TECHNIQUE OF PROCESSING NETWORK TRAFFIC THAT HAS BEEN SENT ON A TUNNEL

摘要

A technique of processing network traffic that is sent on a tunnel between a first tunnel and a second tunnel node in a communication network is provided. A device implementation of this technique comprises an enhanced network address translation, eNAT, component (10) comprising a first obtaining unit (14) configured to obtain an uplink data packet (26) from an uplink tunnel from the first tunnel node to the second tunnel node, the uplink data packet comprising a first network address associated with the first tunnel node, a second network address associated with the second tunnel node, a first identifier associated with the uplink tunnel an internal network address, and an internal port number, a second obtaining unit (16) configured to obtain a second identifier associated with a downlink tunnel from the second tunnel node to the first tunnel node, wherein the downlink tunnel is related to the uplink tunnel, a checking unit (18) configured to check, based on the second network address and the first identifier, whether a database entry comprising the second network address and the first identifier exists in a database (12), an updating unit (20) configured to update the database (12) in case the checked database entry does not exist in the database (12), and a manipulating unit (22) configured to manipulate the uplink data packet (26).