[Safety Knowledge] How does the server hide the real IP address?

First of all, the following is what I searched online. The purpose of writing this diary is to record the problem, because today a friend said that doing a foreign trade station can hide the server IP, so I will search for a way. For reference only, if there is a better way, please leave a message, thank you!

This can be achieved

It belongs to the most basic DNS application category

In fact, the URL forwarding used on weekdays is this extension, and the principle is the same.

Generally, large IDC providers will use their own domain names in their DNS for jumping in their own server segments for easy management.

This allows users to modify IP resolution in batches if the server IP address changes. And it helps to increase the traffic of reverse parsing.

In fact, you can simply use URL forwarding to achieve the effect that the PING result you say is different from the actual result.

The price is to sacrifice a little DNS resolution time, but the actual difference is not too big, as long as the DNS is fast enough, it is fine. This method is available in the current domestic environment.

Foreign server communication basically requires PING verification or reverse resolution verification.

In addition, if you have your own DNS, you can also do NS reverse resolution, which is the best way to encrypt IP. The PING result will automatically return an IP you specified.

For example, you can return to 127.0.0.1, which is mainly used on military secret servers. The cost is relatively high.

Large domestic portals, such as Sina and 163, use the cluster rotation method. This means that the results of pings will be varied and uncertain. Look at your local network speed and interface.

But no matter what these methods are, they are all methods that treat the symptoms rather than the root cause. It's useless for experts, you can find out the real IP by doing DNS tracking

The real solution is to improve the security level of your own server.