{"id":680,"date":"2020-04-28T09:05:34","date_gmt":"2020-04-28T01:05:34","guid":{"rendered":"https:\/\/aichh.com\/?p=680"},"modified":"2020-04-28T09:12:46","modified_gmt":"2020-04-28T01:12:46","slug":"nat%e7%9a%84%e5%9b%9b%e7%a7%8d%e7%b1%bb%e5%9e%8b%e5%8f%8a%e7%b1%bb%e5%9e%8b%e6%a3%80%e6%b5%8b","status":"publish","type":"post","link":"https:\/\/aichh.com\/680.html","title":{"rendered":"NAT\u7684\u56db\u79cd\u7c7b\u578b\u53ca\u7c7b\u578b\u68c0\u6d4b"},"content":{"rendered":"<!--wp-compress-html--><!--wp-compress-html no compression--><p>http:\/\/www.h3c.com.cn\/MiniSite\/Technology_Circle\/Net_Reptile\/The_Five\/Home\/Catalog\/201206\/747042_97665_0.htm<\/p>\n<p>&nbsp;<\/p>\n<p>\u8003 \u8651\u5230UDP\u7684\u65e0\u72b6\u6001\u7279\u6027\uff0c\u76ee\u524d\u9488\u5bf9\u5176\u7684NAT\u5b9e\u73b0\u5927\u81f4\u53ef\u5206\u4e3aFull Cone\u3001Restricted Cone\u3001Port Restricted Cone\u548cSymmetric NAT\u56db\u79cd\u3002\u503c\u5f97\u6307\u51fa\u7684\u662f\uff0c\u5bf9\u4e8eTCP\u534f\u8bae\u800c\u8a00\uff0c\u4e00\u822c\u6765\u8bf4\uff0c\u76ee\u524dNAT\u4e2d\u9488\u5bf9TCP\u7684\u5b9e\u73b0\u57fa\u672c\u4e0a\u662f\u4e00\u81f4\u7684\uff0c\u5176\u95f4\u5e76\u4e0d\u5b58\u5728\u592a\u5927\u5dee\u5f02\uff0c\u8fd9\u662f\u56e0\u4e3aTCP\u534f\u8bae\u672c\u8eab \u4fbf\u662f\u9762\u5411\u8fde\u63a5\u7684\uff0c\u56e0\u6b64\u65e0\u9700\u8003\u8651\u7f51\u7edc\u8fde\u63a5\u65e0\u72b6\u6001\u6240\u5e26\u6765\u590d\u6742\u6027\u3002<\/p>\n<p><strong>\u7528\u8bed\u5b9a\u4e49<\/strong><br \/>\n<strong><br \/>\n1.\u5185\u90e8Tuple<\/strong>\uff1a\u6307\u5185\u90e8\u4e3b\u673a\u7684\u79c1\u6709\u5730\u5740\u548c\u7aef\u53e3\u53f7\u6240\u6784\u6210\u7684\u4e8c\u5143\u7ec4\uff0c\u5373\u5185\u90e8\u4e3b\u673a\u6240\u53d1\u9001\u62a5\u6587\u7684\u6e90\u5730\u5740\u3001\u7aef\u53e3\u6240\u6784\u6210\u7684\u4e8c\u5143\u7ec4<br \/>\n<strong>2.\u5916\u90e8Tuple<\/strong>\uff1a\u6307\u5185\u90e8Tuple\u7ecf\u8fc7NAT\u7684\u6e90\u5730\u5740\/\u7aef\u53e3\u8f6c\u6362\u4e4b\u540e\uff0c\u6240\u83b7\u5f97\u7684\u5916\u90e8\u5730\u5740\u3001\u7aef\u53e3\u6240\u6784\u6210\u7684\u4e8c\u5143\u7ec4\uff0c\u5373\u5916\u90e8\u4e3b\u673a\u6536\u5230\u7ecfNAT\u8f6c\u6362\u4e4b\u540e\u7684\u62a5\u6587\u65f6\uff0c\u5b83\u6240\u770b\u5230\u7684\u8be5\u62a5\u6587\u7684\u6e90\u5730\u5740\uff08\u901a\u5e38\u662fNAT\u8bbe\u5907\u7684\u5730\u5740\uff09\u548c\u6e90\u7aef\u53e3<br \/>\n<strong>3.\u76ee\u6807Tuple<\/strong>\uff1a\u6307\u5916\u90e8\u4e3b\u673a\u7684\u5730\u5740\u3001\u7aef\u53e3\u6240\u6784\u6210\u7684\u4e8c\u5143\u7ec4\uff0c\u5373\u5185\u90e8\u4e3b\u673a\u6240\u53d1\u9001\u62a5\u6587\u7684\u76ee\u6807\u5730\u5740\u3001\u7aef\u53e3\u6240\u6784\u6210\u7684\u4e8c\u5143\u7ec4<\/p>\n<p><strong>\u8be6\u7ec6\u91ca\u4e49<\/strong><br \/>\n<strong><br \/>\n1. Full Cone NAT<\/strong>\uff1a\u6240\u6709\u6765\u81ea\u540c\u4e00 \u4e2a\u5185\u90e8Tuple X\u7684\u8bf7\u6c42\u5747\u88abNAT\u8f6c\u6362\u81f3\u540c\u4e00\u4e2a\u5916\u90e8Tuple Y\uff0c\u800c\u4e0d\u7ba1\u8fd9\u4e9b\u8bf7\u6c42\u662f\u4e0d\u662f\u5c5e\u4e8e\u540c\u4e00\u4e2a\u5e94\u7528\u6216\u8005\u662f\u591a\u4e2a\u5e94\u7528\u7684\u3002\u9664\u6b64\u4e4b\u5916\uff0c\u5f53X-Y\u7684\u8f6c\u6362\u5173\u7cfb\u5efa\u7acb\u4e4b\u540e\uff0c\u4efb\u610f\u5916\u90e8\u4e3b\u673a\u5747\u53ef\u968f\u65f6\u5c06Y\u4e2d\u7684\u5730\u5740\u548c\u7aef\u53e3\u4f5c\u4e3a\u76ee\u6807\u5730\u5740 \u548c\u76ee\u6807\u7aef\u53e3\uff0c\u5411\u5185\u90e8\u4e3b\u673a\u53d1\u9001UDP\u62a5\u6587\uff0c\u7531\u4e8e\u5bf9\u5916\u90e8\u8bf7\u6c42\u7684\u6765\u6e90\u65e0\u4efb\u4f55\u9650\u5236\uff0c\u56e0\u6b64\u8fd9\u79cd\u65b9\u5f0f\u867d\u7136\u8db3\u591f\u7b80\u5355\uff0c\u4f46\u5374\u4e0d\u90a3\u4e48\u5b89\u5168\u3002\uff08\u4efb\u610f\u7684\u5916\u90e8\u4e3b\u673a\/port\u90fd\u80fd\u548c\u5148\u524d\u5185\u90e8\u8282\u70b9\u88ab\u6620\u5c04\u7684\u5916\u90e8Tuple\u8fdb\u884c\u901a\u4fe1\uff09<br \/>\n<strong><br \/>\n2. Restricted Cone NAT<\/strong>\uff1a \u5b83\u662fFull Cone\u7684\u53d7\u9650\u7248\u672c\uff1a\u6240\u6709\u6765\u81ea\u540c\u4e00\u4e2a\u5185\u90e8Tuple X\u7684\u8bf7\u6c42\u5747\u88abNAT\u8f6c\u6362\u81f3\u540c\u4e00\u4e2a\u5916\u90e8Tuple Y\uff0c\u8fd9\u4e0eFull Cone\u76f8\u540c\uff0c\u4f46\u4e0d\u540c\u7684\u662f\uff0c\u53ea\u6709\u5f53\u5185\u90e8\u4e3b\u673a\u66fe\u7ecf\u53d1\u9001\u8fc7\u62a5\u6587\u7ed9\u5916\u90e8\u4e3b\u673a\uff08\u5047\u8bbe\u5176IP\u5730\u5740\u4e3aZ\uff09\u540e\uff0c\u5916\u90e8\u4e3b\u673a\u624d\u80fd\u4ee5Y\u4e2d\u7684\u4fe1\u606f\u4f5c\u4e3a\u76ee\u6807\u5730\u5740\u548c\u76ee\u6807\u7aef\u53e3\uff0c\u5411\u5185\u90e8 \u4e3b\u673a\u53d1\u9001UDP\u8bf7\u6c42\u62a5\u6587\uff0c\u8fd9\u610f\u5473\u7740\uff0cNAT\u8bbe\u5907\u53ea\u5411\u5185\u8f6c\u53d1\uff08\u76ee\u6807\u5730\u5740\/\u7aef\u53e3\u8f6c\u6362\uff09\u90a3\u4e9b\u6765\u81ea\u4e8e\u5f53\u524d\u5df2\u77e5\u7684\u5916\u90e8\u4e3b\u673a\u7684UDP\u62a5\u6587\uff0c\u4ece\u800c\u4fdd\u969c\u4e86\u5916\u90e8\u8bf7\u6c42\u6765\u6e90\u7684\u5b89 \u5168\u6027\u3002\uff08IP\u76f8\u540c\uff0cport\u968f\u4fbf\uff0c\u5c31\u80fd\u548c\u5148\u524d\u5185\u90e8\u8282\u70b9\u88ab\u6620\u5c04\u7684\u5916\u90e8Tuple\u8fdb\u884c\u901a\u4fe1\uff09<br \/>\n<strong><br \/>\n3. Port Restricted Cone NAT<\/strong>\uff1a\u5b83\u662fRestricted Cone NAT\u7684\u8fdb\u4e00\u6b65\u53d7\u9650\u7248\u3002\u53ea\u6709\u5f53\u5185\u90e8\u4e3b\u673a\u66fe\u7ecf\u53d1\u9001\u8fc7\u62a5\u6587\u7ed9\u5916\u90e8\u4e3b\u673a\uff08\u5047\u8bbe\u5176IP\u5730\u5740\u4e3aZ\u4e14\u7aef\u53e3\u4e3aP\uff09\u4e4b\u540e\uff0c\u5916\u90e8\u4e3b\u673a\u624d\u80fd\u4ee5Y\u4e2d\u7684\u4fe1\u606f\u4f5c\u4e3a\u76ee\u6807\u5730\u5740\u548c\u76ee\u6807\u7aef \u53e3\uff0c\u5411\u5185\u90e8\u4e3b\u673a\u53d1\u9001UDP\u62a5\u6587\uff0c\u540c\u65f6\uff0c\u5176\u8bf7\u6c42\u62a5\u6587\u7684\u6e90\u7aef\u53e3\u5fc5\u987b\u4e3aP\uff0c\u8fd9\u4e00\u8981\u6c42\u8fdb\u4e00\u6b65\u5f3a\u5316\u4e86\u5bf9\u5916\u90e8\u62a5\u6587\u8bf7\u6c42\u6765\u6e90\u7684\u9650\u5236\uff0c\u4ece\u800c\u8f83Restrictd Cone\u66f4\u5177\u5b89\u5168\u6027 \uff08ip,port\u90fd\u5f97\u4e00\u6837\uff1b\u53ea\u80fd\u7528\u5148\u524d\u5185\u90e8\u8282\u70b9\u88ab\u6620\u5c04\u7684\u5916\u90e8Tuple\u4e0e\u5185\u90e8\u8282\u70b9\u8fdb\u884c\u901a\u4fe1\uff09\uff09<br \/>\n<strong><br \/>\n4. Symmetric NAT<\/strong>\uff1a\u8fd9\u662f\u4e00\u79cd\u6bd4\u6240\u6709Cone NAT\u90fd\u8981\u66f4\u4e3a\u7075\u6d3b\u7684\u8f6c\u6362\u65b9\u5f0f\uff1a<\/p>\n<p><strong>\u5728Cone NAT\u4e2d\uff0c<\/strong>\u5185\u90e8\u4e3b\u673a\u7684\u5185\u90e8Tuple\u4e0e\u5916\u90e8Tuple\u7684\u8f6c\u6362\u6620\u5c04\u5173\u7cfb\u662f\u72ec\u7acb\u4e8e\u5185\u90e8\u4e3b\u673a\u6240\u53d1\u51fa\u7684UDP\u62a5\u6587\u4e2d\u7684\u76ee\u6807\u5730\u5740\u53ca\u7aef\u53e3\u7684\uff0c<strong>\u5373\u4e0e\u76ee\u6807Tuple\u65e0\u5173<\/strong>\uff1b<\/p>\n<p><strong>\u5728Symmetric NAT\u4e2d<\/strong>\uff0c<strong>\u76ee\u6807Tuple<\/strong>\u5219\u6210\u4e3a\u4e86NAT\u8bbe\u5907\u5efa\u7acb\u8f6c\u6362\u5173\u7cfb\u7684\u4e00\u4e2a\u91cd\u8981\u8003\u91cf\uff1a\u53ea\u6709\u6765\u81ea\u4e8e\u540c\u4e00\u4e2a\u5185\u90e8Tuple \u3001\u4e14\u9488\u5bf9\u540c\u4e00\u76ee\u6807Tuple\u7684\u8bf7\u6c42\u624d\u88abNAT\u8f6c\u6362\u81f3\u540c\u4e00\u4e2a\u5916\u90e8Tuple\uff0c\u5426\u5219\u7684\u8bdd\uff0cNAT\u5c06\u4e3a\u4e4b\u5206\u914d\u4e00\u4e2a\u65b0\u7684\u5916\u90e8Tuple\uff1b<\/p>\n<p>\u6253\u4e2a\u6bd4\u65b9\uff0c\u5f53\u5185\u90e8\u4e3b\u673a\u4ee5\u76f8 \u540c\u7684\u5185\u90e8Tuple\u5bf92\u4e2a\u4e0d\u540c\u7684\u76ee\u6807Tuple\u53d1\u9001UDP\u62a5\u6587\u65f6\uff0c\u6b64\u65f6NAT\u5c06\u4f1a\u4e3a\u5185\u90e8\u4e3b\u673a\u5206\u914d\u4e24\u4e2a\u4e0d\u540c\u7684\u5916\u90e8Tuple\uff0c\u5e76\u4e14\u5efa\u7acb\u8d77\u4e24\u4e2a\u4e0d\u540c\u7684\u5185\u3001\u5916\u90e8 Tuple\u8f6c\u6362\u5173\u7cfb\u3002<\/p>\n<p>\u4e0e\u6b64\u540c\u65f6\uff0c\u53ea\u6709\u63a5\u6536\u5230\u4e86\u5185\u90e8\u4e3b\u673a\u6240\u53d1\u9001\u7684\u6570\u636e\u5305\u7684\u5916\u90e8\u4e3b\u673a\u624d\u80fd\u5411\u5185\u90e8\u4e3b\u673a\u8fd4\u56deUDP\u62a5\u6587\uff0c\u8fd9\u91cc\u5bf9\u5916\u90e8\u8fd4\u56de\u62a5\u6587\u6765\u6e90\u7684\u9650\u5236\u662f\u4e0ePort Restricted Cone\u4e00\u81f4\u7684\u3002<\/p>\n<p>\u4e0d\u96be\u770b\u51fa\uff0c\u5982\u679c\u8bf4Full Cone\u662f\u8981\u6c42\u6700\u5bbd\u677eNAT UDP\u8f6c\u6362\u65b9\u5f0f\uff0c\u90a3\u4e48\uff0cSymmetric NAT\u5219\u662f\u8981\u6c42\u6700\u4e25\u683c\u7684NAT\u65b9\u5f0f\uff0c\u5176\u4e0d\u4ec5\u4f53\u73b0\u5728\u8f6c\u6362\u5173\u7cfb\u7684\u5efa\u7acb\u4e0a\uff0c\u800c\u4e14\u8fd8\u4f53\u73b0\u5728\u5bf9\u5916\u90e8\u62a5\u6587\u6765\u6e90\u7684\u9650\u5236\u65b9\u9762\u3002<\/p>\n<p>&nbsp;<\/p>\n<p align=\"left\">P2P\u7684NAT\u7814\u7a76<br \/>\n\u7b2c\u4e00\u90e8\u5206\uff1aNAT\u4ecb\u7ecd<br \/>\n\u7b2c\u4e8c\u90e8\u5206\uff1aNAT\u7c7b\u578b\u68c0\u6d4b<\/p>\n<p align=\"left\"><strong>\u7b2c\u4e00\u90e8\u5206\uff1a NAT\u4ecb\u7ecd<br \/>\n<\/strong>\u5404\u79cd\u4e0d\u540c\u7c7b\u578b\u7684NAT(according to RFC)<br \/>\n<em><strong>Full Cone NAT:<\/strong><br \/>\n<\/em>\u00a0\u00a0 \u5185\u7f51\u4e3b\u673a\u5efa\u7acb\u4e00\u4e2aUDP socket(LocalIP:LocalPort) \u7b2c\u4e00\u6b21\u4f7f\u7528\u8fd9\u4e2asocket\u7ed9\u5916\u90e8\u4e3b\u673a\u53d1\u9001\u6570\u636e\u65f6NAT\u4f1a\u7ed9\u5176\u5206\u914d\u4e00\u4e2a\u516c\u7f51(PublicIP:PublicPort),\u4ee5\u540e\u7528\u8fd9\u4e2asocket\u5411\u5916\u9762\u4efb\u4f55\u4e3b\u673a\u53d1\u9001\u6570\u636e\u90fd\u5c06\u4f7f\u7528\u8fd9\u5bf9(PublicIP:PublicPort)\u3002\u6b64\u5916\uff0c\u4efb\u4f55\u5916\u90e8\u4e3b\u673a\u53ea\u8981\u77e5\u9053\u8fd9\u4e2a(PublicIP:PublicPort)\u5c31\u53ef\u4ee5\u53d1\u9001\u6570\u636e\u7ed9(PublicIP:PublicPort)\uff0c\u5185\u7f51\u7684\u4e3b\u673a\u5c31\u80fd\u6536\u5230\u8fd9\u4e2a\u6570\u636e\u5305<br \/>\n<em><strong>Restricted Cone NAT:<\/strong><br \/>\n<\/em>\u00a0\u00a0 \u5185\u7f51\u4e3b\u673a\u5efa\u7acb\u4e00\u4e2aUDP socket(LocalIP:LocalPort) \u7b2c\u4e00\u6b21\u4f7f\u7528\u8fd9\u4e2asocket\u7ed9\u5916\u90e8\u4e3b\u673a\u53d1\u9001\u6570\u636e\u65f6NAT\u4f1a\u7ed9\u5176\u5206\u914d\u4e00\u4e2a\u516c\u7f51(PublicIP:PublicPort),\u4ee5\u540e\u7528\u8fd9\u4e2asocket\u5411\u5916\u9762\u4efb\u4f55\u4e3b\u673a\u53d1\u9001\u6570\u636e\u90fd\u5c06\u4f7f\u7528\u8fd9\u5bf9(PublicIP:PublicPort)\u3002\u6b64\u5916\uff0c\u5982\u679c\u4efb\u4f55\u5916\u90e8\u4e3b\u673a\u60f3\u8981\u53d1\u9001\u6570\u636e\u7ed9\u8fd9\u4e2a\u5185\u7f51\u4e3b\u673a\uff0c\u53ea\u8981\u77e5\u9053\u8fd9\u4e2a(PublicIP:PublicPort)\u5e76\u4e14\u5185\u7f51\u4e3b\u673a\u4e4b\u524d\u7528\u8fd9\u4e2asocket\u66fe\u5411\u8fd9\u4e2a\u5916\u90e8<strong>\u4e3b\u673aIP<\/strong>\u53d1\u9001\u8fc7\u6570\u636e\u3002\u53ea\u8981\u6ee1\u8db3\u8fd9\u4e24\u4e2a\u6761\u4ef6\uff0c\u8fd9\u4e2a\u5916\u90e8\u4e3b\u673a\u5c31\u53ef\u4ee5\u7528\u81ea\u5df1\u7684(IP,<strong>\u4efb\u4f55\u7aef\u53e3<\/strong>)\u53d1\u9001\u6570\u636e\u7ed9(PublicIP:PublicPort)\uff0c\u5185\u7f51\u7684\u4e3b\u673a\u5c31\u80fd\u6536\u5230\u8fd9\u4e2a\u6570\u636e\u5305<br \/>\n<strong><em>Port Restricted Cone NAT:<br \/>\n<\/em><\/strong>\u00a0\u00a0\u00a0 \u5185\u7f51\u4e3b\u673a\u5efa\u7acb\u4e00\u4e2aUDP socket(LocalIP:LocalPort) \u7b2c\u4e00\u6b21\u4f7f\u7528\u8fd9\u4e2asocket\u7ed9\u5916\u90e8\u4e3b\u673a\u53d1\u9001\u6570\u636e\u65f6NAT\u4f1a\u7ed9\u5176\u5206\u914d\u4e00\u4e2a\u516c\u7f51(PublicIP:PublicPort),\u4ee5\u540e\u7528\u8fd9\u4e2asocket\u5411\u5916\u9762\u4efb\u4f55\u4e3b\u673a\u53d1\u9001\u6570\u636e\u90fd\u5c06\u4f7f\u7528\u8fd9\u5bf9(PublicIP:PublicPort)\u3002\u6b64\u5916\uff0c\u5982\u679c\u4efb\u4f55\u5916\u90e8\u4e3b\u673a\u60f3\u8981\u53d1\u9001\u6570\u636e\u7ed9\u8fd9\u4e2a\u5185\u7f51\u4e3b\u673a\uff0c\u53ea\u8981\u77e5\u9053\u8fd9\u4e2a(PublicIP:PublicPort)\u5e76\u4e14\u5185\u7f51\u4e3b\u673a\u4e4b\u524d\u7528\u8fd9\u4e2asocket\u66fe\u5411\u8fd9\u4e2a<strong>\u5916\u90e8\u4e3b\u673a(IP,Port)<\/strong>\u53d1\u9001\u8fc7\u6570\u636e\u3002\u53ea\u8981\u6ee1\u8db3\u8fd9\u4e24\u4e2a\u6761\u4ef6\uff0c\u8fd9\u4e2a\u5916\u90e8\u4e3b\u673a\u5c31\u53ef\u4ee5\u7528\u81ea\u5df1\u7684(IP,Port)\u53d1\u9001\u6570\u636e\u7ed9(PublicIP:PublicPort)\uff0c\u5185\u7f51\u7684\u4e3b\u673a\u5c31\u80fd\u6536\u5230\u8fd9\u4e2a\u6570\u636e\u5305<br \/>\n<em><strong>Symmetric NAT:<\/strong><br \/>\n<\/em>\u00a0\u00a0\u00a0 \u5185\u7f51\u4e3b\u673a\u5efa\u7acb\u4e00\u4e2aUDP socket(LocalIP,LocalPort),\u5f53\u7528\u8fd9\u4e2asocket\u7b2c\u4e00\u6b21\u53d1\u6570\u636e\u7ed9\u5916\u90e8\u4e3b\u673a1\u65f6,NAT\u4e3a\u5176\u6620\u5c04\u4e00\u4e2a(PublicIP-1,Port-1),\u4ee5\u540e\u5185\u7f51\u4e3b\u673a\u53d1\u9001\u7ed9\u5916\u90e8\u4e3b\u673a1\u7684\u6240\u6709\u6570\u636e\u90fd\u662f\u7528\u8fd9\u4e2a(PublicIP-1,Port-1)\uff1b \u5982\u679c\u5185\u7f51\u4e3b\u673a<strong>\u540c\u65f6\u7528\u8fd9\u4e2asocket\u7ed9\u5916\u90e8\u4e3b\u673a<em>2<\/em>\u53d1\u9001\u6570\u636e<\/strong>\uff0c\u7b2c\u4e00\u6b21\u53d1\u9001\u65f6\uff0cNAT\u4f1a\u4e3a\u5176\u5206\u914d\u4e00\u4e2a(PublicIP-2,Port-2), \u4ee5\u540e\u5185\u7f51\u4e3b\u673a\u53d1\u9001\u7ed9\u5916\u90e8\u4e3b\u673a2\u7684\u6240\u6709\u6570\u636e\u90fd\u662f\u7528\u8fd9\u4e2a(PublicIP-2,Port-2).<\/p>\n<p align=\"left\">\u5982\u679cNAT\u6709\u591a\u4e8e\u4e00\u4e2a\u516c\u7f51IP\uff0c\u5219PublicIP-1\u548cPublicIP-2\u53ef\u80fd\u4e0d\u540c\uff0c\u5982\u679cNAT\u53ea\u6709\u4e00\u4e2a\u516c\u7f51IP,\u5219Port-1\u548cPort-2\u80af\u5b9a\u4e0d\u540c\uff0c\u4e5f\u5c31\u662f\u8bf4\u4e00\u5b9a\u4e0d\u80fd\u662fPublicIP-1\u7b49\u4e8e PublicIP-2\u4e14Port-1\u7b49\u4e8ePort-2\u3002<\/p>\n<p align=\"left\">\u6b64\u5916\uff0c\u5982\u679c\u4efb\u4f55\u5916\u90e8\u4e3b\u673a\u60f3\u8981\u53d1\u9001\u6570\u636e\u7ed9\u8fd9\u4e2a\u5185\u7f51\u4e3b\u673a\uff0c\u90a3\u4e48\u5b83\u9996\u5148\u5e94\u8be5\u6536\u5230\u5185\u7f51\u4e3b\u673a\u53d1\u7ed9\u4ed6\u7684\u6570\u636e\uff0c\u7136\u540e\u624d\u80fd\u5f80\u56de\u53d1\u9001\uff0c\u5426\u5219\u5373\u4f7f\u4ed6\u77e5\u9053\u5185\u7f51\u4e3b\u673a\u7684\u4e00\u4e2a(PublicIP,Port)\u4e5f\u4e0d\u80fd\u53d1\u9001\u6570\u636e\u7ed9\u5185\u7f51\u4e3b\u673a\uff0c<strong>\u8fd9\u79cdNAT\u65e0\u6cd5\u5b9e\u73b0UDP-P2P\u901a\u4fe1<\/strong>\u3002<\/p>\n<p><strong>\u7b2c\u4e8c\u90e8\uff1aNAT\u7c7b\u578b\u68c0\u6d4b<\/strong><\/p>\n<p>\u524d\u63d0\u6761\u4ef6:\u6709\u4e00\u4e2a\u516c\u7f51\u7684Server\u5e76\u4e14\u7ed1\u5b9a\u4e86\u4e24\u4e2a\u516c\u7f51IP(IP-1,IP-2)\u3002\u8fd9\u4e2aServer\u505aUDP\u76d1\u542c(IP-1,Port-1),(IP-2,Port-2)\u5e76\u6839\u636e\u5ba2\u6237\u7aef\u7684\u8981\u6c42\u8fdb\u884c\u5e94\u7b54\u3002<\/p>\n<p><strong>\u7b2c\u4e00\u6b65<\/strong>\uff1a\u68c0\u6d4b\u5ba2\u6237\u7aef\u662f\u5426\u6709\u80fd\u529b\u8fdb\u884cUDP\u901a\u4fe1\u4ee5\u53ca\u5ba2\u6237\u7aef\u662f\u5426\u4f4d\u4e8eNAT\u540e\uff1f<\/p>\n<p>\u5ba2\u6237\u7aef\u5efa\u7acbUDP