Abstract:
Apparatus and methods for efficient NAT and ALG processing is disclosed. An exemplary method includes the operations of deep scanning a packet received over a connection to determine an application level gateway (ALG) process to be performed on the packet, associating the connection with the ALG process, and forwarding additional packets received over the connection to receive the ALG process based on said associating so that deep scanning of the additional packets is bypassed. An exemplary apparatus includes a processor to deep scan a packet received over a connection to determine an ALG process to be performed on the packet, a database to associate the connection with the ALG process, and a packet transmitter to forward additional packets received over the connection to receive the ALG process based on said associating so that deep scanning of the additional packets is bypassed.
Abstract:
Apparatus and methods for efficient NAT and ALG processing is disclosed. An exemplary method includes the operations of deep scanning a packet received over a connection to determine an application level gateway (ALG) process to be performed on the packet, associating the connection with the ALG process, and forwarding additional packets received over the connection to receive the ALG process based on said associating so that deep scanning of the additional packets is bypassed. An exemplary apparatus includes a processor to deep scan a packet received over a connection to determine an ALG process to be performed on the packet, a database to associate the connection with the ALG process, and a packet transmitter to forward additional packets received over the connection to receive the ALG process based on said associating so that deep scanning of the additional packets is bypassed.
Abstract:
Systems and methods for performing efficient network address (NAT) translation are described herein. In some aspects, partial NAT entries are created for data packets before all the IP fragments of the data packets are received. Further, the IP fragments are transmitted before all the IP fragments of the data packets are received. In some aspects, unique IP-IDs are generated for IP fragments and/or data packets at a NAT device.
Abstract:
Systems and methods for performing efficient network address (NAT) translation are described herein. In some aspects, partial NAT entries are created for data packets before all the IP fragments of the data packets are received. Further, the IP fragments are transmitted before all the IP fragments of the data packets are received. In some aspects, unique IP-IDs are generated for IP fragments and/or data packets at a NAT device.