Abstract: Disclosed here are systems and methods for optimized resource availability. In some variants a proxy gateway is configured among the resource and a source and wherein the proxy gateway announces an IP subnet. The proxy gateway receives an IP packet from the source wherein the proxy gateway provides to the IP packet a selective access to the resource. In some variants a mapping associates (at least) the resource with the IP packet or other network traffic destined to the IP subnet. Alternatively or additionally a hash result may be generated by encrypting or otherwise transforming a secret or a digital identifier of the source (or both) wherein an expression of several bits of the hash result is installed into a temporarily repurposed bit set of the IP packet.

Abstract: A system and method to protect resource servers from DDOS attacks is disclosed. A proxy gateway hides resource server using IP subnet addressing and receives authenticated IP packets. A cryptographic hash is generated, and destination IP packets address/ports are encrypted using a secret, algorithm, client IP address, resource server IP address, and port. The cryptographic hash and destination server are mapped into existing IP packet addresses, ports, or payload bits. The IP packets are routed to a redirect node in the public IP subnet of the proxy gateway. At the redirected node, the cryptographic hash is validated, and the resource server IP address and the port are extracted from mapping. Redirect node maps the clients public IP/port to an internal IP address and port associated with resource server and tunnels the IP packets from the redirect node to the resource server using the internal IP address and port.