Systems, methods, media, and means for hiding network topology

摘要

Systems, methods, media, and means for hiding network topology are provided. In some embodiments, methods for hiding network topology are provided, the methods including: receiving a message including topology information from a sender; removing at least part of the topology information; associating the removed topology information with an identifier; saving the topology information; sending the message to a receiver; receiving a response from the receiver; retrieving the removed topology information based on the identifier; inserting the removed topology information into the response; and sending the response to the sender.

主权项

1. A method, comprising: receiving, at an intermediate, a message including topology information from a sender in an internal network, the topology information identifying in the internal network at least two network devices between the sender and the intermediate that the message traveled through, wherein the identification of the at least two network devices defines at least part of a network topology of the internal network, the message addressed to a receiver in an external network;
determining whether to remove all of the topology information in the message or only a part of the topology information in the message based at least in part on at last one of an address of the sender, an address of the intermediate, and a type of the topology information; if the determination is to remove only a part of the topology information, identifying parts of the topology information to remove based at least in part on at least one of the address of the sender, the address of the intermediate, and the type of the topology information; removing, from the message, the identified at least parts of the topology information, identifying the at least two network devices in the internal network such that the message no longer includes the removed topology information or any variations thereof; associating the removed topology information with an identifier; saving the removed topology information; sending the message to the receiver in the external network; receiving a response from the receiver; retrieving the removed topology information based on the identifier; inserting the removed topology information into the response; and sending the response to the sender.