socket\u7136\u540e\u7528\u8fd9\u4e2asocket\u5411\u670d\u52a1\u5668\u7684(IP-1,Port-1)\u53d1\u9001\u6570\u636e\u5305\u8981\u6c42\u670d\u52a1\u5668\u8fd4\u56de\u5ba2\u6237\u7aef\u7684IP\u548cPort, \u5ba2\u6237\u7aef\u53d1\u9001\u8bf7\u6c42\u540e\u7acb\u5373\u5f00\u59cb\u63a5\u53d7\u6570\u636e\u5305\uff0c\u8981\u8bbe\u5b9asocket Timeout\uff08300ms\uff09\uff0c\u9632\u6b62\u65e0\u9650\u5835\u585e. \u91cd\u590d\u8fd9\u4e2a\u8fc7\u7a0b\u82e5\u5e72\u6b21\u3002\u5982\u679c\u6bcf\u6b21\u90fd\u8d85\u65f6\uff0c\u65e0\u6cd5\u63a5\u53d7\u5230\u670d\u52a1\u5668\u7684\u56de\u5e94\uff0c\u5219\u8bf4\u660e\u5ba2\u6237\u7aef\u65e0\u6cd5\u8fdb\u884cUDP\u901a\u4fe1\uff0c\u53ef\u80fd\u662f\u9632\u706b\u5899\u6216NAT\u963b\u6b62UDP\u901a\u4fe1\uff0c\u8fd9\u6837\u7684\u5ba2\u6237\u7aef\u4e5f\u5c31 \u4e0d\u80fdP2P\u4e86\uff08\u68c0\u6d4b\u505c\u6b62\uff09\u3002<br \/>\n\u5f53\u5ba2\u6237\u7aef\u80fd\u591f\u63a5\u6536\u5230\u670d\u52a1\u5668\u7684\u56de\u5e94\u65f6\uff0c\u9700\u8981\u628a\u670d\u52a1\u5668\u8fd4\u56de\u7684\u5ba2\u6237\u7aef\uff08IP,Port\uff09\u548c\u8fd9\u4e2a\u5ba2\u6237\u7aefsocket\u7684 \uff08LocalIP\uff0cLocalPort\uff09\u6bd4\u8f83\u3002\u5982\u679c\u5b8c\u5168\u76f8\u540c\u5219\u5ba2\u6237\u7aef\u4e0d\u5728NAT\u540e\uff0c\u8fd9\u6837\u7684\u5ba2\u6237\u7aef\u5177\u6709\u516c\u7f51IP\u53ef\u4ee5\u76f4\u63a5\u76d1\u542cUDP\u7aef\u53e3\u63a5\u6536\u6570\u636e\u8fdb\u884c\u901a\u4fe1\uff08\u68c0 \u6d4b\u505c\u6b62\uff09\u3002\u5426\u5219\u5ba2\u6237\u7aef\u5728NAT\u540e\u8981\u505a\u8fdb\u4e00\u6b65\u7684<strong>NAT\u7c7b\u578b<\/strong>\u68c0\u6d4b(\u7ee7\u7eed)\u3002<\/p>\n<p><strong>\u7b2c\u4e8c\u6b65<\/strong>\uff1a\u68c0\u6d4b\u5ba2\u6237\u7aefNAT\u662f\u5426\u662fFull Cone NAT\uff1f<\/p>\n<p>\u5ba2\u6237\u7aef\u5efa\u7acbUDP socket\u7136\u540e\u7528\u8fd9\u4e2asocket\u5411\u670d\u52a1\u5668\u7684(IP-1,Port-1)\u53d1\u9001\u6570\u636e\u5305\u8981\u6c42\u670d\u52a1\u5668\u7528\u53e6\u4e00\u5bf9(IP-2,Port-2)\u54cd\u5e94\u5ba2\u6237\u7aef\u7684\u8bf7\u6c42\u5f80\u56de \u53d1\u4e00\u4e2a\u6570\u636e\u5305,\u5ba2\u6237\u7aef\u53d1\u9001\u8bf7\u6c42\u540e\u7acb\u5373\u5f00\u59cb\u63a5\u53d7\u6570\u636e\u5305\uff0c\u8981\u8bbe\u5b9asocket Timeout\uff08300ms\uff09\uff0c\u9632\u6b62\u65e0\u9650\u5835\u585e. \u91cd\u590d\u8fd9\u4e2a\u8fc7\u7a0b\u82e5\u5e72\u6b21\u3002\u5982\u679c\u6bcf\u6b21\u90fd\u8d85\u65f6\uff0c\u65e0\u6cd5\u63a5\u53d7\u5230\u670d\u52a1\u5668\u7684\u56de\u5e94\uff0c\u5219\u8bf4\u660e\u5ba2\u6237\u7aef\u7684NAT\u4e0d\u662f\u4e00\u4e2aFull Cone NAT\uff0c\u5177\u4f53\u7c7b\u578b\u6709\u5f85\u4e0b\u4e00\u6b65\u68c0\u6d4b(\u7ee7\u7eed)\u3002<\/p>\n<p>\u5982\u679c\u80fd\u591f\u63a5\u53d7\u5230\u670d\u52a1\u5668\u4ece(IP-2,Port-2)\u8fd4\u56de\u7684\u5e94\u7b54UDP\u5305\uff0c\u5219\u8bf4\u660e\u5ba2\u6237\u7aef\u662f\u4e00\u4e2aFull Cone NAT\uff0c\u8fd9\u6837\u7684\u5ba2\u6237\u7aef\u80fd\u591f\u8fdb\u884cUDP-P2P\u901a\u4fe1\uff08\u68c0\u6d4b\u505c\u6b62\uff09\u3002<\/p>\n<p><strong>\u7b2c\u4e09\u6b65\uff1a<\/strong>\u68c0\u6d4b\u5ba2\u6237\u7aefNAT\u662f\u5426\u662fSymmetric NAT\uff1f<\/p>\n<p>\u5ba2\u6237\u7aef\u5efa\u7acbUDP socket\u7136\u540e\u7528\u8fd9\u4e2asocket\u5411\u670d\u52a1\u5668\u7684(IP-1,Port-1)\u53d1\u9001\u6570\u636e\u5305\u8981\u6c42\u670d\u52a1\u5668\u8fd4\u56de\u5ba2\u6237\u7aef\u7684IP\u548cPort, \u5ba2\u6237\u7aef\u53d1\u9001\u8bf7\u6c42\u540e\u7acb\u5373\u5f00\u59cb\u63a5\u53d7\u6570\u636e\u5305\uff0c\u8981\u8bbe\u5b9asocket Timeout\uff08300ms\uff09\uff0c\u9632\u6b62\u65e0\u9650\u5835\u585e. \u91cd\u590d\u8fd9\u4e2a\u8fc7\u7a0b\u76f4\u5230\u6536\u5230\u56de\u5e94\uff08\u4e00\u5b9a\u80fd\u591f\u6536\u5230\uff0c\u56e0\u4e3a\u7b2c\u4e00\u6b65\u4fdd\u8bc1\u4e86\u8fd9\u4e2a\u5ba2\u6237\u7aef\u53ef\u4ee5\u8fdb\u884cUDP\u901a\u4fe1\uff09\u3002<br \/>\n\u7528\u540c\u6837\u7684\u65b9\u6cd5\u7528\u540c\u4e00\u4e2asocket\u5411\u670d\u52a1\u5668\u7684(IP-2,Port-2)\u53d1\u9001\u6570\u636e\u5305\u8981\u6c42\u670d\u52a1\u5668\u8fd4\u56de\u5ba2\u6237\u7aef\u7684IP\u548cPort\u3002<br \/>\n\u6bd4 \u8f83\u4e0a\u9762\u4e24\u4e2a\u8fc7\u7a0b\u4ece\u670d\u52a1\u5668\u8fd4\u56de\u7684\u5ba2\u6237\u7aef(IP,Port),\u5982\u679c\u4e24\u4e2a\u8fc7\u7a0b\u8fd4\u56de\u7684(IP,Port)\u6709\u4e00\u4e2a\u4e0d\u540c\uff08IP\u4e0d\u540c\u6216\u8005port\u4e0d\u540c\uff09\u5219\u8bf4\u660e\u5ba2\u6237\u7aef\u4e3aSymmetric NAT\uff0c<strong>\u8fd9\u6837\u7684\u5ba2\u6237\u7aef\u65e0\u6cd5\u8fdb\u884cUDP-P2P\u901a\u4fe1\uff08\u68c0\u6d4b\u505c\u6b62\uff09<\/strong>\u3002<\/p>\n<p>\u5426\u5219\u662fRestricted Cone NAT\uff0c\u662f\u5426\u4e3aPort Restricted Cone NAT\u6709\u5f85\u68c0\u6d4b(\u7ee7\u7eed)\u3002<\/p>\n<p>&nbsp;<\/p>\n<p><strong>\u7b2c\u56db\u6b65\uff1a<\/strong>\u68c0\u6d4b\u5ba2\u6237\u7aefNAT\u662f\u5426\u662fRestricted Cone NAT\u8fd8\u662fPort Restricted Cone NAT\uff1f<\/p>\n<p>\u5ba2\u6237\u7aef\u5efa\u7acbUDP socket\u7136\u540e\u7528\u8fd9\u4e2asocket\u5411\u670d\u52a1\u5668\u7684(IP-1,Port-1)\u53d1\u9001\u6570\u636e\u5305\u8981\u6c42\u670d\u52a1\u5668\u7528IP-1\u548c\u4e00\u4e2a\u4e0d\u540c\u4e8ePort-1\u7684\u7aef\u53e3\u53d1\u9001\u4e00\u4e2aUDP \u6570\u636e\u5305\u54cd\u5e94\u5ba2\u6237\u7aef, \u5ba2\u6237\u7aef\u53d1\u9001\u8bf7\u6c42\u540e\u7acb\u5373\u5f00\u59cb\u63a5\u53d7\u6570\u636e\u5305\uff0c\u8981\u8bbe\u5b9asocket Timeout\uff08300ms\uff09\uff0c\u9632\u6b62\u65e0\u9650\u5835\u585e. \u91cd\u590d\u8fd9\u4e2a\u8fc7\u7a0b\u82e5\u5e72\u6b21\u3002\u5982\u679c\u6bcf\u6b21\u90fd\u8d85\u65f6\uff0c\u65e0\u6cd5\u63a5\u53d7\u5230\u670d\u52a1\u5668\u7684\u56de\u5e94\uff0c\u5219\u8bf4\u660e\u5ba2\u6237\u7aef\u662f\u4e00\u4e2aPort Restricted Cone NAT\uff0c\u5982\u679c\u80fd\u591f\u6536\u5230\u670d\u52a1\u5668\u7684\u54cd\u5e94\u5219\u8bf4\u660e\u5ba2\u6237\u7aef\u662f\u4e00\u4e2aRestricted Cone NAT\u3002<strong>\u4ee5\u4e0a\u4e24\u79cdNAT\u90fd\u53ef\u4ee5\u8fdb\u884cUDP-P2P\u901a\u4fe1\u3002<\/strong><\/p>\n<p>\u6ce8\uff1a\u4ee5\u4e0a\u68c0\u6d4b\u8fc7\u7a0b\u4e2d\u53ea\u8bf4\u660e\u4e86\u53ef\u5426\u8fdb\u884cUDP-P2P\u7684\u6253\u6d1e\u901a\u4fe1\uff0c\u5177\u4f53\u600e\u4e48\u901a\u4fe1\u4e00\u822c\u8981\u501f\u52a9\u4e8eRendezvous Server\u3002\u53e6\u5916\u5bf9\u4e8eSymmetric NAT\u4e0d\u662f\u8bf4\u5b8c\u5168\u4e0d\u80fd\u8fdb\u884cUDP-P2P\u8fbe\u6d1e\u901a\u4fe1\uff0c\u53ef\u4ee5\u8fdb\u884c\u7aef\u53e3\u9884\u6d4b\u6253\u6d1e\uff0c\u4e0d\u8fc7\u4e0d\u80fd\u4fdd\u8bc1\u6210\u529f\u3002<\/p>\n<p>&nbsp;<\/p>\n<p>=====================<\/p>\n<p>https:\/\/zhuanlan.zhihu.com\/p\/26796476<\/p>\n<h3>1. \u672f\u8bed<\/h3>\n<p>\u9632\u706b\u5899\uff08Firewall\uff09\uff1a \u9632\u706b\u5899\u4e3b\u8981\u9650\u5236\u5185\u7f51\u548c\u516c\u7f51\u7684\u901a\u8baf\uff0c\u901a\u5e38\u4e22\u5f03\u672a\u7ecf\u8bb8\u53ef\u7684\u6570\u636e\u5305\u3002\u9632\u706b\u5899\u4f1a\u68c0\u6d4b(\u4f46\u662f\u4e0d\u4fee\u6539)\u8bd5\u56fe\u8fdb\u5165\u5185\u7f51\u6570\u636e\u5305\u7684IP\u5730\u5740\u548cTCP\/UDP\u7aef\u53e3\u4fe1\u606f\u3002<\/p>\n<p>\u7f51\u7edc\u5730\u5740\u8f6c\u6362\u5668\uff08NAT\uff09\uff1a\u00a0NAT\u4e0d\u6b62\u68c0\u67e5\u8fdb\u5165\u6570\u636e\u5305\u7684\u5934\u90e8\uff0c\u800c\u4e14\u5bf9\u5176\u8fdb\u884c\u4fee\u6539\uff0c\u4ece\u800c\u5b9e\u73b0\u540c\u4e00\u5185\u7f51\u4e2d\u4e0d\u540c\u4e3b\u673a\u5171\u7528\u66f4\u5c11\u7684\u516c\u7f51IP\uff08\u901a\u5e38\u662f\u4e00\u4e2a\uff09\u3002<\/p>\n<p>\u57fa\u672cNAT\uff08Basic NAT\uff09\uff1a \u57fa\u672cNAT\u4f1a\u5c06\u5185\u7f51\u4e3b\u673a\u7684IP\u5730\u5740\u6620\u5c04\u4e3a\u4e00\u4e2a\u516c\u7f51IP\uff0c<strong>\u4e0d\u6539\u53d8\u5176TCP\/UDP\u7aef\u53e3\u53f7<\/strong>\u3002\u57fa\u672cNAT\u901a\u5e38\u53ea\u6709\u5728\u5f53NAT\u6709\u516c\u7f51IP\u6c60\u7684\u65f6\u5019\u624d\u6709\u7528\u3002<\/p>\n<p>\u7f51\u7edc\u5730\u5740-\u7aef\u53e3\u8f6c\u6362\u5668\uff08NAPT\uff09\uff1a \u5230\u76ee\u524d\u4e3a\u6b62\u6700\u5e38\u89c1\u7684\u5373\u4e3a<strong>NAPT<\/strong>\uff0c\u5176<strong>\u68c0\u6d4b\u5e76\u4fee\u6539\u51fa\u5165\u6570\u636e\u5305\u7684IP\u5730\u5740\u548c\u7aef\u53e3\u53f7<\/strong>\uff0c\u4ece\u800c\u5141\u8bb8\u591a\u4e2a\u5185\u7f51\u4e3b\u673a\u540c\u65f6\u5171\u4eab\u4e00\u4e2a\u516c\u7f51IP\u5730\u5740\u3002<\/p>\n<p>\u9525\u5f62NAT\uff08Cone NAT\uff09\uff1a\u00a0\u5728\u5efa\u7acb\u4e86\u4e00\u5bf9\uff08\u516c\u7f51IP\uff0c\u516c\u7f51\u7aef\u53e3\uff09\u548c\uff08\u5185\u7f51IP\uff0c\u5185\u7f51\u7aef\u53e3\uff09\u4e8c\u5143\u7ec4\u7684\u7ed1\u5b9a\u4e4b\u540e\uff0c<strong>Cone NAT\u4f1a\u91cd\u7528\u8fd9\u7ec4\u7ed1\u5b9a\u7528\u4e8e\u63a5\u4e0b\u6765\u8be5\u5e94\u7528\u7a0b\u5e8f\u7684\u6240\u6709\u4f1a\u8bdd\uff08\u540c\u4e00\u5185\u7f51IP\u548c\u7aef\u53e3\uff09<\/strong>\uff0c\u53ea\u8981\u8fd8\u6709\u4e00\u4e2a\u4f1a\u8bdd\u8fd8\u662f\u6fc0\u6d3b\u7684\u3002<\/p>\n<p>\u4f8b\u5982\uff0c\u5047\u8bbe\u5ba2\u6237\u7aefA\u5efa\u7acb\u4e86\u4e24\u4e2a\u8fde\u7eed\u7684\u5bf9\u5916\u4f1a\u8bdd\uff0c\u4ece\u76f8\u540c\u7684\u5185\u90e8\u7aef\u70b9\uff0810.0.0.1:1234\uff09\u5230\u4e24\u4e2a<strong>\u4e0d\u540c\u7684\u5916\u90e8<\/strong>\u670d\u52a1\u7aefS1\u548cS2\u3002<\/p>\n<p>Cone NAT\u53ea\u4e3a\u4e24\u4e2a\u4f1a\u8bdd\u6620\u5c04\u4e86\u4e00\u4e2a\u516c\u7f51\u7aef\u70b9\uff08155.99.25.11:62000\uff09\uff0c \u786e\u4fdd\u5ba2\u6237\u7aef\u7aef\u53e3\u7684\u201c\u8eab\u4efd\u201d\u5728\u5730\u5740\u8f6c\u6362\u7684\u65f6\u5019\u4fdd\u6301\u4e0d\u53d8\u3002\u7531\u4e8e\u57fa\u672cNAT\u548c\u9632\u706b\u5899\u90fd\u4e0d\u6539\u53d8\u6570\u636e\u5305\u7684\u7aef\u53e3\u53f7\uff0c\u56e0\u6b64\u8fd9\u4e9b\u7c7b\u578b\u7684\u4e2d\u95f4\u4ef6\u4e5f\u53ef\u4ee5\u770b\u4f5c\u662f\u9000\u5316\u7684Cone NAT\u3002<\/p>\n<p>&nbsp;<\/p>\n<div class=\"highlight\">\n<pre class=\"eye-protector-processed\"><code class=\"language-text eye-protector-processed\">    Server S1                                     Server S2\r\n18.181.0.31:1235                              138.76.29.7:1235\r\n       |                                             |\r\n       |                                             |\r\n       +----------------------+----------------------+\r\n                              |\r\n  ^  Session 1 (A-S1)  ^      |      ^  Session 2 (A-S2)  ^\r\n  |  18.181.0.31:1235  |      |      |  138.76.29.7:1235  |\r\n  <strong>v 155.99.25.11:62000 v      |      v 155.99.25.11:62000 v<\/strong>\r\n                              |\r\n                           Cone NAT\r\n                         155.99.25.11\r\n                              |\r\n  ^  Session 1 (A-S1)  ^      |      ^  Session 2 (A-S2)  ^\r\n  |  18.181.0.31:1235  |      |      |  138.76.29.7:1235  |\r\n  v   10.0.0.1:1234    v      |      v   10.0.0.1:1234    v\r\n                              |\r\n                           Client A\r\n                        10.0.0.1:1234\r\n<\/code><\/pre>\n<\/div>\n<p>\u5176\u4e2dCone NAT\u6839\u636eNAT\u5982\u4f55\u63a5\u6536\u5df2\u7ecf\u5efa\u7acb\u7684\uff08\u516c\u7f51IP\uff0c\u516c\u7f51\u7aef\u53e3\uff09\u5bf9\u7684\u8f93\u5165\u6570\u636e\u8fd8\u53ef\u4ee5\u7ec6\u5206\u4e3a\u4ee5\u4e0b\u4e09\u7c7b\uff1a<\/p>\n<ul>\n<li>1) \u5168\u9525\u5f62NAT\uff08Full Cone NAT\uff09 \u5728\u4e00\u4e2a\u65b0\u4f1a\u8bdd\u5efa\u7acb\u4e86\u516c\u7f51\/\u5185\u7f51\u7aef\u53e3\u7ed1\u5b9a\u4e4b\u540e\uff0c\u5168\u9525\u5f62NAT\u63a5\u4e0b\u6765\u4f1a\u63a5\u53d7\u5bf9\u5e94\u516c\u7f51\u7aef\u53e3\u7684\u6240\u6709\u6570\u636e\uff0c\u65e0\u8bba\u662f\u6765\u81ea\u54ea\u4e2a\uff08\u516c\u7f51\uff09\u7ec8\u7aef\u3002 \u5168\u9525NAT\u6709\u65f6\u5019\u4e5f\u88ab\u79f0\u4e3a\u201c\u6df7\u6742\u201dNAT\uff08promiscuous NAT\uff09\u3002<\/li>\n<\/ul>\n<ul>\n<li>2) \u53d7\u9650\u9525\u5f62NAT\uff08Restricted Cone NAT\uff09 \u53d7\u9650\u9525\u5f62NAT\u53ea\u4f1a\u8f6c\u53d1\u7b26\u5408\u67d0\u4e2a\u6761\u4ef6\u7684\u8f93\u5165\u6570\u636e\u5305\u3002\u6761\u4ef6\u4e3a\uff1a\u5916\u90e8\uff08\u6e90\uff09IP\u5730\u5740\u5339\u914d\u5185\u7f51\u4e3b\u673a\u4e4b\u524d\u53d1\u9001\u4e00\u4e2a\u6216\u591a\u4e2a\u6570\u636e\u5305\u7684\u7ed3\u70b9\u7684IP\u5730\u5740\u3002 AT\u901a\u8fc7\u9650\u5236\u8f93\u5165\u6570\u636e\u5305\u4e3a\u4e00\u7ec4\u201c\u5df2\u77e5\u7684\u201d\u5916\u90e8IP\u5730\u5740\uff0c\u6709\u6548\u5730\u7cbe\u7b80\u4e86\u9632\u706b\u5899\u7684\u89c4\u5219\u3002<\/li>\n<\/ul>\n<ul>\n<li>3) \u7aef\u53e3\u53d7\u9650\u9525\u5f62NAT\uff08Port-Restricted Cone NAT\uff09 \u7aef\u53e3\u53d7\u9650\u9525\u5f62NAT\u4e5f\u7c7b\u4f3c\uff0c\u53ea\u5f53\u5916\u90e8\u6570\u636e\u5305\u7684IP\u5730\u5740\u548c\u7aef\u53e3\u53f7\u90fd\u5339\u914d\u5185\u7f51\u4e3b\u673a\u53d1\u9001\u8fc7\u7684\u5730\u5740\u548c\u7aef\u53e3\u53f7\u65f6\u624d\u8fdb\u884c\u8f6c\u53d1\u3002 \u7aef\u53e3\u53d7\u9650\u9525\u5f62NAT\u4e3a\u5185\u90e8\u7ed3\u70b9\u63d0\u4f9b\u4e86\u548c\u5bf9\u79f0NAT\u76f8\u540c\u7b49\u7ea7\u7684\u4fdd\u62a4\uff0c\u4ee5\u9694\u79bb\u672a\u5173\u8054\u7684\u6570\u636e\u3002<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>\u4e0a\u97623\u79cd\u7c7b\u578b\uff0c\u7edf\u79f0\u4e3aCone NAT\uff0c\u6709\u4e00\u4e2a\u5171\u540c\u70b9\uff1a\u53ea\u8981\u662f\u4ece<strong>\u540c\u4e00\u4e2a<\/strong>\u5185\u90e8\u5730\u5740\u548c\u7aef\u53e3\u51fa\u6765\u7684\u5305\uff0cNAT\u90fd\u5c06\u5b83\u8f6c\u6362\u6210<strong>\u540c\u4e00\u4e2a<\/strong>\u5916\u90e8\u5730\u5740\u548c\u7aef\u53e3\u3002<\/p>\n<p>\u4f46\u662fSymmetric\u6709\u70b9\u4e0d\u540c\uff0c\u5177\u4f53\u8868\u73b0\u5728\uff1a \u53ea\u8981\u662f\u4ece<strong>\u540c\u4e00\u4e2a<\/strong>\u5185\u90e8\u5730\u5740\u548c\u7aef\u53e3\u51fa\u6765\uff0c\u4e14\u5230<strong>\u540c\u4e00\u4e2a<\/strong>\u5916\u90e8\u76ee\u6807\u5730\u5740\u548c\u7aef\u53e3\uff0c\u5219NAT\u4e5f\u90fd\u5c06\u5b83\u8f6c\u6362\u6210<strong>\u540c\u4e00\u4e2a<\/strong>\u5916\u90e8\u5730\u5740\u548c\u7aef\u53e3\u3002<\/p>\n<p>\u4f46\u5982\u679c\u4ece\u540c\u4e00\u4e2a\u5185\u90e8\u5730\u5740\u548c\u7aef\u53e3\u51fa\u6765\uff0c\u662f \u5230\u53e6\u4e00\u4e2a\u5916\u90e8\u76ee\u6807\u5730\u5740\u548c\u7aef\u53e3\uff0c\u5219NAT\u5c06\u4f7f\u7528\u4e0d\u540c\u7684\u6620\u5c04\uff0c\u8f6c\u6362\u6210\u4e0d\u540c\u7684\u7aef\u53e3\uff08\u5916\u90e8\u5730\u5740\u53ea\u6709\u4e00\u4e2a\uff0c\u6545\u4e0d\u53d8\uff09\u3002<\/p>\n<p>\u800c\u4e14\u548cPort Restricted Cone\u4e00\u6837\uff0c\u53ea\u6709\u66fe\u7ecf\u6536\u5230\u8fc7\u5185\u90e8\u5730\u5740\u53d1\u6765\u5305\u7684\u5916\u90e8\u5730\u5740\uff0c\u624d\u80fd\u901a\u8fc7NAT\u6620\u5c04\u540e\u7684\u5730\u5740\u5411\u8be5\u5185\u90e8\u5730\u5740\u53d1\u5305\u3002<\/p>\n<p>\u5bf9\u79f0NAT\uff08Symmetric NAT\uff09: \u5bf9\u79f0NAT\u6b63\u597d\u76f8\u53cd\uff0c\u4e0d\u5728\u6240\u6709\u516c\u7f51-\u5185\u7f51\u5bf9\u7684\u4f1a\u8bdd\u4e2d\u7ef4\u6301\u4e00\u4e2a\u56fa\u5b9a\u7684\u7aef\u53e3\u7ed1\u5b9a\u3002\u5176<strong>\u4e3a\u6bcf\u4e2a\u65b0\u7684\u4f1a\u8bdd\u5f00\u8f9f\u4e00\u4e2a\u65b0\u7684\u7aef\u53e3<\/strong>\u3002\u5982\u4e0b\u56fe\u6240\u793a\uff1a<\/p>\n<p>&nbsp;<\/p>\n<div class=\"highlight\">\n<pre class=\"eye-protector-processed\"><code class=\"language-text eye-protector-processed\">   Server S1                                     Server S2\r\n18.181.0.31:1235                              138.76.29.7:1235\r\n       |                                             |\r\n       |                                             |\r\n       +----------------------+----------------------+\r\n                              |\r\n  ^  Session 1 (A-S1)  ^      |      ^  Session 2 (A-S2)  ^\r\n  |  18.181.0.31:1235  |      |      |  138.76.29.7:1235  |\r\n  v 155.99.25.11<strong>:62000<\/strong> v      |      v 155.99.25.11:<strong>62001<\/strong> v\r\n                              |\r\n                         Symmetric NAT\r\n                         155.99.25.11\r\n                              |\r\n  ^  Session 1 (A-S1)  ^      |      ^  Session 2 (A-S2)  ^\r\n  |  18.181.0.31:1235  |      |      |  138.76.29.7:1235  |\r\n  v   10.0.0.1:1234    v      |      v   10.0.0.1:1234    v\r\n                              |\r\n                           Client A\r\n                        10.0.0.1:1234\r\n<\/code><\/pre>\n<\/div>\n<h3><\/h3>\n<h3><\/h3>\n<h3>2. P2P\u901a\u4fe1<\/h3>\n<p>\u6839\u636e\u5ba2\u6237\u7aef\u7684\u4e0d\u540c\uff0c\u5ba2\u6237\u7aef\u4e4b\u95f4\u8fdb\u884cP2P\u4f20\u8f93\u7684\u65b9\u6cd5\u4e5f\u7565\u6709\u4e0d\u540c\uff0c\u8fd9\u91cc\u4ecb\u7ecd\u4e86\u73b0\u6709\u7684\u7a7f\u8d8a\u4e2d\u95f4\u4ef6\u8fdb\u884cP2P\u901a\u4fe1\u7684\u51e0\u79cd\u6280\u672f\u3002<\/p>\n<h4>2.1 \u4e2d\u7ee7\uff08Relaying\uff09<\/h4>\n<p>\u8fd9\u662f\u6700\u53ef\u9760\u4f46\u4e5f\u662f\u6700\u4f4e\u6548\u7684\u4e00\u79cdP2P\u901a\u4fe1\u5b9e\u73b0\u3002\u5176\u539f\u7406\u662f\u901a\u8fc7\u4e00\u4e2a\u6709\u516c\u7f51IP\u7684\u670d\u52a1\u5668\u4e2d\u95f4\u4eba\u5bf9\u4e24\u4e2a\u5185\u7f51\u5ba2\u6237\u7aef\u7684\u901a\u4fe1\u6570\u636e\u8fdb\u884c\u4e2d\u7ee7\u548c\u8f6c\u53d1\u3002\u5982\u4e0b\u56fe\u6240\u793a\uff1a<\/p>\n<p>&nbsp;<\/p>\n<div class=\"highlight\">\n<pre class=\"eye-protector-processed\"><code class=\"language-text eye-protector-processed\">                       Server S\r\n                          |\r\n                          |\r\n   +----------------------+----------------------+\r\n   |                                             |\r\n NAT A                                         NAT B\r\n   |                                             |\r\n   |                                             |\r\nClient A                                      Client B\r\n<\/code><\/pre>\n<\/div>\n<p>\u5ba2\u6237\u7aefA\u548c\u5ba2\u6237\u7aefB\u4e0d\u76f4\u63a5\u901a\u4fe1\uff0c\u800c\u662f\u5148\u90fd\u4e0e\u670d\u52a1\u7aefS\u5efa\u7acb\u94fe\u63a5\uff0c\u7136\u540e\u518d\u901a\u8fc7S\u548c\u5bf9\u65b9\u5efa\u7acb\u7684\u901a\u8def\u6765\u4e2d\u7ee7\u4f20\u9012\u7684\u6570\u636e\u3002\u8fd9\u949f\u65b9\u6cd5\u7684\u7f3a\u9677\u5f88\u660e\u663e\uff0c \u5f53\u94fe\u63a5\u7684\u5ba2\u6237\u7aef\u53d8\u591a\u4e4b\u540e\uff0c\u4f1a\u663e\u8457\u589e\u52a0\u670d\u52a1\u5668\u7684\u8d1f\u62c5\uff0c\u5b8c\u5168\u6ca1\u4f53\u73b0\u51faP2P\u7684\u4f18\u52bf\u3002\u4f46\u8fd9\u79cd\u65b9\u6cd5\u7684\u597d\u5904\u662f\u80fd\u4fdd\u8bc1\u6210\u529f\uff0c\u56e0\u6b64\u5728\u5b9e\u8df5\u4e2d\u4e5f\u5e38\u4f5c\u4e3a\u4e00\u79cd\u5907\u9009\u65b9\u6848\u3002<\/p>\n<h4>2.2 \u9006\u5411\u94fe\u63a5\uff08Connection reversal\uff09<\/h4>\n<p>\u7b2c\u4e8c\u79cd\u65b9\u6cd5\u5728\u5f53\u4e24\u4e2a\u7aef\u70b9\u4e2d\u6709\u4e00\u4e2a\u4e0d\u5b58\u5728\u4e2d\u95f4\u4ef6\u7684\u65f6\u5019\u6709\u6548\u3002\u4f8b\u5982\uff0c\u5ba2\u6237\u7aefA\u5728NAT\u4e4b\u540e\u800c\u5ba2\u6237\u7aefB\u62e5\u6709\u5168\u5c40IP\u5730\u5740\uff0c\u5982\u4e0b\u56fe\uff1a<\/p>\n<p>&nbsp;<\/p>\n<div class=\"highlight\">\n<pre class=\"eye-protector-processed\"><code class=\"language-text eye-protector-processed\">                            Server S\r\n                        18.181.0.31:1235\r\n                               |\r\n                               |\r\n        +----------------------+----------------------+\r\n        |                                             |\r\n      NAT A                                           |\r\n155.99.25.11:62000                                    |\r\n        |                                             |\r\n        |                                             |\r\n     Client A                                      Client B\r\n  10.0.0.1:1234                               138.76.29.7:1234\u3000\r\n<\/code><\/pre>\n<\/div>\n<p>\u5ba2\u6237\u7aefA\u5185\u7f51\u5730\u5740\u4e3a10.0.0.1\uff0c\u4e14\u5e94\u7528\u7a0b\u5e8f\u6b63\u5728\u4f7f\u7528TCP\u7aef\u53e31234\u3002A\u548c\u670d\u52a1\u5668S\u5efa\u7acb\u4e86\u4e00\u4e2a\u94fe\u63a5\uff0c\u670d\u52a1\u5668\u7684IP\u5730\u5740\u4e3a18.181.0.31\uff0c\u76d1\u542c1235\u7aef\u53e3\u3002NAT A\u7ed9\u5ba2\u6237\u7aefA\u5206\u914d\u4e86TCP\u7aef\u53e362000\uff0c\u5730\u5740\u4e3aNAT\u7684\u516c\u7f51IP\u5730\u5740155.99.25.11\uff0c \u4f5c\u4e3a\u5ba2\u6237\u7aefA\u5bf9\u5916\u5f53\u524d\u4f1a\u8bdd\u7684\u4e34\u65f6IP\u548c\u7aef\u53e3\u3002\u56e0\u6b64S\u8ba4\u4e3a\u5ba2\u6237\u7aefA\u5c31\u662f155.99.25.11:62000\u3002\u800cB\u7531\u4e8e\u6709\u516c\u7f51\u5730\u5740\uff0c\u6240\u4ee5\u5bf9S\u6765\u8bf4B\u5c31\u662f138.76.29.7:1234\u3002<\/p>\n<p>\u5f53\u5ba2\u6237\u7aefB\u60f3\u8981\u53d1\u8d77\u4e00\u4e2a\u5bf9\u5ba2\u6237\u7aefA\u7684P2P\u94fe\u63a5\u65f6\uff0c\u8981\u4e48\u94fe\u63a5A\u7684\u5916\u7f51\u5730\u5740155.99.25.11:62000\uff0c\u8981\u4e48\u94fe\u63a5A\u7684\u5185\u7f51\u5730\u574010.0.0.1:1234\uff0c\u7136\u800c\u4e24\u79cd\u65b9\u5f0f\u94fe\u63a5\u90fd\u4f1a\u5931\u8d25\u3002<\/p>\n<p>\u94fe\u63a510.0.0.1:1234\u5931\u8d25\u81ea\u4e0d\u7528\u8bf4\uff0c\u4e3a\u4ec0\u4e48\u94fe\u63a5155.99.25.11:62000\u4e5f\u4f1a\u5931\u8d25\u5462\uff1f\u6765\u81eaB\u7684TCP SYN\u63e1\u624b\u8bf7\u6c42\u5230\u8fbeNAT A\u7684\u65f6\u5019\u4f1a\u88ab\u62d2\u7edd\uff0c\u56e0\u4e3a\u5bf9NAT