I run a gaming website. Players download the client software, install it and run it on their desktops. The software isn't hosted on the main server but I have been told that once the software is running and connected to the server, the IP Address of the latter can be exposed. Is that possible ? If so, How ? And how to "Hide" or "Spoof" it ?
Thank You.
Sure is it exposed. This is by design. Otherwise you could not connect two endpoints. That's the purpose of the Internet Protocol.
And as it is necessary you can't hide or spoof it. Why even should you?
If you've got a client machine that needs to take to some form of server or cluster of servers there's nothing you can do to hide that interface from someone with even the most basic of tools. You can however heavily protect that server with good firewalling.
If you are wanting to avoid hackers you need to set up a good firewall and follow other network security practices. To protect against DDoS attacks either find a large company that has very good DDoS protection on their network, which doesn't guarantee they will not null route your ip anyway, or go with a company that specializes in DDoS protection which costs a lot of money.
There are ways to hide your IP pretty effectively using things like tor hidden services but there are major downsides to doing that. Very poor performance and a limited userbase come to mind. You might end up with a link going around the world a couple times.
If you want further information please specify what you are wanting to protect against.
Who cares if the ip address is exposed? Why do so many people think that an exposed, discoverable ip address or domain name is some kind of security breach?
In addition, if clients couldn't ultimately discover and see your server's ip address then they wouldn't be able to connect to your server to play the game. In fact, the internet as we know it wouldn't work at all if clients couldn't discover the ip address of resources they were trying to connect to (web sites, email servers, etc., etc.).
