Hybrid and efficient method to sync NAT sessions
The method of synchronizes network address translation (NAT) records between an active gateway and a standby gateway. The method of some embodiments synchronizes NAT records of long-term data flows more frequently than those of short-term flows. Multiple data flows pass between a device at an internal source address and a device at an external destination address through the active NAT gateway. For each flow, the method generates a NAT record. The method then determines whether the data flow is a short-term flow or a long-term flow and synchronizes the NAT records of the long-term flows, but not the NAT records of the short-term flows, with the standby gateway. The method of some embodiments synchronizing NAT records more frequently when NAT records are being generated quickly relative to prior generation rates and less frequently when NAT records are being generated slowly relative to the prior generation rates.
1. A method of synchronizing network address translation (NAT) records between an active gateway and a standby gateway, the method comprising iteratively:
waiting a set interval;
determining a data flow type for synchronization, the data flow type being selected between a long-term flow type and a short-term flow type;
providing decoding data from the active gateway to the standby gateway to enable the standby gateway to decode encoded NAT records;
encoding an internal source IP address in the NAT record by replacing the subnet portion of the IP address with a unique identifier while maintaining a portion of the address identifying the specific machine within the subnet;
synchronizing, for data flow type being a long-term flow type, a set of NAT records generated since an immediately prior synchronization; and
adjusting the interval based on a rate of NAT record generation relative to a threshold.
2. The method of claim 1 , wherein adjusting the interval comprises comparing a first number of NAT records synchronized in the immediately prior synchronization to a second number of NAT records synchronized in a current synchronization.
3. The method of claim 2 , wherein adjusting the interval comprises increasing the interval when the first number is greater than the second number by a first particular amount.
4. The method of claim 3 , wherein adjusting the interval comprises decreasing the interval when the first number is less than the second number by a second particular amount.
5. The method of claim 4 , wherein the first particular amount is calculated based on at least one of the first and second numbers and the second particular amount is calculated based on at least one of the first and second numbers.
6. The method of claim 5 , wherein the interval is bounded to remain between an upper bound and a lower bound.
7. A non-transitory machine readable medium storing a program which when executed by at least one processing unit synchronizes network address translation (NAT) records between an active gateway and a standby gateway, the program comprising sets of instructions for:
waiting a set interval;
determining a data flow type for synchronization, the data flow type being selected between a long-term flow type and a short-term flow type;
providing decoding data from the active gateway to the standby gateway to enable the standby gateway to decode encoded NAT records;
encoding an internal source IP address in the NAT record by replacing the subnet portion of the IP address with a unique identifier while maintaining a portion of the address identifying the specific machine within the subnet;
synchronizing, for data flow type being a long-term flow type, a set of NAT records generated since an immediately prior synchronization; and
adjusting the interval based on a rate of NAT record generation relative to a threshold.
8. The non-transitory machine readable medium of claim 7 , wherein the set of instructions for adjusting the interval comprises a set of instructions comparing a first number of NAT records synchronized in the immediately prior synchronization to a second number of NAT records synchronized in a current synchronization.
9. The non-transitory machine readable medium of claim 8 , wherein the set of instructions for adjusting the interval comprises a set of instructions increasing the interval when the first number is greater than the second number by a first particular amount.
10. The non-transitory machine readable medium of claim 9 , wherein the set of instructions for adjusting the interval comprises a set of instructions decreasing the interval when the first number is less than the second number by a second particular amount.
11. The non-transitory machine readable medium of claim 10 , wherein the first particular amount is calculated based on at least one of the first and second numbers and the second particular amount is calculated based on at least one of the first and second numbers.
12. The non-transitory machine readable medium of claim 11 , wherein the interval is bounded to remain between an upper bound and a lower bound.
13. A method of synchronizing network address translation (NAT) records between an active gateway and a standby gateway, the method comprising iteratively:
encoding a set of NAT records to reduce size before being sent to a standby gateway;
waiting a set interval;
determining a data flow type for synchronization, the data flow type being selected between a long-term flow type and a short-term flow type;
providing decoding data from the active gateway to the standby gateway to enable the standby gateway to decode encoded NAT records;
encoding an internal source IP address in the NAT record by replacing the subnet portion of the IP address with a unique identifier while maintaining a portion of the address identifying the specific machine within the subnet;
synchronizing, for data flow type being a long-term flow type, the set of NAT records generated since an immediately prior synchronization; and
adjusting the interval based on a rate of NAT record generation relative to a threshold.