A\u6765\u8bf4\u53ea\u6709\u5916\u51fa\u7684\u94fe\u63a5\u624d\u662f\u5141\u8bb8\u7684\u3002<\/p>\n<p>\u5728\u76f4\u63a5\u94fe\u63a5A\u5931\u8d25\u4e4b\u540e\uff0cB\u53ef\u4ee5\u901a\u8fc7S\u5411A\u4e2d\u7ee7\u4e00\u4e2a\u94fe\u63a5\u8bf7\u6c42\uff0c\u4ece\u800c\u4eceA\u65b9\u5411\u201c\u9006\u5411\u201c\u5730\u5efa\u7acb\u8d77A-B\u4e4b\u95f4\u7684\u70b9\u5bf9\u70b9\u94fe\u63a5\u3002<\/p>\n<p>\u5f88\u591a\u5f53\u524d\u7684P2P\u7cfb\u7edf\u90fd\u5b9e\u73b0\u4e86\u8fd9\u79cd\u6280\u672f\uff0c\u4f46\u5176\u5c40\u9650\u6027\u4e5f\u662f\u5f88\u660e\u663e\u7684\uff0c\u53ea\u6709\u5f53\u5176\u4e2d\u4e00\u65b9\u6709\u516c\u7f51IP\u65f6\u94fe\u63a5\u624d\u80fd\u5efa\u7acb\u3002\u8d8a\u6765\u8d8a\u591a\u7684\u60c5\u51b5\u4e0b\uff0c \u901a\u4fe1\u7684\u53cc\u65b9\u90fd\u5728NAT\u4e4b\u540e\uff0c\u56e0\u6b64\u5c31\u8981\u7528\u5230\u6211\u4eec\u4e0b\u9762\u4ecb\u7ecd\u7684\u7b2c\u4e09\u79cd\u6280\u672f\u4e86\u3002<\/p>\n<p>&nbsp;<\/p>\n<h4>2.3 UDP\u6253\u6d1e\uff08UDP hole punching\uff09<\/h4>\n<p>\u7b2c\u4e09\u79cdP2P\u901a\u4fe1\u6280\u672f\uff0c\u88ab\u5e7f\u6cdb\u91c7\u7528\u7684\uff0c\u540d\u4e3a\u201cP2P\u6253\u6d1e\u201c\u3002P2P\u6253\u6d1e\u6280\u672f\u4f9d\u8d56\u4e8e\u901a\u5e38\u9632\u706b\u5899\u548ccone NAT\u5141\u8bb8\u6b63\u5f53\u7684P2P\u5e94\u7528\u7a0b\u5e8f\u5728\u4e2d\u95f4\u4ef6\u4e2d\u6253\u6d1e\u4e14\u4e0e\u5bf9\u65b9\u5efa\u7acb\u76f4\u63a5\u94fe\u63a5\u7684\u7279\u6027\u3002 \u4ee5\u4e0b\u4e3b\u8981\u8003\u8651\u4e24\u79cd\u5e38\u89c1\u7684\u573a\u666f\uff0c\u4ee5\u53ca\u5e94\u7528\u7a0b\u5e8f\u5982\u4f55\u8bbe\u8ba1\u53bb\u5b8c\u7f8e\u5730\u5904\u7406\u8fd9\u4e9b\u60c5\u51b5\u3002\u7b2c\u4e00\u79cd\u573a\u666f\u4ee3\u8868\u4e86\u5927\u591a\u6570\u60c5\u51b5\uff0c\u5373\u4e24\u4e2a\u9700\u8981\u76f4\u63a5\u94fe\u63a5\u7684\u5ba2\u6237\u7aef\u5904\u5728\u4e24\u4e2a\u4e0d\u540c\u7684NAT \u4e4b\u540e\uff1b\u7b2c\u4e8c\u79cd\u573a\u666f\u662f\u4e24\u4e2a\u5ba2\u6237\u7aef\u5728\u540c\u4e00\u4e2aNAT\u4e4b\u540e\uff0c\u4f46\u5ba2\u6237\u7aef\u81ea\u5df1\u5e76\u4e0d\u9700\u8981\u77e5\u9053\u3002<\/p>\n<p>2.3.1. \u7aef\u70b9\u5728\u4e0d\u540c\u7684NAT\u4e4b\u540e<\/p>\n<p>\u5047\u8bbe\u5ba2\u6237\u7aefA\u548c\u5ba2\u6237\u7aefB\u7684\u5730\u5740\u90fd\u662f\u5185\u7f51\u5730\u5740\uff0c\u4e14\u5728\u4e0d\u540c\u7684NAT\u540e\u9762\u3002A\u3001B\u4e0a\u8fd0\u884c\u7684P2P\u5e94\u7528\u7a0b\u5e8f\u548c\u670d\u52a1\u5668S\u90fd\u4f7f\u7528\u4e86UDP\u7aef\u53e31234\uff0cA\u548cB\u5206\u522b\u521d\u59cb\u5316\u4e86 \u4e0eServer\u7684UDP\u901a\u4fe1\uff0c\u5730\u5740\u6620\u5c04\u5982\u56fe\u6240\u793a:<\/p>\n<p>&nbsp;<\/p>\n<div class=\"highlight\">\n<pre class=\"eye-protector-processed\"><code class=\"language-text eye-protector-processed\">                            Server S\r\n                        18.181.0.31:1234\r\n                               |\r\n                               |\r\n        +----------------------+----------------------+\r\n        |                                             |\r\n      NAT A                                         NAT B\r\n155.99.25.11:62000                            138.76.29.7:31000\r\n        |                                             |\r\n        |                                             |\r\n     Client A                                      Client B\r\n  10.0.0.1:1234                                 10.1.1.3:1234\r\n<\/code><\/pre>\n<\/div>\n<p>\u73b0\u5728\u5047\u8bbe\u5ba2\u6237\u7aefA\u6253\u7b97\u4e0e\u5ba2\u6237\u7aefB\u76f4\u63a5\u5efa\u7acb\u4e00\u4e2aUDP\u901a\u4fe1\u4f1a\u8bdd\u3002\u5982\u679cA\u76f4\u63a5\u7ed9B\u7684\u516c\u7f51\u5730\u5740138.76.29.7:31000\u53d1\u9001UDP\u6570\u636e\uff0cNAT B\u5c06\u5f88\u53ef\u80fd\u4f1a\u65e0\u89c6\u8fdb\u5165\u7684 \u6570\u636e\uff08\u9664\u975e\u662fFull Cone NAT\uff09\uff0c\u56e0\u4e3a\u6e90\u5730\u5740\u548c\u7aef\u53e3\u4e0eS\u4e0d\u5339\u914d\uff0c\u800c\u6700\u521d\u53ea\u4e0eS\u5efa\u7acb\u8fc7\u4f1a\u8bdd\u3002B\u5f80A\u76f4\u63a5\u53d1\u4fe1\u606f\u4e5f\u7c7b\u4f3c\u3002<\/p>\n<p>\u5047\u8bbeA\u5f00\u59cb\u7ed9B\u7684\u516c\u7f51\u5730\u5740\u53d1\u9001UDP\u6570\u636e\u7684\u540c\u65f6\uff0c\u7ed9\u670d\u52a1\u5668S\u53d1\u9001\u4e00\u4e2a\u4e2d\u7ee7\u8bf7\u6c42\uff0c\u8981\u6c42B\u5f00\u59cb\u7ed9A\u7684\u516c\u7f51\u5730\u5740\u53d1\u9001UDP\u4fe1\u606f\u3002A\u5f80B\u7684\u8f93\u51fa\u4fe1\u606f\u4f1a\u5bfc\u81f4NAT A\u6253\u5f00 \u4e00\u4e2aA\u7684\u5185\u7f51\u5730\u5740\u4e0e\u4e0eB\u7684\u5916\u7f51\u5730\u5740\u4e4b\u95f4\u7684\u65b0\u901a\u8baf\u4f1a\u8bdd\uff0cB\u5f80A\u4ea6\u7136\u3002\u4e00\u65e6\u65b0\u7684UDP\u4f1a\u8bdd\u5728\u4e24\u4e2a\u65b9\u5411\u90fd\u6253\u5f00\u4e4b\u540e\uff0c\u5ba2\u6237\u7aefA\u548c\u5ba2\u6237\u7aefB\u5c31\u80fd\u76f4\u63a5\u901a\u8baf\uff0c \u800c\u65e0\u987b\u518d\u901a\u8fc7\u5f15\u5bfc\u670d\u52a1\u5668S\u4e86\u3002<\/p>\n<p>UDP\u6253\u6d1e\u6280\u672f\u6709\u8bb8\u591a\u6709\u7528\u7684\u6027\u8d28\u3002<strong>\u4e00\u65e6\u4e00\u4e2a\u7684P2P\u94fe\u63a5\u5efa\u7acb\uff0c\u94fe\u63a5\u7684\u53cc\u65b9\u90fd\u80fd\u53cd\u8fc7\u6765\u4f5c\u4e3a\u201c\u5f15\u5bfc\u670d\u52a1\u5668\u201d\u6765\u5e2e\u52a9\u5176\u4ed6\u4e2d\u95f4\u4ef6\u540e\u7684\u5ba2\u6237\u7aef\u8fdb\u884c\u6253\u6d1e\uff0c \u6781\u5927\u51cf\u5c11\u4e86\u670d\u52a1\u5668\u7684\u8d1f\u8f7d<\/strong>\u3002\u5e94\u7528\u7a0b\u5e8f\u4e0d\u9700\u8981\u77e5\u9053\u4e2d\u95f4\u4ef6\u5177\u4f53\u662f\u4ec0\u4e48\uff08\u5982\u679c\u6709\u7684\u8bdd\uff09\uff0c\u56e0\u4e3a\u4ee5\u4e0a\u7684\u8fc7\u7a0b\u5728\u6ca1\u6709\u4e2d\u95f4\u4ef6\u6216\u8005\u6709\u591a\u4e2a\u4e2d\u95f4\u4ef6\u7684\u60c5\u51b5\u4e0b \u4e5f\u4e00\u6837\u80fd\u5efa\u7acb\u901a\u4fe1\u94fe\u8def\u3002<\/p>\n<p>2.3.2. \u7aef\u70b9\u5728\u76f8\u540c\u7684NAT\u4e4b\u540e<\/p>\n<p>\u73b0\u5728\u8003\u8651\u8fd9\u6837\u4e00\u79cd\u60c5\u666f\uff0c\u4e24\u4e2a\u5ba2\u6237\u7aefA\u548cB\u6b63\u597d\u5728\u540c\u4e00\u4e2aNAT\u4e4b\u540e\uff08\u800c\u4e14\u53ef\u80fd\u4ed6\u4eec\u81ea\u5df1\u5e76\u4e0d\u77e5\u9053\uff09\uff0c\u56e0\u6b64\u5728\u540c\u4e00\u4e2a\u5185\u7f51\u7f51\u6bb5\u4e4b\u5185\u3002 \u5ba2\u6237\u7aefA\u548c\u670d\u52a1\u5668S\u5efa\u7acb\u4e86\u4e00\u4e2aUDP\u4f1a\u8bdd\uff0cNAT\u4e3a\u6b64\u5206\u914d\u4e86\u516c\u7f51\u7aef\u53e362000\uff0cB\u540c\u6837\u548cS\u5efa\u7acb\u4f1a\u8bdd\uff0c\u5206\u914d\u5230\u4e86\u7aef\u53e362001\uff0c\u5982\u4e0b\u56fe\uff1a<\/p>\n<p>&nbsp;<\/p>\n<div class=\"highlight\">\n<pre class=\"eye-protector-processed\"><code class=\"language-text eye-protector-processed\">                          Server S\r\n                      18.181.0.31:1234\r\n                             |\r\n                             |\r\n                            NAT\r\n                   A-S 155.99.25.11:62000\r\n                   B-S 155.99.25.11:62001\r\n                             |\r\n      +----------------------+----------------------+\r\n      |                                             |\r\n   Client A                                      Client B\r\n10.0.0.1:1234                                 