Method, apparatus and system for realizing carrier grade network address translation

Patent metadata

Field	Value
Publication number	US-11863516-B2
Application number	US-202017914424-A
Country	US
Kind code	B2
Filing date	Dec 28, 2020
Priority date	Mar 24, 2020
Publication date	Jan 2, 2024
Grant date	Jan 2, 2024

Abstract

Provided are a method, an apparatus and a system for implementing carrier grade network address translation, an electronic device, and a computer-readable storage medium. The method includes: transmitting a first request to a control plane of a forwarding and control separated broadband access system, where the first request is used for applying to the control plane for a public network address range; receiving a first response returned by the control plane, where the first response includes allocated public network address range information; receiving a public network address allocated to a user by the control plane according to the public network address range information; receiving a private network address allocated to the user by the control plane; and performing, according to the public network address and the private network address, public and private network address translation on received service traffic of the user.

First claim

What is claimed is:

1. A method for implementing carrier grade network address translation, comprising:
transmitting a first request to a control plane of a forwarding and control separated broadband access system, wherein the first request is used for applying to the control plane for a public network address range; receiving a first response returned by the control plane, wherein the first response comprises allocated public network address range information;
receiving a public network address allocated to a user by the control plane according to the public network address range information; receiving a private network address allocated to the user by the control plane;
performing, according to the public network address and the private network address, public and private network address translation on received service traffic of the user;
receiving a second request transmitted from the control plane, wherein the second request is used for querying a state of the public network address range; and
returning a second response to the control plane, wherein the second response comprises the state of the public network address range.

2. The method according to claim 1 , wherein the public network address range is in an idle state, and the method further comprises:
transmitting a third request to the control plane, wherein the third request is used for requesting to release the public network address range.

3. The method according to claim 1 , further comprising:
receiving a fourth request transmitted from the control plane, wherein the fourth request is used for querying a state of at least one public network address in the public network address range; and
returning a fourth response to the control plane, wherein the fourth response comprises the state of the at least one public network address in the public network address range.

4. The method according to claim 1 , wherein all public network addresses in the public network address range are in a used state, and the method further comprises: re-transmitting the first request to the control plane.

5. The method according to claim 1 , wherein a usage right of the public network address range expires, and the method further comprises:
transmitting a fifth request to the control plane, wherein the fifth request is used for requesting to update the usage right of the public network address range.

6. A non-transitory computer-readable storage medium having a computer program stored thereon, the computer program, when executed by a processor, causes the processor to implement the method for implementing carrier grade network address translation according to claim 1 .

7. The method according to claim 1 , further comprising:
receiving a static port range allocated by the control plane to the user or a dynamic port allocated by the control plane for a specific service of the user; and
forwarding, according to the port range or the port, the service traffic after the public and private network address translation.

8. The method according to claim 7 , further comprising:
uploading user identity tracing information to the control plane;
or uploading the user identity tracing information to a third-party legal monitoring system;
wherein the user identity tracing information comprises: the public network address, the private network address, and the port range; or the user identity tracing information comprises: the public network address, the private network address, and the port.

9. A method for implementing carrier grade network address translation, comprising:
receiving a first request transmitted from a forwarding plane of a forwarding and control separated broadband access system, wherein the first request is used for applying for a public network address range; allocating public network address range information to the forwarding plane, and returning a first response to the forwarding plane, wherein the first response comprises allocated public network address range information;
allocating a public network address to a user according to the public network address range information, and transmitting the public network address to the forwarding plane; and allocating a private network address to the user, and transmitting the private network address to the forwarding plane;
transmitting a second request to the forwarding plane, wherein the second request is used for querying a state of the public network address range; and
receiving a second response returned by the forwarding plane, wherein the second response comprises the state of the public network address range.

10. The method according to claim 9 , wherein the public network address range is in an idle state, and the method further comprises:
receiving a third request transmitted from the forwarding plane, wherein the third request is used for requesting to release the public network address range; and releasing the public network address range.

11. The method according to claim 9 , further comprising:
transmitting a fourth request to the forwarding plane, wherein the fourth request is used for querying a state of at least one public network address in the public network address range; and
receiving a fourth response returned by the forwarding plane, wherein the fourth response comprises the state of the at least one public network address in the public network address range.

12. The method according to claim 9 , wherein a usage right of the public network address range expires, and the method further comprises:
receiving a fifth request transmitted from the forwarding plane, wherein the fifth request is used for requesting to update the usage right of the public network address range.

13. A non-transitory computer-readable storage medium having a computer program stored thereon, the computer program, when executed by a processor, causes the processor to implement the method for implementing carrier grade network address translation according to claim 9 .

14. The method according to claim 9 , further comprising:
allocating a static port range to the user, or allocating a dynamic port for a specific service of the user, and transmitting the port range or port to the forwarding plane.

15. The method according to claim 14 , further comprising:
receiving user identity tracing information transmitted from the forwarding plane; and
forwarding the user identity tracing information to an authentication authorization accounting system,
wherein the user identity tracing information comprises: the public network address, the private network address, and the port range; or the user identity tracing information comprises: the public network address, the private network address, and the port.

16. A system for implementing carrier grade network address translation, comprising a forwarding plane and a control plane;
wherein the forwarding plane and the control plane are disposed in different electronic devices;
the forwarding plane is configured to:
transmit a first request to the control plane, wherein the first request is used for applying to the control plane for a public network address range; receive a first response returned by the control plane, wherein the first response comprises allocated public network address range information; receive a public network address allocated to a user by the control plane according to the public network address range; receive a private network address allocated to the user by the control plane; perform, according to the public network address and the private network address, public and private network address translation on received service

Assignees

• Zte Corp

Inventors

• Huang Guangping
• Chen Yong

Classifications

• H04L61/2514 Primary

  between local and global IP addresses · CPC title

• H04L61/251

  between different IP versions · CPC title

• H04L61/5007

  Internet protocol [IP] addresses · CPC title

• H04L61/5061

  Pools of addresses · CPC title

• H04L2101/668

  Internet protocol [IP] address subnets · CPC title