CN1431600A - Mechanism and method for network address translation acceleration - Google Patents
Mechanism and method for network address translation acceleration Download PDFInfo
- Publication number
- CN1431600A CN1431600A CN03103594A CN03103594A CN1431600A CN 1431600 A CN1431600 A CN 1431600A CN 03103594 A CN03103594 A CN 03103594A CN 03103594 A CN03103594 A CN 03103594A CN 1431600 A CN1431600 A CN 1431600A
- Authority
- CN
- China
- Prior art keywords
- network address
- address translation
- information
- packets
- data
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000000034 method Methods 0.000 title claims abstract description 27
- 238000013519 translation Methods 0.000 title claims description 89
- 230000007246 mechanism Effects 0.000 title description 3
- 230000001133 acceleration Effects 0.000 title 1
- 230000005540 biological transmission Effects 0.000 claims abstract description 26
- 230000009471 action Effects 0.000 claims abstract description 8
- 238000012217 deletion Methods 0.000 claims description 2
- 230000037430 deletion Effects 0.000 claims description 2
- 238000006467 substitution reaction Methods 0.000 claims 1
- 230000008569 process Effects 0.000 abstract description 19
- 230000015654 memory Effects 0.000 abstract description 13
- 238000006243 chemical reaction Methods 0.000 abstract description 10
- 230000004044 response Effects 0.000 description 14
- 238000012545 processing Methods 0.000 description 13
- 230000003068 static effect Effects 0.000 description 11
- 238000004891 communication Methods 0.000 description 9
- 238000010586 diagram Methods 0.000 description 8
- 238000012546 transfer Methods 0.000 description 6
- 230000003442 weekly effect Effects 0.000 description 3
- 230000008859 change Effects 0.000 description 2
- 230000007306 turnover Effects 0.000 description 2
- 210000000459 calcaneus Anatomy 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 239000005043 ethylene-methyl acrylate Substances 0.000 description 1
- 239000012634 fragment Substances 0.000 description 1
- 230000006870 function Effects 0.000 description 1
- 230000006855 networking Effects 0.000 description 1
- 238000005457 optimization Methods 0.000 description 1
- 230000002441 reversible effect Effects 0.000 description 1
- 230000001360 synchronised effect Effects 0.000 description 1
Images
Landscapes
- Small-Scale Networks (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention uses hardware to process network address conversion, and can design multiple comparison engines according to environment to accelerate network address conversion, so that even in worst case, the time for converting network address of information packet is faster than the time for storing information packet into memory, thus ensuring that the data transmission of network is not affected by network address conversion action.
Description
Technical field
The present invention relates to network address translation, particularly utilize mechanism and the method for the gauge outfit of process information bag with the conversion of accelerating network address.
Background technology
The use of network at present is more and more universal, and almost everyone has the experience of using network inquiry data, Email to come and go, play game on-line etc.And use network the demand grow situation under, frequent one family, company even, having many people simultaneously need surf the Net.General Internet Service Provider (Internet Service Provider, ISP), for example: Hinet, an address (Internet Protocol can be provided, IP), a computing machine is connected to network, use but an address can only limit a computing machine by this group address.This is owing to send a packets of information to network by this group address, and the packets of information of response also will be recognized this address and be passed back, if address has the computing machine more than two to use simultaneously, then Xiang Ying packets of information can't be judged and packets of information passed to which platform computing machine and had problems.Therefore if want many computing machines to surf the Net simultaneously, must calcaneus rete network ISP apply for a plurality of addresses, but so will cause the usage charges of network quite expensive, and especially have hundreds of large enterprises more than thousands of people, the usage charges of network will become sizable burden.Especially now the address number under the procotol also will not apply use.