10.1.1.3:1234\r\n<\/code><\/pre>\n<\/div>\n<p>\u5047\u8bbeA\u548cB\u4f7f\u7528\u4e86\u4e0a\u8282\u4ecb\u7ecd\u7684UDP\u6253\u6d1e\u6280\u672f\u6765\u5efa\u7acbP2P\u901a\u8def\uff0c\u90a3\u4e48\u4f1a\u53d1\u751f\u4ec0\u4e48\u5462\uff1f\u9996\u5148A\u548cB\u4f1a\u5f97\u5230\u7531S\u89c2\u6d4b\u5230\u7684\u5bf9\u65b9\u7684\u516c\u7f51IP\u548c\u7aef\u53e3\u53f7\uff0c\u7136\u540e\u7ed9\u5bf9\u65b9\u7684\u5730\u5740\u53d1\u9001\u4fe1\u606f\u3002\u00a0\u4e24\u4e2a\u5ba2\u6237\u7aef\u53ea\u6709\u5728NAT\u5141\u8bb8\u5185\u7f51\u4e3b\u673a\u5bf9\u5185\u7f51\u5176\u4ed6\u4e3b\u673a\u53d1\u8d77UDP\u4f1a\u8bdd\u7684\u65f6\u5019\u624d\u80fd\u6b63\u5e38\u901a\u4fe1\uff0c\u6211\u4eec\u628a\u8fd9\u79cd\u60c5\u51b5\u79f0\u4e4b\u4e3a\u201d<strong>\u56de\u73af\u4f20\u8f93\u201c(lookback translation)<\/strong>\uff0c\u56e0\u4e3a\u4ece\u5185\u90e8 \u5230\u8fbeNAT\u7684\u6570\u636e\u4f1a\u88ab\u201c\u56de\u9001\u201d\u5230\u5185\u7f51\u4e2d\u800c\u4e0d\u662f\u8f6c\u53d1\u5230\u5916\u7f51\u3002\u4f8b\u5982\uff0c\u5f53A\u53d1\u9001\u4e00\u4e2aUDP\u6570\u636e\u5305\u7ed9B\u7684\u516c\u7f51\u5730\u5740\u65f6\uff0c\u6570\u636e\u5305\u6700\u521d\u6709\u6e90IP\u5730\u5740\u548c\u7aef\u53e3\u5730\u574010.0.0.1:1234\u548c \u76ee\u7684\u5730\u5740155.99.25.11:62001\uff0cNAT\u6536\u5230\u5305\u540e\uff0c\u5c06\u5176\u8f6c\u6362\u4e3a\u6e90155.99.25.11:62000\uff08A\u7684\u516c\u7f51\u5730\u5740\uff09\u548c\u76ee\u768410.1.1.3:1234\uff0c\u7136\u540e\u518d\u8f6c\u53d1\u7ed9B\u3002\u5373\u4fbfNAT\u652f\u6301 \u56de\u73af\u4f20\u8f93\uff0c\u8fd9\u79cd\u8f6c\u6362\u548c\u8f6c\u53d1\u5728\u6b64\u60c5\u51b5\u4e0b\u4e5f\u662f\u6ca1\u5fc5\u8981\u7684\uff0c\u4e14\u6709\u53ef\u80fd\u4f1a\u589e\u52a0A\u4e0eB\u7684\u5bf9\u8bdd\u5ef6\u65f6\u548c\u52a0\u91cdNAT\u7684\u8d1f\u62c5\u3002<\/p>\n<p>\u5bf9\u4e8e\u8fd9\u4e2a\u60c5\u51b5\uff0c\u4f18\u5316\u65b9\u6848\u662f\u5f88\u76f4\u89c2\u7684\u3002\u5f53A\u548cB\u6700\u521d\u901a\u8fc7S\u4ea4\u6362\u5730\u5740\u4fe1\u606f\u65f6\uff0c\u4ed6\u4eec\u5e94\u8be5\u5305\u542b\u81ea\u8eab\u7684IP\u5730\u5740\u548c\u7aef\u53e3\u53f7\uff08\u4ece\u81ea\u5df1\u770b\uff09\uff0c\u540c\u65f6\u4e5f\u5305\u542b\u4ece\u670d\u52a1\u5668\u770b\u7684\u81ea\u5df1\u7684 \u5730\u5740\u548c\u7aef\u53e3\u53f7\u3002\u7136\u540e\u5ba2\u6237\u7aef\u540c\u65f6\u5f00\u59cb\u4ece\u5bf9\u65b9\u5df2\u77e5\u7684\u4e24\u4e2a\u7684\u5730\u5740\u4e2d\u540c\u65f6\u5f00\u59cb\u4e92\u76f8\u53d1\u9001\u6570\u636e\uff0c\u5e76\u4f7f\u7528\u7b2c\u4e00\u4e2a\u6210\u529f\u901a\u4fe1\u7684\u5730\u5740\u4f5c\u4e3a\u5bf9\u65b9\u5730\u5740\u3002\u5982\u679c\u4e24\u4e2a\u5ba2\u6237\u7aef\u5728\u540c\u4e00\u4e2a NAT\u540e\uff0c\u53d1\u9001\u5230\u5bf9\u65b9\u5185\u7f51\u5730\u5740\u7684\u6570\u636e\u6700\u6709\u53ef\u80fd\u5148\u5230\u8fbe\uff0c\u4ece\u800c\u53ef\u4ee5\u5efa\u7acb\u4e00\u6761\u4e0d\u7ecf\u8fc7NAT\u7684\u901a\u4fe1\u94fe\u8def\uff1b\u5982\u679c\u4e24\u4e2a\u5ba2\u6237\u7aef\u5728\u4e0d\u540c\u7684NAT\u4e4b\u540e\uff0c\u53d1\u9001\u7ed9\u5bf9\u65b9\u5185\u7f51\u5730\u5740\u7684\u6570\u636e\u5305 \u6839\u672c\u5c31\u5230\u8fbe\u4e0d\u4e86\u5bf9\u65b9\uff0c\u4f46\u4ecd\u7136\u53ef\u4ee5\u901a\u8fc7\u516c\u7f51\u5730\u5740\u6765\u5efa\u7acb\u901a\u8def\u3002\u503c\u5f97\u4e00\u63d0\u7684\u662f\uff0c\u867d\u7136\u8fd9\u4e9b\u6570\u636e\u5305\u901a\u8fc7\u67d0\u79cd\u65b9\u5f0f\u9a8c\u8bc1\uff0c\u4f46\u662f\u5728\u4e0d\u540cNAT\u7684\u60c5\u51b5\u4e0b\u5b8c\u5168\u6709\u53ef\u80fd\u4f1a\u5bfc\u81f4A\u5f80B \u53d1\u9001\u7684\u4fe1\u606f\u53d1\u9001\u5230\u5176\u4ed6A\u5185\u7f51\u7f51\u6bb5\u4e2d\u65e0\u5173\u7684\u7ed3\u70b9\u4e0a\u53bb\u7684\u3002<\/p>\n<p>2.3.3. \u7aef\u70b9\u5728\u591a\u7ea7NAT\u4e4b\u540e<\/p>\n<p>\u5728\u4e00\u4e9b\u62d3\u6734\u7ed3\u6784\u4e2d\uff0c\u53ef\u80fd\u4f1a\u5b58\u5728\u591a\u7ea7NAT\u8bbe\u5907\uff0c\u5728\u8fd9\u79cd\u60c5\u51b5\u4e0b\uff0c\u5982\u679c\u6ca1\u6709\u5173\u4e8e\u62d3\u6734\u7684\u5177\u4f53\u4fe1\u606f\uff0c \u4e24\u4e2aPeer\u8981\u5efa\u7acb\u201c\u6700\u4f18\u201d\u7684P2P\u94fe\u63a5\u662f\u4e0d\u53ef\u80fd\u7684\uff0c\u4e0b\u9762\u6765\u8bf4\u4e3a\u4ec0\u4e48\u3002\u4ee5\u4e0b\u56fe\u4e3a\u4f8b\uff1a<\/p>\n<p>&nbsp;<\/p>\n<div class=\"highlight\">\n<pre class=\"eye-protector-processed\"><code class=\"language-text eye-protector-processed\">                            Server S\r\n                        18.181.0.31:1234\r\n                               |\r\n                               |\r\n                             NAT X\r\n                     A-S 155.99.25.11:62000\r\n                     B-S 155.99.25.11:62001\r\n                               |\r\n                               |\r\n        +----------------------+----------------------+\r\n        |                                             |\r\n      NAT A                                         NAT B\r\n192.168.1.1:30000                             192.168.1.2:31000\r\n        |                                             |\r\n        |                                             |\r\n     Client A                                      Client B\r\n  10.0.0.1:1234                                 10.1.1.3:1234\r\n<\/code><\/pre>\n<\/div>\n<p>\u5047\u8bbeNAT X\u662f\u4e00\u4e2a\u7f51\u7edc\u63d0\u4f9b\u5546ISP\u90e8\u7f72\u7684\u5de5\u4e1a\u7ea7NAT\uff0c\u5176\u4e0b\u5b50\u7f51\u5171\u7528\u4e00\u4e2a\u516c\u7f51\u5730\u5740155.99.25.11\uff0cNAT A\u548cNAT B\u5206\u522b\u662f\u5176\u4e0b\u4e0d\u540c\u7528\u6237\u7684\u7f51\u5173\u90e8\u7f72\u7684NAT\u3002\u53ea\u6709\u670d\u52a1\u5668S \u548cNAT X\u6709\u5168\u5c40\u7684\u8def\u7531\u5730\u5740\u3002Client A\u5728NAT A\u7684\u5b50\u7f51\u4e2d\uff0c\u540c\u65f6Client B\u5728NAT B\u7684\u5b50\u7f51\u4e2d\uff0c\u6bcf\u7ecf\u8fc7\u4e00\u7ea7NAT\u90fd\u8981\u8fdb\u884c\u4e00\u6b21\u7f51\u7edc\u5730\u5740\u8f6c\u6362\u3002<\/p>\n<p>\u73b0\u5728\u5047\u8bbeA\u548cB\u6253\u7b97\u5efa\u7acb\u76f4\u63a5P2P\u94fe\u63a5\uff0c\u7528\u4e00\u822c\u7684\u65b9\u6cd5\uff08\u901a\u8fc7Server S\u6765\u6253\u6d1e\uff09\u81ea\u7136\u662f\u6ca1\u95ee\u9898\u7684\uff0c\u90a3\u80fd\u4e0d\u80fd\u4f18\u5316\u5462\uff1f\u4e00\u79cd\u60f3\u5f53\u7136\u7684\u4f18\u5316\u529e\u6cd5\u662fA\u76f4\u63a5\u628a\u4fe1\u606f\u53d1\u9001\u7ed9NAT B\u7684 \u5185\u7f51\u5730\u5740192.168.1.2:31000\uff0c\u4e14B\u901a\u8fc7NAT B\u628a\u4fe1\u606f\u53d1\u9001\u7ed9A\u7684\u8def\u7531\u5730\u5740192.168.1.1:30000\uff0c\u4e0d\u5e78\u7684\u662f\uff0cA\u548cB\u90fd\u6ca1\u6709\u529e\u6cd5\u5f97\u77e5\u8fd9\u4e24\u4e2a\u76ee\u7684\u5730\u5740\uff0c\u56e0\u4e3aS\u53ea\u770b\u89c1\u4e86\u5ba2\u6237\u7aef \u2035\u5168\u5c40\u2035\u5730\u5740155.99.25.11\u3002\u9000\u4e00\u6b65\u8bf4\uff0c\u5373\u4fbfA\u548cB\u901a\u8fc7\u67d0\u79cd\u65b9\u6cd5\u5f97\u77e5\u4e86\u90a3\u4e9b\u5730\u5740\uff0c\u6211\u4eec\u4e5f\u65e0\u6cd5\u4fdd\u8bc1\u4ed6\u4eec\u662f\u53ef\u7528\u7684\u3002\u56e0\u4e3aISP\u5206\u914d\u7684\u5b50\u7f51\u5730\u5740\u53ef\u80fd\u548cNAT A B\u5206\u914d\u7684\u5b50\u7f51\u5730\u5740 \u57df\u76f8\u51b2\u7a81\u3002<strong>\u56e0\u6b64\u5ba2\u6237\u7aef\u6ca1\u6709\u5176\u4ed6\u9009\u62e9\uff0c\u53ea\u80fd\u4f7f\u7528S\u6765\u8fdb\u884c\u6253\u6d1e\u5e76\u8fdb\u884c\u56de\u73af\u4f20\u8f93<\/strong>\u3002<\/p>\n<p>2.3.4. \u56fa\u5b9a\u7aef\u53e3\u7ed1\u5b9a<\/p>\n<p><strong>UDP\u6253\u6d1e\u6280\u672f\u6709\u4e00\u4e2a\u4e3b\u8981\u7684\u6761\u4ef6\uff1a\u53ea\u6709\u5f53\u4e24\u4e2aNAT\u90fd\u662fCone