WO2023030300A1

WO2023030300A1 - Network address translation method and apparatus

Info

Publication number: WO2023030300A1
Application number: PCT/CN2022/115776
Authority: WO
Inventors: 夏欣; 张合军; 钱锋
Original assignee: 华为技术有限公司
Priority date: 2021-09-01
Filing date: 2022-08-30
Publication date: 2023-03-09
Also published as: CN115766652A

Abstract

The present application provides a network address translation method and apparatus, which can improve the utilization rate of bandwidth resources of a service board, thereby facilitating improvement of the service experience of a user. The method comprises: a network device receives a first request message, the first request message being used for requesting a first user to go online; the network device selects, on the basis of first bandwidth parameters of multiple service boards, a first service board from among the multiple service boards; the network device sends a second request message to the first service board, the second request message being used for instructing the first service board to perform NAT for the first user.

Description

Method and device for network address translation

This application claims the priority of the Chinese patent application with application number 202111020071.4 and application title "Method and Device for Network Address Translation" filed with the State Intellectual Property Office of China on September 1, 2021, the entire contents of which are incorporated herein by reference Applying.

technical field

The present application relates to the communication field, in particular to a method and device for network address translation.

Background technique

Internet Protocol Version 4 (Internet Protocol Version 4, IPv4) is a widely used network protocol at present, which can assign a string of Internet Protocol (Internet Protocol, IP) addresses to each device connected to the Internet, so that each connection Devices connected to the Internet can use network protocols for connection and data transmission. With the rapid growth of global Internet users and Internet devices such as smart phones and personal computers, IPv4 addresses are rapidly consumed, and the exhaustion of IPv4 addresses has become a bottleneck restricting network development.

At present, network address translation (NAT) can temporarily alleviate the problem of restricting network development due to the exhaustion of IPv4 addresses. NAT can map multiple private IP addresses of the internal network to one public IP address. When a user requests to go online, the broadband access server can select a service board from multiple service boards to perform NAT conversion for the user.

Contents of the invention

This application provides a method and device for network address translation. By selecting a service board for users to perform NAT conversion from the perspective of bandwidth, the bandwidth resource utilization rate of the service board can be improved, which is beneficial to improving the service experience of users.

In a first aspect, a method for network address translation is provided, the method comprising: a network device receives a first request message, and the first request message is used to request a first user to go online; the network device based on the first bandwidth parameter of a plurality of service boards , select the first service board from multiple service boards; the network device sends a second request message to the first service board, and the second request message is used to instruct the first service board to perform NAT conversion for the first user.

The first user may be any Internet device requesting to connect to the network.

The network device may be a broadband access server (broadband remote access server, BRAS), a user plane device (user plane, UP) or a control plane device (control plane, CP) performing a broadband access function. Wherein, the UP may be a physical user plane device (physical user plane, pUP) or a virtual user plane device (virtual user plane, vUP).

A plurality of service boards means at least one service board, and the embodiment of the present application does not limit the specific number of service boards.

Based on the first bandwidth parameter, the network device selects a first service board from multiple service boards to perform NAT conversion for the first user.

The method for network address translation provided by the embodiment of the present application, when selecting a service board for the user to perform NAT conversion from the perspective of bandwidth, based on the first bandwidth parameter, select the first service board from multiple service boards to perform NAT for the first user Switching, from the perspective of bandwidth, selecting the service board that performs NAT conversion for the first user can make the bandwidth utilization rate among multiple service boards more balanced, improve the bandwidth resource utilization rate of the service board, and help improve the user's service experience.

With reference to the first aspect, in some implementations of the first aspect, the first bandwidth parameter includes at least one of the following: configured bandwidth of online users on the service board, configured bandwidth of the service board, real-time bandwidth of online users on the service board, Configured bandwidth ratio, or real-time bandwidth usage ratio; among them, the configured bandwidth ratio is the ratio of the total configured bandwidth of online users on the service board to the configured bandwidth of the service board, and the real-time bandwidth usage ratio is the ratio of the total real-time bandwidth of online users on the service board to The ratio of the configured bandwidth of the service board.

Online users on the service board are users who perform NAT conversion on the service board. The service board can perform NAT conversion for at least one user, so there can be at least one online user on the service board.

Users can activate different services, and different services correspond to different bandwidths. When a user activates a certain service and requests to connect to the network, the service board can configure the bandwidth corresponding to the service for the user. The bandwidth corresponding to the service can be the user's bandwidth. Configure bandwidth.

The configured bandwidth of the online user on the service board is the service bandwidth configured for the user by the service board. The real-time bandwidth of online users on the service board is the bandwidth actually used after the user activates the service and goes online. The real-time bandwidth of the online users on the service board is less than or equal to the configured bandwidth of the online users on the service board.

The configured bandwidth of the service board may represent the bandwidth processing capability of the service board. The sum of the configured bandwidth of online users on the service board is the sum of the configured bandwidths of all online users on the service board, so the configured bandwidth ratio can be the ratio of the sum of the configured bandwidth of online users on the service board to the configured bandwidth of the service board.

The total real-time bandwidth of online users on the service board is the sum of real-time bandwidth of all online users on the service board, so the real-time bandwidth usage ratio is the ratio of the total real-time bandwidth of online users on the service board to the configured bandwidth of the service board.

With reference to the first aspect, in some implementation manners of the first aspect, when the first bandwidth parameter includes a configured bandwidth ratio or a real-time bandwidth usage ratio; selecting a first service board from multiple service boards includes: obtaining by a network device The first bandwidth parameter of each of the multiple service boards; the network device determines the service board with the smallest value of the first bandwidth parameter among the multiple service boards as the first service board.

The network device can obtain the configured bandwidth ratio or the real-time bandwidth usage ratio of each of the multiple service boards, and select the service board with the smallest configured bandwidth ratio or real-time bandwidth usage ratio from the multiple service boards to determine it as the first service board .

The service board with the smallest proportion of configured bandwidth or the service board with the smallest proportion of real-time bandwidth usage, that is, the service board with the largest remaining bandwidth, can configure bandwidth for the first user and perform NAT conversion for the first user.

In the method for network address translation provided in the embodiment of the present application, the service board with the smallest configured bandwidth ratio or real-time bandwidth usage ratio is selected from multiple service boards and determined as the first service board, that is, the service board with the largest remaining bandwidth is determined as the first service board. The service board can improve the bandwidth utilization rate of the service board, and at the same time provide sufficient bandwidth resources for the first user to avoid exceeding the configured bandwidth of the service board, which is conducive to improving the user's service experience.

With reference to the first aspect, in some implementation manners of the first aspect, the network device selects the first service board from the multiple service boards based on the first bandwidth parameters of the multiple service boards, including: each of the multiple service boards If the first bandwidth parameter values of the service boards are the same, the network device determines the service board with the least number of online users among the multiple service boards as the first service board.

When the configured bandwidth ratio or real-time bandwidth utilization ratio of each service board in multiple service boards is the same, the network device can obtain the number of online users of each service board in multiple service boards, and The service board with the least number of online users is determined as the first service board.

In the network address translation method provided by the embodiment of the present application, when the bandwidth resource utilization ratios of multiple service boards are the same, the service board with the least number of online users is selected as the first service board, which can make each service board have online users The number is relatively uniform, which is conducive to improving the utilization rate of IP address resources of the service board and improving the service experience of users.

With reference to the first aspect, in some implementations of the first aspect, the method further includes: the network device receives a first response message from the first service board, where the first response message includes the public address assigned by the first service board to the first user. Internet Protocol IP address and port number range; the network device sends a second response message to the client device, and the second response message is used to indicate that the first user is successfully online, and the first user connects to the network device through the client device.

With reference to the first aspect, in some implementations of the first aspect, the method further includes: the network device acquires the second bandwidth parameter of the first service board; when the second bandwidth parameter of the first service board does not meet the preset condition, The network device determines the target service board based on the second bandwidth parameters of other service boards except the first service board among the multiple service boards; the network device sends a third request message to the target service board, and the third request message is used to indicate the target The service board performs NAT conversion for the first user.

The second bandwidth parameter of the target service board satisfies a preset condition.

The preset condition may be different based on the second bandwidth parameter.

In a possible implementation manner, when the second bandwidth parameter is the real-time bandwidth usage ratio, the preset condition may be that the real-time bandwidth usage ratio is smaller than the preset ratio.

In another possible implementation manner, when the second bandwidth parameter is the real-time bandwidth of the online users on the service board, the preset condition may be that the sum of the real-time bandwidths of the online users on the service board is less than the preset bandwidth.

In the network address translation method provided in the embodiment of the present application, when the second bandwidth parameter of the first service board does not meet the preset condition, the network device can select the target service board that meets the preset condition to perform NAT translation for the first user, and can Alleviate the tension of the bandwidth resources of the first service board, and at the same time make full use of the bandwidth resources of the target service board, which can make the bandwidth utilization rate among multiple service boards more balanced, improve the bandwidth resource utilization of the service board, and help improve user business experience.

Among the multiple service boards except the first service board, there may be at least one service board that satisfies the preset condition, the at least one service board may be at least one candidate service board, and the network device may base on the at least one candidate service board The first bandwidth parameter of the board is used to determine the target service board from at least one candidate service board.

The method for network address translation provided by the embodiment of the present application determines the target service board to perform NAT conversion for the first user from the candidate service boards that meet the preset conditions, which can alleviate the situation of the bandwidth resource shortage of the first service board. The bandwidth parameter of the service board determines the target service board, which can improve the bandwidth utilization rate of the target service board, which is conducive to balancing the bandwidth utilization rate among multiple service boards, improving the bandwidth resource utilization rate of the service board, and improving the user's business experience.

With reference to the first aspect, in some implementation manners of the first aspect, the second bandwidth parameter includes real-time bandwidth or real-time bandwidth usage ratio of online users on the service board.

With reference to the first aspect, in some implementation manners of the first aspect, the second bandwidth parameter of the target service board satisfies a preset condition.

With reference to the first aspect, in some implementation manners of the first aspect, the network device determines the target service board based on the second bandwidth parameters of other service boards in the multiple service boards except the first service board, including: when multiple When the second bandwidth parameter of at least one candidate service board other than the first service board among the service boards satisfies the preset condition, the network device selects from the at least one candidate service board based on the first bandwidth parameter of the at least one candidate service board. Determine the target business board.

When the first bandwidth parameter includes a configured bandwidth ratio or a real-time bandwidth usage ratio, the network device may calculate the to-be-transferred bandwidth of the first service board and the to-be-transferred bandwidth of at least one candidate service board based on the configured bandwidth ratio or the real-time bandwidth usage ratio. Incoming bandwidth.

When at least one candidate service board has a second service board whose bandwidth to be transferred is greater than or equal to the bandwidth to be transferred out, the network device may determine the second service board as the target service board.

In the network address translation method provided by the embodiment of the present application, the bandwidth resources to be transferred to the target service board are greater than or equal to the resources to be transferred out of the first service board, which can alleviate the shortage of bandwidth resources of the first service board and at the same time, target business The board can perform NAT conversion for the first user without exceeding the preset conditions, and can also increase the bandwidth utilization rate of the target service board, which is conducive to balancing the bandwidth utilization rate among multiple service boards and improving the bandwidth resource utilization rate of the service board , which is conducive to improving the user's service experience.

With reference to the first aspect, in some implementation manners of the first aspect, the network device determines a target service board from at least one candidate service board based on a first bandwidth parameter of at least one candidate service board, including: the network device determines a target service board based on the first service board The first bandwidth parameter of the board calculates the to-be-transferred bandwidth of the first service board; the network device calculates the to-be-transferred bandwidth of at least one candidate service board based on the first bandwidth parameter of at least one candidate service board; the network device calculates the to-be-transferred bandwidth of at least one candidate service board based on the The bandwidth and the bandwidth to be transferred are determined from at least one candidate service board to determine the target service board.

With reference to the first aspect, in some implementation manners of the first aspect, before the network device sends the third request message to the target service board, the method further includes: the network device based on the number of online users of the first service board, the first service board The first user is determined by at least one parameter of the real-time bandwidth of the online user or the configured bandwidth of the online user on the first service board.

The network address translation method provided in the embodiment of the present application can determine the first user based on the number of online users or bandwidth parameters, can make the bandwidth usage ratio among multiple service boards more balanced, and improve the bandwidth resource utilization ratio of the service boards, and at the same time It can make the number of online users of each service board relatively uniform, which is conducive to improving the utilization rate of IP address resources of the service board and improving the service experience of users.

With reference to the first aspect, in some implementations of the first aspect, after the network device sends the third request message to the target service board, the method further includes: the network device receives a third response message from the target service board, and the third response The message includes a new public network IP address and a new port number range allocated to the first user by the target service board.

When the first user goes online, the public network IP address and port number range allocated by the first service board can be used. After the network device sends the third request message to the target service board, the target service board can allocate a new public network IP for the first user. The address and the new port number range are sent to the network device. After the network device receives the new public network IP address and the new port number range, when it detects that the first user accesses the network, the network device can use the new public network IP The range of addresses and new port numbers provides network services to the first user.

