公开(公告)号：US20150350156A1

公开(公告)日：2015-12-03

申请号：US14654931

申请日：2013-09-25

Applicant: ZTE CORPORATION

Inventor： Suan Ma ,  Jun Wang

IPC: H04L29/12

CPC classification number: H04L61/2514 ,  H04L12/6418 ,  H04L43/00 ,  H04L61/2557 ,  H04L61/2564

Abstract: Disclosed is an NAT implementation system, comprising: a controller and an Openflow switch. The Controller delivers a flow table and an improved group table. The Openflow switch receives the flow table and the improved group table, and matches, according to an address translation matching rule recorded in the flow table, a data packet that address translation needs to be performed on; and performs translation between a private address and a public IP address according to an address translation rule recorded in the improved group table, and sends the data packet out by using an address after translation. Further disclosed are an NAT implementation method and Openflow switch. By using the present invention, the flow table and the improved group table only need to be sent to the Openflow switch at once, and the Openflow switch does not need to frequently interact with the Controller, so that a forwarding delay of the data packet is shortened and the network transmission efficiency is improved.

Abstract translation: 公开了一种NAT实现系统，包括：控制器和Openflow交换机。 控制器提供流表和改进的组表。 Openflow交换机接收流表和改进的组表，根据记录在流表中的地址转换匹配规则匹配需要执行地址转换的数据包; 并且根据记录在改进组表中的地址转换规则，在私有地址和公共IP地址之间执行翻译，并且通过使用翻译后的地址来发送数据包。 另外公开了一种NAT实现方法和Openflow开关。 通过使用本发明，流表和改进的组表仅需要一次发送到Openflow交换机，并且Openflow交换机不需要频繁地与控制器交互，使得数据分组的转发延迟为 缩短了网络传输效率。

公开(公告)号：US11934530B2

公开(公告)日：2024-03-19

申请号：US16960587

申请日：2019-01-30

Applicant: ZTE Corporation

Inventor： Qiang Wu ,  Chunming Wu ,  Suan Ma ,  Hongxun Zhao ,  Yifei Qin

IPC: G06F21/57 ,  G06F8/60 ,  G06F8/71

CPC classification number: G06F21/577 ,  G06F8/60 ,  G06F8/71 ,  G06F21/572 ,  G06F2221/033

Abstract: Provided are a security protection method and apparatus. The security protection method includes: generating software versions based on diversity compilation, and constructing a software version pool using the software versions as heterogeneous functional equivalents; and dynamically deploying a software version on a network element according to the software version pool.