Back to results
US 10,708,226 B2Granted
Domain name resolution
AssigneeVeriSign, Inc.
InventorsAndrew Cathrow, Stephen Daniel James
Life of this patent
Estimating the term…
Abstract
A method, system, apparatus, and computer-readable memory containing instructions include receiving, at an agent operating on a client device, a (domain name system) DNS resolution request for a domain name. The DNS resolution request is transmitted to a first DNS server including a firewall service and a second DNS server within a local network to the client device. Responses to the DNS resolution request from the first and second DNS server are received. The agent determines how to resolve the DNS resolution request based on one or more of the received responses.
Claims20
A computer-implemented method, comprising:
- receiving, at an agent operating on a client device, a domain name system (DNS) resolution request for a domain name;
- determining, by the agent and based on a DNS service configuration, a network configuration for the client device specified in the DNS service configuration, wherein the client device is included in a first local network that is not protected by a first firewall service;
- determining, by the agent and based on the DNS service configuration, that a first DNS resolution policy is applicable to the DNS resolution request, wherein the first DNS resolution policy specifies that one or more DNS resolution requests, upon reception by the client device when the client device is in the first local network, are to be resolved by:
- a first DNS server that includes the first firewall service, and
- a second DNS server that is included in the first local network;
- transmitting the DNS resolution request from the client device to the first DNS server;
- receiving a first response to the DNS resolution request from the first DNS server;
- transmitting the DNS resolution request from the client device to the second DNS server;
- receiving a second response to the DNS resolution request from the second DNS server;
- and
- upon receiving the first response and the second response, resolving, by the agent, the DNS resolution request using one of the first response or the second response.
8 more elements
An apparatus, comprising:
- at least one processor, implemented at least in part in hardware;
- a memory, storing a set of instructions, which, when executed by the at least one processor, causes the at least one processor to:
- receive, at an agent operating on a client device, a domain name system (DNS) resolution request for a domain name;
- determine, by the agent and based on a DNS service configuration, a network configuration for the client device specified in the DNS service configuration, wherein the client device is included in a first local network that is not protected by a first firewall service;
- determine, by the agent and based on the DNS service configuration, that a first DNS resolution policy is applicable to the DNS resolution request, wherein the first DNS resolution policy specifies that one or more DNS resolution requests, upon reception by the client device when the client device is in a first local network, are to be resolved by:
- a first DNS server that includes the first firewall service, and
- a second DNS server that is included in the first local network;
- transmit the DNS resolution request from the client device to the first DNS server;
- receive a first response to the DNS resolution request from the first DNS server;
- transmit the DNS resolution request from the client device to the second DNS server;
- receive a second response to the DNS resolution request from the second DNS server;
- and
- upon receiving the first response and the second response, resolving, by the agent, the DNS resolution request using one of the first response or the second response.
10 more elements
One or more non-transitory computer-readable media containing instructions, which, when executed by one or more processors, cause the one or more processors to perform steps of:
- receiving, at an agent operating on a client device, a domain name system (DNS) resolution request for a domain name;
- determining, by the agent and based on a DNS service configuration, a network configuration for the client device specified in the DNS service configuration, wherein the client device is included in a first local network that is not protected by a first firewall service;
- determining, by the agent and based on the DNS service configuration, that a first DNS resolution policy is applicable to the DNS resolution request, wherein the first DNS resolution policy specifies that one or more DNS resolution requests, upon reception by the client device when the client device is in the first local network, are to be resolved by:
- a first DNS server that includes the first firewall service, and
- a second DNS server that is included in the first local network;
- transmitting the DNS resolution request from the client device to the first DNS server;
- receiving a first response to the DNS resolution request from the first DNS server;
- transmitting the DNS resolution request from the client device to the second DNS server;
- receiving a second response to the DNS resolution request from the second DNS server;
- and
- upon receiving the first response and the second response, resolving, by the agent, the DNS resolution request using one of the first response or the second response.
8 more elements
Dependencies are inferred from the claim text.