In the method for network address translation provided in the embodiment of the present application, the target service board can allocate a new public network IP address and a new port number range for the first user, and the first user can access the network through the target service board, which can improve the target service board bandwidth resource utilization.

With reference to the first aspect, in some implementation manners of the first aspect, the method further includes: the network device sends a fourth request message to the first service board, and the fourth request message is used to notify the first service board to release the original Public network IP address and original port number range.

In the network address translation method provided in the embodiment of the present application, after the target service board performs NAT conversion for the first user, the first service board can release the original public network IP address and the original port number range of the first user, which can save memory resources. At the same time, the first user does not have two ranges of public network IP addresses and port numbers, so it is not easy to make mistakes when accessing the network.

With reference to the first aspect, in some implementation manners of the first aspect, before the network device selects the first service board from the multiple service boards based on the first bandwidth parameters of the multiple service boards, the method further includes: the network device selects the first service board based on The first request message sends the fifth request message to the authentication server, and the fifth request message is used to request authentication for the first user; when the authentication is successful, the network device allocates a private network IP address for the first user; the network device sends the first user a private network IP address; A user sends a fifth response message, where the fifth response message is used to indicate the private IP address allocated by the network device to the first user.

With reference to the first aspect, in some implementation manners of the first aspect, the network device is a broadband access server, a user plane device or a control plane device that performs a broadband access function.

With reference to the first aspect, in some implementation manners of the first aspect, multiple service boards are deployed in the network device.

In a second aspect, the present application provides a method for network address translation, the method comprising: a network device acquires a second bandwidth parameter of a first service board, the first service board is included in multiple service boards, and the first service board is The first user performs NAT conversion; when the second bandwidth parameter of the first service board does not meet the preset condition, the network device determines based on the second bandwidth parameters of other service boards in the multiple service boards except the first service board The target service board: the network device sends a third request message to the target service board, where the third request message is used to instruct the target service board to perform NAT conversion for the first user.

With reference to the second aspect, in some implementations of the second aspect, the second bandwidth parameter includes the real-time bandwidth or the real-time bandwidth usage ratio of the online users on the service board, where the real-time bandwidth usage ratio is the real-time bandwidth of the online users on the service board The ratio of the sum to the configured bandwidth of the service board.

With reference to the second aspect, in some implementation manners of the second aspect, before the network device obtains the second bandwidth parameter of the first service board, the method further includes: the network device receives a first request message, and the first request message is used to request The first user goes online; the network device selects the first service board from the multiple service boards based on the first bandwidth parameters of the multiple service boards; the network device sends a second request message to the first service board, and the second request message is used to indicate The first service board performs NAT conversion for the first user.

With reference to the second aspect, in some implementations of the second aspect, the first bandwidth parameter includes at least one of the following: configured bandwidth of online users on the service board, configured bandwidth of the service board, real-time bandwidth of online users on the service board, Configured bandwidth ratio, or real-time bandwidth usage ratio; wherein, the configured bandwidth ratio is the ratio of the sum of the configured bandwidth of online users on the service board to the configured bandwidth of the service board.

With reference to the second aspect, in some implementation manners of the second aspect, the network device determines the target service board based on the second bandwidth parameters of other service boards in the multiple service boards except the first service board, including: when multiple When the second bandwidth parameter of at least one candidate service board other than the first service board among the service boards satisfies the preset condition, the network device selects from the at least one candidate service board based on the first bandwidth parameter of the at least one candidate service board. Determine the target business board.

With reference to the second aspect, in some implementation manners of the second aspect, the network device determines the target service board from the at least one candidate service board based on the first bandwidth parameter of the at least one candidate service board, including: the network device determines the target service board based on the first service board The first bandwidth parameter of the board calculates the to-be-transferred bandwidth of the first service board; the network device calculates the to-be-transferred bandwidth of at least one candidate service board based on the first bandwidth parameter of at least one candidate service board; the network device calculates the to-be-transferred bandwidth of at least one candidate service board based on the The bandwidth and the bandwidth to be transferred are determined from at least one candidate service board to determine the target service board.

With reference to the second aspect, in some implementations of the second aspect, before the network device sends the third request message to the target service board, the method further includes: the network device based on the number of online users of the first service board, the first service board The first user is determined by at least one parameter of the real-time bandwidth of the online user or the configured bandwidth of the online user on the first service board.

With reference to the second aspect, in some implementations of the second aspect, after the network device sends the third request message to the target service board, the method further includes: the network device sends a fourth request message to the first service board, and the fourth request The message is used to notify the first service board to release the range of the original public network IP address and the original port number of the first user.

In a third aspect, the present application provides a network address translation device, which includes: a transceiver module and a processing module. The transceiver module is used for: receiving a first request message, where the first request message is used to request the first user to go online. The processing module is used to: select the first service board from the multiple service boards based on the first bandwidth parameters of the multiple service boards; the transceiver module is also used to: send a second request message to the first service board, and the second request message uses To instruct the first service board to perform NAT conversion for the first user.

With reference to the third aspect, in some implementations of the third aspect, the first bandwidth parameter includes at least one of the following: configured bandwidth of online users on the service board, configured bandwidth of the service board, real-time bandwidth of online users on the service board, Configured bandwidth ratio, or real-time bandwidth usage ratio; among them, the configured bandwidth ratio is the ratio of the total configured bandwidth of online users on the service board to the configured bandwidth of the service board, and the real-time bandwidth usage ratio is the ratio of the total real-time bandwidth of online users on the service board to The ratio of the configured bandwidth of the service board.

With reference to the third aspect, in some implementation manners of the third aspect, when the first bandwidth parameter includes a configured bandwidth ratio or a real-time bandwidth usage ratio, the device further includes an acquisition module; the acquisition module is configured to: acquire the bandwidth in multiple service boards The first bandwidth parameter of each service board; the processing module is also used to: determine the service board with the smallest value of the first bandwidth parameter among the multiple service boards as the first service board.

With reference to the third aspect, in some implementation manners of the third aspect, the processing module is further configured to: when the first bandwidth parameter value of each service board among the multiple service boards is the same, connect the multiple service boards online The service board with the least number of users is determined as the first service board.

With reference to the third aspect, in some implementation manners of the third aspect, the transceiver module is further configured to: receive a first response message from the first service board, where the first response message includes the public address assigned by the first service board to the first user. Internet protocol IP address and port number range; send a second response message to the client device, the second response message is used to indicate that the first user is successfully online, and the first user is connected to the network device through the client device.

With reference to the third aspect, in some implementation manners of the third aspect, the above device further includes an acquisition module; the acquisition module is used to: acquire the second bandwidth parameter of the first service board; the processing module is also used to: when the first service board When the second bandwidth parameter does not meet the preset condition, determine the target service board based on the second bandwidth parameters of other service boards in the multiple service boards except the first service board; the transceiver module is also used to: send to the target service board Sending a third request message, where the third request message is used to instruct the target service board to perform NAT conversion for the first user.

With reference to the third aspect, in some implementation manners of the third aspect, the second bandwidth parameter includes a real-time bandwidth or a real-time bandwidth usage ratio of online users on the service board.

With reference to the third aspect, in some implementation manners of the third aspect, the second bandwidth parameter of the target service board satisfies a preset condition.

With reference to the third aspect, in some implementation manners of the third aspect, the processing module is further configured to: when there is at least one candidate service board in the plurality of service boards other than the first service board, the second bandwidth parameter satisfies the preset When the condition is met, the target service board is determined from the at least one candidate service board based on the first bandwidth parameter of the at least one candidate service board.

In conjunction with the third aspect, in some implementations of the third aspect, the processing module is further configured to: calculate the bandwidth to be transferred out of the first service board based on the first bandwidth parameter of the first service board; Calculate the bandwidth to be transferred in of at least one candidate service board according to the first bandwidth parameter; determine the target service board from the at least one candidate service board based on the bandwidth to be transferred out and the bandwidth to be transferred in.

With reference to the third aspect, in some implementation manners of the third aspect, the processing module is further configured to: based on the number of online users on the first service board, the real-time bandwidth of online users on the first service board, or the number of online users on the first service board At least one parameter in the user's configured bandwidth identifies the first user.

With reference to the third aspect, in some implementation manners of the third aspect, the transceiver module is further configured to: receive a third response message from the target service board, where the third response message includes the new public address assigned by the target service board to the first user. Network IP address and new port number range.

With reference to the third aspect, in some implementation manners of the third aspect, the transceiver module is further configured to: send a fourth request message to the first service board, and the fourth request message is used to notify the first service board to release the original Public network IP address and original port number range.

With reference to the third aspect, in some implementations of the third aspect, the transceiver module is further configured to: based on the first request message, send a fifth request message to the authentication server, where the fifth request message is used to request authentication for the first user; The processing module is also used for: in the case of successful authentication, assigning a private network IP address to the first user; Private IP address assigned by the user.

With reference to the third aspect, in some implementation manners of the third aspect, the foregoing apparatus is a broadband access server, a user plane device or a control plane device that performs a broadband access function.

With reference to the third aspect, in some implementation manners of the third aspect, multiple service boards are deployed in the device.

In a fourth aspect, the present application provides a network address translation device, which includes: an acquisition module, a processing module, and a transceiver module. The obtaining module is used for: obtaining the second bandwidth parameter of the first service board, the first service board is included in a plurality of service boards, and the first service board performs NAT conversion for the first user; the processing module is used for: when the first service board When the second bandwidth parameter does not meet the preset condition, the target service board is determined based on the second bandwidth parameters of other service boards in the multiple service boards except the first service board; the transceiver module is used to: send to the target service board A third request message, where the third request message is used to instruct the target service board to perform NAT conversion for the first user.

With reference to the fourth aspect, in some implementations of the fourth aspect, the second bandwidth parameter includes the real-time bandwidth or the real-time bandwidth usage ratio of the online users on the service board, where the real-time bandwidth usage ratio is the real-time bandwidth of the online users on the service board The ratio of the sum to the configured bandwidth of the service board.

With reference to the fourth aspect, in some implementations of the fourth aspect, the transceiver module is further configured to: receive a first request message, and the first request message is used to request the first user to go online; the processing module is further configured to: based on multiple services The first bandwidth parameter of the board is to select the first service board from multiple service boards; the transceiver module is also used to: send a second request message to the first service board, and the second request message is used to indicate that the first service board is the first The user performs NAT conversion.

With reference to the fourth aspect, in some implementations of the fourth aspect, the first bandwidth parameter includes at least one of the following: configured bandwidth of online users on the service board, configured bandwidth of the service board, real-time bandwidth of online users on the service board, Configured bandwidth ratio, or real-time bandwidth usage ratio; wherein, the configured bandwidth ratio is the ratio of the sum of the configured bandwidth of online users on the service board to the configured bandwidth of the service board.

With reference to the fourth aspect, in some implementations of the fourth aspect, the processing module is further configured to: when there is at least one candidate service board in the multiple service boards except the first service board, the second bandwidth parameter satisfies the preset When the condition is met, the target service board is determined from the at least one candidate service board based on the first bandwidth parameter of the at least one candidate service board.

With reference to the fourth aspect, in some implementation manners of the fourth aspect, the processing module is further configured to: calculate the bandwidth to be transferred out of the first service board based on the first bandwidth parameter of the first service board; Calculate the bandwidth to be transferred in of at least one candidate service board according to the first bandwidth parameter; determine the target service board from the at least one candidate service board based on the bandwidth to be transferred out and the bandwidth to be transferred in.

With reference to the fourth aspect, in some implementation manners of the fourth aspect, the processing module is further configured to: based on the number of online users on the first service board, the real-time bandwidth of online users on the first service board, or the number of online users on the first service board At least one parameter in the user's configured bandwidth identifies the first user.

With reference to the fourth aspect, in some implementation manners of the fourth aspect, the transceiver module is further configured to: send a fourth request message to the first service board, and the fourth request message is used to notify the first service board to release the original Public network IP address and original port number range.

In the fifth aspect, the present application provides a device for network address translation, including a processor, the processor is coupled with a memory, and can be used to execute instructions in the memory, so as to realize any possibility in the first aspect or the second aspect above method in the implementation. Optionally, the device for network address translation further includes a memory. Optionally, the device for network address translation further includes a communication interface, and the processor is coupled to the communication interface.

In a sixth aspect, the present application provides a processor, including: an input circuit, an output circuit, and a processing circuit. The processing circuit is configured to receive a signal through the input circuit and transmit a signal through the output circuit, so that the processor executes the method in any possible implementation manner of the first aspect or the second aspect above.

In a specific implementation process, the above-mentioned processor can be a chip, the input circuit can be an input pin, the output circuit can be an output pin, and the processing circuit can be a transistor, a gate circuit, a flip-flop, and various logic circuits. The input signal received by the input circuit may be received and input by, for example but not limited to, the receiver, the output signal of the output circuit may be, for example but not limited to, output to the transmitter and transmitted by the transmitter, and the input circuit and the output The circuit may be the same circuit, which is used as an input circuit and an output circuit respectively at different times. The present application does not limit the specific implementation manners of the processor and various circuits.

