The IP address of a computer should never be known. It should be impossible to ping a computer directly. DNS servers should be the proxy who get requests and fetch data on behalf of a client. They cache and mask DoS attacks. Clients and user-facing machines only communicate with proxies