Utilize location, tableland Wireless Router (IP sharing device), the inner computer that can make several computing machines of family or company is by an identical address and net connection.Its principle is: several the computing machines of family or the inner computer of company have a LAN (Local AreaNetwork of one's own, LAN), utilize address Wireless Router and outside Wide Area Network (Wide AreaNetwork, WAN) contact, with reference to figure 1, the address that Internet Service Provider provided (for example 140.112.233.246 of Fig. 1) points to this location, tableland Wireless Router, and any packets of information that is sent to the address that Internet Service Provider provides all will be delivered to the address Wireless Router and judge and be sent to the computing machine that LAN needs this packets of information.Every computing machine of LAN inside all has private address (Private IP) separately, the 192.168.1.2 to 4 of Fig. 1 for example, and this address is provided by the address Wireless Router, and only can use between this LAN.When arbitrary computing machine sends a packets of information to Wide Area Network in the local network, can be sent to the outside again by the address Wireless Router.This moment, the address Wireless Router will be substituted by the address (because the virtual address of using in the LAN can't be differentiated at Wide Area Network) that Internet Service Provider provides with the data of the relevant sources such as virtual address that write down in the packets of information, for example the packets of information internal virtural address data 192.168.1.2 of first computing machine among Fig. 1 can become the address 140.112.233.246 that Internet Service Provider provides, and the address Wireless Router also connects this packets of information of record and by which platform computing machine is spread out of, the Wide Area Network of the packets of information outside that so spreads out of can be judged as by the address Wireless Router had the address spread out of.The packets of information of having passed response when the Wide Area Network of outside back also can transfer back to the address Wireless Router, and the preceding record that the address Wireless Router is complied with can suitably be passed packets of information back need this packet data computing machine.By transfer process so, except that can making many computing machines, and can be, make the external world can't learn inner data easily and strengthen the security of network by this transfer process with the same address.The section that at present to define three sections altogether be private address is respectively: 10.0.0.0-10.255.255.255,172.16.0.0-172.31.255.255,192.168.0.0-192.168.255.255.
Utilize the address Wireless Router, the address that can make many computing machines use same Internet Service Provider to provide to get in touch with external network, and present address Wireless Router be utilize the mode of software handle in the Wide Area Network that virtual address and Internet Service Provider provided reply and conversion, go up relatively sometimes because of slewing rate not as good as causing information transmitted bag data need wait for finishing that the network address translation of address Wireless Router handles, therefore the present invention with exemplary network address translation process of the prior art with hardware handles, and method for network address translation improved, make the data transmission of network not cause the problem of delay because of network address translation.
Summary of the invention
In above-mentioned invention technical background, the conversion using software processes of prior art address, the conversion that causes the network address because of the mass data delay that causes data to transmit not as good as the speed of data transmission on the network sometimes.Fundamental purpose of the present invention is to provide a kind of network address translation accelerator, utilize this network address translation accelerator that the gauge outfit data of several packets of information are divided into several parts of processing simultaneously, the speed that can accelerate to handle, guaranteeing to handle the required time is shorter than the required time of network data transmission, and the transmission of avoiding network data is because of delay that network address translation caused.
Another object of the present invention is, a kind of network address translation accelerator is provided, and utilizes new method for network address translation, can reduce the area and the corresponding sign indicating number body of network address translation table, and accelerates the speed handled.
According to above-described purpose, the invention provides a kind of network address translation accelerator.The present invention utilizes the network address translation accelerator, make the data of the required processing of transfer process can be divided into several parts of processing simultaneously, reduce and handle required time, the treatment efficiency optimization is promoted treatment efficiency, and is adopted new method for network address translation, can reduce the area and the corresponding sign indicating number body of network address translation table, and the speed of accelerate handling, to guarantee to handle the required time to be shorter than the required time of network data transmission, the transmission of avoiding network data is because of delay that network address translation caused.
Description of drawings
Fig. 1 links the synoptic diagram of Wide Area Network by the address Wireless Router for LAN;
Fig. 2 is the operation workflow figure of the network address translation accelerator of a preferred embodiment;
Fig. 3 is the rough schematic of the structure of the data that packets of information contained;
Fig. 4 is the rough schematic of the gauge outfit structure partly of packets of information;
Fig. 5 is source and the address of destination and the synoptic diagram of port process network address translation of packets of information;
Fig. 6 is the synoptic diagram of the detailed operation step of replacement engine;
Fig. 7 be each inter-module of network address translation accelerator communication and with bus contact synoptic diagram;
Fig. 8 is the get in touch synoptic diagram of network address translation accelerator by bus and external system.
