System and method of translating network address
View Patent ↗A method of translating network addresses includes defining a service address including a first IP address for a server. The server actually uses a service address including a second IP address. A packet originating from a client is received, the target address of the packet being the first IP address. The destination address of the packet is changed from the first IP address to a third IP address. The destination address of the packet is then changed from the third IP address to the second IP address. The first packet is then sent to the server. The present disclosure also provides a system for implementing the method of translating network address. The security of data transmission is improved while resolving IP network segment conflicts.
1. A method of translating network address, comprising:
defining a service address for a server, wherein the defined service address comprises a first IP address, the server actually uses a service address comprising a second IP address, wherein the first IP address is different from the second IP address, and the first IP address and the second IP address are in a same network segment;
receiving a first packet from a client, wherein a target address of the first packet is the first IP address, and a destination port of the first packet is the first port;
making a first modification to the first packet, wherein the first modification made to the first packet comprises changing the target address of the first packet from the first IP address to a preset third IP address, and changing a source address of the first packet from a fourth IP address to a preset fifth IP address;
making a second modification to the first packet, wherein the second modification comprises changing the destination address of the first packet from the third IP address to the second IP address; and changing the source address of the first packet from the fifth IP address to a preset sixth IP address; and
sending the first packet that has undergone the second modification to the server, such that the server receives the first packet originating from the client.
2. The method according to claim 1 , wherein the third IP address is different from the first IP address, and the third IP address is different from the second IP address, the third IP address and the first IP address belong to different network segments, the third IP address and the second IP address belong to different network segments.
3. The method according to claim 2 , wherein the sixth IP address and the fifth IP address belong to different network segments, the sixth IP address and the fourth IP address belong to a same network segment.
4. The method according to claim 3 , wherein the first modification made to the first packet further comprises: changing the destination port of the first packet from the first port to the third port, wherein the server actually uses the second port serves the client;
wherein the second modification made to the first packet further comprises: changing the destination port of the first packet from the third port to the second port, wherein the third port is different from the first port, and the third port is different from the second port.
5. The method according to claim 4 , further comprising:
generating a second packet in response to the first packet, wherein a source address of the second packet is the second IP address, and a destination address of the second packet is the sixth IP address;
making a first modification to the second packet, wherein the first modification made to the second packet comprises: changing the source address of the second packet from the second IP address to the third IP address; and changing the destination address of the second packet from the six IP address to the fifth IP address;
making a second modification to the second packet when the second packet has undergone the first modification, wherein the second modification made to the second packet comprises: changing the source address of the second packet from the third IP address to the first IP address; and changing the destination address of the second packet from the fifth IP address to the fourth IP address; and
sending the second packet to the client according to the destination address of the second packet when the second packet has undergone the second modification, such that the client receiving the second packet originating from the server.
6. The method according to claim 5 , wherein the first modification made to the second packet further comprises: changing the source port of the second packet from the second port to the third port;
wherein the second modification made to the second packet further comprises: changing the source port of the second packet from the third port to the first port.
7. A network address translating system, comprising:
at least one client, a first Nat device, a second Nat device, and a server;
wherein the first Nat device defines a service address for a server, the defined service address comprises a first IP address, the server actually uses a service address comprising a second IP address, wherein the first IP address is different from the second IP address, and the first IP address and the second IP address are in a same network segment;
wherein the first Nat device receives a first packet from a client, a target address of the first packet is the first IP address, and a destination port of the first packet is the first port;
wherein the first Nat device makes a first modification to the first packet, the first modification made to the first packet comprises changing the target address of the first packet from the first IP address to a preset third IP address, and changing a source address of the first packet from a fourth IP address to a preset fifth IP address;
wherein the second Nat device makes a second modification to the first packet, the second modification comprises changing the destination address of the first packet from the third IP address to the second IP address; and changing the source address of the first packet from the fifth IP address to a preset sixth IP address; and
wherein the second Nat device sends the first packet that has undergone the second modification to the server, such that the server receives the first packet originating from the client.
8. The network address translating system according to claim 7 , wherein the third IP address is different from the first IP address, and the third IP address is different from the second IP address, the third IP address and the first IP address belong to different network segments, the third IP address and the second IP address belong to different network segments.
9. The network address translating according to claim 8 , wherein the sixth IP address and the fifth IP address belong to different network segments, the sixth IP address and the fourth IP address belong to a same network segment.
10. The network address translating according to claim 9 , wherein the first modification made to the first packet further comprises: changing the destination port of the first packet from the first port to the third port, wherein the server actually uses the second port serves the client;
wherein the second modification made to the first packet further comprises: changing the destination port of the first packet from the third port to the second port, wherein the third port is different from the first port, and the third port is different from the second port.
11. The network address translating according to claim 10 , wherein the server generates a second packet in response to the first packet, a source address of the second packet is the second IP address, and a destination address of the second packet is the sixth IP address;
wherein the second Nat device makes a first modification to the second packet, the first modification made to the second packet comprises: changing the source address of the second packet from the second IP address to the third IP address; and changing the destination address of the second packet from the six IP address to the fifth IP address;
wherein the first Nat device makes a second modification to the second packet when the second packet has undergone the first modification, wherein the second modification made to the second packet comprises: changing the source address of the second packet from the third IP address to the first IP address; and changing the destination address of the second packet from the fifth IP address to the fourth IP address;
wherein the first Nat device sends the second packet to the client according to the destination address of the second packet when the second packet has undergone the second modification, such that the client receives the second packet originating from the server.
12. The network address translating according to claim 11 , wherein the first modification made to the second packet further comprises: changing the source port of the second packet from the second port to the third port;
wherein the second modification made to the second packet further comprises: changing the source port of the second packet from the third port to the first port.