Systems and methods for communicating between private networks with conflicting internet protocol (IP) addresses
Systems and methods for facilitating communication between multiple private networks with conflicting IP addresses are provided. The system comprises a virtual computing device configured to allocate blocks of shadow IP addresses to first and second private networks. A first bridge device is connected to the first private network and configured to receive a packet from a first host in the first private network. The packet comprises a destination address corresponding to a second host in the second private network. The first bridge device is configured to route the packet to the virtual computing device if the destination address is in a block of shadow IP addresses. A second bridge device is connected to the second private network and configured to receive the packet from the virtual computing device and translate the destination address to a corresponding native IP address.
1. A method for facilitating communication between multiple private networks, the method comprising:
intercepting a domain name service (DNS) request from a first network, wherein the DNS request comprises a domain name and a host name;
redirecting, if the domain name corresponds to a second network, the DNS request to a private domain name server in the second network;
receiving, from the private domain name server, a local IP address corresponding to the host name;
determining if a mode comprises native mode or shadow mode; and
responding to the DNS request with the shadow IP address or the local IP address based on the mode.
2. The method of claim 1 , wherein a default domain name server of the first network corresponds to a public IP address on the Internet, and wherein the DNS request is not forwarded to the default domain name server.
3. The method of claim 1 , further comprising:
generating the shadow IP address using Destination Network Address Translation (DNAT) or Network Mapping (NETMAP).
4. The method of claim 1 , the method further comprising:
allocating a first block of shadow IP addresses for the first network;
allocating a second block of shadow IP addresses for the second network, wherein the first block of shadow IP addresses and the second block of shadow IP addresses do not overlap.
5. The method of claim 1 , further comprising:
establishing routing rules to redirect traffic for the first and second networks based on corresponding network exit points established by the first and second networks.
6. The method of claim 1 , further comprising:
storing a database table of connected domains, wherein each connected domain is associated with a block of native IP addresses or a block of shadow IP addresses.
7. The method of claim 1 , wherein the mode indicates shadow, and the responding further comprises responding with the shadow IP address.
8. A system for facilitating communication between multiple private networks, the system comprising:
one or more data processors;
a computer-readable medium encoded with instructions for commanding the one or more data processors to execute steps of a process, the steps including:
intercepting a domain name service (DNS) request from a first network, wherein the DNS request comprises a domain name and a host name;
redirecting, if the domain name corresponds to a second network, the DNS request to a private domain name server in the second network;
receiving, from the private domain name server, a local IP address corresponding to the host name;
determining if a mode comprises native mode or shadow mode; and
responding to the DNS request with the shadow IP address or the local IP address based on the mode.
9. The system of claim 8 , wherein a default domain name server of the first network corresponds to a public IP address on the Internet, and wherein the DNS request is not forwarded to the default domain name server.
10. The system of claim 8 , wherein the steps further comprise:
Generating the shadow IP address using Destination Network Address Translation (DNAT) or Network Mapping (NETMAP).
11. The system of claim 8 , wherein the steps further comprise:
allocating a first block of shadow IP addresses for the first network;
allocating a second block of shadow IP addresses for the second network, wherein the first block of shadow IP addresses and the second block of shadow IP addresses do not overlap.
12. The system of claim 8 , wherein the steps further comprise:
establishing routing rules to redirect traffic for the first and second networks based on corresponding network exit points established by the first and second networks.
13. The system of claim 8 , wherein the steps further comprise:
storing a database table of connected domains, wherein each connected domain is associated with a block of native IP addresses or a block of shadow IP addresses.
14. The system of claim 8 , wherein the mode indicates shadow, and the responding further comprises responding with the shadow IP address.
15. A non-transitory computer-readable medium encoded with instructions for commanding one or more data processors to execute steps of a method for facilitating communication between multiple private networks the steps comprising:
intercepting a domain name service (DNS) request from a first network, wherein the DNS request comprises a domain name and a host name;
redirecting, if the domain name corresponds to a second network, the DNS request to a private domain name server in the second network;
receiving, from the private domain name server, a local IP address corresponding to the host name;
determining if a mode comprises native mode or shadow mode; and
responding to the DNS request with the shadow IP address or the local IP address based on the mode.
16. The non-transitory computer-readable storage medium of claim 15 , wherein a default domain name server of the first network corresponds to a public IP address on the Internet, and wherein the DNS request is not forwarded to the default domain name server.
17. The non-transitory computer-readable storage medium of claim 15 , wherein the steps further comprise:
generating the shadow IP address using Destination Network Address Translation (DNAT) or Network Mapping (NETMAP).
18. The non-transitory computer-readable storage medium of claim 15 , wherein the steps further comprise:
allocating a first block of shadow IP addresses for the first network;
allocating a second block of shadow IP addresses for the second network, wherein the first block of shadow IP addresses and the second block of shadow IP addresses do not overlap.
19. The non-transitory computer-readable storage medium of claim 15 , wherein the steps further comprise:
establishing routing rules to redirect traffic for the first and second networks based on corresponding network exit points established by the first and second networks.
20. The non-transitory computer-readable storage medium of claim 15 , wherein the steps further comprise:
storing a database table of connected domains, wherein each connected domain is associated with a block of native IP addresses or a block of shadow IP addresses.