Source-destination network address translation (SDNAT) proxy and method thereof

1. A source-destination network address translation (SDNAT) proxy comprising:

a processing system;

a memory, the memory containing instructions that, when executed by the processing system, configure the SDNAT proxy to:

receive a first message from a node communicatively connected to a first network to access a resource communicatively connected to a second network, wherein the first message contains at least a source address and a destination address used within the first network;

translate the destination address designated in the first message to an address of the resource;

generate a unique address for the source address designated in the first message, wherein the unique address is an address not in use on the second network;

provide a translated message including the translated destination address and the unique address; and

forward the translated message to the resource communicatively connected to the second network.

2. The SDNAT proxy of claim 1 , wherein the memory contains a map for translation of the destination address.

3. The SDNAT proxy of claim 1 , further configured to:

identify whether the resource is capable of communicating with the node over the first network; and

upon determination that the resource is not configured for communication over the first network, generate the unique address.

4. The SDNAT proxy of claim 1 , further configured to:

save in the memory a mapping between the source address and the unique address.

5. The SDNAT proxy of claim 1 , wherein the second network is a virtual network and the resource is a virtual machine (VM) component, wherein the VM component and the virtual network are part of a VM environment.

6. The SDNAT proxy of claim 5 , wherein the SDNAT proxy is connected in the VM environment.

7. The SDNAT proxy of claim 5 , wherein the first network is external to the VM environment.

8. The SDNAT proxy of claim 1 , further configured to:

receive a response message from the resource on the second network, wherein the response message includes a resource source address of the resource on the second network and the unique address.

9. The SDNAT proxy of claim 8 , further configured to:

translate the unique address, from the response message, to a node destination address of the node on the first network;

translate the source address of the resource on the second network to (a) the destination address included in the first message;

generating a translated response message including (a) the node destination address of the node on the first network as a destination address for the translated response message and (b) the destination address in the first message as a source address for the translated response message;

send the translated response message to the node on the first network.

10. A method for performing source destination network address translation, comprising:

receiving a first message from a node communicatively connected to a first network to access a resource communicatively connected to a second network, wherein the first message contains at least a source address and a destination address used within the first network;

translating the destination address designated in the first message to an address of the resource;

generating a unique address for the source address designated in the first message, wherein the unique address is an address not in use on the second network;

providing a translated message including the translated destination address and the unique address; and

forwarding the translated message to the resource communicatively connected to the second network.

11. The method of claim 10 , further comprising:

identifying whether the resource is capable of communicating with the node over the first network; and

upon determination that the resource is not configured for communication over the first network, generating the unique address.

12. The method of claim 10 , further comprising:

saving in a memory a mapping between the source address and the unique address, wherein the memory contains a map for translation of the destination address.

13. The method of claim 10 , wherein the second network is a virtual network and the resource is a virtual machine (VM) component, wherein the VM component and the virtual network are part of a VM environment.

14. The method of claim 13 , wherein the method is performed by a SDNAT proxy connected in the VM environment.

15. The method of claim 13 , wherein the first network is external to the VM environment.

16. The method of claim 10 , further comprising:

receiving a response message from the resource on the second network, wherein the response message includes a resource source address of the resource on the second network and the unique address.

17. The method of claim 16 , further comprising:

translating the unique address, from the response message, to a node destination address of the node on the first network;

translating the source address of the resource on the second network to (a) the destination address included in the first message;

generating a translated response message including (a) the node destination address of the node on the first network as a destination address for the translated response message and (b) the destination address in the first message as a source address for the translated response message;

sending the translated response message to the node on the first network.