Systems and methods for data packet processing

摘要

Systems and methods for performing efficient network address (NAT) translation are described herein. In some aspects, partial NAT entries are created for data packets before all the IP fragments of the data packets are received. Further, the IP fragments are transmitted before all the IP fragments of the data packets are received. In some aspects, unique IP-IDs are generated for IP fragments and/or data packets at a NAT device.

主权项

1. A method for communicating in a network, the method comprising:
receiving from a first device on a private network a data packet fragment of a sequence of data packet fragments that form an internet protocol (IP) data packet; creating an entry in a network address translation (NAT) table, wherein the entry is configured to be filled with routing information to allow routing of a response data packet from a second device on a public network to the first device on the private network; partially filling the entry with information from the data packet fragment if the data packet fragment is received before a first sequential data packet fragment of the sequence of data packet fragments, the partially filled entry containing insufficient information to route the response data packet from the second device on the public network to the first device on the private network; performing address translation on the data packet fragment based on the partially filled entry in the NAT table to generate a translated data packet fragment; and transmitting the translated data packet fragment to the second device on the public network before the entry is completely filled with information from the first sequential data packet fragment of the sequence of data packet fragments.