Method for providing an internal server with a shared public IP address

Patent metadata

Field	Value
Publication number	US-9253149-B2
Application number	US-201414489484-A
Country	US
Kind code	B2
Filing date	Sep 18, 2014
Priority date	May 15, 2002
Publication date	Feb 2, 2016
Grant date	Feb 2, 2016

Abstract

A method for allowing a device in an external network to access a server in an internal network via a public IP address. A routing equipment receives a message carrying a destination IP address and a destination port number from the device, matches the destination IP address and the destination port number with external characteristics of the server in a mapping table established on the routing equipment. If a match exists, the routing equipment replaces the destination IP address and the destination port number with the internal IP address and the internal port number. The mapping table includes a correlation between external characteristics and internal characteristics of the server. The external characteristics include the external IP address and the external port number of the server. The internal characteristics include the internal IP address and the internal port number.

First claim

I claim:

1. A routing apparatus for allowing a device in an external network to access a server in an internal network, wherein the server and at least one other host in the internal network share a public Internet protocol (IP) address, the routing apparatus comprising:
a memory, configured to store a correlation between external characteristics of the server and internal characteristics of the server in a mapping table, and program codes comprising instructions, wherein the external characteristics of the server comprise an external IP address and an external port number of the server, and the internal characteristics of the server comprise an internal IP address and an internal port number of the server, wherein the external IP address is configured to be the public IP address; and
a processor, configured to execute the instructions,
wherein the instructions comprise:
instructions for determining whether a destination IP address and a destination port number carried in a first message received from the device match the external characteristics of the server by looking up the mapping table;
instructions for modifying the first message by replacing the destination IP address and the destination port number carried in the first message with the internal IP address and the internal port number that are correlated to the external IP address and the external port number of the server in the mapping table if the destination IP address and the destination port number carried in the first message match the external characteristics of the server; and
instructions for forwarding the modified first message to the server,
wherein the correlation is established according to parameters configured by a user on the routing apparatus, the parameters comprise the external IP address, the external port number, the internal IP address and the internal port number of the server.

2. The routing apparatus according to claim 1 , wherein the external characteristics further comprise an external protocol code of the server, the internal characteristics further comprise an internal protocol code of the server, and the first message further comprises a protocol code, and
wherein the instructions for determining comprise:
instructions for determining whether the destination IP address, the destination port number and the protocol code carried in the first message match the external IP address, the external port number and the external protocol code of the server by looking up the mapping table.

3. The routing apparatus according to claim 2 , wherein the parameters further comprise the external protocol code of the server and the internal protocol code of the server.

4. The routing apparatus according to claim 1 , wherein the instructions stored in the memory further comprise:
instructions for determining whether a source IP address and a source port number carried in a second message received from the server match the internal characteristics of the server by looking up the mapping table; and
instructions for modifying the second message by replacing the source IP address and the source port number carried in the second message with the external IP address and the external port number that are correlated to the internal IP address and the internal port number of the server in the mapping table if the source IP address and the source port number carried in the second message match the internal characteristics of the server.

5. A method for allowing a device in an external network to access a server in an internal network through a routing apparatus, wherein the server and at least one other host in the internal network share a public Internet protocol (IP) address, the method comprising:
establishing a correlation between external characteristics of the server and internal characteristics of the server, and storing the correlation in a mapping table, wherein the external characteristics of the server comprise an external IP address and an external port number of the server, and the internal characteristics of the server comprise an internal IP address and an internal port number of the server, wherein the external IP address is configured to be the public IP address;
receiving, by the routing apparatus, a first message from the device, wherein the first message carries a destination IP address and a destination port number;
determining, by the routing apparatus, whether the destination IP address and the destination port number carried in the first message match the external characteristics of the server by looking up the mapping table;
if the destination IP address and the destination port number carried in the first message matches the external characteristics of the server, modifying the first message by replacing the destination IP address and the destination port number carried in the first message with the internal IP address and the internal port number that are correlated to the external IP address and the external port number of the server in the mapping table; and
forwarding, by the routing apparatus, the modified first message to the server,
wherein the correlation is established according to parameters configured by a user on the routing apparatus, the parameters comprise the external IP address, the external port number of the server, the internal IP address and the internal port number of the server.

6. The method according to claim 5 , wherein the external characteristics of the server further comprise an external protocol code of the server, the internal characteristics of the server further comprise an internal protocol code of the server, and the first message further comprises a protocol code; and
wherein determining whether the destination IP address and the destination port number carried in the first message match the external characteristics of the server by looking up the mapping table comprises:
determining whether the destination IP address, the destination port number and the protocol code carried in the first message match the external IP address, the external port number and the external protocol code of the server by looking up the mapping table.

7. The method according to claim 6 , wherein the parameters further comprise the external protocol code of the server and the internal protocol code of the server.

8. The method according to claim 5 , further comprising:
receiving, by the routing apparatus, a second message from the server, wherein the second message carries a source IP address and a source port number;
determining, by the routing apparatus, whether the source IP address and the source port number carried in the second message match the internal characteristics of the server by looking up the mapping table; and
if the source IP address and the source port number carried in the second message match the internal characteristics of the server, modifying the second message by replacing the source IP address and the source port number carried in the second message with the external IP address and the external port number that are correlated to the internal IP address and the internal port number of the server in the mapping table.

9. A computer program product comprising a non-transitory storage medium storing computer-executable instructions which, when executed by a computer acting as a routing apparatus, allow a device in an external network to access a server in an internal network, wherein the server and at least one other host in the internal network share a public Internet protocol (IP) address, the computer-executable instructions comprising:
instructions for establishing a correlation between external characteristics of the server and internal characteristics of the server, and storing the correlation in a

Assignees

• Huawei Tech Co Ltd

Inventors

• Wang Ning

Classifications

• H04L45/745

  Address table lookup; Address filtering · CPC title

• H04L29/12377

  Electricity · mapped topic

• H04L61/2517 Primary

  using port numbers · CPC title

• H04L61/2567

  for reachability, e.g. inquiring the address of a correspondent behind a NAT server · CPC title

• H04L29/12509

  Electricity · mapped topic