Differentiated handling of network traffic using network address translation

• US 9,160,707 B2
• Filed: 10/22/2010
• Issued: 10/13/2015
• Est. Priority Date: 10/22/2010
• Status: Active Grant

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Ludwig, Reiner
• Primary Examiner(s): Sheikh, Ayaz
• Assistant Examiner(s): HAMPTON, TARELL A
• Application Number:
  US13/818,033
• Publication Number:
  US 20130148665A1
• Time in Patent Office: 1,817 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: H04L 12/1485 Tariff-related aspects
• CPC Class Codes: H04L 43/026 using flow identification
• CPC Class Codes: H04L 47/24 Traffic characterised by specific attributes, e.g. priority or QoS
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 61/2557 Translation policies or rules
• CPC Class Codes: H04L 61/2575 using address mapping retrieval, e.g. simple traversal of user datagram protocol through session traversal utilities for NAT [STUN]
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04W 28/0263 involving mapping traffic to individual bearers or channels, e.g. traffic flow template [TFT]
• CPC Class Codes: H04W 8/04 Registration at HLR or HSS [Home Subscriber Server]

Abstract

In order to allow efficient differentiated handling of network traffic in a network section, a network address translator performs network address translation on incoming data packets to be transmitted into the network section and/or on outgoing data packets transmitted from the network section. In the incoming data packets, the network address translation replaces a source network address with a replacement network address. In the outgoing data packets, a replacement network address is included in place of a destination address, and the network address translation replaces the replacement network address with the destination network address. In each case, the replacement network address is selected according to a traffic class of the data packet. In the network section, differentiated handling of the data packets on the basis of the replacement network address is provided.

Claims

1. A method of processing network traffic, the method implemented by a network device, the method comprising:

receiving, by the network device, an incoming data packet to be transmitted into a network section, the incoming data packet including a source network address and a destination address; and

performing, by the network device, network address translation on the incoming data packet by replacing the source network address with a replacement source network address selected according to a traffic class of the incoming data packet,

wherein said network address translation maintains the destination network address of the incoming data packet;

wherein differentiated handling of the incoming data packet on the basis of the replacement source network address is to be provided in the network section, and wherein said differentiated handling comprises handling the incoming data packet according to a packet classification rule operating on the basis of the replacement source network address; and

,

wherein said packet classification rule is implemented as a packet filter for routing the incoming data packet to a bearer.

2. The method according to claim 1, wherein the packet classification rule is preconfigured.

3. The method according to claim 1, further comprising:

selecting, by the network device, the replacement source network address to be used in said network address translation; and

initiating, by the network device, generation of the packet classification rule operating on the basis the selected replacement source network address.

4. The method according to claim 1, further comprising:

detecting, by the network device, the traffic class of the incoming data packet; and

selecting, by the network device, the replacement source network address from a replacement source network address range which corresponds to the traffic class of the incoming data packet.

5. The method according to claim 3, further comprising:

detecting, by the network device, the traffic class by comparing the source network address to at least one stored network address.

6. The method according to claim 4, further comprising:

detecting, by the network device, the traffic class by inspecting a message transmitted in preparation of transmitting the incoming data packet.

16. The method according to claim 1, further comprising:

receiving, by the network device, an outgoing data packet transmitted from the network section, the outgoing data packet including a replacement destination network address in place of a destination network address and a source network address, the replacement destination network address selected according to a traffic class of the outgoing data packet; and

performing, by the network device, network address translation on the outgoing data packet by replacing the replacement destination network address with the destination network address, and,

wherein said network address translation maintains the source network address of the outgoing data packet.

7. A method of processing data traffic, the method implemented by a network device, the method comprising:

receiving, by the network device, an outgoing data packet transmitted from a network section, the outgoing data packet including a replacement destination network address in place of a destination network address and a source network address, the replacement destination network address selected according to a traffic class of the outgoing data packet; and

performing, by the network device, network address translation on the outgoing data packet by replacing the replacement destination network address with the destination network address,

wherein said network address translation maintains the source network address of the outgoing data packet;

wherein differentiated handling of the outgoing data packet on the basis of the replacement destination network address was provided in the network section, and wherein said differentiated handling comprises handling the outgoing data packet according to a packet classification rule operating on the basis of the replacement destination network address; and

,

wherein said packet classification rule is implemented as a packet filter for routing the outgoing data packet to a bearer.

8. The method according to claim 7, wherein the packet classification rule is preconfigured.

9. The method according to claim 7, further comprising:

selecting, by the network device, the replacement destination network address to be used in said network address translation; and

initiating, by the network device, generation of the packet classification rule operating on the basis the selected replacement destination network address.

17. The method according to claim 7, further comprising:

receiving, by the network device, an incoming data packet to be transmitted into the network section, the incoming data packet including a source network address and a destination address; and

performing network address translation on the incoming data packet by replacing the source network address with a replacement source network address selected according to a traffic class of the incoming data packet, and,

wherein said network address translation maintains the destination network address of the incoming data packet.