In a seventh aspect, the present application provides a processing device, including a processor and a memory. The processor is used to read instructions stored in the memory, and may receive signals through the receiver and transmit signals through the transmitter, so as to execute the method in any possible implementation manner of the first aspect or the second aspect above.

Optionally, there are one or more processors, and one or more memories.

Optionally, the memory may be integrated with the processor, or the memory may be separated from the processor.

In the specific implementation process, the memory can be a non-transitory (non-transitory) memory, such as a read-only memory (read only memory, ROM), which can be integrated with the processor on the same chip, or can be respectively arranged in different On the chip, the application does not limit the type of the memory and the arrangement of the memory and the processor.

It should be understood that a related data interaction process such as sending indication information may be a process of outputting indication information from a processor, and receiving capability information may be a process of receiving input capability information from a processor. In particular, processed output data may be output to the transmitter, and input data received by the processor may be from the receiver. Wherein, the transmitter and the receiver may be collectively referred to as a transceiver.

The processing device in the seventh aspect above can be a chip, and the processor can be implemented by hardware or by software. When implemented by hardware, the processor can be a logic circuit, an integrated circuit, etc.; when implemented by software When implemented, the processor may be a general-purpose processor, which is realized by reading the software code stored in the memory, and the memory may be integrated in the processor, or it may be located outside the processor and exist independently.

In an eighth aspect, the present application provides a computer-readable storage medium, the computer-readable storage medium stores a computer program (also referred to as a code, or an instruction) which, when run on a computer, enables the computer to perform the above-mentioned first A method in any possible implementation manner of the aspect or the second aspect.

In the ninth aspect, the present application provides a computer program product, the computer program product includes: a computer program (also called code, or instruction), when the computer program is executed, the computer executes the above-mentioned first aspect or the second aspect A method in any of the possible implementations.

In a tenth aspect, the present application provides a network address translation system, the network address translation system includes a network device, and the network device is used to execute the method in any possible implementation manner of the first aspect or the second aspect above .

Description of drawings

FIG. 1 is a schematic diagram of a communication system applicable to an embodiment of the present application;

FIG. 2 is a schematic structural diagram of another communication system applicable to an embodiment of the present application;

FIG. 3 is a schematic flowchart of a method for network address translation provided in an embodiment of the present application;

FIG. 4 is a schematic flowchart of another method for network address translation provided by an embodiment of the present application;

FIG. 5 is a schematic flowchart of another method for network address translation provided by an embodiment of the present application;

FIG. 6 is a schematic flowchart of another method for network address translation provided by an embodiment of the present application;

FIG. 7 is a schematic flowchart of another network address translation method provided by an embodiment of the present application;

FIG. 8 is a schematic flowchart of another method for network address translation provided by an embodiment of the present application;

FIG. 9 is a schematic flowchart of another network address translation method provided by an embodiment of the present application;

FIG. 10 is a schematic flowchart of another method for network address translation provided by an embodiment of the present application;

FIG. 11 is a schematic block diagram of an apparatus for network address translation provided by an embodiment of the present application;

FIG. 12 is a schematic block diagram of another network address translation device provided by an embodiment of the present application;

Fig. 13 is a schematic block diagram of another network address translation device provided by an embodiment of the present application.

Detailed ways

The technical solution in this application will be described below with reference to the accompanying drawings.

In order to clearly describe the technical solutions of the embodiments of the present application, in the embodiments of the present application, words such as "first" and "second" are used to distinguish the same or similar items with basically the same function and effect. For example, the first indication information and the second indication information are for distinguishing different indication information, and the sequence thereof is not limited. Those skilled in the art can understand that words such as "first" and "second" do not limit the number and execution order, and words such as "first" and "second" do not necessarily limit the difference.

It should be noted that, in this application, words such as "exemplarily" or "for example" are used as examples, illustrations or illustrations. Any embodiment or design described herein as "exemplary" or "for example" should not be construed as being preferred or advantageous over other embodiments or designs. Rather, the use of words such as "exemplarily" or "for example" is intended to present related concepts in a concrete manner.

In addition, "at least one" means one or more, and "plurality" means two or more. "And/or" describes the association relationship of associated objects, indicating that there may be three types of relationships, for example, A and/or B, which can mean: A exists alone, A and B exist simultaneously, and B exists alone, where A, B can be singular or plural. The character "/" generally indicates that the contextual objects are an "or" relationship. "At least one of the following" or similar expressions refer to any combination of these items, including any combination of single or plural items. For example, at least one (one) of a, b and c may represent: a, or b, or c, or a and b, or a and c, or b and c, or a, b and c, wherein a, b, c can be single or multiple.

With the rapid growth of global Internet users, Internet devices such as smart phones and personal computers, IPv4 addresses are rapidly consumed, and the exhaustion of IPv4 addresses has become a bottleneck restricting network development. At present, network address translation (NAT) can temporarily alleviate the problem of restricting network development due to the exhaustion of IPv4 addresses. NAT can map multiple private network Internet protocol (internet protocol, IP) addresses of the internal network to a public network IP address, and can use different protocol port numbers to correspond to different private network IP addresses. Therefore, a local area network may only need a small number of public network IP addresses to meet the communication requirements of all network devices in the network with multiple private network IP addresses and the Internet.

Broadband remote access server (broadband remote access server, BRAS) is a new type of access gateway for broadband network applications. Applications such as broadband Internet access for community residents, construction of intranets, and support for Internet service providers (Internet Service Providers, ISPs) to wholesale services to users.

In a specific network, the BRAS module is deployed at the edge of the network. When a user goes online, load sharing is performed based on the number of users, and a carrier-grade NAT (carrier grade NAT, CGN) board is selected to allocate a public network IP address. When the current user goes online, the BRAS module will count The number of users on each CGN service board is based on the number of users for load sharing to ensure that the number of users on each service board is even, thereby ensuring that the IP address is used more evenly on each service board.

When there are many Internet devices connected to the network and the public network IP addresses are limited, the BRAS can perform traffic load sharing through multiple CGN service boards to fully utilize IP resources. In a possible situation, the CGN single board can be integrated in the access gateway device, that is, the same access gateway router includes both the BRAS module and the CGN single board. The embodiment of this application does not limit the deployment mode of the CGN board.

When a user requests to go online, the BRAS can select a service board from multiple service boards to perform NAT conversion for the user based on the number of online users of the service board. However, when users have different access bandwidths, the use of bandwidth resources between service boards will be unbalanced, reducing the bandwidth usage of the service boards.

It should be understood that the user in the embodiment of the present application may be understood as an Internet device.

Next, the method of selecting a service board from multiple service boards based on the number of online users of the service board will be described in detail with reference to the communication system shown in FIG. 1 and FIG. 2 .

Exemplarily, FIG. 1 shows a structure diagram of a communication system 100 . As shown in FIG. 1 , the communication system 100 may include a smart phone 101, a notebook computer 102, a device 103 used by an enterprise deploying an intranet, a device 104 used by a family deploying broadband, and user premise equipment (CPE). ) 105, router 106 and server 107. The router 106 may include a main processing unit (main processing unit, MPU) 1061, a service board 1, a service board 2, and a service board 3. The router 106 may also include a BRAS module, that is, the router 106 may perform a broadband access function. It should be understood that the number of service boards in FIG. 1 is only an example, which is not limited in this embodiment of the present application.

Smartphones 101, laptops 102, devices 103 used by enterprises deploying intranets, and devices 104 used by families deploying broadband can all be connected to the server 107 through the access network.

Optionally, the communication system 100 may further include a log server (syslog sever), a web server (web sever), and a dynamic host configuration protocol server (dynamic host configuration protocol sever, DHCP sever), which are not shown in FIG. 1 .

When any device such as the smart phone 101, the notebook computer 102, the device 103 used by the enterprise deploying the intranet, and the device 104 used by the family deploying broadband request to connect to the network, the CPE 105 dials up and goes online, and the BRAS in the router 106 The module can choose to send a request message to the service board with the least number of online users according to the number of online users in service board 1, service board 2 and service board 3, and the request message is used to request the service board with the fewest number of online users to request a connection Users of the network perform NAT translation. After the NAT conversion is successful, the BRAS module can send a message to start charging to the server 107, and the server 107 starts charging after receiving the message.

Exemplarily, the home 104 deploying broadband requests to connect to the network, and the CPE 105 dials up to go online. After the BRAS module in the router 106 receives the online request of the CPE 105, it counts the number of online users of the service board 1 and the online users of the service board 2 respectively. and the number of online users on service board 3. Wherein, the number of online users of service board 1 may be 100 users, the number of online users of service board 2 may be 80 users, and the number of online users of service board 3 may be 90 users. The BRAS module can choose to send a request message to the service board 2 with the least number of online users based on the number of online users, and the request message is used to request the service board 2 to perform NAT conversion for the home 104 deploying broadband. After the NAT conversion is successful, the BRAS module can send a message to start charging to the server 107, and the server 107 starts charging after receiving the message.

The BRAS module is based on the number of online users in the service board, and selects a service board from multiple service boards to perform NAT conversion for users who request to connect to the network. When the bandwidth gap of users is large, it will lead to unbalanced use of bandwidth resources among service boards, and reduce the bandwidth utilization rate of service boards.

Exemplarily, a user can subscribe to a customized paid service that occupies a large bandwidth, for example, high-definition video, augmented reality (augmented reality, AR) service, virtual reality (virtual reality, VR) service or a peer-to-peer content distribution network (peer to peer content delivery network, PCDN) business, etc. Each user can subscribe to different services, and the BRAS module can allocate different bandwidths to each user. The BRAS module is a service board selected based on the number of users, and the bandwidth usage rate of some service boards may exceed 80%, and the bandwidth usage rate of some service boards may be less than 30%. When the service bandwidth exceeds the bandwidth of the service board, the bandwidth exceeding the processing capability of the service board will be discarded, resulting in service damage.

In a communication system where the user plane device and the control plane device are separated (control plane and user plane disaggregated, CU separation), the above problems also exist.

CU separation refers to the network architecture in which CP and UP are decoupled. CU separation includes but not limited to the following implementations A and B.

In implementation mode A, the control plane and the forwarding plane are located on different hardware devices.

When implementation A is adopted, the CP device and the UP device are two independent and different devices. Optionally, the CP device and the UP device are distributed in different places. For example, the CP device is located in the data center of the cloud, and the UP device is deployed at a suitable location in the network according to the requirements. In this way, the deployment of the control plane and the forwarding plane is more flexible.

In implementation mode B, the control plane and the forwarding plane are located on the same hardware device and their functions are separated.

When the implementation mode B is adopted, the physical entity of the CP device and the physical entity of the UP device are the same device. For example, the CP device and the UP device run on the same host, the same server, or the same terminal.

In some embodiments, both the CP device and the UP device are implemented by virtualization technology. The CP device is called, for example, a virtual CP (virtual CP, vCP), and the UP device is called, for example, a virtual UP (virtual UP, vUP). For example, the CP device is a virtual machine, and the UP device is a virtual router or a virtual switch. In some embodiments, both the CP device and the UP device are implemented based on a common physical server combined with NF technology, and the CP device and the UP device are two different virtual network functions (virtualized network function, VNF). For example, both the CP device and the UP device are network elements virtualized by an X86 server.

In some other embodiments, the CP device is implemented by a virtualization technology, and the UP device is implemented by a traditional network device. The UP device is called, for example, a physical UP (physical UP, pUP).

This embodiment does not limit the quantity relationship between the CP device and the UP device in the communication system. In some embodiments, a CP device and a UP device have a one-to-many relationship, that is, one CP device is used to control multiple UP devices. In other embodiments, there is a one-to-one correspondence between CP devices and UP devices, that is, one CP device is used to control one UP device.

This embodiment does not limit the number of UP devices in the communication system. Optionally, the communication system where the CU is separated includes multiple UP devices. Optionally, multiple UP devices are distributed in different places in the communication system where the CU is separated. Optionally, in the communication system where the CU is separated, multiple UP devices cooperate to share the forwarding task based on the distributed architecture.

It's worth pointing out that "CU separation" can have different names. For example, different standards, different versions of the same standard, different manufacturers, and different application scenarios may have different names for "CU separation". For example, the term "CU separation" may sometimes be called "control and forwarding separation", "forwarding and control separation", "control plane and user plane separation", "control and user separation" and so on.

It's worth pointing out that "CP" can have different names. For example, different standards, different versions of the same standard, different manufacturers, and different application scenarios may have different names for "CP". For example, the term "CP" may sometimes be referred to as "CP function (CP function, CPF)" or "CP face". "CP", "CPF" and "CP face" are used interchangeably herein. The term "CP device" refers to any device that implements the CP function.

It's worth pointing out that "UP" can have different names. For example, different standards, different versions of the same standard, different manufacturers, and different application scenarios may have different names for "UP". For example, the term "UP" may sometimes be referred to as "UP function (UPF)" or "UP face". "UP", "UPF" and "UP face" are used interchangeably herein. The term "UP device" refers to any device that implements the UP function.