Symbol description among the figure
10 compare engine
12 replace engine
14 storeies
16 syntax parsing engines
18 address translation table
The operation steps of 20-40 network address translation accelerator
42-62 replaces the operation steps square of engine
70 scramblers
72 counter processing enters
74 loggers
76 direct memory access (DMA) devices
78 finite state devices
80 static memory controllers
82 embedded static memories
84 add the total value device
The 90-94 block
The 102-146 contact signal
150 contacts one
152 contacts two
154 contacts three
156 contacts four
Rx receives engine
Tx transmits engine
Embodiment
Some embodiments of the present invention can be described in detail as follows.Yet except describing in detail, the present invention can also be widely implements at other embodiment, and scope of the present invention do not limited, and its scope with claims is as the criterion.
The process flow diagram of a preferred embodiment of the present invention as shown in Figure 2, for reach the process flow diagram of Wide Area Network by LAN.The assembly that network address translation accelerator of the present invention is comprised has: compare engine 10, replace engine 12.Its operating process is described as follows.
When packets of information reached LAN by Wide Area Network or reaches Wide Area Network by LAN, as step 20, (media independent interface MII) reached and receives engine Rx through Media Independent Interface.The message that contains the desired source of a bit of and communications protocol, destination information etc. of the data that tendency to develop send in the packets of information, utilize syntax parsing engine 16 packet data to be torn open message two parts of the data sent for tendency to develop and source, destination information etc., wherein to deliver to storer 14 through step 30 temporary for the data sent of tendency to develop, the message of source, destination information etc. is delivered to comparison engine 10 through step 22, relatively engine 10 is again by step 24, inquire about in address translation table, Query Result is transmitted back to comparison engine 10 through step 26.Relatively engine 10 result that will inquire about again reaches grammatical analysis engine 16 through step 28, makes grammatical analysis engine 16 confirm the data of the data of inquiry for which packets of information, again with the data transmission or stop.Packets of information and data of description (descriptor) are stored to storer 14 by receiving engine Rx through step 30.If after address translation table 18 inquiries, confirm to need to change, then activate and replace engine 12 through step 32, read by the data that system bus will be stored in the packets of information of the partial data that needs replacement in the storer 14 through step 34 and replace engine 12, replace after step 36 writes back to Cun Chu Yan device 14 by system bus.Deliver to transmission engine Tx wait with the packet data that replaces through step 38 and send, packet data is sent by the MII interface through step 40 again.In the above-mentioned step, some step can be carried out simultaneously, and for example: step 22,24 and 26 can be handled at one time simultaneously with step 30.
Network address translation table of the prior art has then comprised three parts: virtual information (masquerading information), personal information (private information) and public information (public information).Because the data major part of Network Transmission is all with internet communications protocol (Internet Protocol at present, IP) transmit, the content that address translation table of the present invention contains can be divided into two parts, and a part is a virtual information, another is a personal information partly, and has removed public information.So can reduce by three minutes one conversion table size, so the query script required time can reduce, improve the efficient of inquire address conversion table.And owing to lack the public information partial data, when the packet source of response is not that the destination of being transmitted by original packets of information is when passing back, for example the someone forges a packets of information, the destination of its packets of information is during for our the real network address, then because the shortage public information is compared, hardware can misdeem and receive.Therefore, we will be sent to the port (port) of destination of packets of information of Wide Area Network for basis, utilize extra software to arrange the port of virtual information, make the port in source of the packets of information of response send wrong end points, in order to avoid receive the problems such as security that incorrect packets of information influences network because of the ordering that is not inconsistent virtual information.
At the network address translation accelerator, the time of requester network address translation table must be shorter than the good time of the complete storage of packets of information just can not influence the storage process of packets of information.That is to say that a packets of information transmits the network address translation accelerator, the process of syntax parsing, comprising step 22,24,26 and 28 must finish before the step 30 that stores is finished.The situation of the packets of information of a worst is for as shown in Figure 3, comprise gauge outfit (header), 16 data (data) and remove error code (CRC).The data length of file header part is 60 bytes, and inner (promptly in inner each cycle of bus) weekly the phase transmit the data of T position, so take 60/T.And data are weekly that (transfer rate of Media Independent Interface is 100 megabit patterns to the transfer rate of phase 1/2 byte with the transmission speed regulation Media Independent Interface of removing error code, the computing frequency is 25 MHz, so the phase transmission is 4 weekly, i.e. 1/2 byte), in this example (situation of worst), data length is 2 bytes (16), and the length of removing error code is 4 bytes (32), so need (2+4) x2, totally 12 cycles altogether.And bus is inner different with the frequency of Media Independent Interface, suppose that the required time ratio of Media Independent Interface and bus inside one-period is F, so the cycle length of the 12*F of 12 cycle length of Media Independent Interface and bus inside is equal.Need 60/T+12*F bus internal cycle time altogether so transmit packets of information.
