Method for operating a symmetric network address translation
View Patent ↗The invention relates to a method for operating a symmetric network address translation NAT ( 100 ) setting up sessions between a user terminal ( 110 - 1, 110 - 2 ) and a server ( 120 - 1, 120 - 2 ). If a new session is initiated by said user terminal an external IP-address (C) and port (D) representing the desired destination server as well as a public NAT-IP address (X) are determined. Further, a public NAT-IP port is selected. Finally, the NAT sets up the new session based on an appropriate entry representing said new session in a NAT table. In order to save available public NAT-IP ports a new session according to the invention not necessarily represented by a new public NAT-IP port, but by a tuple comprising the public NAT-IP address, the selected public NAT-IP port (Y), the external IP address (C) and the port (D). A new session is set up only if there is an entry of the whole tuple identifying said new session in said NAT-table.
1. A method for operating a symmetric Network Address Translation (NAT) for setting up sessions between a user terminal and a server, comprising the steps of:
determining an external internet protocol (IP) address and an external IP port representing said server as well as a public NAT-IP address if a new session is initiated by said user terminal or said server;
selecting a public NAT-IP port for said new session; and
setting up the new session between said user terminal and said server via said selected public NAT-IP port based on an entry in a first NAT-table representing sessions currently allowed to run via said NAT;
generating a tuple comprising the public NAT-IP address, the selected public NAT-IP port, the external IP address and the external IP port as a session identifier which individually identifies the new session; and
the setting up of the new session is based on an entry of said tuple in said first NAT-table; and
wherein the public NAT-IP address, the selected public NAT-IP port, the external IP address and the external IP port of the tuple are destination components.
2. The method according to claim 1 , wherein, after the public port has been selected, the method comprises the following steps:
checking if the first NAT-table already comprises an entry of said tuple; and
inputting said tuple into said first NAT-table before the set up of the new session starts if said entry did previously not exist or
using the already existing entry of said tuple in the first NAT-table as a basis for the set up of the new session.
3. The method according to claim 1 , wherein, before determining the external IP address and port, the method comprises the step of: allocating a private NAT-IP address and port representing said particular user terminal.
4. The method according to claim 1 , wherein a tuple is deleted in said first NAT-table after a predetermined time interval.
5. The method according to claim 1 , wherein the public NAT-IP port is arbitrarily selected for the new session.
6. The method according to claim 1 , wherein a next available public NAT-IP port is selected as the public NAT-IP port for the new session.
7. A computer-readable non-transitory medium encoded with a computer program comprising code for a Symmetric Network Address Translation NAT wherein the code is embodied to carry out the method according to claim 1 .
8. A data storage means comprising the computer-readable non-transitory medium according to claim 7 .
9. A computer-readable non-transitory storage medium comprising a Symmetric Network Address Translation (“NAT”) for setting up sessions between a user terminal and a server, comprising:
means for detecting the initiation of a new session;
means for determining an external internet protocol (IP) address and an external IP port representing said server as well as for determining a public NAT-IP address;
means for selecting a public NAT-IP port for said new session; and
means for setting up the new session between said user terminal and said server via said selected public NAT-IP port based on an entry in a first NAT-table representing sessions currently allowed to run via said NAT;
means for generating a tuple comprising the public NAT-IP address, the selected public NAT-IP port, the external IP address and the external IP port as a session identifier which individually identifies the new session; and
wherein the means for setting up of the new session is embodied to carry out the set up of the new session only, if there is an entry of said tuple in the first NAT-table; and
wherein the public NAT-IP address, the selected public NAT-IP port, the external IP address and the external IP port of the tuple are destination components.
10. The computer-readable storage medium of claim 9 , wherein the NAT comprises a second NAT-table for allocating a private NAT-address and port, representing said user terminal to the public NAT-address and port and vise versa.