Traffic identification based on user access authentication and message tag

In order to solve the problem of direct location management of Internet users under the environment of NAT, the unique session ID that represents the user session was put the first option location of the initial session SYN option, and the same session ID was put the additional tail part of the each initial UDP session and the specified UDP tail part, the traffic identification and location management of the Internet users were realized under the environment of NAT through the message tag and user access authentication, the practical application showed that compared with the traditional method, this method not only solved the location management of the Internet users under the NAT, but also greatly reduced the Internet authentication device, network mirror device, network transmission device, network bandwidth and other resources.