10. A method of processing data traffic, the method implemented by a network device, the method comprising:

receiving, by the network device, an outgoing data packet transmitted from a network section, the outgoing data packet including a replacement destination network address in place of a destination network address and a source network address, the replacement destination network address selected according to a traffic class of the outgoing data packet;

performing, by the network device, network address translation on the outgoing data packet by replacing the replacement destination network address with the destination network address, wherein said network address translation maintains the source network address of the outgoing data packet;

receiving, by the network device, a message transmitted into the network section in preparation of transmitting the outgoing data packet, said message indicating the destination network address of the outgoing data packet; and

modifying, by the network device, the message by replacing the destination network address with the replacement destination network address.

11. The method according to claim 10, further comprising:

on the basis of the message, selecting by the network device the replacement destination network address to be used in said network address translation.

12. A network device, comprising:

an external interface configured to receive an incoming data packet to be transmitted into a network section, the incoming data packet including a source network address and a destination network address; and

,

a network address translator configured to perform network address translation on the incoming data packet by replacing the source network address with a replacement source network address selected according to a traffic class of the incoming data packet, said network address translation maintaining the destination address of the incoming data packet;

wherein differentiated handling of the incoming data packet on the basis of the replacement source network address is to be provided in the network section, and wherein said differentiated handling comprises handling the incoming data packet according to a packet classification rule operating on the basis of the replacement source network address; and

,

wherein said packet classification rule is implemented as a packet filter for routing the incoming data packet to a bearer.

18. The network device according to claim 12, further comprising:

an internal interface configured to receive an outgoing data packet transmitted from the network section, the outgoing data packet including a replacement destination network address in place of a destination network address and a source address, the replacement destination network address selected according to a traffic class of the outgoing data packet; and

the network address translator configured to perform network address translation on the outgoing data packet by replacing the replacement destination network address with the destination network address, said network address translation maintaining the source network address of the outgoing data packet.

13. A network device, comprising:

an internal interface configured to receive an outgoing data packet transmitted from a network section, the outgoing data packet including a replacement destination network address in place of a destination network address and a source address, the replacement destination network address selected according to a traffic class of the outgoing data packet; and

a network address translator configured to perform network address translation on the outgoing data packet by replacing the replacement destination network address with the destination network address, said network address translation maintaining the source network address of the outgoing data packet;

wherein differentiated handling of the outgoing data packet on the basis of the replacement destination network address was provided in the network section, and wherein said differentiated handling comprises handling the outgoing data packet according to a packet classification rule operating on the basis of the replacement destination network address; and

,

wherein said packet classification rule is implemented as a packet filter for routing the outgoing data packet to a bearer.

19. The network device according to claim 13, further comprising:

an external interface configured to receive an incoming data packet to be transmitted into a network section, the incoming data packet including a source network address and a destination network address; and

,

the network address translator configured to perform network address translation on the incoming data packet by replacing the source network address with a replacement source network address selected according to a traffic class of the incoming data packet, said network address translation maintaining the destination address of the incoming data packet.

14. A non-transitory computer-readable medium which has an executable computer program product stored thereon, the computer program product comprising program code to be executed by a processor of a network device, thereby causing the network device to operate as follows:

receiving an incoming data packet to be transmitted into a network section, the incoming data packet including a source network address and a destination address; and

performing network address translation on the incoming data packet by replacing the source network address with a replacement source network address selected according to a traffic class of the incoming data packet,

wherein said network address translation maintains the destination network address of the incoming data packet;

wherein differentiated handling of the incoming data packet on the basis of the replacement source network address is to be provided in the network section, and wherein said differentiated handling comprises handling the incoming data packet according to a packet classification rule operating on the basis of the replacement source network address; and

,

wherein said packet classification rule is implemented as a packet filter for routing the incoming data packet to a bearer.

20. The non-transitory computer-readable medium according to claim 14, wherein the network device further operate as follows:

receiving an outgoing data packet transmitted from the network section, the outgoing data packet including a replacement destination network address in place of a destination network address and a source network address, the replacement destination network address selected according to a traffic class of the outgoing data packet; and

performing network address translation on the outgoing data packet by replacing the replacement destination network address with the destination network address, and,

wherein said network address translation maintains the source network address of the outgoing data packet.

15. A non-transitory computer-readable medium which has an executable computer program product stored thereon, the computer program product comprising program code to be executed by a processor of a network device, thereby causing the network device to operate as follows:

receiving an outgoing data packet transmitted from a network section, the outgoing data packet including a replacement destination network address in place of a destination network address and a source network address, the replacement destination network address being selected according to a traffic class of the outgoing data packet; and

performing network address translation on the outgoing data packet by replacing the replacement destination network address with the destination network address,

wherein said network address translation maintains the source network address of the outgoing data packet;

wherein differentiated handling of the outgoing data packet on the basis of the replacement destination network address was provided in the network section, and wherein said differentiated handling comprises handling the outgoing data packet according to a packet classification rule operating on the basis of the replacement destination network address; and

,

wherein said packet classification rule is implemented as a packet filter for routing the outgoing data packet to a bearer.

21. The non-transitory computer-readable medium according to claim 15, wherein the network device further operate as follows:

receiving an incoming data packet to be transmitted into a network section, the incoming data packet including a source network address and a destination address; and

performing network address translation on the incoming data packet by replacing the source network address with a replacement source network address selected according to a traffic class of the incoming data packet, and,

wherein said network address translation maintains the destination network address of the incoming data packet.