NAT<\/strong>\uff08\u6216\u8005\u975eNAT\u7684\u9632\u706b\u5899\uff09\u65f6\u624d\u80fd\u5de5\u4f5c\u3002\u56e0\u4e3a\u5176\u7ef4\u6301\u4e86\u4e00\u4e2a\u7ed9\u5b9a\u7684\uff08\u5185\u7f51IP\uff0c\u5185\u7f51UDP\uff09\u4e8c\u5143\u7ec4 \u548c\uff08\u516c\u7f51IP\uff0c \u516c\u7f51UDP\uff09\u4e8c\u5143\u7ec4\u56fa\u5b9a\u7684\u7aef\u53e3\u7ed1\u5b9a\uff0c\u53ea\u8981\u8be5UDP\u7aef\u53e3\u8fd8\u5728\u4f7f\u7528\u4e2d\uff0c\u5c31\u4e0d\u4f1a\u53d8\u5316\u3002\u5982\u679c\u50cf\u5bf9\u79f0NAT\u4e00\u6837\uff0c\u7ed9\u6bcf\u4e2a\u65b0\u4f1a\u8bdd\u5206\u914d\u4e00\u4e2a\u65b0\u7684\u516c\u7f51\u7aef\u53e3\uff0c\u5c31 \u4f1a\u5bfc\u81f4UDP\u5e94\u7528\u7a0b\u5e8f\u65e0\u6cd5\u4f7f\u7528\u8ddf\u5916\u90e8\u7aef\u70b9\u5df2\u7ecf\u6253\u901a\u4e86\u7684\u901a\u4fe1\u94fe\u8def\u3002\u7531\u4e8eCone NAT\u662f\u5f53\u4eca\u6700\u5e7f\u6cdb\u4f7f\u7528\u7684\uff0c\u5c3d\u7ba1\u6709\u4e00\u5c0f\u90e8\u5206\u7684\u5bf9\u79f0NAT\u662f\u4e0d\u652f\u6301\u6253\u6d1e\u7684\uff0cUDP\u6253\u6d1e \u6280\u672f\u4e5f\u8fd8\u662f\u88ab\u5e7f\u6cdb\u91c7\u7eb3\u5e94\u7528\u3002<\/p>\n<h3>3.\u5177\u4f53\u5b9e\u73b0<\/h3>\n<p>\u4e00\u822c\u7684\u7f51\u7edc\u7f16\u7a0b\uff0c\u90fd\u662f\u5ba2\u6237\u7aef\u6bd4\u670d\u52a1\u7aef\u8981\u96be\uff0c\u56e0\u4e3a\u8981\u5904\u7406\u4e0e\u670d\u52a1\u5668\u7684\u901a\u4fe1\u540c\u65f6\u8fd8\u8981\u5904\u7406\u6765\u81ea\u7528\u6237\u7684\u4e8b\u4ef6\uff1b\u5bf9\u4e8eP2P\u5ba2\u6237\u7aef\u6765\u8bf4\u66f4\u662f\u5982\u6b64\uff0c\u56e0\u4e3aP2P\u5ba2\u6237\u7aef\u4e0d\u6b62\u4f5c \u4e3a\u5ba2\u6237\u7aef\uff0c\u540c\u65f6\u4e5f\u4f5c\u4e3a\u5bf9\u7b49\u8fde\u63a5\u7684\u670d\u52a1\u5668\u7aef\u3002\u8fd9\u91cc\u7684\u5927\u4f53\u601d\u8def\u662f\uff0c\u8f93\u5165\u547d\u4ee4\u4f20\u8f93\u7ed9\u670d\u52a1\u5668\u4e4b\u540e\uff0c\u63a5\u6536\u6765\u81ea\u670d\u52a1\u5668\u7684\u53cd\u9988\uff0c\u5e76\u6267\u884c\u76f8\u5e94\u4ee3\u7801\u3002\u4f8b\u5982A\u60f3\u8981\u4e0eB\u5efa\u7acb \u901a\u4fe1\u94fe\u8def\uff0c\u5148\u7ed9\u670d\u52a1\u5668\u53d1\u9001punch\u547d\u4ee4\u4ee5\u53ca\u7ed9B\u53d1\u9001\u6570\u636e\uff0c\u670d\u52a1\u5668\u63a5\u5230\u547d\u4ee4\u540e\u7ed9B\u53d1\u9001punch_requst\u4fe1\u606f\u4ee5\u53caA\u7684\u7aef\u70b9\u4fe1\u606f\uff0cB\u6536\u5230\u4e4b\u540e\u5411A\u53d1\u9001\u6570\u636e\u6253\u901a\u901a\u8def\uff0c\u7136 \u540eA\u4e0eB\u5c31\u53ef\u4ee5\u8fdb\u884cP2P\u901a\u4fe1\u4e86\u3002\u7ecf\u6d4b\u8bd5\uff0c\u6253\u901a\u901a\u8def\u540e\u5373\u4fbf\u628a\u670d\u52a1\u5668\u5173\u95ed\uff0cA\u4e0eB\u4e5f\u80fd\u6b63\u5e38\u901a\u4fe1\u3002<\/p>\n<p>\u4e00\u4e2aUDP\u6253\u6d1e\u7684\u4f8b\u5b50\u89c1<a class=\" wrap external eye-protector-processed\" href=\"http:\/\/link.zhihu.com\/?target=https%3A\/\/github.com\/pannzh\/P2P-Over-MiddleBoxes-Demo\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" data-za-detail-view-id=\"1043\">P2P-Over-MiddleBoxes-Demo<\/a><\/p>\n<h1>UPDATE 2016-04-06<\/h1>\n<p>\u5173\u4e8eTCP\u6253\u6d1e\uff0c\u6709\u4e00\u70b9\u9700\u8981\u63d0\u7684\u662f\uff0c\u56e0\u4e3aTCP\u662f\u57fa\u4e8e\u8fde\u63a5\u7684\uff0c\u6240\u4ee5\u4efb\u4f55\u672a\u7ecf\u8fde\u63a5\u800c\u53d1\u9001\u7684\u6570\u636e\u90fd\u4f1a\u88ab\u4e22\u5f03\uff0c\u8fd9\u5bfc\u81f4\u5728recv\u7684\u65f6\u5019\u662f\u65e0\u6cd5\u76f4\u63a5\u4ecepeer\u7aef\u8bfb\u53d6\u6570\u636e\u3002 \u5176\u5b9e\u8fd9\u5bf9UDP\u4e5f\u4e00\u6837\uff0c\u5982\u679c\u5bf9UDP\u7684socket\u8fdb\u884c\u4e86connect\uff0c\u5176\u4e5f\u4f1a\u5ffd\u7565\u8fde\u63a5\u4e4b\u5916\u7684\u6570\u636e\uff0c\u8be6\u89c1connect(2)\u3002<\/p>\n<p>\u6240\u4ee5\uff0c\u5982\u679c\u6211\u4eec\u8981\u8fdb\u884cTCP\u6253\u6d1e\uff0c\u901a\u5e38\u9700\u8981\u91cd\u7528\u672c\u5730\u7684endpoint\u6765\u53d1\u8d77\u65b0\u7684TCP\u8fde\u63a5\uff0c\u8fd9\u6837\u624d\u80fd\u5c06\u5df2\u7ecf\u6253\u5f00\u7684NAT\u5229\u7528\u8d77\u6765\u3002\u5177\u4f53\u6765\u8bf4\uff0c\u5219\u662f\u8981\u8bbe\u7f6esocket\u7684 SO_REUSEADDR\u6216SO_REUSEPORT\u5c5e\u6027\uff0c\u6839\u636e\u7cfb\u7edf\u4e0d\u540c\uff0c\u5176\u5b9e\u73b0\u4e5f\u4e0d\u5c3d\u4e00\u81f4\u3002\u4e00\u822c\u6765\u8bf4\uff0cTCP\u6253\u6d1e\u7684\u6b65\u9aa4\u5982\u4e0b\uff1a<\/p>\n<ul>\n<li>A \u53d1\u9001 SYN \u5230 B \uff08\u51fa\u53e3\u5730\u5740\uff0c\u4e0b\u540c\uff09\uff0c\u4ece\u800c\u521b\u5efaNAT A\u7684\u4e00\u7ec4\u6620\u5c04<\/li>\n<li>B \u53d1\u9001 SYN \u5230 A\uff0c \u521b\u5efaNAT B\u7684\u4e00\u7ec4\u6620\u5c04<\/li>\n<li>\u6839\u636e\u65f6\u5e8f\u4e0d\u540c\uff0c\u4e24\u4e2aSYN\u4e2d\u6709\u4e00\u4e2a\u4f1a\u88ab\u5bf9\u65b9\u7684NAT\u4e22\u5f03\uff0c\u53e6\u4e00\u4e2a\u6210\u529f\u901a\u8fc7NAT<\/li>\n<li>\u901a\u8fc7NAT\u7684SYN\u62a5\u6587\u88ab\u5176\u4e2d\u4e00\u65b9\u6536\u5230\uff0c\u5373\u8fd4\u56deSYNACK\uff0c \u5b8c\u6210\u63e1\u624b<\/li>\n<li>\u81f3\u6b64\uff0cTCP\u7684\u6253\u6d1e\u6210\u529f\uff0c\u83b7\u5f97\u4e00\u4e2a\u4e0d\u4f9d\u8d56\u4e8e\u670d\u52a1\u5668\u7684\u94fe\u63a5<\/li>\n<\/ul>\n<p>\u535a\u5ba2\u5730\u5740:<\/p>\n<p><a class=\" wrap external eye-protector-processed\" href=\"http:\/\/pppan.net\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" data-za-detail-view-id=\"1043\">Pans Labyrinth<\/a><a class=\" external eye-protector-processed\" href=\"http:\/\/pppan.net\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" data-za-detail-view-id=\"1043\"><span class=\"invisible\">http:\/\/<span class=\"visible\">pppan.net\/<\/span><\/span><\/a><a class=\" wrap external eye-protector-processed\" href=\"http:\/\/www.cnblogs.com\/pannengzhi\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" data-za-detail-view-id=\"1043\">\u6709\u4ef7\u503c\u70ae\u7070-\u535a\u5ba2\u56ed<\/a><\/p>\n<!--wp-compress-html no compression--><!--wp-compress-html-->","protected":false},"excerpt":{"rendered":"http:\/\/www.h3c.com.cn\/MiniSite\/Technology_Circle\/Net_Reptile\/The_Five\/Home\/Catalog\/201206\/747042_976 \u00b7\u00b7\u00b7","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[152,149,153],"class_list":["post-680","post","type-post","status-publish","format-standard","hentry","category-jiaocheng","tag-cone","tag-nat","tag-tcp"],"views":435,"_links":{"self":[{"href":"https:\/\/aichh.com\/api\/wp\/v2\/posts\/680","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aichh.com\/api\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aichh.com\/api\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aichh.com\/api\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aichh.com\/api\/wp\/v2\/comments?post=680"}],"version-history":[{"count":3,"href":"https:\/\/aichh.com\/api\/wp\/v2\/posts\/680\/revisions"}],"predecessor-version":[{"id":683,"href":"https:\/\/aichh.com\/api\/wp\/v2\/posts\/680\/revisions\/683"}],"wp:attachment":[{"href":"https:\/\/aichh.com\/api\/wp\/v2\/media?parent=680"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aichh.com\/api\/wp\/v2\/categories?post=680"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aichh.com\/api\/wp\/v2\/tags?post=680"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}