Facilitating transition of network operations from IP version 4 to IP version 6

• US 8,526,467 B2
• Filed: 04/07/2011
• Issued: 09/03/2013
• Est. Priority Date: 11/13/2008
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: Blue Coat Systems Incorporated (Gen Digital Inc.)
• Inventors: Li, Qing, Huang, Yusheng
• Primary Examiner(s): MEW, KEVIN D
• Application Number:
  US13/081,983
• Publication Number:
  US 20110182291A1
• Time in Patent Office: 880 Days
• Field of Search: 370/392, 370/401, 370/466, 709/245
• US Class Current: 370/466
• CPC Class Codes: H04L 2101/659 Internet protocol version 6 [IPv6] addresses
• CPC Class Codes: H04L 45/52 Multiprotocol routers
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/161 Implementation details of TCP/IP or UDP/IP stack architecture; Specification of modified or new header fields
• CPC Class Codes: H04L 69/162 involving adaptations of sockets based mechanisms secure socket layer H04L63/168
• CPC Class Codes: H04L 69/167 Adaptation for transition between two IP versions, e.g. between IPv4 and IPv6 translation of Internet protocol [IP] addresses H04L61/2503
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support
• CPC Class Codes: H04W 80/045 involving different protocol versions, e.g. MIPv4 and MIPv6
• CPC Class Codes: H04W 88/182 Network node acting on behalf of an other network entity, e.g. proxy

Abstract

Methods, apparatuses and systems directed to facilitating transitions from IPv4 to IPv6 networks. In particular implementations, the invention facilitates or enables accessibility of network application services between IPv4 and IPv6 hosts, or traversal of network paths including both IPv6 or IPv4 domains. Particular implementations of the invention are directed to selective mapping of network layer addresses between IPv6 and IPv4 protocols and Domain Name System records under one or more policy controls. Other implementations of the invention are directed to a proxy-to-proxy based tunnel architecture allowing hosts implementing a first network layer protocol, such as IPv4, to traverse a network implementing a second network layer protocol, such as IPv6.

Claims

1. An apparatus comprising one or more network interfaces;

a processor;

a memory;

computer program code, physically stored in a storage medium, comprising instructions operative to cause the processor and the apparatus to;

receive a request from a client, wherein the request includes a host name, and wherein the request is embodied in a packet having a first network layer address, associated with the client, corresponding to a first network layer protocol;

access one or more data stores of mappings between host names and network layer addresses to identify one or more network layer addresses associated with the host name identified in the request, wherein one or more of the network layer addresses in the one or more data stores correspond to the first network layer protocol and other ones of the network layer addresses correspond to a second network layer protocol; and

generate a response to the request, wherein the response includes a second network layer address corresponding to the first network layer protocol, wherein the second network layer address is selected from the one or more identified network layer addresses mapped to the host name or a third network layer address based on application of one or more policies; and

transmit the response to the client.

2. The apparatus of claim 1 wherein the third network layer address is a network layer address allocated to the apparatus.

3. The apparatus of claim 1 wherein the third network layer address is a network layer address selected from a pool of network layer addresses.

4. The apparatus of claim 1 wherein at least one of the one or more data stores is a Domain Name System (DNS) server.

5. The apparatus of claim 1 wherein application of the one or more policies comprises determining whether one or more of the identified network layer addresses corresponds to the second network layer protocol and selecting the third network layer address if at least one of the one or more identified network layer addresses corresponds to the second network layer protocol;

and

wherein the computer program code further comprises instructions operative to cause the processor to cache, in a mapping data structure, one of the one or more identified network layer addresses in association with the host name identified in the request, if the third network layer address is selected based on the application of the one or more policies.

6. The apparatus of claim 3 further comprising

if the third network layer address is selected, caching, in a mapping data structure, the selected network layer address in association with the host name identified in the request.

7. The apparatus of claim 1 wherein the computer program code further comprises instructions operative to cause the processor to

proxy a transaction between the client and a remote host associated with the host name;

wherein proxying the transaction comprises

establishing a first connection with the client according to the first network layer protocol;

establishing a second connection with the remote host; and

forwarding data received from the client on the first connection to the remote host over the second connection.

8. The apparatus of claim 7 wherein the second connection with the remote host employs the second network layer protocol.

9. The apparatus of claim 7 wherein establishing the second connection comprises

accessing the mapping data structure against the second network layer address to identify the host name;

and

looking up a third network layer address corresponding to the second network layer protocol using the host name.

10. The apparatus of claim 1 wherein the first network layer protocol is version 4 of the Internet Protocol and the second network layer protocol is version 6 of the Internet Protocol.

11. The apparatus of claim 1 wherein the first network layer protocol is version 6 of the Internet Protocol and the second network layer protocol is version 4 of the Internet Protocol.

12. The apparatus of claim 1 wherein the one or more policies are operative to bias selection of the second network layer address based on a preference for the first network layer protocol or the second network layer protocol.

13. The apparatus of claim 1 wherein one of the one or more identified network layer addresses is selected for the second network layer address if the identified network layer address corresponds to the first network layer protocol.

14. The apparatus of claim 1 wherein the third network layer address is selected for the second network layer address if at least one of the one or more identified network layer addresses corresponds to the second network layer protocol.

15. The apparatus of claim 1 wherein the computer program code further comprises instructions operative to cause the processor to

if all of the one or more identified network layer addresses correspond to the second network layer protocol, then:

selecting, from a pool of network layer addresses, a second network layer address corresponding to the first network layer protocol, and caching, in a mapping data structure, the second network layer address in association with the host name identified in the address lookup request; and

generate a response to the address lookup request that includes the second network layer address corresponding to the first network layer protocol.

16. An apparatus comprising

one or more network interfaces;

a processor;

a memory;

computer program code, physically stored in a storage medium, comprising instructions operative to cause the processor and the apparatus to;

receive, on a first connection over a first network, a packet from a remote proxy, wherein the first network corresponds to a first network layer protocol;

determine whether the packet corresponds to a new request;

if the packet corresponds to a new request, access host information embodied in the request and resolve a network layer address of a remote server, wherein the network layer address corresponds to a second network layer protocol, and wherein resolving the network layer address of the remote server comprises performing a network address lookup in a data store that maintains mappings between host names and network layer addresses;

establish a second connection over a second network with the remote server using the network layer address; and

forwarding the request on the second connection over the second network.

17. The apparatus of claim 16 wherein the computer program code further comprises instructions operative to cause the processor to maintain a mapping between the first connection and the second connection;

forward data received on the first connection to the remote server over the second connection; and

forward data received on the second connection to the remote proxy over the first connection.

18. The apparatus of claim 16 wherein the first network layer protocol is version 6 of the Internet Protocol and the second network layer protocol is version 4 of the Internet Protocol.