And relatively engine must be inquired about P port simultaneously with the time, it is P cycle length, and if this moment just in time relatively engine be required read-write, so must spend more the one-period time simultaneously, so the situation of individual data items (entry) the time worst in the requester network address translation table needs P+1 cycle length.The individual data items of total E pen in network address translation table just needs individual cycle length of E* (P+1), and have during synchronous processing P port just need again many need P cycle lengths.So query script needs E* (P+1)+P altogether.Suppose to use W comparison engine to handle simultaneously, so comparison procedure needs [E* (P+1)+P]/W altogether.Must satisfy this moment
[E*(P+1)+P]/W＜60/T+12*F (1)
Suppose that E is 16, F is 75/25=3, and P is 2, and T is 4 (once passing a character, is 4 bytes), therefore can get W＞0.98, then needs a relatively engine.If 64 individual data items is arranged, uses four relatively engines, then each relatively engine handle wherein 16, just can guarantee that the time of requester network address translation table is shorter than the time of packets of information storage.Therefore at the different designs environment, can use more relatively engine to handle simultaneously on demand, the time that just can guarantee the requester network address translation table is shorter than the time of packets of information storage and can not influences the storage process of packets of information.
Gauge outfit can be divided into four major parts, with reference to figure 4, is respectively MAC, PPP, IP, UDP.On behalf of the Ethernet medium, MAC store control gauge outfit (Ethernet MAC Header), PPP to represent point-to-point gauge outfit on the Ethernet and point-to-point protocol (PPPoE Header+PPPProtocol), IP to represent internet communications protocol gauge outfit (IP Header) and UDP to represent user's datagram agreement gauge outfit (UDP header).In step 40, can adjust the function that transmits engine Tx and deletion is arranged and increase, make packets of information at Ethernet (etherent) with point-to-point (point-to-point PPP) during interregional transmission, can delete or increase the point-to-point gauge outfit (PPPoE Header) on the Ethernet.After having transmitted 12 initial bytes, be after source medium stores control address and destination medium storage control address (source MACaddress and destination MAC address), change the part (ethernet type field) of Ethernet type and increase or remove 7 (point-to-point 8, PPP8) or 8 (point-to-point 16, PPP16) byte data.
For discontinuous packets of information (fragment packet), the gauge outfit of packets of information does not show the gauge outfit of transmission control protocol/user's datagram agreement gauge outfit (TCP/UDP), so can transmit the numerical value that the individual comparer (entrycomparator) of a signalisation network address translation accelerator need not compared port.