With the continuous emergence of various Internet services, the requirements for the number of user sessions supported by the BNG system are continuously increasing, the user access bandwidth is continuously increasing, and especially the requirements for the BNG system to provide services open and programmable to the outside world are getting higher and higher. In view of these requirements, the BNG system realizes the decoupling of control and forwarding as well as the decoupling of software and hardware based on the architecture of SDN or NFV, and becomes a BNG system with CU separation, so as to have the advantages brought by the architecture of CU separation.

For example, the CP device in the BNG system controls multiple UP devices in the BNG system, the CP device schedules multiple UP devices to process traffic forwarding tasks, and the CP device allocates resources for multiple UP devices. Therefore, compared with the single-machine implementation of the BNG system , Under the CU separation architecture, the utilization rate and reliability of the equipment of the BNG system can be greatly improved.

It is worth noting that the "CU-separated BNG" in this embodiment of the present application may have different names. For example, different standards, different versions of the same standard, different manufacturers, and different application scenarios may have different names for the "CU-separated BNG". For example, the term "CU-separated BNG" may sometimes be referred to as a "disaggregated BNG system (DBNG)", and accordingly, the CP device in a CU-separated BNG may be referred to as DBNG-CP, and CU-separated The UP device in BNG may be referred to as DBNG-UP. As another example, the term "CU-separated BNG" may sometimes be referred to as a "virtual broadband network gateway (virtual BNG, vBNG) control plane and user plane disaggregated system (CU system)", namely "vBNG CU system", correspondingly, the CP device in the CU-separated BNG can be called vBNG-CP, and the UP device in the CU-separated BNG can be called vBNG-UP. As another example, the term "CU-separated BNG" can sometimes be referred to as "virtual broadband remote access server (vBRAS) CU system", that is, "vBRAS CU system". Correspondingly, CU-separated BNG The CP device in the CU may be called vBRAS-CP, and the UP device in the BNG where the CU is separated may be called vBRAS-UP. In this article, "DBNG", "vBNG CU system" and "vBRAS CU system" are used interchangeably.

Exemplarily, FIG. 2 shows an architecture diagram of another communication system 200 . As shown in FIG. 2, the communication system 200 may include a smart phone 101, a notebook computer 102, a device 103 used by an enterprise deploying an intranet, a device 104 used by a family deploying broadband, a CPE 105, and a user plane device (user plane , UP) 201, a control plane device (control plane, CP) 202 and a server 107. UP 201 may include MPU 2011, service board 1, service board 2, and service board 3. The UP 201 can also include a BRAS module, that is, the UP 201 can perform broadband access functions. The UP may be a physical user plane function (physical user plane, pUP) or a virtual user plane function (virtual user plane, vUP). It should be understood that the number of service boards in FIG. 2 is only an example, which is not limited in this embodiment of the present application.

The BRAS module in the UP 201 shown in Figure 2 can have some functions of the BRAS module in the router 106 shown in Figure 1 above. Service board 1, service board 2, and service board 3 in FIG. 2 may be the same as or different from service board 1, service board 2, and service board 3 in FIG. 1, which is not limited in this embodiment of the application.

Optionally, the communication system 100 may further include a log server (syslog sever), a web server (web sever), and a dynamic host configuration protocol server (dynamic host configuration protocol sever, DHCP sever), which are not shown in FIG. 2 .

When any device such as smart phone 101, notebook computer 102, device 103 used by enterprises deploying intranet, and device 104 used by families deploying broadband requests to connect to the network, CPE 105 dials up and goes online, and the BRAS module in UP 201 receives After the dial-up request is forwarded to CP 202, CP 202 can choose to send a request message to the service board with the least number of online users according to the number of online users in service board 1, service board 2 and service board 3. The message is used to request the service board with the least number of online users to perform NAT conversion for the users requesting to connect to the network. After the NAT conversion is successful, the CP 202 can send a message to start charging to the server 107 through the network, and the server 107 starts charging after receiving the message. Optionally, UP 201 can also communicate with server 107 through the network.

In the communication system 200, the CP 202 is based on the number of online users in the service board, and selects the service board that performs NAT conversion for the user requesting to connect to the network from a plurality of service boards. When there is a large gap in bandwidth between users, it will lead to unbalanced use of bandwidth resources among service boards, reducing the bandwidth usage of service boards.

To sum up, in the communication system 100 shown in FIG. 1 and the communication system 200 shown in FIG. 2, one service board is selected from multiple service boards to perform NAT conversion for the user, which is based on the online user of the service board All of these will lead to unbalanced use of bandwidth resources among service boards and reduce the bandwidth utilization of service boards.

In view of this, the embodiment of the present application provides a method and device for network address translation. From the perspective of bandwidth, selecting a service board for NAT conversion for the user can improve the utilization rate of bandwidth resources of the service board, which is conducive to improving the user's business experience.

FIG. 3 is a network address translation method 300 provided by an embodiment of the present application. The method 300 may be applied to the communication system 100 shown in FIG. 1 and the communication system 200 shown in FIG. 2 above, but this embodiment of the present application is not limited thereto. As shown in FIG. 3, the method 300 may include the following steps:

S301. The network device receives a first request message, where the first request message is used to request a first user to go online.

The first user can be any Internet device that requests to connect to the network. For example, the first user can be the smart phone 101, laptop 102 in FIG. 1 or FIG. It should be understood that to go online is to connect to the network.

The first user may be a user who subscribes to a large-bandwidth customized service.

The network device may be a BRAS, a UP or a CP performing a broadband access function. For example, the network device can be the BRAS module in the router 106 in FIG. 1, and the network device can also be the BRAS module in the UP 201 in FIG. 2, the UP 201 or the CP 202 performing the broadband access function.

When the network device is a BRAS or a UP 201 performing a broadband access function, the network device may receive the first request message from the CPE 105. Wherein, the BRAS may be the BRAS module in FIG. 1 or the BRAS module in FIG. 2 . When the network device is the CP 202, the network device can receive the first request message from the UP 201.

S302. The network device selects a first service board from the multiple service boards based on the first bandwidth parameters of the multiple service boards.

When the network device is a BRAS, the network device and multiple service boards can be deployed in the same device. For example, the BRAS module in FIG. 1 above can be deployed in the router 106 together with multiple service boards.

The first bandwidth parameter may include at least one of the following: configured bandwidth of online users on the service board, configured bandwidth of the service board, real-time bandwidth of online users on the service board, configured bandwidth ratio, or real-time bandwidth usage ratio; wherein the configured bandwidth The ratio is the ratio of the total configured bandwidth of online users on the service board to the configured bandwidth of the service board, and the real-time bandwidth usage ratio is the ratio of the total real-time bandwidth of online users on the service board to the configured bandwidth of the service board.

The configured bandwidth of the online user on the service board is the service bandwidth configured for the user by the service board. Exemplarily, the bandwidth of the service opened by the user is 50 megabytes (Mbyte, M), and the service board performs NAT conversion for the user, so the configured bandwidth of the online user of the service board is 50M.

The real-time bandwidth of online users on the service board is the bandwidth actually used after the user activates the service and goes online. The real-time bandwidth of the online users on the service board is less than or equal to the configured bandwidth of the online users on the service board.

The configured bandwidth of the service board may represent the bandwidth processing capability of the service board. Exemplarily, the configured bandwidth of the service board is 100M, and the bandwidth within 100M can be configured for online users. When the configured bandwidth of an online user exceeds 100M, the bandwidth exceeding the processing capability of the service board will be discarded.

The sum of the configured bandwidth of online users on the service board is the sum of the configured bandwidths of all online users on the service board, so the configured bandwidth ratio can be the ratio of the sum of the configured bandwidth of online users on the service board to the configured bandwidth of the service board.

S303. The network device sends a second request message to the first service board, where the second request message is used to instruct the first service board to perform NAT conversion for the first user.

In the method for network address translation provided in the embodiment of the present application, when the service board performs NAT conversion for the user, based on the first bandwidth parameter, the first service board is selected from multiple service boards to perform NAT conversion for the first user, and the bandwidth Selecting the service board that performs NAT conversion for the first user can balance the bandwidth usage among multiple service boards, improve the bandwidth resource utilization of the service board, and help improve the user's service experience.

As an optional embodiment, when the first bandwidth parameter includes the configured bandwidth ratio or the real-time bandwidth usage ratio; selecting the first service board from multiple service boards includes: the network device obtaining each service in the multiple service boards The first bandwidth parameter of the board; the network device determines the service board with the smallest value of the first bandwidth parameter among the multiple service boards as the first service board.

Optionally, when the first bandwidth parameter includes the configured bandwidth of the online users on the service board or the real-time bandwidth of the online users on the service board, the network device can count the configured bandwidth of the online users on the service board of each service board among the multiple service boards The sum or the sum of the real-time bandwidth of the online users on the service boards, the service board with the minimum configured bandwidth sum of the online users on the service boards or the real-time bandwidth sum of the online users on the service boards of each service board in the multiple service boards is determined as the first a business board.

As an optional embodiment, when the network device selects the first service board from the multiple service boards based on the first bandwidth parameters of the multiple service boards, it includes: the first bandwidth of each service board among the multiple service boards When the parameter values are the same, the network device determines the service board with the least number of online users among the multiple service boards as the first service board.

When the first bandwidth parameter includes the configured bandwidth ratio or the real-time bandwidth usage ratio, the network device can obtain multiple services when the configured bandwidth ratio or the real-time bandwidth usage ratio of each of the multiple service boards is the same. The number of online users of each service board in the board, and the service board with the least number of online users among the multiple service boards is determined as the first service board.

When the first bandwidth parameter includes the configured bandwidth of online users on a service board or the real-time bandwidth of online users on a service board, the sum of the configured bandwidth of online users on each service board or the sum of the real-time bandwidth of online users in multiple service boards In the same situation, the network device may obtain the number of online users of each of the multiple service boards, and determine the service board with the least number of online users among the multiple service boards as the first service board.

As an optional embodiment, the above method 300 further includes: the network device receives a first response message from the first service board, and the first response message includes the public network IP address and port number assigned by the first service board to the first user Scope: the network device sends a second response message to the client device, and the second response message is used to indicate that the first user goes online successfully, and the first user connects to the network device through the client device.

The first service board performs NAT conversion for the first user, that is, assigns the public network IP address and port number range to the first user. The first service board can send a first response message to the network device, and the first response message includes the public network IP address and port number range allocated for the first user. After receiving the first response message, the network device can send the The device sends a second response message, and the second response message is used to indicate that the first user goes online successfully. When the first user goes online, the first service board can use the public network IP address and port number range to provide network services for the first user. That is, the traffic of the first user can be processed by the first service board.

The port number range of the service board can be any range from 1026 to 6535. The ranges of port numbers corresponding to different service boards can be completely the same, partially overlap, or be completely different.

For example, the port number range of service board 1 can be 1026-3535, the port number range of service board 2 can be 2035-4521, the port number range of service board 3 can be 4888-5231, and the port number range of service board 4 Can be 4888-5231.

Optionally, before S302, before the network device selects the first service board from the multiple service boards based on the first bandwidth parameters of the multiple service boards, the above method 300 further includes: the network device sends the authentication server Sending the fifth request message, the fifth request message is used to request authentication for the first user; when the authentication is successful, the network device allocates a private network IP address for the first user; the network device sends the fifth response message to the first user, The fifth response message is used to indicate the private IP address allocated by the network device to the first user.

When the first user requests to go online, the network device can request authentication for the first user from the authentication server, and if the authentication is successful, assign a private network IP address to the first user, and send the private network IP address to the first user . After the first user successfully receives the private network IP address, the network device can select the first service board from the multiple service boards based on the first bandwidth parameters of the multiple service boards, and use the private network IP address to send the first service board to the first service board. Apply for a range of public IP addresses and port numbers.

Exemplarily, FIG. 4 provides another network address translation method 400 according to the embodiment of the present application, and the method 400 may be applicable to the communication system 100 described in FIG. 1 . The method 400 can be understood as: the network device in the method 300 can be the BRAS module in the router 106 in the communication system 100, and the first user can be a dynamic host configuration protocol (DHCP) user.

As shown in FIG. 4, the method 400 may include:

S401, CPE 105 sends a first request message to the BRAS module in the router 106, the first request message is used to request the first user to go online, and correspondingly, the BRAS module in the router 106 receives the first request message.

When the first user requests to go online, the CPE 105 can dial to go online, that is, send the first request message to the BRAS module in the router 106.

Exemplarily, the first request message may be a DHCP discovery (discovery) message.

S402. The BRAS module in the router 106 sends a fifth request message to the authentication server based on the first request message. The fifth request message is used to request authentication for the first user. Correspondingly, the authentication server receives the fifth request message and performs the A user is authenticated.

Exemplarily, the authentication server may be a remote authentication dial-in user server (RADIUS).

S403. The BRAS module in the router 106 receives a sixth response message from the authentication server, where the sixth response message is used to indicate that the authentication of the first user is successful.

S404. When the first user is successfully authenticated, the BRAS module in the router 106 allocates a private network IP address for the first user.

S405, the BRAS module in the router 106 sends a seventh response message to the CPE 105, the seventh response message includes the private network IP address allocated by the BRAS module to the first user, and correspondingly, the CPE 105 receives the seventh response message.

