公开(公告)号：US09479596B2

公开(公告)日：2016-10-25

申请号：US14456327

申请日：2014-08-11

Applicant: Juniper Networks, Inc.

Inventor： Suresh Kumar Vinapamula Venkata ,  Rajesh Mohan ,  Sarat Kamisetty ,  Reinaldo Penno ,  Sanjay V. Agrawal

IPC: G06F15/16 ,  H04L29/08 ,  H04L29/12 ,  H04L12/725

CPC classification number: H04L67/141 ,  H04L45/302 ,  H04L61/25

Abstract: A network device may receive a request from a local device to establish a connection with a another device. The request may include an internal network identifier of the local device. The network device may evaluate a plurality of external network identifiers, associated with the network device based on selected criteria. The network device may also, or alternatively, evaluate the external network identifiers by identifying an external network identifier that is already mapped to, or paired with, the internal network identifier. The network device may select an external network identifier, of the plurality of external network identifiers, based on the evaluation and establish the connection requested by the local device using the internal network identifier and the external network identifier.

Abstract translation: 网络设备可以从本地设备接收建立与另一设备的连接的请求。 该请求可以包括本地设备的内部网络标识符。 网络设备可以基于所选择的标准评估与网络设备相关联的多个外部网络标识符。 网络设备还可以或者替代地通过识别已经映射到内部网络标识符或与内部网络标识符配对的外部网络标识符来评估外部网络标识符。 网络设备可以基于评估来选择多个外部网络标识符中的外部网络标识符，并且使用内部网络标识符和外部网络标识符建立由本地设备请求的连接。

公开(公告)号：US20140351448A1

公开(公告)日：2014-11-27

申请号：US14456327

申请日：2014-08-11

Applicant: Juniper Networks, Inc.

Inventor： Suresh Kumar VINAPAMULA VENKATA ,  Rajesh Mohan ,  Sarat Kamisetty ,  Reinaldo Penno ,  Sanjay V. Agrawal

IPC: H04L29/08

CPC classification number: H04L67/141 ,  H04L45/302 ,  H04L61/25

Abstract: A network device may receive a request from a local device to establish a connection with a another device. The request may include an internal network identifier of the local device. The network device may evaluate a plurality of external network identifiers, associated with the network device based on selected criteria. The network device may also, or alternatively, evaluate the external network identifiers by identifying an external network identifier that is already mapped to, or paired with, the internal network identifier. The network device may select an external network identifier, of the plurality of external network identifiers, based on the evaluation and establish the connection requested by the local device using the internal network identifier and the external network identifier.

Abstract translation: 网络设备可以从本地设备接收建立与另一设备的连接的请求。 该请求可以包括本地设备的内部网络标识符。 网络设备可以基于所选择的标准来评估与网络设备相关联的多个外部网络标识符。 网络设备还可以或者替代地通过识别已经映射到内部网络标识符或与内部网络标识符配对的外部网络标识符来评估外部网络标识符。 网络设备可以基于评估来选择多个外部网络标识符中的外部网络标识符，并且使用内部网络标识符和外部网络标识符建立由本地设备请求的连接。

公开(公告)号：US09614761B1

公开(公告)日：2017-04-04

申请号：US14930030

申请日：2015-11-02

Applicant: Juniper Networks, Inc.

Inventor： Sarat Kamisetty ,  Rajesh Mohan ,  Suresh Kumar Vinapamula Venkata ,  Reinaldo Penno

IPC: H04L12/741 ,  H04L29/12 ,  H04L12/773

CPC classification number: H04L45/74 ,  H04L45/60 ,  H04L61/10 ,  H04L61/203 ,  H04L61/2514 ,  H04L61/2517 ,  H04L61/255 ,  H04L61/2553 ,  H04L61/2557 ,  H04L61/256 ,  H04L63/02 ,  H04L63/0263

Abstract: A source network address and port translation (NAPT) mechanism is described that reduces or eliminates the need to log any NAT translations. As described herein, a mapping between a subscriber's private address to a public address and port range is determined algorithmically. Given a particular mapping rule, as specified by the service provider, a subscriber is repeatedly and deterministically mapped to the same public network address and a specific port range for that network address. Once the public address and port range for a subscriber are computed, the particular ports for each session for that subscriber are allocated dynamically within the computed NAT port range on per session basis.

公开(公告)号：US09479597B2

公开(公告)日：2016-10-25

申请号：US14826591

申请日：2015-08-14

Applicant: Juniper Networks, Inc.

Inventor： Suresh Kumar Vinapamula Venkata ,  Rajesh Mohan ,  Sarat Kamisetty ,  Reinaldo Penno ,  Sanjay V. Agrawal

IPC: G06F15/16 ,  G06F15/17 ,  H04L29/08 ,  H04L29/12

CPC classification number: H04L67/141 ,  H04L61/25 ,  H04L61/2514 ,  H04L61/2517 ,  H04L61/255 ,  H04L61/256 ,  H04L61/6068 ,  H04L67/142

Abstract: A node is configured to receive, from a second node, a request to establish a session; perform, in response to the request, a network address translation (NAT) operation to establish the session, the NAT operation causing a first port block to be allocated to the session, the first port block including a first set of ports via which traffic, associated with the session, is transported; determine that the set of ports are no longer available for the session; determine whether a quantity of times that the first port block has been allocated to the session is greater than a threshold; and retain the first port block, for the session, when the quantity of times that the first port block has been allocated to the session is not greater than the threshold.