With reference to figure 5, when packets of information reaches Wide Area Network by LAN, the address that the replacement engine need be originated and the data of port are become the data of virtual address and port by the data of private address and port, make Wide Area Network can judge the source of this packets of information, when perhaps reaching LAN by Wide Area Network, replacing engine needs the data of the address of destination and port are become the data of private address and port by the data of virtual address and port, makes LAN correctly pass to inner computing machine.Replace the operation steps 34 of engine and 36 detailed operation flow process and please refer to Fig. 6, square 42 representatives replace engine and come into operation, and this process needs two cycle lengths, can obtain the address of descriptor (descriptor) and the information of start bit (start bit).And the information of the address (packet data address) of packet data is read in square 44 representatives, takes the one-period time.Next square 46 reads the information of descriptor according to the address of reading descriptor of learning in the square 42, comprise: the length of (1) internet communications protocol gauge outfit (IPHeader), size is 4, (2) transmission control protocol/user's datagram agreement gauge outfit (TCP/UDP), size is 1, (3) hit individual number (hit entrynumber), can 32 individualities be described with 5, (4) Bi Dui direction (directionof comparator), size is the framework (TCPconfiguration) of position and (5) transmission control protocol, size is the position, this process need one-period time.Square 48 is for being grasped individual data (entry information) by static RAM (SRAM), the required time is relevant with static RAM, generally needs 2 to 4 cycle lengths.Square 50 be read internet communications protocol in the packet info add total value (IP checksum), need the time of one-period.Square 52 needs the time in two cycles for recomputating the total value that adds of internet communications protocol.Square 54 if then skip over the calculating (square 58) of transmission control protocol/user's datagram agreement, directly enters square 60, if not then carry out square 58 for whether the total value totalling value that adds of confirming user's datagram agreement is 0.Square 56 be read internet communications protocol in the packet info add total value (IP checksum), need the time of one-period.Square 58 needs the time in three cycles for for recomputating the total value that adds of transmission control protocol/user's datagram agreement.Square 60 is for writing back the process of data, comprise: (1) writes numerical value address (MAC port number address), (3) that medium access control address (MAC address), (2) write the medium access control port and writes the port (port number address) that new address (IP address) and (4) write new address, needs the time in six cycles.Square 62 is for writing back the total value that adds that adds total value and new transmission control protocol/user's datagram agreement of new internet communications protocol.So, promptly finished the action of the network address translation of packets of information.
Fig. 7 is the hardware structure synoptic diagram of each inter-module of network address translation accelerator.Comprise: scrambler (NAT EMAC Decoder) 70, counter processing enter (NAT Countermanager) 72, logger (NAT registers) 74, direct memory access (DMA) device (DirectMemory Access, DMA) 76, the finite state device (Finite State Machine, FSM) 78, static memory controller (NAT SRAM Controller) 80 and add total value device (NAT Checksum) 84.And wherein AHB (advanced high-performance bus) represents high-effect bus, and the network address translation accelerator is got in touch by bus and computing machine etc.For example when the counting demand 104 of the counting demand 102 of signal one and signal two by scrambler 70, counter of notifications processing enter 72 and increase the numerical value (counter value) of counting demand (counter request) and counting.And counter processing enter 72 is logined to logger 74, and accepts the requirement of the removing counting 118 of logger 74.Block 90 is equivalent to the part of the relevant running of comparison engine, when the demand that reads 106 of signal one is come in the demand that reads 108 of signal two, notice static memory controller 80 is done the demand of reading 114, and static memory controller 80 and will do and read response 116 and to embedded static memory (EmbeddedSRAM) 82 reading of data 126.But and static memory controller 80 also count pick up device processing enter 72 login read-write demand 122 and carry out the action of reading and writing of login.Therefore embedded static memory 82 utilizes login read-write demand 122 to set up network address translation table, and to read demand 114, to read the action that comparison is carried out in response 116.92 of blocks are equivalent to replace the relevant running part of engine, finite state device 78 is done the demand 128 of network address translation and is received the response 130 of network address translation to static memory controller 80, also require to add the calculating 132 of total value, also respond the response 134 of the calculating that adds total value to finite state device 78 and add total value device 84 to adding total value device 84.And finite state device 78 will to counter processing enter 72 do reduce counting require 124.And block 94 is for being equivalent to the relevant running part of storer, 74 pairs of finite state devices 78 of logger are done the instruction 136 that login is set, and the login 138 of the setting interruption status of reception finite state device 78, and get in touch with external system (personal computer etc.) by bus response signal 140, and direct memory access (DMA) device 76 receives the control signal 142 that drives bus by finite state device 78, response signal 146 is given finite state device 78, and gets in touch with external system by bus response signal 144.
Therefore, the network address translation accelerator can be divided into four parts by getting in touch of bus and external system, with reference to figure 8, comprises: get in touch 1, contact 2 152, contact 3 154 and get in touch 4 156.Get in touch 1 and comprise external system the counting increase position of the network address translation table of network address translation accelerator, a counting increase position of network address translation table etc., and network address translation accelerator response network address translation table count enable numerical value increase state etc.Get in touch 2 152 for comparing the part of engine, pass to reading requirement, the medium that the network address translation accelerator comprises network address translation table by external system and store controlling party to position, network address translation table data query, discontinuous position, network address translation table acknowledgment of your inquiry signal etc., and the port of the address of the network address translation table that the network address translation accelerator response is hit, the network address translation table of hitting, road address translation table reverse etc.Get in touch 3 154 for replacing the part of engine, by external system pass to that the network address translation accelerator comprises that packets of information replace to require, packets of information replaces individual, packets of information and replaces approval etc., and network address translation accelerator response packets of information replace interrupt (interrupt), packets of information replaces mistake and interrupts (error interrupt).
