VPN Exit IP Switching for Data Transfer During IP Blocking

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

VPN connections can be inefficient when host devices block communication from assigned exit IP addresses, leading to resource wastage and disrupted data transfer due to the need to maintain established connections without data transfer or re-establish new connections.

Innovation Solution

A VPN server dynamically assigns a new exit IP address from a secondary server and modifies DNS settings to route data through itself, ensuring continuous data transfer by bypassing blocked IP addresses.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Stability of the object's composition

If the VPN server maintains an established VPN connection with the user device, then connection stability is improved, but data transfer reliability deteriorates when the exit IP address is blocked

Engineering Contradiction:
Improveconnection stabilityVSAvoiddata transfer reliability
Core Design Contradiction:
Stability of the object's compositionVSReliability

Solution Approach 1:

The VPN server dynamically switches between primary and secondary exit IP addresses based on block detection. When the primary IP is blocked, the system transitions to using the secondary IP without terminating the VPN connection, maintaining connection stability while adapting to changing network conditions to preserve data transfer reliability

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system introduces a secondary exit IP address as an intermediary resource. When the primary exit IP is blocked, the secondary IP serves as a mediator to bypass the block and restore data transfer functionality while keeping the original VPN connection intact

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If the VPN server switches to a new exit IP address from a secondary server, then data transfer reliability is improved, but device complexity increases

Engineering Contradiction:
Improvedata transfer reliabilityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the IP address management function from the core VPN connection logic. The secondary server with its pool of exit IP addresses operates as a separate, independent system that the VPN server can tap into when needed, adding minimal complexity to the main system while providing robust failover capability

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The secondary server acts as an intermediary that handles IP address management and switching. This mediator absorbs the complexity of managing multiple IP addresses and block detection logic, allowing the primary VPN server to remain relatively simple while still achieving high data transfer reliability

Inventive Principle:
Principle #24Intermediary (Mediator)

3Productivity

If the VPN server uses a secondary exit IP address to bypass blocks, then productivity is improved, but loss of time increases due to DNS modification

Engineering Contradiction:
Improvedata transfer efficiencyVSAvoidDNS configuration time
Core Design Contradiction:
ProductivityVSLoss of time

Solution Approach 1:

The system performs preliminary actions by pre-configuring the secondary exit IP address and establishing the secondary server relationship before blocks occur. When blocking is detected, the switch to the secondary IP can happen rapidly because the infrastructure is already in place, minimizing the time loss associated with DNS modifications and configuration changes

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS12425372B2Optimizing communication in a virtual private network during blocking of an exit internet protocol address
Publication Date: 2025.09.23 UAB 360 IT
  • US12425372B2 patent drawing
  • US12425372B2 patent drawing
  • US12425372B2 patent drawing

AI summary

A method including receiving, by a VPN server from a user device during an established VPN connection, a first data request for the VPN server to retrieve first information from a first host device; transmitting, by the VPN server during the established VPN connection, the first information to the user device based on utilizing a first exit IP address to retrieve the first information from the first host device; receiving, by the VPN server from the user device during the established VPN connection, a second data request for the VPN server to retrieve second information from a second host device; and transmitting, by the VPN server during the established VPN connection, the second information to the user device based on utilizing a second exit IP address, associated with a secondary server, to retrieve the second information from the second host device is disclosed. Various other aspects are contemplated.