Network session traffic alignment method based on address translation

Abstract

The invention provides a network session traffic alignment method based on address translation. The network session traffic alignment method comprises the specific steps: distributing a correspondingavailable address pool for each flow processing server, wherein the address pool comprises a group of available IP addresses; when the traffic server acquires an uplink data packet, selecting an IP address from a corresponding address pool to replace a source IP address in the data packet, then extracting a quintuple of the uplink data packet, and storing the quintuple into a session mapping table; when the target receives the uplink data packet, generating a downlink data packet, and when the downlink data packet passes through another traffic server, sending the downlink data packet to a traffic processing server corresponding to the uplink; and obtaining the quintuple of the data packet after the traffic server receives the downlink data packet, completing alignment when determining that the data packet is the same session data packet after comparing the quintuple with the stored session mapping table, and otherwise, re-injecting the data packet into the network. According to the invention, the function that a specific point only uses a specific IP address is realized, and the scene that bidirectional flow needs to be processed in related applications such as network auditing and network security is satisfied, and the network session traffic alignment method is fast and efficient.

Description

technical field [0001] The invention proposes a method for aligning network session flow based on address translation, which belongs to the technical field of network flow session. [0002] By encoding the IP address to identify servers in different regions, the address translation technology is used to solve the problem of traffic alignment, and realize the function of using only a specific IP address at a specific point, which meets the needs of bidirectional traffic in related applications such as network auditing and network security. The scene to be processed is fast and efficient. Background technique [0003] In applications related to network auditing and network security, there are many situations that require bidirectional traffic of sessions to proceed normally. In practical engineering applications, ideally (symmetrical routing), the request message sent by the user and the response message returned by the server to the user will take the same network path, that...

AI Technical Summary

Problems solved by technology

However, due to the fact that there are many servers deployed in different regions, and fewer bits are not enough to support this requirement, the traffic alignment method based on encoding is less applicable

[0008] It can be seen from the above that in order to solve the problem of session misalignment in multiple places, the broadcast alignment method based on connection tracking increases the communication network overhead cost. If the transmission of quintuple connection tracking information is not timely, alignment will not be possible; traffic alignment based on encoding Because the method uses the source port of communication for encoding and requires verification, it supports fewer nodes and has a higher error rate

Images