The network address translation accelerator can also increase by an assembly and handle network address translation action in addition, for example: fire wall (Fireware), virtual server (Virtual Server) etc. except that above-mentioned assembly.Fire wall is in order to prevent others to come the access LAN basically, and then the turnover of data on the control network.Fire wall is the unique channel that enters LAN, and therefore the data of any turnover all will be passed through fire wall, determines whether and can pass through via fire wall again, therefore can increase security.And virtual server sets up server capability for providing, and the particular host that can specify the internal lan network is the server of types such as Web, Mail, FTP......Can carry out the transmission or the reception of data with LAN and Wide Area Network by connectivity port (port).
Comprehensive the above, the present invention has disclosed a kind of network address translation accelerator.According to network address translation accelerator of the present invention, the data of its network address translation table only comprise virtual information and personal information, lack public information than the general networking address translation table, so can reduce the area and the corresponding sign indicating number body of network address translation table, and accelerated the speed of processing.And the conversion of the network address is handled by hardware, can make processing speed than using software processes in the prior art for fast, and packets of information can be divided into several parts to the processing of a plurality of relatively engines, can guarantee that so the required time of network address translation is shorter than the required time of network data transmission, the transmission of avoiding network data is because of delay that network address translation caused.
The above is preferred embodiment of the present invention only, is not in order to limit protection scope of the present invention; All other changes for the equivalence of being finished under the disclosed spirit of disengaging or modifies, and all should be included in the scope of claims.
Claims (10)
1. a network address translation accelerator is characterized in that, comprises:
One first processor, in order to handle network address translation, the address of one gauge outfit of one packets of information and port data and a network address translation table are compared obtaining a corresponding address and port data, be substituted by corresponding this address and port data at address and port data with this gauge outfit of this packets of information;
One second processor is handled a plurality of actions of non-network address translation;
The plurality of ports interface is in order to connect this network address translation accelerator to a LAN and a Wide Area Network, to transmit or to receive the transmission data of this network address translation accelerator and this LAN and this Wide Area Network.
2. network address translation accelerator as claimed in claim 1 is characterized in that, above-mentioned first processor comprises:
At least one relatively engine is compared the address of a gauge outfit of a packets of information and port data and a network address translation table to obtain a corresponding address and port data simultaneously; And
One replaces engine, according to this corresponding address and port data the data of this gauge outfit of this packets of information is replaced action.
3. network address translation accelerator as claimed in claim 2 is characterized in that, above-mentioned network address translation table comprises virtual information (masquerading information) and personal information (private information).
4. network address translation accelerator as claimed in claim 3 is characterized in that, the order of the port of the personal information of above-mentioned network address translation table sorts according to the port of a destination that is sent to Wide Area Network.
5. network address translation accelerator as claimed in claim 2 is characterized in that, a plurality of individualities (entries) data of above-mentioned network address translation table are divided into the quantity that equates with this at least one relatively engine number.
6. network address translation accelerator as claimed in claim 5 is characterized in that, above-mentioned at least one relatively engine is corresponding to one to one a plurality of individualities of this network address translation table of cutting apart, and inquires about simultaneously.
7. network address translation accelerator as claimed in claim 6 is characterized in that, the time of above-mentioned inquiry is less than one and contains the complete time that is stored in a storer of minimum data one packets of information;
Wherein this worst case comprises the error code of removing of the data of gauge outfit, one or two bytes of one 60 bytes and a nybble for this packets of information.
8. network address translation accelerator as claimed in claim 2, it is characterized in that, more comprise at least one transmission engine, this transmission engine has deletion and the function that increases, make this packets of information at an Ethernet (etherent) and a point-to-point (point-to-point, PPP) during interregional transmission, can delete or increase the point-to-point gauge outfit (PPPoEHeader) on the Ethernet of this packets of information.
