Secure network address translation (NAT) port block allocation

摘要

A node is configured to receive, from a second node, a request to establish a session; perform, in response to the request, a network address translation (NAT) operation to establish the session, the NAT operation causing a first port block to be allocated to the session, the first port block including a first set of ports via which traffic, associated with the session, is transported; determine that the set of ports are no longer available for the session; determine whether a quantity of times that the first port block has been allocated to the session is greater than a threshold; and retain the first port block, for the session, when the quantity of times that the first port block has been allocated to the session is not greater than the threshold.

主权项

1. A method, comprising:
receiving, by a first node device and from a second node device, a request to establish a session; performing, by the first node device and in response to the request, a network address translation (NAT) operation to establish the session, the NAT operation causing:
a first port block to be allocated to the session,the first port block including a first set of ports via which traffic, associated with the session, is transported; determining, by the first node device, that the first set of ports are no longer available for the session; determining, by the first node device, whether a quantity of times that the first port block has been allocated to the session is greater than a threshold; and retaining, by the first node and for the session, the first port block when the quantity of times that the first port block has been allocated to the session is not greater than the threshold.