Method, Apparatus, and System for Network Address Translation

摘要

A method, an apparatus, and a system for network address translation related to the field of communications technologies. A NAT control apparatus receives a network address migration message after a first data center migrates a NAT mapping entry corresponding to a migrated virtual machine VM to a second data center, verifies the network address migration message, and updates home information of the NAT mapping entry in a network address mapping table from the first data center to the second data center according to the network address migration message. In this way, NAT address resources in each data center can be properly planned, and a release attack problem caused by a fact that applying and using of a VM are not performed in a same data center can be solved.

主权项

1. A method for network address translation (NAT), applied in a scenario where a virtual machine (VM) is migrated across data centers and comprising:
receiving, by a NAT control apparatus, a network address migration message after a first data center migrates a NAT mapping entry corresponding to a migrated VM to a second data center; verifying the network address migration message, wherein the network address migration message carries the NAT mapping entry, and wherein the NAT mapping entry records a mapping between a private network address and a public network address of the VM; and updating home information of the NAT mapping entry in a network address mapping table from the first data center to the second data center according to the network address migration message after the NAT control apparatus successfully verifies the network address migration message, wherein the network address mapping table is used to record the NAT mapping entry and the home information of the NAT mapping entry.