9. network address translation accelerator as claimed in claim 2 is characterized in that, above-mentioned at least one relatively engine when this packets of information is a discontinuous packets of information (fragmentpacket), does not remove the relatively numerical value of the port of this packets of information.
10. the method that network address translation is quickened is characterized in that, comprises:
Use a relative method, the address of a gauge outfit of a packets of information and port data and a network address translation table are compared to obtain a corresponding address and port data; And
Use a method of substitution, the data of this gauge outfit of this packets of information are replaced action according to this corresponding address and port data.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNB031035949A CN1228717C (en) | 2003-01-29 | 2003-01-29 | Device and method for network address translation acceleration |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNB031035949A CN1228717C (en) | 2003-01-29 | 2003-01-29 | Device and method for network address translation acceleration |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN1431600A true CN1431600A (en) | 2003-07-23 |
| CN1228717C CN1228717C (en) | 2005-11-23 |
Family
ID=4790048
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CNB031035949A Expired - Fee Related CN1228717C (en) | 2003-01-29 | 2003-01-29 | Device and method for network address translation acceleration |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN1228717C (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105763592A (en) * | 2014-12-19 | 2016-07-13 | 中兴通讯股份有限公司 | Cluster internal and external data interaction method, cluster gateway and source device |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102098277A (en) * | 2009-12-11 | 2011-06-15 | 传象科技股份有限公司 | Network interface conversion system and method, and related devices |
-
2003
- 2003-01-29 CN CNB031035949A patent/CN1228717C/en not_active Expired - Fee Related
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105763592A (en) * | 2014-12-19 | 2016-07-13 | 中兴通讯股份有限公司 | Cluster internal and external data interaction method, cluster gateway and source device |
Also Published As
| Publication number | Publication date |
|---|---|
| CN1228717C (en) | 2005-11-23 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN1227861C (en) | Method and apparatus for controlling multiple logical data streams in a variable data rate environment | |
| CN101707617B (en) | Message filtering method, device and network device | |
| US7400639B2 (en) | Method, system, and article of manufacture for utilizing host memory from an offload adapter | |
| CN1273394A (en) | Integrated IP network | |
| CN1582560A (en) | Method and system for contacting a device on a private network using a private domain name server | |
| CN110932890B (en) | Data transmission method, server and computer readable storage medium | |
| CN1695126A (en) | Data Storage Devices with IP Capability Partitioning | |
| JP2003308262A (en) | Internet communication protocol device realized by hardware protocol processing logic, and data parallel processing method using the device | |
| US7561585B2 (en) | Manufacture and method for accelerating network address translation | |
| CN1267026A (en) | System and method allowing server remote access to assets information in computer system | |
| CN101087296B (en) | Method for utilizing network processor to translate the IPv4/IPv6 network protocol | |
| CN1281563A (en) | Network controller for processing status queries | |
| CN1391384A (en) | Methods for identifying user device in communication systems, communication systems and apparatus | |
| CN1777142A (en) | Method of Using Virtual Network Card to Realize Data Communication in Network Environment Simulation | |
| CN1571349A (en) | Network access control method based on MAC address | |
| CN1228717C (en) | Device and method for network address translation acceleration | |
| US7505418B1 (en) | Network loopback using a virtual address | |
| US7814219B2 (en) | Method, apparatus, system, and article of manufacture for grouping packets | |
| CN113098955B (en) | A data transmission method, device, equipment and computer-readable storage medium | |
| CN1863158A (en) | IP message fragment cache memory and forwarding method | |
| KR19990072483A (en) | Method and system for communication between application programs and a network | |
| US6779054B2 (en) | Method and apparatus for operating a network controller | |
| CN116684390A (en) | IPv6 address fast scanning method and system based on cross-kernel asynchronous transceiver | |
| CN1391380A (en) | Gateway of wireless transmission layer | |
| CN112751946B (en) | Tunnel establishment method, device, equipment and computer readable storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| C19 | Lapse of patent right due to non-payment of the annual fee | ||
| CF01 | Termination of patent right due to non-payment of annual fee |