Fabric-based anonymity management, systems and methods
Based on a hidden service address table stored in a memory, a virtual circuit related to a hidden service is mapped to a corresponding port-level channel based on the hidden service's address. Data associated with the hidden service is routed between the virtual circuit and the port-level channel. This enables binding of high level anonymity protocols to low level communication services of a network fabric and ensures that other nodes in the network fabric can leverage fabric-hosted hidden services without requiring updates to an existing anonymity protocol.
1. A method of routing packets associated with a hidden service, comprising:
based on a hidden service address table stored in a memory, mapping a virtual circuit related to the hidden service to a corresponding port-level channel based on the hidden service's address; and
routing data associated with the hidden service between the virtual circuit and the port-level channel.
2. The method recited in claim 1 , wherein mapping is configured to enable binding of high level anonymity protocols to low level communication services of a network fabric.
3. The method recited in claim 1 , wherein mapping and routing are configured to ensure other nodes in the network fabric can leverage fabric-hosted hidden services without requiring updates to an existing anonymity protocol.
4. The method recited in claim 1 , wherein each virtual circuit employs an anonymity protocol comprising at least one of an onion routing algorithm and a telescoping path algorithm.
5. The method recited in claim 1 , wherein the port-level channel connects to a distributed network interface of an external hidden service.
6. The method recited in claim 1 , wherein routing employs a cut-through routing path operating at a port channel level.
7. The method recited in claim 1 , configured to operate on at least one of a plurality of network fabric devices in an instantiated network fabric configured to operate as an intermediary node of the virtual circuit.
8. The method recited in claim 1 , wherein a single virtual circuit comprises multiple network paths.
9. The method recited in claim 1 , further comprising migrating protocol functionality from a first network fabric device to at least one other network fabric device.
10. A method, comprising:
providing for maintaining a hidden service address table in a memory that stores virtual circuit end-points that include a hidden service address and a port-level channel;
providing for maintaining a port-forwarding table in memory; and
routing network traffic among the plurality of ports according to the port forwarding table by:
mapping a virtual circuit related to a hidden service to the port-level channel of a first port of a plurality of ports according to the hidden service address table and the hidden service's address; and
routing data associated with the hidden service between the virtual circuit and the port-level channel.
11. The method recited in claim 10 , wherein the port-level channel comprises an encrypted channel.
12. The method recited in claim 10 , wherein the hidden service address comprises a network address and public key pair.
13. The method recited in claim 10 , wherein the port-level channel comprises at least one of a specified wavelength on at least one optic fiber of the first port and a MAC address of at least one Ethernet port of the first port.
14. The method recited in claim 10 , further comprising providing for updating the hidden service address table.
15. The method recited in claim 10 , wherein the hidden service is hosted on the port-level channel.
16. The method recited in claim 10 , wherein the port-level channel comprises a distributed network interface of the hidden service.
17. The method recited in claim 10 , wherein the hidden service address table comprises a distributed hash table.
18. The method recited in claim 10 , further comprising employing cryptography to secure the data between the virtual circuit and the port-level channel.
19. The method recited in claim 10 , wherein the cryptographic module encrypts the data flowing from the virtual circuit to the port-level channel.
20. The method recited in claim 10 , further comprising migrating protocol functionality from a first network fabric device to at least one other network fabric device.
21. The method recited in claim 10 , wherein the virtual circuit employs an anonymity protocol comprising at least one of an onion routing algorithm and a telescoping path algorithm.
22. The method recited in claim 10 , wherein the port-level channel connects to a distributed network interface of an external hidden service.
23. The method recited in claim 10 , wherein routing employs a cut-through routing path operating at a port channel level.
24. The method recited in claim 10 , configured to operate on at least one of a plurality of network fabric devices in an instantiated network fabric configured to operate as an intermediary node of the virtual circuit.
25. The method recited in claim 10 , wherein a single virtual circuit comprises multiple network paths.