methods and systems for network address translation management
First Claim
Patent Images
1. A method for network address translation, the method comprising:
- providing a first network address translation table and a second network address translation table, the first and second network address translation tables both including entries for network traffic between a public network and a private network and associated with a public Internet Protocol address, the first network address translation table including entries for a low priority subset of the network traffic between a public network and a private network and the second network address translation table including entries for a high priority subset of the network traffic between the public network and the private network;
enforcing a first limit on the number of processor cycles used for maintenance of the first network address translation table and a second limit on the number of processor cycles used for maintenance of the second network address translation table;
receiving a first network packet of a first network traffic type;
determining the first network packet corresponds to the low priority network traffic based upon the first network packet being of the first network traffic type;
adding a first entry to the first network address translation table;
removing the first entry from the first network address translation table after a first timeout interval and removing the second entry from the second network address translation table after a second timeout interval; and
providing an interface for altering the first timeout interval or the second timeout interval.
1 Assignment
0 Petitions
Accused Products
Abstract
A method for network address translation (NAT) includes providing a first and a second NAT table. The method further includes receiving a network packet and classifying the network packet based on a type of network traffic. Additionally, an entry is added to the first NAT table based on the classification of the network packet.
-
Citations
23 Claims
-
1. A method for network address translation, the method comprising:
-
providing a first network address translation table and a second network address translation table, the first and second network address translation tables both including entries for network traffic between a public network and a private network and associated with a public Internet Protocol address, the first network address translation table including entries for a low priority subset of the network traffic between a public network and a private network and the second network address translation table including entries for a high priority subset of the network traffic between the public network and the private network; enforcing a first limit on the number of processor cycles used for maintenance of the first network address translation table and a second limit on the number of processor cycles used for maintenance of the second network address translation table; receiving a first network packet of a first network traffic type; determining the first network packet corresponds to the low priority network traffic based upon the first network packet being of the first network traffic type; adding a first entry to the first network address translation table; removing the first entry from the first network address translation table after a first timeout interval and removing the second entry from the second network address translation table after a second timeout interval; and providing an interface for altering the first timeout interval or the second timeout interval. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
-
9. A gateway comprising:
-
a memory configured to include a first network address translation table and a second network address translation table, the first and second network address translation tables both including entries for network traffic between a public network and a private network and associated with a public Internet Protocol address, the first network address translation table including entries for a low priority subset of the network traffic between a public network and a private network and the second network address translation table including entries for a high priority subset of the network traffic between the public network and the private network; a processor configured to; enforce a first limit on the number of processor cycles used for maintenance of the first network address translation table and a second limit on the number of processor cycles used for maintenance of the second network address translation table in response to a processor utilization exceeding a threshold; receive a first network packet of a first network traffic type; determine the first network packet corresponds to the low priority network traffic based upon the first network packet being of the first network traffic type; and add a first entry to the first network address translation table. - View Dependent Claims (10, 11, 12, 13, 14)
-
-
15. A method for network address translation, the method comprising:
-
providing a network address translation table, the network address translation table including plurality of entries for network traffic between a public network and a private network, a first portion of the plurality of entries including a type designation corresponding to low priority network traffic and a second portion of the plurality of entries including a type designation corresponding to high priority network traffic; enforcing a first limit on the number of processor cycles used for maintenance of the first portion and a second limit on the number of processor cycles used for maintenance of the second portion, wherein enforcing the first limit and the second limit is in response to a processor utilization exceeding a threshold; receiving a first network packet of a first network traffic type; determining the first network packet corresponds to the low priority network traffic when the first network packet is of the first network traffic type; adding a first entry to the network address translation table, the entry including a type designation corresponding to the low priority network traffic and a first timeout interval having a first initial duration; receiving a second network packet of a second network traffic type; determining the second network packet corresponds to the high priority network traffic when the second network packet is of the second network traffic type; and adding a second entry to the network address translation table, the entry including a type designation corresponding to the high priority network traffic and a second timeout interval having a second initial duration, wherein the first initial duration is different than the second initial duration. - View Dependent Claims (16, 17, 18, 19, 20)
-
-
21. A gateway comprising:
-
a memory configured to include a network address translation table, the network address translation table including a plurality of entries for network traffic between a public network and a private network, a first portion of the plurality of entries including a first type designation corresponding to low priority network traffic and a first timeout interval having a first initial duration, and a second portion of the plurality of entries including a second type designation corresponding to high priority network traffic and a second timeout interval having a second initial duration, wherein the first initial duration is different than the second initial duration; and a processor configured to; enforce a first limit on the number of processor cycles used for maintenance of the first portion and a second limit on the number of processor cycles used for maintenance of the second portion in response to a processor utilization exceeding a threshold; receive a first network packet of a first network traffic type; determine the first network packet corresponds to the low priority network traffic based upon the first network packet being of the first network traffic type; and add a first entry to the network address translation table, the entry including the first type designation and the first timeout interval. - View Dependent Claims (22, 23)
-
Specification