An IP-layer anonymizing infrastructure

We describe an IP-layer anonymizing infrastructure, called ANON, which allows server addresses to be hidden from clients and vice versa. ANON uses a network resident set Of IP-layer anonymizing forwarders that can forward IP packets with encryption and decryption applied to their source and destination addresses. Using ANON, a client can send and receive packets to and from application servers without knowing their IP addresses. We have designed and implemented a laboratory testbed for this anonymizing infrastructure. This paper gives an overview of the ANON architecture and its implementation, and describes its security threat models and our countermeasures.