Encrypted overlay network for physical attack resiliency

1. A method, comprising: establishing, at a virtual private network (VPN) server on a trusted network, a first trusted internet protocol (IP) address for a first host computer device of a plurality of host computer devices on a network rack in communication with the trusted network, wherein the first trusted IP address is associated with a physical IP address of the first host computer device; using the first trusted IP address to establish a first VPN tunnel directly between the first host computer device and the VPN server over the physical IP address of the first host computer device; securely transmitting data packets between the first host computer device and the VPN sever using the first VPN tunnel; and establishing a second trusted IP address for a second host computer device of the plurality of host computer devices on the network rack in communication with the trusted network, wherein the second trusted IP address is associated with a physical IP address of the second host computer device, wherein establishing the first trusted IP address and the second trusted IP address further comprises exchanging using a common key received in a broadcast message with a packet encrypted with the common key sent to the physical IP address associated with the first host computer device and to the physical IP address of the second host computer device.

2. The method of claim 1 , further comprising:

using the second trusted IP address to generate a second VPN tunnel directly between the second host computer device and the VPN server over the physical IP address of the second host computer device; and

securely transmitting the data packets between the second host computer device and the VPN server using the second VPN tunnel.

3. The method of claim 1 , further comprising:

using the first trusted IP address and the second trusted IP address to communicate the first VPN tunnel between the first host computer device and the second host computer device over the physical IP address of the first host computer and the physical IP address of the second host computer device;

securely transmitting the data packets between the first host computer device and the VPN sever using the first VPN tunnel; and

securely transmitting the data packets between the second host computer device and the VPN server using the first VPN tunnel.

4. The method of claim 1 , further comprising:

establishing an encrypted communication channel between a first network interface card (NIC) of the first host computer device and a second network interface card (NIC) of the second host computer device using the first trusted IP address and the second trusted IP address; and

securely transmitting the data packets between the first host computer device and the second host computer device using the encrypted communication channel.

5. The method of claim 1 , wherein establishing the first trusted IP address and the second trusted IP address further comprises:

exchanging the common key between the first host computer device, the second host computer device, and the VPN server; or

sending the broadcast message with the encrypted packet with the common key to the physical IP address associated with the first host computer device and the physical address associated with the second host computer device; and

receiving a response to the broadcast message from the first host computer device and the second host computer device.

6. The method of claim 5 , further comprising:

using the common key to encrypt the data packets transmitted via the first VPN tunnel and a second VPN tunnel.

7. The method of claim 5 , further comprising:

using the responses to build a table with an association between the physical IP address of the plurality of host computer devices and a trusted IP address for each of the plurality of host computer devices.

8. The method of claim 1 , further comprising:

receiving a request from a customer to access one of the plurality of host computer devices; and

using a nonencrypted communication channel to communicate between one host computer device of the plurality of host computer devices and the customer.

9. The method of claim 1 , further comprising:

receiving a request from a customer to access one of the plurality of host computer devices; and

using an encrypted communication channel to communicate between one host computer device of the plurality of host computer devices and the customer.

10. A computer device, comprising: at least one memory to store data and instructions; and at least one processor in communication with the at least one memory, wherein the at least one processor is operable to: establish a first trusted internet protocol (IP) address for a first host computer device of a plurality of host computer devices in communication with a trusted network, wherein the first trusted IP address is associated with a physical IP address of the first host computer device; use the first trusted IP address to establish a first VPN tunnel directly between the first host computer device and a VPN server over the physical IP address of the first host computer device; securely transmit data packets between the first host computer device and the VPN sever using the first VPN tunnel; and establish a second trusted IP address for a second host computer device of the plurality of host computer devices in communication with the trusted network, wherein the second trusted IP address is associated with a physical IP address of the second host computer device, wherein establishing the first trusted IP address and the second trusted IP address includes using a common key received in a broadcast message with a packet encrypted with the common key sent to the physical IP address associated with the first host computer device and to the physical IP address of the second host computer device.

11. The computer device of claim 10 , wherein the at least one processor is further operable to:

use the second trusted IP address to generate a second VPN tunnel directly between the second host computer device and the VPN server over the physical IP address of the second host computer device; and

securely transmit the data packets between the second host computer device and the VPN server using the second VPN tunnel.

12. The computer device of claim 10 , wherein the at least one processor is further operable to:

use the first trusted IP address and the second trusted IP address to communicate the first VPN tunnel between the first host computer device and the second host computer device over the physical IP address of the first host computer and the physical IP address of the second host computer device;

securely transmit the data packets between the first host computer device and the VPN sever using the first VPN tunnel; and

securely transmit the data packets between the second host computer device and the VPN server using the first VPN tunnel.

13. The computer device of claim 10 , wherein the at least one processor is further operable to:

establish an encrypted communication channel between a first network interface card (NIC) of the first host computer device and a second network interface card (NIC) of the second host computer device using the first trusted IP address and the second trusted IP address; and

securely transmit the data packets between the first host computer device and the second host computer device using the encrypted communication channel.

14. The computer device of claim 10 , wherein the at least one processor is further operable to establish the first trusted IP address and the second trusted IP address by:

exchanging the common key between the first host computer device, the second host computer device, and the VPN server; or

sending the broadcast message with the encrypted packet with the common key to the physical IP address associated with the first host computer device and the physical address associated with the second host computer device; and

receiving a response to the broadcast message from the first host computer device and the second host computer device.

15. The computer device of claim 14 , wherein the at least one processor is further operable to:

use the common key to encrypt the data packets transmitted via the first VPN tunnel and a second VPN tunnel.

16. The computer device of claim 14 , wherein the at least one processor is further operable to:

use the responses to build a table with an association between the physical IP address of the plurality of host computer devices and a trusted IP address for each of the plurality of host computer devices.

17. The computer device of claim 10 , wherein the at least one processor is further operable to:

receive a request from a customer to access one of the plurality of host computer devices; and

use a nonencrypted or an encrypted communication channel to communicate between one host computer device of the plurality of host computer devices and the customer.

18. A non-transitory computer-readable medium storing instructions executable by a computer device, comprising: at least one instruction for causing the computer device to establish a first trusted internet protocol (IP) address for a first host computer device of a plurality of host computer devices on a network rack in communication with a trusted network, wherein the first trusted IP address is associated with a physical IP address of the first host computer device; at least one instruction for causing the computer device to use the first trusted IP address to establish a first VPN tunnel directly between the first host computer device and a VPN server over the physical IP address of the first host computer device; at least one instruction for causing the computer device to securely transmit data packets between the first host computer device and the VPN sever using the first VPN tunnel; and at least one instruction for causing the computer device to establish a second trusted IP address for a second host computer device of the plurality of host computer devices on the network rack in communication with the trusted network, wherein the second trusted IP address is associated with a physical IP address of the second host computer device, wherein establishing the first trusted IP address and the second trusted IP address includes exchanging using a common key received in a broadcast message with a packet encrypted with the common key sent to the physical IP address associated with the first host computer device and to the physical IP address of the second host computer device.