Extended internet protocol network address translation system

Apparatus for transferring data between a private network and a public network, comprising:

• a plurality of network links, coupled to convey data packets between the private and public networks;
• and
• an extended-multilink-manager, adapted to:
• associate each of the plurality of network links with a respective unique public-network-address,
• receive sessions generated within the private network, each of the sessions comprising one or more of the data packets,
• allocate to each of the sessions an extended-private-address comprising a private-network-address and private-port-number, the private network being adapted to transfer each of the data packets comprised in a respective session using at least part of the extended-private-address as an identifying private-network-address,
• translate for each of the sessions the extended-private-address to an extended-public-address comprising a public-network-address and public-port-number, the extended-public-address comprising one of the respective unique public-network-addresses,
• determine for each session a last-active-time representing a most recent time of arrival of the corresponding one or more data packets at a manager in the private network,
• fill for each session an address table with the extended-private-address, the corresponding extended-public address, and the corresponding last-active-time,
• determine that the address table is full of sessions in response to filling the address table,
• identify the session in the address table having the oldest last-active-time, representing the session which has been idle for the longest time, in response to the address table being full of sessions,
• overwrite the session in the address table having the oldest last-active-time with a new session, having a corresponding extended-private-address, a corresponding extended-public address, and a corresponding last-active-time, in response to the address table being full of sessions,
• convey the one or more data packets of each of the sessions between the private network and the public network via the link associated with the public-network-address of the respective session, for transmission within the public network using at least part of the extended-public-address as an identifying public-network-address.