Cooperative proxy auto-discovery and connection interception through network address translation

摘要

Proxy devices associate their direct connection with a client/server connection passing through one or more NAT devices. First proxy device receives a network connection request from a client. First proxy device stores connection information in association with a connection identifier. Connection information may reflect the usage of NAT devices between the two proxy devices. First proxy device sends a connection response including the connection identifier to the client. Second proxy device sends a direct connection request to first proxy device to establish a direct connection. Direct connection request includes the connection identifier, which is used by first proxy device to associate the direct connection with stored connection information. First proxy device may use the connection information to direct network traffic received via this direct connection to the correct destination and to divert network traffic from the server to the client through the direct connection and first and second proxy devices.

主权项

1. A method of establishing a network connection between proxy devices, the method comprising:
receiving, at a first proxy device, a connection request message from a first network device to a second network device, wherein the connection request message includes an auto-discovery indicator adapted to indicate that an existence of a second proxy device and connection information associated with the first and second network devices, wherein the first proxy device receives the connection request message directed from a public network address of the first network device to a private address of the second network device, and wherein the second proxy device receives the connection request message directed from a private network address of the first network device to a public address of the second network device; storing the connection information in association with a connection identifier at the first proxy device; sending a connection response message including the connection identifier to the first network device, wherein the connection response message is adapted to indicate the existence of the first proxy device to the second proxy device; receiving an inner network connection setup message at the first proxy device from the second proxy device, wherein the inner network connection setup message is adapted to establish an inner network connection between the first and second proxy devices and includes the connection identifier; retrieving the connection information using the connection identifier; and using the connection information, directing network traffic associated with the inner network connection to the second network device.