Exemplarily, the seventh response message may be a DHCP offer (offe) message.

S406, CPE 105 sends the sixth request message to the BRAS module in the router 106, and the sixth request message is used to indicate that the private network IP address is successfully received, and correspondingly, the BRAS module in the router 106 receives the sixth request message.

Exemplarily, the sixth request message may be a DHCP request (request) message.

S407. The BRAS module in the router 106 selects the first service board from the multiple service boards based on the first bandwidth parameters of the multiple service boards.

For this step, reference may be made to the above S302, which will not be repeated here.

S408, the BRAS module in the router 106 sends a second request message to the first service board, the second request message is used to instruct the first service board to perform NAT conversion for the first user, and correspondingly, the first service board receives the second request information.

For this step, reference may be made to the above S303, which will not be repeated here.

S409. The first service board allocates a public network IP address and a port number range to the first user.

The first service board may allocate a public network IP address and a port number range to the first user based on the private network IP address, and establish a correspondence between the private network IP address, the public network IP address, and the port number range.

S410. The first service board sends a first response message to the BRAS module in the router 106. The first response message includes the public network IP address and port number range allocated by the first service board to the first user. Correspondingly, the The BRAS module receives the first response message.

S411, the BRAS module in the router 106 sends a second response message to the CPE 105, the second response message is used to indicate that the first user has successfully gone online, and correspondingly, the CPE 105 receives the second response message.

Exemplarily, the second response message may be a DHCP acknowledgment (acknowledgment, ACK) message.

S412. The first user may access the network based on the second response message.

When the BRAS module in the router 106 detects that the first user accesses the network, it may instruct the first service board to provide network services for the first user,

That is, the traffic of the first user can access the network through the first service board.

Optionally, before S411, the method 400 further includes: the BRAS module in the router 106 sends an accounting request to the authentication server, and correspondingly, the authentication server receives the accounting request, and sends a response message to the BRAS module in the router 106, The response message is used to indicate the start of charging.

In the network address translation method provided in the embodiment of this application, when the first user requests to go online and the authentication is successful, the BRAS module in the router 106 can allocate a private network IP address for the first user, and select from multiple IP addresses based on the first bandwidth parameter. Select the first service board from the two service boards, so that it can allocate the public network IP address and port number range for the first user according to the assigned private network IP address, and the first user can connect to the network through the first service board. At the same time, The BRAS module in the router 106 selects the service board that performs NAT conversion for the first user from the perspective of bandwidth, which can make the bandwidth utilization ratio between multiple service boards more balanced, improve the bandwidth resource utilization ratio of the service board, and help improve user business experience.

Exemplarily, FIG. 5 provides another network address translation method 500 according to the embodiment of the present application, and the method 500 may be applicable to the communication system 200 described in FIG. 2 . The method 500 can be understood as: the network device in the method 300 can be the CP 202 in the communication system 200, and the first user can be a DHCP user.

As shown in FIG. 5, the method 500 may include:

S501, CPE 105 sends a first request message to the BRAS module in UP 201, the first request message is used to request the first user to go online, and correspondingly, the BRAS module in UP 201 receives the first request message.

When the first user requests to go online, the CPE 105 can dial to go online, that is, send the first request message to the BRAS module in the UP 201.

Exemplarily, the first request message may be a DHCP discovery message.

S502, the BRAS module in the UP 201 forwards the first request message to the CP 202, and correspondingly, the CP 202 receives the first request message.

S503. The CP 202 sends a fifth request message to the authentication server, where the fifth request message is used to request authentication for the first user. Correspondingly, the authentication server receives the fifth request message and authenticates the first user.

Exemplarily, the authentication server may be RADIUS.

S504. The CP 202 receives a sixth response message from the authentication server, where the sixth response message is used to indicate that the first user has successfully authenticated.

S505. When the first user is authenticated successfully, the CP 202 allocates a private network IP address for the first user.

S506, the CP 202 sends a seventh response message to the BRAS module in the UP 201, the seventh response message includes the private network IP address allocated by the CP 202 to the first user, and correspondingly, the BRAS module in the UP 201 receives the seventh response information.

Exemplarily, the seventh response message may be a DHCP offer message.

S507, the BRAS module in the UP 201 forwards the seventh response message to the CPE 105, and correspondingly, the CPE 105 receives the seventh response message.

S508. The CPE 105 sends a sixth request message to the BRAS module in the UP 201. The sixth request message is used to indicate that the private network IP address has been successfully received. Correspondingly, the BRAS module in the UP 201 receives the sixth request message.

Exemplarily, the sixth request message may be a DHCP request message.

S509, the BRAS module in the UP 201 forwards the sixth request message to the CP 202, and correspondingly, the CP 202 receives the sixth request message.

S510. The CP 202 selects the first service board from the multiple service boards based on the first bandwidth parameters of the multiple service boards.

S511. The CP 202 sends a second request message to the first service board, where the second request message is used to instruct the first service board to perform NAT conversion for the first user, and correspondingly, the first service board receives the second request message.

S512. The first service board allocates a public network IP address and a port number range to the first user.

S513. The first service board sends a first response message to the CP 202. The first response message includes the public network IP address and port number range allocated by the first service board to the first user. Correspondingly, the CP 202 receives the first response message.

S514. The CP 202 sends a second response message to the BRAS module in the UP 201. The second response message is used to indicate that the first user has successfully gone online. Correspondingly, the BRAS module in the UP 201 receives the second response message.

Exemplarily, the second response message may be a DHCP ACK message.

S515, the BRAS module in the UP 201 forwards the second response message to the CPE 105.

S516. The first user may access the network based on the second response message.

When the BRAS module in UP 201 detects that the first user accesses the network, it can instruct the first service board to provide network services for the first user,

Optionally, before S514, the method 500 further includes: the CP 202 sends an accounting request to the authentication server, and correspondingly, the authentication server sends a response message to the CP 202, and the response message is used to indicate the start of accounting.

In the network address translation method provided in the embodiment of this application, when the first user requests to go online and the authentication is successful, the CP 202 can assign a private network IP address to the first user, and select the IP address from multiple service boards based on the first bandwidth parameter. Select the first service board, so that it can allocate the public network IP address and port number range for the first user according to the assigned private network IP address, and the first user can connect to the network through the first service board. From the perspective of selecting a service board for NAT conversion for the first user, the bandwidth utilization rate among multiple service boards can be balanced, the bandwidth resource utilization rate of the service board can be improved, and the service experience of users can be improved.

Exemplarily, FIG. 6 provides another network address translation method 600 according to the embodiment of the present application, and the method 600 may be applicable to the communication system 200 described in FIG. 2 . The method 600 can be understood as: the network device in the method 300 can be the BRAS module in the UP 201 in the communication system 200, and the first user can be a DHCP user.

As shown in FIG. 6, the method 600 may include:

S601, CPE 105 sends a first request message to the BRAS module in UP 201, the first request message is used to request the first user to go online, and correspondingly, the BRAS module in UP 201 receives the first request message.

Exemplarily, the first request message may be a DHCP discovery message.

S602, the BRAS module in the UP 201 forwards the first request message to the CP 202, and correspondingly, the CP 202 receives the first request message.

S603. The CP 202 sends a fifth request message to the authentication server, where the fifth request message is used to request authentication for the first user. Correspondingly, the authentication server receives the fifth request message and authenticates the first user.

Exemplarily, the authentication server may be RADIUS.

S604. The CP 202 receives a sixth response message from the authentication server, where the sixth response message is used to indicate that the authentication of the first user is successful.

S605. When the first user is authenticated successfully, the CP 202 allocates a private network IP address for the first user.

S606, the CP 202 sends a seventh response message to the BRAS module in the UP 201, the seventh response message includes the private network IP address allocated by the CP 202 to the first user, and correspondingly, the BRAS module in the UP 201 receives the seventh response information.

Exemplarily, the seventh response message may be a DHCP offer message.

S607, the BRAS module in the UP 201 forwards the seventh response message to the CPE 105, and correspondingly, the CPE 105 receives the seventh response message.

S608. The CPE 105 sends a sixth request message to the BRAS module in the UP 201. The sixth request message is used to indicate that the private network IP address has been successfully received. Correspondingly, the BRAS module in the UP 201 receives the sixth request message.

Exemplarily, the sixth request message may be a DHCP request message.

S609, the BRAS module in the UP 201 forwards the sixth request message to the CP 202, and correspondingly, the CP 202 receives the sixth request message.

S610, the CP 202 sends a seventh request message to the BRAS module in the UP 201, the seventh request message is used to request the BRAS module in the UP 201 to allocate a public network IP address and port number range for the first user, correspondingly, the UP 201 The BRAS module in receives the seventh request message.

S611, the BRAS module in the UP 201 selects the first service board from the multiple service boards based on the first bandwidth parameters of the multiple service boards.

S612, the BRAS module in the UP 201 sends a second request message to the first service board, and the second request message is used to instruct the first service board to perform NAT conversion for the first user, and correspondingly, the first service board receives the second request information.

S613. The first service board allocates a public network IP address and a port number range to the first user.

S614, the first service board sends the first response message to the BRAS module in the UP 201, the first response message includes the public network IP address and port number range allocated by the first service board to the first user, correspondingly, the UP 201 The BRAS module receives the first response message.

S615, the BRAS module in the UP 201 sends an eighth response message to the CP 202, the eighth response message includes the public network IP address and port number range allocated by the first service board to the first user, and correspondingly, the CP 202 receives the eighth response information.

S616. The CP 202 sends a second response message to the BRAS module in the UP 201, where the second response message is used to indicate that the first user goes online successfully.

Exemplarily, the second response message may be a DHCP Ack message.

S617, the BRAS module in the UP 201 forwards the second response message to the CPE 105.

S618. The first user may access the network based on the second response message.

Optionally, before S616, the method 600 further includes: the CP 202 sends an accounting request to the authentication server, and correspondingly, the authentication server sends a response message to the CP 202, and the response message is used to indicate the start of accounting.

In the method for network address translation provided by the embodiment of the present application, when the first user requests to go online and the authentication is successful, the CP 202 can assign a private network IP address to the first user, and the BRAS module in the UP 201 can be based on the first bandwidth parameter Select the first service board from multiple service boards, and allocate the public network IP address and port number range to the first user according to the assigned private network IP address, the first user can connect to the network through the first service board, UP 201 In terms of bandwidth, the BRAS module selects the service board that performs NAT conversion for the first user, which can make the bandwidth utilization rate among multiple service boards more balanced, improve the bandwidth resource utilization rate of the service board, and help improve the user's business experience.

A new user on the service board or a change in the bandwidth of an online user on the service board may cause unbalanced use of the bandwidth resources of the service board. Therefore, the embodiment of the present application also provides a method for network address translation, which can improve the bandwidth resource utilization of the service board. It is beneficial to balance the use of bandwidth resources among multiple service boards and provide users with better service experience.

FIG. 7 is another network address translation method 700 provided by the embodiment of the present application. The method 700 may be performed after the above method 300 . The method 700 may be applied to the communication system 100 shown in FIG. 1 and the communication system 200 shown in FIG. 2 above, but this embodiment of the present application is not limited thereto. As shown in FIG. 7, the method 700 may include the following steps:

S701. The network device acquires a second bandwidth parameter of a first service board, where the first service board is included in multiple service boards, and the first service board performs NAT conversion for a first user.

The second bandwidth parameter includes at least one of the following: real-time bandwidth or real-time bandwidth usage ratio of online users on the service board; wherein, the real-time bandwidth usage ratio is the ratio of the real-time bandwidth sum of online users on the service board to the configured bandwidth of the service board.

S702. When the second bandwidth parameter of the first service board does not meet the preset condition, the network device determines a target service board based on the second bandwidth parameters of other service boards among the multiple service boards except the first service board.

The preset condition may be different based on the second bandwidth parameter.

Exemplarily, the preset ratio may be 80%. When the real-time bandwidth ratio of the first service board is equal to or greater than 80%, the real-time bandwidth ratio of the first service board does not meet the preset ratio, and the network device may be based on multiple service boards The real-time bandwidth ratio of the real-time bandwidth ratio is determined as the target service board with a real-time bandwidth ratio of less than 80%.

For example, the preset bandwidth can be 80M. When the total real-time bandwidth of the online users of the first service board is equal to or greater than 80M, and the total real-time bandwidth of the online users of the first service board does not meet the preset bandwidth, the network device can base on multiple The real-time bandwidth sum of the online users of the service boards, and the service board whose real-time bandwidth sum of the online users is less than 80M is determined as the target service board.

The configured bandwidth of each service board is different, and the preset bandwidth can be set according to the configured bandwidth of each service board.

Exemplarily, the configuration bandwidth of service board 1 is 100M, and the preset bandwidth can be set to 80M; the configuration bandwidth of service board 2 is 150M, and the preset bandwidth can be set to 120M; Can be set to 90M. If the preset condition is that the total real-time bandwidth of the online users on the service board is less than the preset bandwidth, and the total real-time bandwidth of the online users on the service board 1 (the first service board) is equal to or greater than 80M, the real-time bandwidth of the online users on the service board 2 When the sum is less than 120M and the total real-time bandwidth of online users of service board 3 is less than 90M, the network device may determine service board 2 or service board 3 as the target service board.

