Proxy Encapsulation for Client IP Preservation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In existing communication systems, servers are unable to process packets effectively due to the use of proxy servers, which alter the source IP address in packet headers, preventing direct communication between clients and servers.
Innovation Solution
A relaying system and method using an encapsulation protocol to transmit the client's IP address to the server, where the destination address in packet headers is changed to a server address, allowing the original packet to be reconstructed and transmitted, enabling the server to process the packet correctly.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a proxy server is used to relay communication between client and server, then the client can indirectly connect to the server, but the server cannot obtain the original client IP address information
Solution Approach 1:
The patent embeds the original client packet inside an encapsulation packet with a new header. The inner packet (original client communication) is nested within the outer packet (encapsulation header), allowing the server to receive and process the original packet while the outer header provides routing information through the proxy server
Solution Approach 2:
The proxy server acts as an intermediary by adding an encapsulation header to packets from the client. This header contains the proxy's address for routing purposes, while the inner packet preserves the original client address information, allowing the server to obtain both the routing path and the original sender information
2Ease of operation
If the proxy server changes the source IP address in packet headers, then the proxy can function as a relay, but the server cannot process packets using the original client IP address
Solution Approach 1:
The original packet with the client's source IP address is nested inside an encapsulation packet. The outer encapsulation header contains the proxy server's address for routing, while the inner packet preserves the original client address, allowing the server to access and use the original source IP address for packet processing
Solution Approach 2:
The packet structure is segmented into an outer encapsulation header and an inner original packet. The outer header handles proxy routing functions while the inner packet maintains the original communication context, allowing both proxy relay functionality and original IP address preservation to coexist
3Loss of information
If direct client-server communication is implemented, then the server can process packets using the client IP address, but the proxy server cannot relay the communication
Solution Approach 1:
The solution nests the original client packet inside an encapsulation packet, allowing the proxy server to relay communication while preserving the original client IP address information. The server receives the inner packet with the original address, maintaining direct communication capabilities
Solution Approach 2:
The encapsulation packet structure serves multiple functions: it enables proxy server relay through the outer header while simultaneously preserving the original client-server communication context in the inner packet, making the system adaptable to both relay and direct communication needs
Data Source
Figure 1
Figure 2
Figure 3A
AI summary
A relaying system and method of transmitting an IP address of a client to a server by using an encapsulation protocol are provided. The relaying system includes: a first proxy configured to receive an original packet including the IP address of the client in a header of the original packet attach the original packet to the inside of an encapsulation packet consisting of a header and a payload by using a predetermined encapsulation protocol, and generate a reconstructed packet; and at least one second proxy or bridge router configured to extract the original packet attached to the inside of the encapsulation packet and transmit information about the IP address of the client to the server. According to the relaying system and method, a host server is able to provide services using information in a packet header such as an IP address of a terminal. The presence of a proxy may be not shown to the client and the server. Tunneling communication is enabled between two terminals without any specific changes to a terminal and a host server or installation of a specific program. Furthermore, use of an encapsulation protocol is advantageous for security, and it is possible to quickly find an encapsulation packet.