Supplemental DNAT for communication within overlapping IP address space in a private network

One or more tangible processor-readable storage media embodied with instructions for executing on one or more processors and circuits of a computing device a process for routing data traffic for a private network including a first private subnetwork and a second private subnetwork having conflicting private internet protocol (IP) addresses, the process comprising:

• receiving, at a firewall, a data packet destined to a conflicting private IP address of the first private subnetwork and the second private subnetwork within the private network, the data packet including a destination IP address identifying the firewall;
• evaluating, at the firewall, the data packet to determine whether a source IP address of the data packet satisfies a routing condition corresponding to a routing rule;
• applying, at the firewall, the routing rule to determine a translated destination IP address of the first private subnetwork;
• and
• sending the data packet to the first private subnetwork.

A computing system for routing data traffic for a private network including a first private subnetwork and a second private subnetwork having conflicting private internet protocol (IP) addresses, the computing system comprising:

• one or more hardware processors;
• a communication interface of a firewall executable by the one or more hardware processors and configured to receive a data packet destined to a conflicting private IP address of the first private subnetwork and the second private subnetwork within the private network, the data packet including a destination IP address identifying the computing system;
• a routing rules determiner of the firewall executable by the one or more hardware processors and configured to evaluate the data packet to determine whether a source IP address of the data packet satisfies a routing condition corresponding to a routing rule;
• and
• a routing rules applicator of the firewall executable by the one or more hardware processors and configured to apply the routing rule to determine a translated destination IP address of the first private subnetwork, wherein the communication interface of the firewall is further configured to send the data packet to the first private subnetwork.