[Security Knowledge]How can a server hide its real ip address?

First of all, the following is what I searched online. The purpose of writing this diary is to record the problem, because today a friend said to do foreign trade station, can hide the server IP, so I came to search for a method. For reference only, if there is a better way, please leave a message, thank you!

This can be realized

belongs to the most basic category of DNS applications

in fact, weekdays with URL forwarding and so on is this extension, the principle is the same.

Generally large IDC providers in order to manage the convenience of their own server segments in their own DNS using their own domain name to do the jump.

This can be realized if the server IP changes, you can batch modify the IP resolution for the user. And it helps to increase the traffic of reverse resolution.

In fact, you can simply use URL forwarding to achieve the effect that you said the PING results and the actual results are not the same.

The price is to sacrifice a little DNS resolution time, but the actual difference will not be too big, as long as the DNS is fast enough, no problem. This approach is available in the current domestic environment.

Foreign server communication basically requires PING verification or reverse resolution verification.

In addition, if you have your own DNS, you can also do NS reverse resolution, which is the best way to encrypt the IP. PING out of the results automatically return to an IP you specify.

for example, you can return to 127.0.0.1 This is mainly used in the military classified servers. The cost is relatively high.

Domestic large portals, such as Sina, 163, etc. is used in a cluster round robin approach. This is the practice of PING out of the results will be a variety of not fixed. Depends on your local network speed and interface.

ut no matter what these methods are a cure for the symptoms and not the root cause of the problem.

For masters are useless, do DNS tracking can find out the real IP

real cure or to improve the security level of your own server.