Integrated Tunneling and Network Address Translation: Performance Improvement for an Interception Proxy Server

摘要

A method for processing data packets in an interception proxy server without using a Network Address Translation module. A TCP packet received at a router is encapsulated using generic routing encapsulation (GRE). The TCP packet is redirected to a proxy server through a GRE tunnel which includes a redirection rule comprising a local destination IP address and port to be used for traffic passed through the tunnel. When the proxy server receives the TCP packet, the TCP packet is decapsulated. If a flag is set in the payload header of the TCP packet indicating that a redirection rule has been configured for traffic passed through the tunnel, the payload header of the TCP packet is modified according to the redirection rule. The modified TCP packet is then passed to a transmission control protocol of the proxy server.