Virtualized network functions through address space aggregation
In some examples, an example method to provide a virtualized Carrier-grade Network Address Translation (CGN) at a first customer edge router may include establishing a tunnel between the first customer edge router and each aggregation router among one or more aggregation routers, performing a Network Address Translation (NAT) on a first data packet to create a NAT'ed first data packet, selecting a first aggregation router from amongst the one or more aggregation routers to send the NAT'ed first data packet to, encapsulating the NAT'ed first data packet with overlay information corresponding to a tunnel established between the first customer edge router and a first aggregation router, and sending the encapsulated NAT'ed first data packet through the tunnel to the first aggregation router.
1 . A method to provide address translation at a customer edge router, the customer edge router being one of a plurality of customer edge routers, the method comprising:
establishing, using the customer edge router, a respective tunnel between the customer edge router in a network provider domain and each respective aggregation router among one or more aggregation routers in one or more function provider domains;
performing, using the customer edge router, a Network Address Translation (NAT) on a first data packet to create a NAT′ed first data packet, the NAT being a translation of a private IP address of the customer edge router to a public IP address of an aggregation router included in the one or more aggregation routers;
selecting, using the customer edge router, the aggregation router from amongst the one or more aggregation routers to send the NAT′ed first data packet to;
encapsulating, using the customer edge router, the NAT′ed first data packet with overlay information corresponding to the respective tunnel established between the customer edge router and the aggregation router to yield an encapsulated NAT′ed first data packet; and
sending, using the customer edge router, the encapsulated NAT′ed first data packet through the respective tunnel to the aggregation router.
2 . The method of claim 1 , wherein the public IP address is a device address associated with the customer edge router.
3 . The method of claim 2 , wherein the device address is an individual IP address of a functional IP address space associated with the aggregation router.
4 . The method of claim 1 , wherein:
the first data packet is received from a computing device associated with a Virtual Private Network (VPN); and
the method further comprises maintaining a Virtual Routing and Forwarding (VRF) record based on the NAT, the maintaining of the VRF record including entering an address associated with the computing device in the VRF record.
5 . The method of claim 1 , further comprising maintaining a NAT record based on the NAT, the maintaining including creating an entry in a NAT table indicative of a Virtual Private Network (VPN) associated with the first data packet.
6 . The method of claim 5 , wherein the NAT record is associated with the private IP address of the customer edge router and the public IP address of the aggregation router.
7 . The method of claim 1 , wherein:
the overlay information includes an overlay header; and
the overlay header includes a port address associated with the customer edge router and a port address associated with the aggregation router used to establish the respective tunnel between the customer edge router and the aggregation router.
8 . The method of claim 1 , further comprising:
receiving, using the customer edge router, a second data packet through the respective tunnel established between the customer edge router and the aggregation router;
removing, using the customer edge router, overlay information from the second data packet to create a de-encapsulated second data packet;
performing, using the customer edge router, a reverse NAT on the de-encapsulated second data packet to yield a reverse NAT′ed de-encapsulated second data packet; and
forwarding the reverse NAT′ed de-encapsulated second data packet for delivery to a destination address specified in the reverse NAT′ed de-encapsulated second data packet.
9 . The method of claim 1 , further comprising terminating one or more tunnels from an endpoint layer to form a gateway.
10 . The method of claim 9 , further comprising advertising an aggregated IP space.
11 . The method of claim 1 , further comprising:
receiving, using the aggregation router, the encapsulated NAT′ed first data packet through the respective tunnel;
removing, using the aggregation router, the overlay information to yield a de-encapsulated NAT′ed packet; and
maintaining, using the aggregation router, a record of the respective tunnel through which the encapsulated NAT′ed first data packet was received without maintaining any NAT state information.
12 . A customer edge router, the customer edge router included in a plurality of customer edge routers, the customer edge router comprising:
a memory configured to store instructions; and
a processor configured to execute the instructions, wherein execution of the instructions causes the processor to:
establish a respective tunnel between the customer edge router in a network provider domain and each respective aggregation router among one or more aggregation routers in one or more function provider domains;
perform a Network Address Translation (NAT) on a first data packet to create a NAT′ed first data packet, the NAT being a translation of a private IP address of the customer edge router to a public IP address of an aggregation router included in the one or more aggregation routers;
select the aggregation router from amongst the one or more aggregation routers to send the NAT′ed first data packet to;
encapsulate the NAT′ed first data packet with overlay information corresponding to the respective tunnel established between the customer edge router and the aggregation router to yield an encapsulated NAT′ed first data packet; and
send the encapsulated NAT′ed first data packet through the respective tunnel to the aggregation router.
13 . The customer edge router of claim 12 , wherein the public IP address is a device address associated with the customer edge router.
14 . The customer edge router of claim 13 , wherein the device address is an individual IP address of a functional IP address space associated with the first aggregation router.
15 . The customer edge router of claim 12 , wherein:
the overlay information includes an overlay header, and
the overlay header includes a port address associated with the customer edge router and a port address associated with the aggregation router used to establish the respective tunnel between the customer edge router and the aggregation router.
16 . The customer edge router of claim 12 , wherein execution of the instructions causes the processor to:
receive a second data packet using the respective tunnel;
remove overlay information from the second data packet to create a de-encapsulated second data packet;
perform a reverse NAT on the de-encapsulated second data packet to yield a reverse NAT′ed de-encapsulated second data packet; and
forward the reverse NAT′ed de-encapsulated second data packet for delivery to a destination address specified in the reverse NAT′ed de-encapsulated second data packet.
17 . A non-transitory computer-readable storage media storing thereon instructions that, in response to execution by a processor of a customer edge router, causes the processor to:
establish a respective tunnel between the customer edge router in a network provider domain and each respective aggregation router among one or more aggregation routers in one or more function provider domains;
perform a Network Address Translation (NAT) on a first data packet to create a NAT′ed first data packet, the NAT being a translation of a private IP address of the customer edge router to a public IP address of an aggregation router included in the one or more aggregation routers;
select the aggregation router from amongst the one or more aggregation routers to send the NAT′ed first data packet to;
encapsulate the NAT′ed first data packet with overlay information corresponding to the respective tunnel established between the customer edge router and the aggregation router to yield an encapsulated NAT′ed first data packet; and
send the encapsulated NAT′ed first data packet through the respective tunnel to the aggregation router.
18 . The non-transitory computer-readable storage media of claim 17 , wherein:
the public IP address is a device address associated with the customer edge router; and
the device address is an individual IP address of a functional IP address space associated with the aggregation router.
19 . The non-transitory computer-readable storage media of claim 17 , further storing thereon instructions that, in response to execution by the processor, causes the processor to:
receive a second data packet through the respective tunnel;
remove overlay information from the second data packet to create a de-encapsulated second data packet;
perform a reverse NAT on the de-encapsulated second data packet to yield a reverse NAT′ed de-encapsulated second data packet; and
forward the reverse NAT′ed de-encapsulated second data packet for delivery to a destination address specified in the reverse NAT′ed de-encapsulated second data packet.
20 . The non-transitory computer-readable storage media of claim 17 , wherein:
the overlay information includes an overlay header, and
the overlay header includes a port address associated with the customer edge router and a port address associated with the aggregation router used to establish the respective tunnel between the customer edge router and the aggregation router.