idkfa works by creating a two sided proxy. The frontside is public internet facing, and presents a single AP actor. The backside is intranet facing, communicating with a cornucopia of mastohonkoma servers. As activities pass through idkfa it rewrites them to ensure the actor and id fields are consistent. It also handles Follow requests.