Privacy network system
Disclosed is a system for deploying a secure server that provides one or more network services. Generally stated, a secure server is deployed in a secure environment behind a privacy barrier. The secure server is configured to interact with a service host on a public network outside the privacy barrier. The service host facilitates routing information from the public network through the privacy barrier to the secure server.
1. A privacy system, comprising:
a service host implemented in a public network and having a secure network tunnel server and a domain manager, the secure network tunnel server being configured to receive a request to establish a secure network tunnel from a remote secure network tunnel client and to establish the secure network tunnel, the secure network tunnel having an endpoint at the service host and an origin at the remote secure network tunnel client, the domain manager being configured to create a domain name system (DNS) record that resolves a domain name to a public Internet Protocol (IP) address, the public IP address being associated with the secure network tunnel endpoint; and
a secure server configured for deployment in a private network, the secure server being further configured to request a private IP address on the private network, the secure server further having the remote secure network tunnel client configured to initiate the secure network tunnel with the origin at the secure server,
wherein the secure server is configured to establish the secure network tunnel between the secure server and the service host, and
further wherein the service host is configured to cause traffic on the public network intended for the domain name to be routed to the secure server over the secure network tunnel.
2. The privacy system recited in claim 1 , wherein the secure network tunnel server comprises a Virtual Private Network server.
3. The privacy system recited in claim 1 , wherein the remote secure network tunnel client comprises a Virtual Private Network client.
4. The privacy network recited in claim 1 , wherein the secure network tunnel comprises a Virtual Private Network tunnel.
5. The privacy network recited in claim 1 , wherein the domain manager is configured to create a DNS “A” record that associates the public IP address with the domain name.
6. The privacy network recited in claim 1 , wherein the public network and the private network are separated by a privacy boundary.
7. The privacy network recited in claim 6 , wherein the privacy boundary comprises a gateway that implements Network Address Translation.
8. The privacy network recited in claim 1 , wherein the secure server implements an email service, and wherein the service host is further configured to create an MX record that associates the domain name with the secure server.
9. The privacy network recited in claim 1 , wherein the secure server implements a file synchronization service.
10. The privacy network recited in claim 1 , wherein the domain manager is configured to modify DNS records for the domain name on behalf of a user that has provided authentication credentials.