S703. The network device sends a third request message to the target service board, where the third request message is used to instruct the target service board to perform NAT conversion for the first user.

As an optional embodiment, the above S702, the network device determines the target service board based on the second bandwidth parameters of other service boards in the multiple service boards except the first service board, including: when there are multiple service boards When the second bandwidth parameter of at least one candidate service board other than the first service board satisfies the preset condition, the network device determines the target service board from the at least one candidate service board based on the first bandwidth parameter of the at least one candidate service board.

The first bandwidth parameter may include at least one of the following: configured bandwidth of online users on the service board, configured bandwidth of the service board, real-time bandwidth of online users on the service board, configured bandwidth ratio, or real-time bandwidth usage ratio; wherein the configured bandwidth The ratio is the ratio of the sum of the configured bandwidth of online users on the service board to the configured bandwidth of the service board.

For example, when the first bandwidth parameter includes the configured bandwidth ratio or the real-time bandwidth usage ratio, the network device acquires the first bandwidth parameter of each service board in the at least one candidate service board, and the first bandwidth in the at least one candidate service board The service board with the smallest parameter value is determined as the first service board.

As another example, when the first bandwidth parameter includes the configured bandwidth of online users on the service board or the real-time bandwidth of online users on the service board, the network device counts the configuration of the online users on the service board of each service board in the at least one candidate service board The sum of the bandwidth or the sum of the real-time bandwidth of the online users on the service board is determined by the service board with the minimum configured bandwidth sum of the online users on the service board of each service board in the at least one candidate service board or the sum of the real-time bandwidth of the online users on the service board It is the first business board.

As an optional embodiment, the network device determines the target service board from at least one candidate service board based on the first bandwidth parameter of the at least one candidate service board, including: the network device calculates the target service board based on the first bandwidth parameter of the first service board The bandwidth to be transferred out of the first service board; the network device calculates the bandwidth to be transferred in of at least one candidate service board based on the first bandwidth parameter of at least one candidate service board; the network device calculates the bandwidth to be transferred in based on the bandwidth to be transferred out and the bandwidth to be transferred in A target service board is determined from at least one candidate service board.

Exemplarily, the configured bandwidth ratio or the real-time bandwidth usage ratio of the first service board is 90%, the preset condition is that the configured bandwidth ratio or the real-time bandwidth usage ratio is less than or equal to 80%, and the first service board does not meet the preset condition , if the configured bandwidth of the first service board is 100M, then the bandwidth to be transferred out of the first service board is 100*(90%-80%)=10M. If the candidate service boards include service board 1 and service board 2, the configured bandwidth ratio or real-time bandwidth usage ratio of service board 1 is 60%, and the configured bandwidth of service board 1 is 80M, then the bandwidth to be transferred to service board 1 is 80M *(80%-60%)=16M, the configured bandwidth ratio or real-time bandwidth usage ratio of service board 2 is 70%, and the configured bandwidth of service board 2 is 90M, then the bandwidth to be transferred in service board 2 is 90*( 80%-70%) = 9M. The bandwidth to be transferred in by service board 1 is greater than the bandwidth to be transferred out, and the bandwidth to be transferred in by service board 2 is smaller than the bandwidth to be transferred out. Therefore, the network device can determine service board 1 as the target service board.

Optionally, when at least one candidate service board has at least one second service board whose bandwidth to be transferred is greater than or equal to the bandwidth to be transferred out, the network device may select the second service board with the least number of online users among the at least one second service board. The business board is determined as the target business board.

In the network address translation method provided in the embodiment of the present application, when the bandwidth to be transferred in of multiple second service boards is greater than or equal to the bandwidth to be transferred out, the service board with the least number of online users is selected as the target service board, which can Making the number of online users of each service board relatively uniform is conducive to improving the utilization rate of IP address resources of the service board and improving the service experience of users.

As an optional embodiment, before the above step 703, before the network device sends the third request message to the target service board, the method 700 further includes: the network device based on the number of online users on the first service board, the number of online users on the first service board The first user is determined by at least one parameter of the real-time bandwidth or the configured bandwidth of the online users on the first service board.

For example, the bandwidth to be transferred out of the first service board is 10M, the configured bandwidth or real-time bandwidth of the first user is 10M, the network device can determine the first user among at least one online user in the first service board, and request the target service The board performs NAT translation for the first user.

For another example, the number of online users of the target service board is 10, the number of online users of the first service board is 20, the bandwidth to be transferred out of the first service board is 10M, and the configured bandwidth or real-time bandwidth of the first user is 2M. The configured bandwidth or real-time bandwidth of the second user in the first service board is 5M, the configured bandwidth or real-time bandwidth of the third user in the first service board is 3M, and the configured bandwidth or real-time bandwidth of the fourth user in the first service board is 10M , the number of online users of the target service board is much smaller than the number of online users of the first service board, the network device can determine the first user, the second user and the third user among at least one online user of the first service board, and request the target The service board performs NAT conversion for the first user, the second user and the third user.

As an optional embodiment, after the above S703, after the network device sends the third request message to the target service board, the method 700 further includes: the network device receives a third response message from the target service board, the third response message includes the target service The new public network IP address and the new port number range assigned by the board to the first user.

When the first user goes online, the public network IP address and port number range allocated by the first service board can be used. After the network device sends the third request message to the target service board, the target service board can allocate a new public network IP for the first user. The address and the new port number range are sent to the network device. After the network device receives the new public network IP address and the new port number range, when the first user is detected to access the network, the new public network IP address can be used and the new range of port numbers to provide network services to first users.

Optionally, the network device may also send a fourth request message to the first service board, where the fourth request message is used to notify the first service board to release the range of the original public network IP address and the original port number of the first user.

FIG. 8 provides another network address translation method 800 according to the embodiment of the present application, and the method 800 may be applicable to the communication system 100 described in FIG. 1 . The method 800 can be understood as: the network device in the method 700 can be a BRAS module in the router 106 in the communication system 100 .

As shown in FIG. 8, the method 800 may include:

S801. The first user accesses the network through the first service board.

The first service board performs NAT conversion for the first user, and the first user can access the network through the first service board.

S802. The BRAS module in the router 106 counts the number of online users of the first service board and the real-time bandwidth of the online users of the first service board.

The BRAS module in the router 106 can record the online users of the first service board and the real-time bandwidth of the online users, and perform statistics on the number of online users and the total real-time bandwidth of all online users on the first service board.

S803. The BRAS module in the router 106 obtains the real-time bandwidth usage ratio of the first service board.

The BRAS module in the router 106 can send a request message to the first service board, and the request message is used to obtain the real-time bandwidth usage ratio of the first service board, correspondingly, after the first service board receives the request message, it can send a request message to the router 106 The BRAS module sends a response message, where the response message may include the real-time bandwidth usage ratio of the first service board.

S804. When the real-time bandwidth usage ratio of the first service board does not meet the preset condition, the network device determines the target service board based on the real-time bandwidth usage ratios of other service boards in the multiple service boards except the first service board.

The preset condition may be that the real-time bandwidth usage ratio is smaller than the preset ratio.

Exemplarily, the preset ratio may be 80%. When the real-time bandwidth ratio of the first service board is equal to or greater than 80%, and the real-time bandwidth ratio of the first service board does not meet the preset ratio, the BRAS module in the router 106 may be based on For the real-time bandwidth ratios of multiple service boards, a service board whose real-time bandwidth ratio is less than 80% is determined as a target service board.

S805. The BRAS module in the router 106 sends a third request message to the target service board, where the third request message is used to instruct the target service board to perform NAT conversion for the first user, and correspondingly, the target service board receives the third request message.

S806. The target service board allocates a new public network IP address and a new port number range to the first user.

The target service board can update the corresponding relationship between the private network IP address, the public network IP address and the port number range, that is, establish the corresponding relationship between the private network IP address, the new public network IP address and the new port number range.

S807, the target service board sends a third response message to the BRAS module in the router 106, the third response message includes the new public network IP address and the new port number range allocated by the target service board for the first user, and the BRAS in the router 106 The module receives the third response message.

S808. The BRAS module in the router 106 sends a fourth request message to the first service board, where the fourth request message is used to notify the first service board to release the range of the original public network IP address and the original port number of the first user.

S809. The first user accesses the network through the target service board.

When the BRAS module in the router 106 detects that the first user accesses the network, it may instruct the target service board to provide network services for the first user, that is, the traffic of the first user is processed by the target service board.

Optionally, before the above S803, the BRAS module in the router 106 may send the accounting statistics message to the authentication server.

In the network address translation method provided by the embodiment of the present application, when the real-time bandwidth usage ratio of the first service board does not meet the preset condition, the BRAS module in the router 106 can select the target service board that meets the preset condition to assign the bandwidth to the first user. The new public network IP address and the new port number range can alleviate the tightness of the bandwidth resources of the first service board. Balanced to improve the bandwidth resource utilization of the service board. In addition, the first service board can release the original public network IP address and the original port number range allocated for the first user, which can save memory resources and can be used as NAT for more users. Conversion is conducive to improving the user's business experience.

FIG. 9 provides another network address translation method 900 according to the embodiment of the present application, and the method 900 may be applicable to the communication system 200 described in FIG. 2 . The method 900 can be understood as: the network device in the method 700 can be the CP 202 in the communication system 200.

As shown in Figure 9, the method 900 may include:

S901. The first user accesses the network through the first service board.

S902, the BRAS module in the UP 201 counts the number of online users of the first service board and the real-time bandwidth of the online users of the first service board.

The BRAS module in the UP 201 can record the online users of the first service board and the real-time bandwidth of the online users, and perform statistics on the number of online users and the sum of the real-time bandwidth of all online users on the first service board.

S903, the BRAS module in the UP 201 acquires the real-time bandwidth usage ratio of the first service board.

The BRAS module in the UP 201 can send a request message to the first service board, and the request message is used to obtain the real-time bandwidth usage ratio of the first service board. Correspondingly, after the first service board receives the request message, it can send a request message to the UP 201 The BRAS module sends a response message, where the response message may include the real-time bandwidth usage ratio of the first service board.

S904, the BRAS module in the UP 201 sends first information to the CP 202, where the first information includes the real-time bandwidth utilization ratio of the first service board, and correspondingly, the CP 202 receives the first information.

S905. When the real-time bandwidth usage ratio of the first service board does not meet the preset condition, the CP 202 determines the target service board based on the real-time bandwidth usage ratios of other service boards in the multiple service boards except the first service board.

S906. The CP 202 sends a third request message to the target service board, where the third request message is used to instruct the target service board to perform NAT conversion for the first user, and correspondingly, the target service board receives the third request message.

S907. The target service board allocates a new public network IP address and a new port number range to the first user.

S908. The target service board sends a third response message to the CP 202. The third response message includes the new public network IP address and the new port number range allocated by the target service board to the first user, and the CP 202 receives the third response message.

S909. The CP 202 sends a fourth request message to the first service board, where the fourth request message is used to notify the first service board to release the original public network IP address and the original port number range of the first user.

S910. The first user accesses the network through the target service board.

When the CP 202 detects that the first user accesses the network, it can instruct the target service board to provide network services for the first user, that is, the traffic of the first user is processed by the target service board.

Optionally, before the above S903, the CP 202 may send an accounting statistics message to the authentication server.

In the network address translation method provided in the embodiment of the present application, when the real-time bandwidth usage ratio of the first service board does not meet the preset condition, the CP 202 can select a target service board that meets the preset condition to assign a new public network to the first user The IP address and the new port number range can alleviate the tightness of the bandwidth resources of the first service board, and at the same time, can make full use of the bandwidth resources of the target service board, which can make the bandwidth utilization ratio among multiple service boards more balanced, and improve the business In addition, the first service board can release the original public network IP address and original port number range allocated for the first user, which can save memory resources, and can perform NAT conversion for more users at the same time, which is beneficial to Improve user experience.

FIG. 10 provides another network address translation method 1000 according to the embodiment of the present application, and the method 1000 may be applicable to the communication system 200 described in FIG. 2 . The method 1000 can be understood as: the network device in the method 700 can be the BRAS module in the UP 201 in the communication system 200.

As shown in Figure 10, the method 1000 may include:

S1001. A first user accesses a network through a first service board.

S1002, the BRAS module in the UP 201 counts the number of online users of the first service board and the real-time bandwidth of the online users of the first service board.

The BRAS module can record the online users of the first service board and the real-time bandwidth of the online users, and perform statistics on the number of online users and the sum of the real-time bandwidth of all online users on the first service board.

S1003, the BRAS module in the UP 201 acquires the real-time bandwidth usage ratio of the first service board.

The BRAS module can send a request message to the first service board, and the request message is used to obtain the real-time bandwidth usage ratio of the first service board. Correspondingly, after the first service board receives the request message, it can send the request message to the BRAS module in the UP 201 A response message, where the response message may include the real-time bandwidth usage ratio of the first service board.

