Request routing processing
AssigneeAmazon Technologies, Inc.
InventorsColm MacCarthaigh, David R. Richardson, Benjamin W.S. Redman
Life of this patent
Estimating the term…
Abstract
Generally described, the present disclosure is directed to managing request routing functionality corresponding to resource requests for one or more resources associated with a content provider. The processing of the DNS requests by the service provider can include the selective filtering of DNS queries associated with a DNS query-based attack. A service provider can assign DNS servers corresponding to a distributed set of network addresses, or portions of network addresses, such that DNS queries exceeding a threshold, such as in DNS query-based attacks, can be filtered in a manner that can mitigate performance impact on for the content provider or service provider.
Claims10
A computer-implemented method for managing DNS queries comprising:
- determining, by a service provider, that DNS queries associated with an identifiable domain exceed a threshold number of DNS queries that can be processed by a service provider;
- and
- causing, by the service provider, filtering of a portion of the DNS queries, wherein the filtering of the portion of the DNS queries is based on selection of a portion of assigned network addresses for a DNS server authoritative for the identified domain, wherein the assigned network addresses for a DNS server authoritative for the identified domain are selected from a divisible range of available service provider network addresses corresponding to a plurality of network address zones.
A system comprising:
- a DNS query processor, at a service provider, coupled to memory and operative to:
- determine that DNS queries associated with an identifiable domain exceed a threshold number of DNS queries that can be processed by a service provider;
- and cause filtering of a portion of the DNS queries, wherein the filtering of the portion of the DNS queries is based on selection of a portion of assigned network addresses for a DNS server authoritative for the identified domain, wherein the assigned network addresses for a DNS server authoritative for the identified domain are selected from a divisible range of available service provider network addresses corresponding to a plurality of network address zones.
Dependencies are inferred from the claim text.