DNS Home Address Mapping for Server IP Obfuscation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network communication technologies fail to adequately protect server-side addresses from being exposed and exploited by malicious entities, leading to vulnerabilities such as DDOS attacks and privacy breaches.
Innovation Solution
A virtual network service is used in conjunction with DNS to obfuscate server-side addresses by mapping client devices to Home Addresses (HAs) instead of IP addresses, encapsulating packets with actual server IP addresses, and providing load balancing services to ensure secure and efficient communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If destination IP addresses are made visible for routing decisions, then network communication reliability is improved, but server vulnerability to attacks increases
Solution Approach 1:
The patent introduces an intermediary system (proxy server or gateway) between the client and the actual server. This intermediary receives packets with obfuscated destination addresses, resolves them to real server addresses, and forwards the packets. The intermediary acts as a mediator that enables routing decisions while hiding the actual server address from clients and network observers, thus resolving the contradiction between routing reliability and attack protection.
Solution Approach 2:
The patent segments the network communication into multiple layers: client communication layer (using obfuscated Home Addresses), intermediary resolution layer, and actual server layer. By segmenting the address resolution function from the communication protocol, the system can maintain reliable routing through the intermediary while keeping server addresses hidden from the client and network traffic analyzers.
2Loss of information
If client IP addresses are anonymized to protect privacy, then user privacy is improved, but traffic routing accuracy deteriorates
Solution Approach 1:
The patent uses Home Addresses as copies or representations of actual server addresses. Instead of exposing real server IPs directly, the system creates virtual Home Addresses that map to actual servers through a resolution mechanism. This copying approach preserves routing functionality while providing privacy protection, as the copied addresses can be resolved by the intermediary without exposing the original server addresses.
3Object-affected harmful factors
If destination addresses are obfuscated to prevent DDOS attacks, then server security is improved, but packet routing capability deteriorates
Solution Approach 1:
The patent performs preliminary address resolution before packet forwarding. The intermediary server pre-resolves obfuscated Home Addresses to actual server addresses in advance, storing the mapping relationships. When packets arrive with obfuscated addresses, the intermediary can quickly resolve and forward them without complex real-time processing, thus maintaining routing capability while protecting against DDOS attacks.
Data Source
AI summary
Techniques for using Home Addresses, Mobile Internet Protocol (MIP), and/or other techniques in conjunction with Domain Name System (DNS) to obfuscate server-side addresses in data communications. Rather than having DNS provide a client device with an IP address of an endpoint device, such as a server, the DNS instead returns a Home Address that is mapped to the client device and at least one server IP address of the endpoint device. In this way, IP addresses of servers are obfuscated by a network mapping of the Home Addresses and the server IP addresses. The client device may then communicate data packets to the server using the Home Addresses as the destination address, and a virtual network service that works in conjunction with DNS can encapsulate the data packet with the server IP addresses and forward the data packet onto the server.