Masquerade IP Address for ARP Cache Pollution Avoidance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
ARP cache pollution occurs when a computing device with multiple NICs sharing a common IP address initiates a new connection, causing disruption and data loss by overwriting existing IP-to-MAC relationships in other devices' ARP caches, especially in active network connections.
Innovation Solution
Generating a masquerade IP address request, including a unique masquerade MAC address, and obtaining a masquerade IP address from a DHCP server to use in ARP broadcast requests, ensuring the IP-to-MAC relationship is unique and does not overwrite existing entries in ARP caches.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple NICs share a common IP address for load balancing and failover, then network throughput and reliability are improved, but ARP cache pollution occurs causing connection disruptions
Solution Approach 1:
The invention segments the single shared IP address into multiple unique IP addresses, one for each NIC in the team. This allows each NIC to have its own distinct identity in the network, eliminating the ARP cache pollution problem while maintaining load balancing and failover capabilities. Each NIC can now independently establish connections without interfering with others' ARP cache entries.
Solution Approach 2:
The invention changes the IP address parameter from a shared common value to unique individual values for each NIC. By assigning distinct IP addresses to each network interface card in the team, the system resolves the ARP cache pollution issue while preserving the benefits of multi-NIC configurations for throughput and reliability.
2Ease of operation
If a new connection is initiated using conventional ARP broadcast request with shared IP address, then connection establishment is simplified, but existing IP-to-MAC relationships in ARP caches are overwritten causing data loss
Solution Approach 1:
The invention segments the shared IP address into unique IP addresses for each NIC. When a new connection is initiated, the ARP broadcast request uses the specific NIC's unique IP address instead of a shared one, ensuring that the ARP cache updates only affect that specific NIC's entries and do not overwrite or pollute other NICs' connection information.
Solution Approach 2:
The invention introduces a mapping mechanism that acts as an intermediary between the unique NIC IP addresses and the team's logical identity. This mapping table translates between the unique NIC-specific IP addresses used in ARP requests and the team's shared network identity, allowing simplified connection initiation without ARP cache pollution.
3Measurement precision
If ARP cache entries are updated with new IP-to-MAC relationships, then ARP cache remains current, but existing connections are disrupted due to overwriting
Solution Approach 1:
The invention segments the ARP cache updates into NIC-specific entries using unique IP addresses for each NIC. When an ARP broadcast request is sent, only the sending NIC's unique IP address is included in the request, so receiving devices update their ARP caches with NIC-specific entries. This segmentation prevents overwriting of other NICs' connection information while maintaining accurate ARP cache entries for each individual NIC.
Data Source
AI summary
A method for establishing a network connection between two computing devices within the same computer network includes the steps of generating a masquerade IP address request, where the masquerade IP address request includes a masquerade MAC address, transmitting the masquerade IP address request to a DHCP server, and receiving a masquerade IP address from the DHCP server. The masquerade IP address is then used as the sender's IP address in an ARP broadcast request transmitted to set up the network connection. Since the masquerade IP address is unique relative to the computer network, computing devices within the network do no overwrite existing IP-to-MAC relationships in their respective ARP caches with the IP-to-MAC relationship reflected in the ARP broadcast request. Thus, the method enables a network connection to be initiated between two computing devices in the same computer network while avoiding ARP cache pollution on other computing devices in that network.