S1004, when the real-time bandwidth usage ratio of the first service board does not meet the preset condition, the BRAS module in the UP 201 determines the target based on the real-time bandwidth usage ratios of other service boards in the multiple service boards except the first service board business board.

S1005, the BRAS module in the UP 201 sends a third request message to the target service board, the third request message is used to instruct the target service board to perform NAT conversion for the first user, and correspondingly, the target service board receives the third request message.

S1006. The target service board allocates a new public network IP address and a new port number range to the first user.

S1007, the target service board sends the third response message to the BRAS module in the UP 201, the third response message includes the new public network IP address and the new port number range allocated by the target service board for the first user, and the BRAS in the UP 201 The module receives the third response message.

S1008, the BRAS module in the UP 201 sends second information to the CP 202, the second information includes the new public network IP address and the new port number range allocated by the target service board for the first user, correspondingly, the CP 202 receives the first Two information.

S1009, the BRAS module in the UP 201 sends a fourth request message to the first service board, and the fourth request message is used to notify the first service board to release the original public network IP address and the original port number range of the first user.

S1010. The first user accesses the network through the target service board.

When the BRAS module in UP 201 detects that the first user accesses the network, it can instruct the target service board to provide network services for the first user, that is, the traffic of the first user is processed by the target service board.

Optionally, before the above S1003, the BRAS module in the UP 201 can send the accounting statistics message to the CP 202, and the CP 202 can forward the accounting statistics message to the authentication server.

In the method for network address translation provided in the embodiment of the present application, when the real-time bandwidth utilization ratio of the first service board does not meet the preset condition, the BRAS module in the UP 201 can select a target service board that satisfies the preset condition to allocate to the first user. The new public network IP address and the new port number range can alleviate the tightness of the bandwidth resources of the first service board. Balanced to improve the bandwidth resource utilization of the service board. In addition, the first service board can release the original public network IP address and the original port number range allocated for the first user, which can save memory resources and can be used as NAT for more users. Conversion is conducive to improving the user's business experience.

It should be understood that the sequence numbers of the above-mentioned processes do not mean the order of execution, and the execution order of each process should be determined by its function and internal logic, and should not constitute any limitation to the implementation process of the embodiment of the present application.

The method for NAT provided by the embodiment of the present application is described in detail above with reference to FIG. 1 to FIG. 10 . The apparatus for NAT provided by the embodiment of the present application will be described in detail below in conjunction with FIG. 11 to FIG. 13 .

FIG. 11 shows an apparatus 1100 for network address translation provided by an embodiment of the present application. The apparatus 1100 includes: a transceiver module 1110 and a processing module 1120 .

In an optional example, those skilled in the art can understand that the apparatus 1100 may specifically be the network device in the above-mentioned method 300 or method 700, or the functions of the network device in the above-mentioned method 300 or method 700 may be integrated in the apparatus 1100 middle. The above functions can be implemented by hardware, or can be implemented by executing corresponding software by hardware. The hardware or software includes one or more modules corresponding to the above functions. Apparatus 1100 may be configured to execute various processes and/or steps corresponding to network devices in the foregoing method embodiments.

Optionally, in the foregoing method 400 and method 800, the network device may be a BRAS module in the router 106.

Optionally, in the foregoing method 500 and method 900, the network device may be the CP 202.

Optionally, in the foregoing method 600 and method 1000, the network device may be the UP 201 or the BRAS module in the UP 201.

Wherein, the transceiver module 1110 may be used to execute S301 in the above method 300, that is, to receive a first request message, and the first request message is used to request the first user to go online. The processing module 1120 can be used to execute S302 in the above-mentioned method 300, that is, to select the first service board from multiple service boards based on the first bandwidth parameters of the multiple service boards; the transceiver module can also be used to execute the above-mentioned method 300 In S303, it is used to send a second request message to the first service board, and the second request message is used to instruct the first service board to perform NAT conversion for the first user.

Optionally, the first bandwidth parameter includes at least one of the following: configured bandwidth of online users on the service board, configured bandwidth of the service board, real-time bandwidth of online users on the service board, configured bandwidth ratio, or real-time bandwidth usage ratio; wherein, The configured bandwidth ratio is the ratio of the total configured bandwidth of online users on the service board to the configured bandwidth of the service board, and the real-time bandwidth usage ratio is the ratio of the total real-time bandwidth of online users on the service board to the configured bandwidth of the service board.

Optionally, when the first bandwidth parameter includes a configured bandwidth ratio or a real-time bandwidth usage ratio, the apparatus 1100 further includes an acquisition module; the acquisition module is configured to: acquire the first bandwidth parameter of each service board in the plurality of service boards; process Module 1120 is further configured to: determine the service board with the smallest value of the first bandwidth parameter among the multiple service boards as the first service board.

Optionally, the processing module 1120 is further configured to: in the case that the value of the first bandwidth parameter of each of the multiple service boards is the same, determine the service board with the least number of online users among the multiple service boards as the first service board plate.

Optionally, the transceiver module 1110 is also configured to: receive a first response message from the first service board, where the first response message includes the public network IP address and port number range assigned by the first service board to the first user; The client device sends a second response message, where the second response message is used to indicate that the first user goes online successfully, and the first user connects to the network device through the client device.

Optionally, the device 1100 further includes an acquisition module; the acquisition module is used to: acquire the second bandwidth parameter of the first service board; the processing module 1120 is also used to: when the second bandwidth parameter of the first service board does not meet the preset condition , determine the target service board based on the second bandwidth parameters of other service boards in the plurality of service boards except the first service board; the transceiver module 1110 is also used to: send a third request message to the target service board, the third request message It is used to instruct the target service board to perform NAT conversion for the first user.

Optionally, the second bandwidth parameter includes real-time bandwidth or real-time bandwidth usage ratio of online users on the service board.

Optionally, the second bandwidth parameter of the target service board satisfies a preset condition.

Optionally, the processing module 1120 is further configured to: when the second bandwidth parameter of at least one candidate service board other than the first service board among the multiple service boards satisfies a preset condition, based on the second bandwidth parameter of the at least one candidate service board A bandwidth parameter for determining a target service board from at least one candidate service board.

Optionally, the processing module 1120 is further configured to: calculate the to-be-transferred bandwidth of the first service board based on the first bandwidth parameter of the first service board; calculate at least one candidate service based on the first bandwidth parameter of at least one candidate service board The board's to-be-transferred bandwidth; based on the to-be-transferred bandwidth and the to-be-transferred bandwidth, determine a target service board from at least one candidate service board.

Optionally, the processing module 1120 is further configured to: determine the second parameter based on at least one parameter of the number of online users on the first service board, the real-time bandwidth of online users on the first service board, or the configured bandwidth of online users on the first service board. a user.

Optionally, the transceiver module 1110 is further configured to: receive a third response message from the target service board, where the third response message includes the new public network IP address and the new port number range allocated to the first user by the target service board.

Optionally, the transceiver module 1110 is further configured to: send a fourth request message to the first service board, the fourth request message is used to notify the first service board to release the original public network IP address and the original port number range of the first user.

Optionally, the transceiver module 1110 is further configured to: send a fifth request message to the authentication server based on the first request message, where the fifth request message is used to request authentication for the first user; the processing module 1120 is also configured to: In this case, allocate a private network IP address to the first user; the transceiver module 1110 is further configured to: send a fifth response message to the first user, and the fifth response message is used to indicate the private network IP address allocated by the device to the first user.

Optionally, the apparatus 1100 is a broadband access server, a user plane device or a control plane device performing a broadband access function.

FIG. 12 shows another network address translation device 1200 provided by an embodiment of the present application. The device 1200 obtains a module 1210 , a processing module 1220 and a transceiver module 1230 .

In an optional example, those skilled in the art may understand that the apparatus 1200 may specifically be the network device in the foregoing method 700 , or the functions of the network device in the foregoing method 700 may be integrated in the apparatus 1200 . The above functions can be implemented by hardware, or can be implemented by executing corresponding software by hardware. The hardware or software includes one or more modules corresponding to the above functions. Apparatus 1200 may be configured to execute various processes and/or steps corresponding to network devices in the foregoing method embodiments.

Optionally, in the foregoing method 800, the network device may be a BRAS module in the router 106.

Optionally, in the foregoing method 900, the network device may be the CP 202.

Optionally, in the above 1000, the network device may be the UP 201 or the BRAS module in the UP 201.

Wherein, the acquisition module 1210 can be used to execute S701 in the above method 700, that is, to acquire the second bandwidth parameter of the first service board, the first service board is included in multiple service boards, and the first service board is the first user Perform NAT conversion; the processing module 1220 can be used to execute S702 in the above-mentioned method 700, that is, when the second bandwidth parameter of the first service board does not meet the preset condition, based on multiple service boards except the first service board The second bandwidth parameter of other service boards, to determine the target service board; the transceiver module 1230 can be used to execute S703 in the above method 700, that is, to send a third request message to the target service board, and the third request message is used to indicate The target service board performs NAT conversion for the first user.

Optionally, the second bandwidth parameter includes real-time bandwidth or real-time bandwidth usage ratio of online users on the service board, where the real-time bandwidth usage ratio is the ratio of the total real-time bandwidth of online users on the service board to the configured bandwidth of the service board.

Optionally, the transceiver module 1230 is also configured to: receive a first request message, the first request message is used to request the first user to go online; the processing module 1220 is also configured to: based on the first bandwidth parameters of multiple service boards, from multiple The first service board is selected among the service boards; the transceiver module 1230 is further configured to: send a second request message to the first service board, and the second request message is used to instruct the first service board to perform NAT conversion for the first user.

Optionally, the first bandwidth parameter includes at least one of the following: configured bandwidth of online users on the service board, configured bandwidth of the service board, real-time bandwidth of online users on the service board, configured bandwidth ratio, or real-time bandwidth usage ratio; wherein, The configured bandwidth ratio is the ratio of the sum of the configured bandwidth of online users on the service board to the configured bandwidth of the service board.

Optionally, the processing module 1220 is further configured to: when the second bandwidth parameter of at least one candidate service board other than the first service board among the multiple service boards satisfies a preset condition, based on the second bandwidth parameter of the at least one candidate service board A bandwidth parameter for determining a target service board from at least one candidate service board.

Optionally, the processing module 1220 is further configured to: calculate the to-be-transferred bandwidth of the first service board based on the first bandwidth parameter of the first service board; calculate at least one candidate service based on the first bandwidth parameter of at least one candidate service board The board's to-be-transferred bandwidth; based on the to-be-transferred bandwidth and the to-be-transferred bandwidth, determine a target service board from at least one candidate service board.

Optionally, the processing module 1220 is further configured to: determine the second parameter based on at least one parameter of the number of online users on the first service board, the real-time bandwidth of online users on the first service board, or the configured bandwidth of online users on the first service board. a user.

Optionally, the transceiver module 1230 is further configured to: send a fourth request message to the first service board, the fourth request message is used to notify the first service board to release the original public network IP address and the original port number range of the first user.

It should be understood that the foregoing apparatus 1100 and apparatus 1200 are both embodied in the form of functional modules. The term "module" here may refer to an application specific integrated circuit (ASIC), an electronic circuit, a processor (such as a shared processor, a dedicated processor, or a group processor, etc.) and memory, incorporated logic, and/or other suitable components to support the described functionality. In an optional example, those skilled in the art can understand that the network address translation apparatus 1100 or the network address translation apparatus 1200 may specifically be the network device in the above method embodiment, or the network device in the above method embodiment The function can be integrated in the network address translation apparatus 1100 or the network address translation apparatus 1200, and the network address translation apparatus 1100 or the network address translation apparatus 1200 can be used to execute the various processes corresponding to the network equipment in the above method embodiments and/or or steps, in order to avoid repetition, no more details are given here.

The above-mentioned NAT apparatus 1100 or NAT apparatus 1200 has the function of implementing the corresponding steps performed by the network device in the above-mentioned method embodiment; the above-mentioned functions can be realized by hardware, and can also be realized by hardware executing corresponding software. The hardware or software includes one or more modules corresponding to the above functions.

In the embodiment of the present application, the NAT device in FIG. 11 or the NAT device in FIG. 12 may also be a chip or a chip system, for example: a system on chip (system on chip, SoC).

FIG. 13 is a schematic block diagram of another network address translation apparatus 1300 provided by an embodiment of the present application. The apparatus 1300 for network address translation includes a processor 1310 , a transceiver 1320 and a memory 1330 . Wherein, the processor 1310, the transceiver 1320 and the memory 1330 communicate with each other through an internal connection path, the memory 1330 is used to store instructions, and the processor 2140 is used to execute the instructions stored in the memory 1330 to control the transceiver 1320 to send signals and /or to receive a signal.

