公开(公告)号：US10129207B1

公开(公告)日：2018-11-13

申请号：US14803328

申请日：2015-07-20

Applicant: Juniper Networks, Inc.

Inventor： Wei Wan ,  Zengqiang Yuan ,  Qiong Wang

IPC: H04W4/00 ,  H04L29/12 ,  H04L12/741 ,  H04L29/06

Abstract: A network device having multiple service units receives an outbound packet of a communication session, where the service units can perform network address translation (NAT) on the outbound packet. The outbound packet includes a private source network address and source port. The network device applies a service unit selection function to a header of the outbound packet to produce a first result, and selects, based on the first result, a service unit to perform NAT for packets of the communication session. The network device determines a port for network address translation that produces a second result equal to the first result when the service unit selection function is applied to the portion of the header when the portion includes a selected public network address and determined port. The service unit can thereby perform session-aware services on packets of the communication session without redirecting the packets between the service units.

公开(公告)号：US10390290B1

公开(公告)日：2019-08-20

申请号：US15383116

申请日：2016-12-19

Applicant: Juniper Networks, Inc.

Inventor： Jing Zhang ,  Zengqiang Yuan ,  Mingming Quan ,  BinFang Sun ,  Lei Liang ,  Gaofeng Tian ,  Huaxiang Yin

IPC: H04W76/11 ,  H04W76/12 ,  H04W48/10 ,  H04L12/741 ,  H04L12/751 ,  H04L29/08 ,  H04L12/46 ,  H04W88/16

Abstract: A first processing device may receive, from a first network device, a tunneling protocol message associated with a tunnel to be established between the first network device and a second network device. The first processing device may determine, based on the tunneling protocol message, a device identifier of the second network device. The first processing device may determine that a second processing device is to process a flow associated with the first network device and the second network device based on the device identifier of the second network device. The first processing device may provide information that identifies that the second processing device is to process the flow to permit the second processing device to process the flow associated with the first network device and the second network device.