Method and apparatus for processing GPRS tunneling protocol user plane traffic in a cloud-based mobile network

摘要

An exemplary method of providing network address translation (NAT) for GPRS tunneling protocol user plane (or GTP-U) traffic on a data center server supporting multiple radio bearers in a mobile network is disclosed. The method includes: receiving packets from a source node via a GTP-U tunnel; filtering ingress GTP-U packets from other types of packets; forwarding a respective ingress GTP-U packet with a public destination IP address to a first queue if a destination IP address matches a defined GTP-U public IP address for the destination node; extracting one or more ingress GTP-U packets and forwarding the packets to a user-land operating system process for inspection; performing NAT of the destination IP address; placing ingress GTP-U packets that have an internal IP address that identifies with a particular radio bearer into a second queue; and forwarding the ingress GTP-U packets via a radio bearer within a network for processing.

主权项

1. A method of processing general packet radio service (GPRS) tunneling protocol user plane traffic, the method comprising:
receiving packets from a source node at a termination endpoint of a destination node via a GPRS tunneling protocol user plane (GTP-U) tunnel; filtering ingress GTP-U packets from other types of packets received at the destination node using an open-source operating system filtering module within an operating system kernel; forwarding a respective ingress GTP-U packet with a public destination IP address to a first queue if a destination IP address matches a defined GTP-U public IP address for the destination node; extracting one or more ingress GTP-U packets from the first queue and forwarding the one or more ingress GTP-U packets to a user-land operating system process for inspection; performing network address translation (NAT) of the destination IP address on the one or more ingress GTP-U packets, wherein the performing NAT includes load balancing across a plurality of radio bearers; placing at least one of the one or more ingress GTP-U packets that have an internal IP address that identifies with a particular radio bearer into a second queue; forwarding the at least one of the one or more ingress GTP-U packets via the particular radio bearer within a network for processing using an IP forwarding capability of the operating system kernel; performing network address translation of a source IP address of egress GTP-U packets from a radio bearer via the open-source operating system filtering module before forwarding the egress GTP-U packets to an external network.