It should be understood that the network address translation apparatus 1300 may specifically be the network device in the above-mentioned method 300 or method 700, or the functions of the network equipment in the above-mentioned method 300 or method 400 may be integrated in the network address translation apparatus 1300, and the network address translation The apparatus 1300 can be used to execute each step and/or process corresponding to the network device in the above-mentioned method 300 or method 700. Optionally, the memory 1330 may include read-only memory and random-access memory, and provides instructions and data to the processor. A portion of the memory may also include non-volatile random access memory. For example, the memory may also store device type information. The processor 1310 may be configured to execute instructions stored in the memory, and when the processor executes the instructions, the processor may execute various steps and/or processes corresponding to the network device in the above method 300 or method 700 .

It should also be understood that the processor 1310 in the network address translation device 1300 can specifically implement the functions of the processing module 1120 in the above-mentioned device 1100, the transceiver 1320 can specifically realize the functions of the transceiver module 1110 in the above-mentioned device 1100, and the memory 1330 can store and implement Instructions for processor 1310 and transceiver 1320 functions.

The processor 1310 in the network address translation device 1300 can also specifically implement the functions of the processing module 1220 in the above-mentioned device 1200, and the transceiver 1320 can specifically realize the functions of the transceiver module 1230 in the above-mentioned device 1200, and the processor 1310 or the transceiver 1320 can also implement The functions of the acquisition module 1210 in the above-mentioned apparatus 1200 may be specifically realized, and the memory 1330 may store instructions for realizing the functions of the processor 1310 and the transceiver 1320 .

It should be understood that, in the embodiment of the present application, the processor 1310 may be a central processing unit (central processing unit, CPU), and the processor may also be other general processors, digital signal processors (DSPs), application specific integrated circuits ( ASIC), Field Programmable Gate Array (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor, or the processor may be any conventional processor, or the like.

In the implementation process, each step of the above method can be completed by an integrated logic circuit of hardware in a processor or an instruction in the form of software. The steps of the methods disclosed in connection with the embodiments of the present application may be directly implemented by a hardware processor, or implemented by a combination of hardware and software modules in the processor. The software module can be located in a mature storage medium in the field such as random access memory, flash memory, read-only memory, programmable read-only memory or electrically erasable programmable memory, register. The storage medium is located in the memory, and the processor executes the instructions in the memory, and completes the steps of the above method in combination with its hardware. To avoid repetition, no detailed description is given here.

An embodiment of the present application provides a network address translation system, where the network address translation system includes a network device. In a possible implementation manner, the network device may be configured to: receive a first request message, where the first request message is used to request the first user to go online; based on the first bandwidth parameters of the multiple service boards, select the The first service board; sending a second request message to the first service board, where the second request message is used to instruct the first service board to perform NAT conversion for the first user.

In another possible implementation manner, the network device may be configured to: obtain the second bandwidth parameter of the first service board, where the first service board is included in multiple service boards, and the first service board performs NAT conversion for the first user; When the second bandwidth parameter of the first service board does not meet the preset condition, determine the target service board based on the second bandwidth parameters of other service boards in the multiple service boards except the first service board; send to the target service board A third request message, where the third request message is used to instruct the target service board to perform NAT conversion for the first user.

It should be understood that the network device may also execute the steps and/or processes related to the network device described in any of the foregoing methods, which will not be repeated here.

The embodiment of the present application also provides a computer-readable storage medium, where the computer-readable storage medium is used to store a computer program, and the computer program is used to implement the method corresponding to the network device in the foregoing method embodiment.

The embodiment of the present application further provides a chip system, which is used to support the network device in the above method embodiment to implement the functions shown in the embodiment of the present application.

The embodiment of the present application also provides a computer program product. The computer program product includes a computer program (also referred to as code, or instruction). When the computer program is run on a computer, the computer can execute the method described in the above method embodiments. method corresponding to the network device shown.

Those skilled in the art can appreciate that the units and algorithm steps of the examples described in conjunction with the embodiments disclosed herein can be implemented by electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are executed by hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art may use different methods to implement the described functions for each specific application, but such implementation should not be regarded as exceeding the scope of the present application.

Those skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the above-described system, device and unit can refer to the corresponding process in the foregoing method embodiment, which will not be repeated here.

In the several embodiments provided in this application, it should be understood that the disclosed systems, devices and methods may be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of the units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components can be combined or May be integrated into another system, or some features may be ignored, or not implemented. In another point, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of devices or units may be in electrical, mechanical or other forms.

The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place, or may be distributed to multiple network units. Part or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, each unit may exist separately physically, or two or more units may be integrated into one unit.

If the functions described above are realized in the form of software function units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or the part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including Several instructions are used to make a computer device (which may be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the methods described in the various embodiments of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (read-only memory, ROM), random access memory (random access memory, RAM), magnetic disk or optical disc and other media that can store program codes. .

The above is only a specific implementation of the application, but the scope of protection of the application is not limited thereto. Anyone familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed in the application. Should be covered within the protection scope of this application. Therefore, the protection scope of the present application should be determined by the protection scope of the claims.

Claims

A method for Network Address Translation NAT, characterized in that it comprises:

The network device receives a first request message, where the first request message is used to request the first user to go online;

The network device selects a first service board from the multiple service boards based on the first bandwidth parameters of the multiple service boards;

The network device sends a second request message to the first service board, where the second request message is used to instruct the first service board to perform NAT conversion for the first user.
The method according to claim 1, wherein the first bandwidth parameter comprises at least one of the following:

Configured bandwidth of online users on the service board, configured bandwidth of the service board, real-time bandwidth of online users on the service board, configured bandwidth ratio, or real-time bandwidth usage ratio;

Wherein, the configured bandwidth ratio is the ratio of the sum of the configured bandwidth of the online users on the service board to the configured bandwidth of the service board, and the real-time bandwidth usage ratio is the ratio of the sum of the real-time bandwidth of the online users on the service board to the configured bandwidth of the service board Compare.
The method according to claim 2, wherein when the first bandwidth parameter includes a configured bandwidth ratio or a real-time bandwidth usage ratio;

The selecting the first service board from the plurality of service boards includes:

The network device obtains a first bandwidth parameter of each service board in the plurality of service boards;

The network device determines, among the plurality of service boards, the service board with the smallest value of the first bandwidth parameter as the first service board.
The method according to any one of claims 1-3, wherein the network device selects the first service board from the multiple service boards based on the first bandwidth parameters of the multiple service boards, comprising:

When the value of the first bandwidth parameter of each of the multiple service boards is the same, the network device determines the service board with the least number of online users among the multiple service boards as the first business board.
The method according to any one of claims 1-4, wherein the method further comprises:

The network device receives a first response message from the first service board, where the first response message includes the public network Internet Protocol IP address and port number range allocated by the first service board to the first user;

The network device sends a second response message to the client device, where the second response message is used to indicate that the first user goes online successfully, and the first user connects to the network device through the client device.
The method according to any one of claims 1-5, wherein the method further comprises:

The network device acquires a second bandwidth parameter of the first service board;

When the second bandwidth parameter of the first service board does not meet the preset condition, the network device, based on the second bandwidth parameters of other service boards in the plurality of service boards except the first service board, Determine the target business board;

The network device sends a third request message to the target service board, where the third request message is used to instruct the target service board to perform NAT conversion for the first user.
The method according to claim 6, wherein the second bandwidth parameter includes real-time bandwidth or real-time bandwidth usage ratio of online users on the service board.
The method according to claim 6 or 7, wherein the second bandwidth parameter of the target service board satisfies the preset condition.
The method according to any one of claims 6-8, wherein the network device is based on the second bandwidth parameters of other service boards in the plurality of service boards except the first service board, Determine the target business board, including:

When the second bandwidth parameter of at least one candidate service board other than the first service board among the plurality of service boards satisfies a preset condition, the network device, based on the first bandwidth parameter of the at least one candidate service board, A bandwidth parameter is used to determine a target service board from the at least one candidate service board.
The method according to claim 9, wherein the network device determines a target service board from the at least one candidate service board based on the first bandwidth parameter of the at least one candidate service board, comprising:

The network device calculates the to-be-transferred bandwidth of the first service board based on the first bandwidth parameter of the first service board;

The network device calculates the transfer-in bandwidth of the at least one candidate service board based on the first bandwidth parameter of the at least one candidate service board;

The network device determines a target service board from the at least one candidate service board based on the to-be-transferred bandwidth and the to-be-transferred bandwidth.
The method according to any one of claims 6-10, wherein before the network device sends the third request message to the target service board, the method further comprises:

The network device determines the at least one parameter based on the number of online users on the first service board, the real-time bandwidth of online users on the first service board, or the configured bandwidth of online users on the first service board. first user.
The method according to any one of claims 6-11, wherein after the network device sends the third request message to the target service board, the method further comprises:

The network device receives a third response message from the target service board, where the third response message includes a new public network IP address and a new port number range allocated to the first user by the target service board.
The method according to claim 12, characterized in that the method further comprises:

The network device sends a fourth request message to the first service board, where the fourth request message is used to notify the first service board to release the range of the original public network IP address and the original port number of the first user.
The method according to any one of claims 1-13, wherein, before the network device selects the first service board from the multiple service boards based on the first bandwidth parameters of the multiple service boards, The method also includes:

The network device sends a fifth request message to an authentication server based on the first request message, where the fifth request message is used to request authentication for the first user;

The network device assigns a private network IP address to the first user when the authentication is successful;

The network device sends a fifth response message to the first user, where the fifth response message is used to indicate the private network IP address allocated by the network device to the first user.
The method according to any one of claims 1-14, wherein the network device is a broadband access server, a user plane device or a control plane device performing a broadband access function.
The method according to any one of claims 1-15, wherein the plurality of service boards are deployed in the network device.
A method for Network Address Translation NAT, characterized in that it comprises:

The network device obtains the second bandwidth parameter of the first service board, the first service board is included in multiple service boards, and the first service board performs NAT conversion for the first user;

When the second bandwidth parameter of the first service board does not meet the preset condition, the network device, based on the second bandwidth parameters of other service boards in the plurality of service boards except the first service board, Determine the target business board;

The network device sends a third request message to the target service board, where the third request message is used to instruct the target service board to perform NAT conversion for the first user.
The method according to claim 17, wherein the second bandwidth parameter includes the real-time bandwidth or the real-time bandwidth usage ratio of the online users on the service board, wherein the real-time bandwidth usage ratio is the real-time bandwidth usage ratio of the online users on the service board. The ratio of the total bandwidth to the configured bandwidth of the service board.
The method according to claim 17 or 18, wherein, before the network device acquires the second bandwidth parameter of the first service board, the method further comprises:

The network device receives a first request message, where the first request message is used to request the first user to go online;

The network device selects the first service board from the multiple service boards based on the first bandwidth parameters of the multiple service boards;

The network device sends a second request message to the first service board, where the second request message is used to instruct the first service board to perform NAT conversion for the first user.
The method according to claim 19, wherein the first bandwidth parameter comprises at least one of the following:

Configured bandwidth of online users on the service board, configured bandwidth of the service board, real-time bandwidth of online users on the service board, configured bandwidth ratio, or real-time bandwidth usage ratio;

Wherein, the configured bandwidth ratio is the ratio of the sum of configured bandwidths of online users on the service board to the configured bandwidth of the service board.
The method according to claim 19 or 20, wherein the network device determines the target service board based on the second bandwidth parameters of other service boards in the plurality of service boards except the first service board ,include:

When the second bandwidth parameter of at least one candidate service board other than the first service board among the plurality of service boards satisfies a preset condition, the network device, based on the first bandwidth parameter of the at least one candidate service board, A bandwidth parameter is used to determine a target service board from the at least one candidate service board.
The method according to claim 21, wherein the network device determines a target service board from the at least one candidate service board based on the first bandwidth parameter of the at least one candidate service board, comprising:

The network device calculates the to-be-transferred bandwidth of the first service board based on the first bandwidth parameter of the first service board;

The network device calculates the transfer-in bandwidth of the at least one candidate service board based on the first bandwidth parameter of the at least one candidate service board;

The network device determines a target service board from the at least one candidate service board based on the to-be-transferred bandwidth and the to-be-transferred bandwidth.
The method according to any one of claims 17-22, wherein before the network device sends a third request message to the target service board, the method further comprises:

The network device determines the at least one parameter based on the number of online users on the first service board, the real-time bandwidth of online users on the first service board, or the configured bandwidth of online users on the first service board. first user.
The method according to any one of claims 17-23, wherein after the network device sends the third request message to the target service board, the method further comprises:

The network device sends a fourth request message to the first service board, where the fourth request message is used to notify the first service board to release the range of the original public network IP address and the original port number of the first user.
A device for network address translation NAT, characterized in that it includes: a processor, the processor is coupled with a memory, and the memory is used to store a computer program, when the processor invokes the computer program, the The device executes the method according to any one of claims 1-16 or the method according to any one of claims 17-24.
A computer-readable storage medium, characterized in that it is used to store a computer program, the computer program including instructions for implementing any one of claims 1-16 or any one of claims 17-24 instructions described in the item.
A network address translation system, characterized by comprising: a network device configured to execute the method according to any one of claims 1-16 or the method according to any one of claims 17-24 described method.
A computer program product, characterized in that the computer program product comprises: a computer program, when the computer program is executed, the computer program product is made to execute the method according to any one of claims 1-16 Or the method according to any one of claims 17-24.