Hangzhou H3c Technologies Co., Ltd

New H3c Security Technologies Co., Ltd.

Mingyu Li

Xiao Dong Li

Tian Xia

Xiangqing Chang

Xudong Zou

Ju Wang

Zhongwei Fang

The present disclosure provides a message forwarding method and apparatus, a domain name address query method and apparatus, a network address translation device, and a computer-readable medium. The message forwarding method includes: receiving a first address query request for a target domain name sent by a client; if not finding the network address corresponding to the target domain name locally, sending a second address query request for the target domain name to a domain name system; receiving a second response message returned by the domain name system for the second address query request, which includes a first network address and address translation information; sending a first response message to the client; and after receiving a service message whose destination address is the first network address sent by the client, according to the address translation information, translating the destination address of the service message to the second network address, and sending the service message with the translated destination address to the target server. The method can realize the automatic operation and maintenance of the network address translation equipment and ensure the timely and accurate cross-protocol forwarding of network messages.

Message forwarding and domain name address querying

Embodiments of the present invention provide method for implementing security-related processing on packet and a network security device. Through establishing a relationship between stream attribute information of an initial packet of a stream and security-related processing information implemented on the initial packet, when a succeeding packet of the stream is received, the previously stored relationship is acquired according to stream attribute information of the succeeding packet, the security-related processing is implemented on the succeeding packet according to the security-related processing information in the relationship. Therefore, according to the method for implementing security-related processing on packet and the network security device provided by the present invention, the process of searching for security information entries for succeeding packets of a stream is not required, the security-related processing procedure of the packet is thus accelerated, and the packet processing efficiency is improved.

Method for implementing security-related processing on packet and network security device

Growing community of inventors

Beijing, China

Mingyu Li