Http隧道在穿越NAT/防火墙技术中的应用  

Application of Http Tunnel in Traversal NAT/Firewall

作　　者：韩风[1] 施寅[1] 

机构地区：[1]北京交通大学计算机系,北京100044

出　　处：《计算机技术与发展》2006年第5期163-165,169,共4页Computer Technology and Development

摘　　要：要让私有IP地址的用户通过SIP等协议进行会话,就必须使SIP信令和媒体流穿越NAT/防火墙。STUN,ICE等现有协议只能应用于UDP,不能用在有防火墙限制以及只能TCP连接的环境下。文中在研究了http协议中一些常用的方法,如:Post,然后借鉴并结合了TURN协议的一些控制方法,提出了SIP phone中用http隧道穿越NAT/防火墙的方案,并且详细叙述了SIP phone注册、呼叫过程。该方法在防火墙受限制端口或者UDP连接的网络环境下,使用户仍然可以进行正常通信,弥补了在现实环境中STUN,ICE协议的不足。Only when the control and media flow traverse firewall/NAT, can people use private IP address to make sessions with SIP protocol. STUN, ICE protocol can only be used in UDP, but doesn＇t effect in the firewall restriction or only TCP connection environment. The paper studies some methods of http protocol, consults the TURN protocol then describes using the http tunnel in the traverse firewall/ NAT. A detail instance is also presented in order to explain how to use http tunnel in register and call flow. This way can make user com- municate when this is a firewall restrict the port or UDP connection, meanwhile it makes up the shortcoming of the STUN and ICE.

关 键 词：防火墙 HTTP协议 SIP 中继 NAT 

分 类 号：TN915[电子电信—通信与信息系统]