Intelligent network address translator and methods for network address translation

• US 8,234,409 B2
• Filed: 10/18/2011
• Issued: 07/31/2012
• Est. Priority Date: 10/15/2002
• Status: Expired due to Term

• Current Assignee: Nomadix, Inc. (Nippon Telegraph and Telephone Corporation)
• Original Assignee: Nomadix, Inc. (Nippon Telegraph and Telephone Corporation)
• Inventors: Paunikar, Amit, Singh, Bikramjit
• Primary Examiner(s): Jacobs, Lashonda
• Application Number:
  US13/276,217
• Publication Number:
  US 20120036224A1
• Time in Patent Office: 287 Days
• Field of Search: 709/245, 709/238, 709/227, 709/229, 370/401, 370/392, 370/352
• US Class Current: 709/245
• CPC Class Codes: H04L 45/745 Address table lookup; Address filtering
• CPC Class Codes: H04L 61/106 across networks, e.g. mapping telephone numbers to data network addresses
• CPC Class Codes: H04L 61/25 of the same type
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 61/2557 Translation policies or rules
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 61/5046 Resolving address allocation conflicts; Testing of addresses testing when self-assigning an address H04L61/5092

Abstract

An intelligent network address translation system and methods for intelligent network address translation. In one embodiment, a network packet is received from a host device, and a stored record associated with the host device is identified. The stored record includes information relating to connection parameters associated with the host device. Using the stored record, a processor determines whether the network packet should be assigned a dedicated address. If so, then the network packet is transmitted using communication parameters including a dedicated IP address. If the packet should not be assigned a dedicated address, then the packet is transmitted using connection parameters including a default public IP address and a port number.

Claims

1. A non-transitory computer-readable medium comprising executable instructions that, when executed on one or more computer processors, cause the performance of operations comprising:

processing a network packet received at a network port;

determining whether the network packet should be assigned a shared public IP address or a dedicated public IP address, the determination being based at least in part on data relating to a host device associated with the network packet; and

transmitting the network packet to an external network system, using communication parameters including either a dedicated public IP address if the network packet should be assigned a dedicated public IP address based on the determination, or a shared public IP address if the network packet should be assigned a shared public IP address based on the determination.

2. The non-transitory computer-readable medium of claim 1, wherein the data relating to the host device associated with the network packet comprises data stored in a connection lookup table, the data indicating communication parameters associated with an address in the network packet, the address being indicative of the host device.

3. The non-transitory computer-readable medium of claim 2, wherein the connection lookup table further comprises information indicating which host computers require a dedicated address.

4. The non-transitory computer-readable medium of claim 2, wherein the operations further comprise:

receiving an incoming data packet from the external network system;

locating stored connection parameters in the connection lookup table corresponding to the incoming data packet; and

transmitting the incoming data packet, using the stored connection parameters.

5. The non-transitory computer-readable medium of claim 1, wherein transmitting the network packet from the computer system comprises transmitting an outgoing packet based on the network packet, the outgoing packet comprising a header address information different from the address information of the network packet.

6. The non-transitory computer-readable medium of claim 1, in combination with a computer system comprising one or more processors and one or more network ports.

7. A network address translation system configured to provide network address translation services in a communications network, the system comprising:

a processor;

a computer readable storage device in communication with the processor;

one or more network interfaces in communication with the processor, at least one of the network interfaces being associated on the network address translation system with a shared public IP address; and

an address selector module configured to perform, on the processor, a operations comprising;

receiving incoming data from a local network via one of the network interfaces;

identifying a host computer associated with the received incoming data;

identifying a record stored in the computer readable storage device, the stored record associating an identifier of the host computer with an indicator of public IP address usage; and

constructing outgoing data based on the incoming data, wherein the outgoing data includes either the shared public IP address and a selected port, or a different public IP address, depending on the indicator of public IP address usage of the identified stored record.

8. The network address translation system of claim 7, wherein the information included in the received incoming data identifies the host device.

9. The network address translation system of claim 7, wherein the stored record further indicates that the different public IP address is dedicated to the host device.

10. The network address translation system of claim 7, further comprising an outgoing connection lookup module configured to communicate with a connection lookup table to identify the stored record, wherein the stored record further comprises connection parameters associated with the host device.

11. The network address translation system of claim 9, further comprising a connection creation routine configured to store the stored record in the connection lookup table.

12. The network address translation system of claim 9, further comprising:

an incoming connection lookup module configured to communicate with the connection lookup table to determine connection parameters for incoming data packets based on the source address of the incoming data packets; and

a reverse translator module configured to perform reverse network address translation on the incoming data packets based on the stored record in the connection lookup table.

13. The network address translation system of claim 7, further comprising a packet type detection module configured to receive an initial outgoing data packet from a host, determine whether the initial outgoing data packet is associated with a protocol requiring a globally unique IP address, and allocate a dedicated IP address to the host if the initial outgoing data packet is associated with a protocol requiring a globally unique IP address.

14. The network address translation system of claim 7, wherein the received incoming data comprises one or more network packets.