Relay apparatus, relay system, and relay method

Patent metadata

Field	Value
Publication number	US-2016119281-A1
Application number	US-201514852168-A
Country	US
Kind code	A1
Filing date	Sep 11, 2015
Priority date	Oct 23, 2014
Publication date	Apr 28, 2016
Grant date	—

Abstract

Upon receipt of a packet addressed to a virtual IP address assigned to each first device from a second device outside a base network, a processor identifies a base relay apparatus that accommodates the first device, to which the virtual IP address is assigned, on the basis of the virtual address and a protocol type of the received packet, and also identifies a reception port number of the identified base relay apparatus, which corresponds to a combination of the virtual IP address and the protocol type of the received packet, from among reception port numbers each assigned to a combination of the first device accommodated to identify a transfer destination, and a protocol type. Then, the processor relays the received packet to the identified reception port number of the identified base relay apparatus.

First claim

What is claimed is:

1 . A relay apparatus communicatively connected, via a network, to each base relay apparatus arranged within a base network that accommodates one or a plurality of first devices having a communication function within the base network, the relay apparatus comprising:
a communication interface configured to transmit and receive a packet; and a processor configured to relay the received packet in accordance with a specified rule, wherein upon receipt of a packet addressed to a virtual IP (Internet Protocol) address assigned to each of the first devices from a second device having a communication function outside of the base network, the processor identifies the base relay apparatus that accommodates the first device, to which the virtual IP address is assigned, on the basis of the virtual IP address and a protocol type of the received packet, and also identifies a reception port number of the identified base relay apparatus, which corresponds to a combination of the virtual IP address and the protocol type of the received packet, from among reception port numbers each assigned to a combination of the first device accommodated to identify a transfer destination, and a protocol type, and the processor relays the received packet to the identified reception port number of the identified base relay apparatus.

2 . The relay apparatus according to claim 1 , wherein
a port number of a port that receives the packet relayed by the base relay apparatus is assigned to each combination of the first device of a transmission source, and a protocol type of the packet relayed by the base relay apparatus, upon receipt of the packet relayed by the base relay apparatus, the processor identifies the second device of the transfer destination of the packet on the basis of the port number by which the identified virtual IP address has been received, and also identifies a virtual IP address assigned to the first device of the transmission source of the received packet from among virtual IP addresses assigned to each of the first devices, and the processor relays the received packet to the identified second device by rewriting the IP address of the transmission source of the received packet with the identified virtual IP address.

3 . The relay apparatus according to claim 1 , further comprising
the processor configured to output a trigger for establishing a tunnel connection with the identified base relay apparatus when the tunnel connection with the identified base relay apparatus has not been established, upon receipt of the packet addressed to the virtual IP address from the second device.

4 . The relay apparatus according to claim 3 , wherein
the processor relays the received packet via a tunnel after the tunnel connection has been established.

5 . The relay apparatus according to claim 3 , wherein
the tunnel connection is a VPN (Virtual Private Network) connection or a PPP (Point-to-Point Protocol) connection.

6 . The relay apparatus according to claim 1 , further comprising
The processor configured to set a rule.

7 . The relay apparatus according to claim 1 , wherein
the rule is a rule generated on the basis of content of a setting made by a user.

8 . The relay apparatus according to claim 1 , wherein
the network is a wide area network.

9 . A relay system including one or a plurality of base relay apparatuses each arranged within a base network that accommodates one or a plurality of first devices having a communication function within the base network, and a relay apparatus communicatively connected, via a network, to each of the base relay apparatuses, wherein:
the relay apparatus comprises
a first communication interface configured to transmit and receive a packet, and
a first processor configured to relay the received packet in accordance with a specified first rule;
upon receipt of a packet addressed to a virtual IP (Internet Protocol) address assigned to each of the first devices from a second device having a communication function outside of the base network, the first processor identifies the base relay apparatus that accommodates the first device, to which the virtual IP address is assigned, on the basis of the virtual IP address and a protocol type of the received packet, and also identifies a reception port number of the identified base relay apparatus, which corresponds to a combination of the virtual IP address and the protocol type of the received packet, from among reception port numbers each assigned to a combination of the first device accommodated to identify a transfer destination, and a protocol type; the first processor relays the received packet to the identified reception port number of the identified base relay apparatus; each of the base relay apparatuses comprises
a second communication interface configured to transmit and receive the packet, and
a second processor configured to relay the received packet in accordance with a specified second rule;
the second processor identifies the first device of the transfer destination of the received packet on the basis of the reception port number by which the packet has been received, upon receipt of the packet relayed by the relay apparatus; and the second processor relays the received packet to the identified first device.

10 . A relay method of a relay apparatus communicatively connected, via a network, to each base relay apparatus arranged within a base network that accommodates one or a plurality of first devices having a communication function within the base network, the method comprising:
upon receipt of a packet addressed to a virtual IP (Internet Protocol) address assigned to each of the first devices from a second device having a communication function outside of the base network, identifying the base relay apparatus that accommodates the first device, to which the virtual IP address is assigned, on the basis of the virtual IP address and a protocol type of the received packet, and also identifying a reception port number of the identified base relay apparatus, which corresponds to a combination of the virtual IP address and the protocol type of the received packet, from among reception port numbers each assigned to a combination of the first device accommodated to identify a transfer destination, and a protocol type; and relaying the received packet to the identified reception port number of the identified base relay apparatus.

11 . A non-transitory computer-readable recording medium having stored therein a program for causing a computer of a relay apparatus, which is communicatively connected, via a network, to each base relay apparatus arranged within a base network that accommodates one or a plurality of first devices having a communication function within the base network, to execute a process comprising:
upon receipt of a packet addressed to a virtual IP (Internet Protocol) address assigned to each of the first devices from a second device having a communication function outside of the base network, identifying the base relay apparatus that accommodates the first device, to which the virtual IP address is assigned, on the basis of the virtual IP address and a protocol type of the received packet, and also identifying a reception port number of the identified base relay apparatus, which corresponds to a combination of the virtual IP address and the protocol type of the received packet, from among reception port numbers each assigned to a combination of the first device accommodated to identify a transfer destination, and a protocol type; and relaying the received packet to the identified reception port number of the identified base relay apparatus.

Assignees

• Fujitsu Ltd

Inventors

• Tanaka Daichi
• Sone Tomoyuki
• Endo Chiaki
• Terasaki Yasunori
• Okamura Toshiyuki

Classifications

• H04L63/029

  Firewall traversal, e.g. tunnelling or, creating pinholes · CPC title

• H04L67/12

  specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks · CPC title

• H04L61/2517 Primary

  using port numbers · CPC title

• H04L47/825 Primary

  Involving tunnels, e.g. MPLS · CPC title

• H04W4/70

  Services for machine-to-machine communication [M2M] or machine type communication [MTC] · CPC title