Intelligent network address translator and methods for network address translation

• US 7,822,873 B1
• Filed: 07/02/2010
• Issued: 10/26/2010
• Est. Priority Date: 10/15/2002
• Status: Expired due to Term

• Current Assignee: Nomadix, Inc. (Nippon Telegraph and Telephone Corporation)
• Original Assignee: Nomadix, Inc. (Nippon Telegraph and Telephone Corporation)
• Inventors: Singh, Bikramjit, Paunikar, Amit
• Primary Examiner(s): Jacobs; Lashonda T
• Application Number:
  US12/830,264
• Publication Number:
  US 20100272109A1
• Time in Patent Office: 116 Days
• Field of Search: 709/245, 709/238, 709/227, 709/229, 370/401, 370/392, 370/352
• US Class Current: 709/245
• CPC Class Codes: H04L 45/745 Address table lookup; Address filtering
• CPC Class Codes: H04L 61/106 across networks, e.g. mapping telephone numbers to data network addresses
• CPC Class Codes: H04L 61/25 of the same type
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 61/2557 Translation policies or rules
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 61/5046 Resolving address allocation conflicts; Testing of addresses testing when self-assigning an address H04L61/5092

Abstract

An intelligent network address translation system and methods for intelligent network address translation. In one embodiment, a network packet is received from a host device, and a stored record associated with the host device is identified. The stored record includes information relating to connection parameters associated with the host device. Using the stored record, a processor determines whether the network packet should be assigned a dedicated address. If so, then the network packet is transmitted using communication parameters including a dedicated IP address. If the packet should not be assigned a dedicated address, then the packet is transmitted using connection parameters including a default public IP address and a port number.

Claims

1. A method of network address translation, performed on a computer system having a default public IP address and a plurality of dedicated public IP addresses, the method comprising:

receiving a network packet from a host device;

identifying a stored record associated with the host device, the stored record comprising information relating to connection parameters associated with the host device;

determining, using a processor and the stored record, whether the network packet should be assigned a dedicated address; and

transmitting the network packet, using communication parameters comprising either a dedicated public IP address selected from the plurality of dedicated public IP addresses if the network packet should be assigned a dedicated address, or a default public IP address and a port number if the network packet should not be assigned a dedicated address.

2. The method of claim 1, wherein identifying the stored record associated with the host device comprises retrieving, from a connection lookup table, the communication parameters in association with a destination address of the network packet.

3. The method of claim 2, wherein the connection lookup table comprises identifiers of host computers and information indicative of which of the host computers require a dedicated address.

4. The method of claim 2, further comprising:

receiving, at the computer system, an incoming data packet;

locating stored connection parameters in the connection lookup table corresponding to the incoming data packet; and

transmitting the incoming data packet from the computer system, using the stored connection parameters.

5. The method of claim 1, wherein transmitting the network packet from the computer system comprises altering address information in the header of the network packet.

6. A non-transitory computer-readable medium comprising instructions that are configured to operate a network translation system, when executed on one or more processors connected to a public network interface, the system comprising:

a host address selector module;

a network access translation module; and

a network address port translation module;

wherein the host address selector module is configured to receive a network packet from a host device, determine whether the host device is associated with a dedicated IP address, and execute either the network access translation module if the host device is associated with a dedicated IP address or the network address port translation module if the host device is not associated with a dedicated IP address;

wherein the network access translation module is configured to transmit the network packet via the public network interface using connection parameters based on the dedicated IP address; and

wherein the network address port translation module is configured to transmit the network packet via the public network interface using connection parameters based on a default public IP address and a port.

7. The non-transitory computer-readable medium of claim 6, wherein the host address selector module is configured to determine whether the host device is associated with a dedicated IP address by determining a protocol associated with data transmitted from the host device.

8. The non-transitory computer-readable medium of claim 6, wherein the network address translation system further comprises a session table and a storage routine configured to store, in the session table, information representing the association between the dedicated IP address of the network packet and the host device.

9. The non-transitory computer-readable medium of claim 6, wherein the network packet is received from the host device via a private network interface connected to the one or more processors.

10. A network address translation system configured to provide network address translation services in a communications network, the system comprising:

a processor;

a public network interface associated with a default public IP address;

an address selector module configured to be executed on the processor;

a network access translation module configured to be executed on the processor; and

a network address port translation module configured to be executed on the processor;

the address selector module configured to receive an outgoing data packet from a host device and to execute either the network access translation module or the network address port translation module based on a determination performed at least in part using information included in the outgoing data packet;

the network access translation module configured to transmit the outgoing data packet via the public network interface using connection parameters including a public IP address different from the default public IP address; and

the network address port translation module configured to transmit the network packet via the public network interface using connection parameters based on the default public IP address and a selected port.

11. The network address translation system of claim 10, wherein the information included in the outgoing packet identifies a protocol associated with the packet.

12. The network address translation system of claim 10, wherein the information included in the outgoing packet identifies the host device.

13. The network address translation system of claim 10, further comprising an outgoing connection lookup module that communicates with a connection lookup table to identify connection parameters associated with the host device.

14. The network address translation system of claim 13, further comprising a connection creation routine that receives the connection parameters from the network access translation module or the network address port translation module and stores the connection parameters in association with a destination address of the outgoing data packet in the connection lookup table.

15. The network address translation system of claim 13, further comprising:

an incoming connection lookup module that communicates with the connection lookup table to determine connection parameters for incoming data packets based on the source address of the incoming data packets; and

a reverse translator module that performs reverse network address translation on the incoming data packets based on the determined connection parameters in the connection lookup table.

16. The network address translation system of claim 10, further comprising a packet type detection module configured to receive an initial outgoing data packet from a host, determine whether the initial outgoing data packet is associated with a protocol requiring a globally unique IP address, and allocate a dedicated IP address to the host if the initial outgoing data packet is associated with a protocol requiring a globally unique IP address.