Dynamic firewall configuration
AssigneeComcast Cable Communications, LLC
InventorAlexander Gurney
Life of this patent
Estimating the term…
Abstract
Disclosed are systems and methods for firewall configuration. A request can be transmitted to a DNS server. A response to the DNS request can include an Internet Protocol (IP) address. A firewall rule can be generated permitting access to the IP address. The firewall rule can be configured to be valid until expiration of a time-to-live value in the response to the DNS request. Thus, firewall rules can be automatically created as needed by executed processes, eliminating the need for manual firewall rule creation. As the firewall rule is invalid after the expiration of the time-to-live value, risks associated with maintaining out-of-date firewall rules are eliminated, as is the requirement to manually remove or modify out-of-date firewall rules.
Claims20
A method comprising:
- receiving a domain name system (DNS) request comprising a uniform resource locator (URL);
- sending, to a DNS server, the DNS request;
- receiving a response to the DNS request, wherein the response comprises an internet protocol (IP) address corresponding to the URL and a time-to-live;
- permitting, based on generating a firewall rule, access to the IP address until the time-to-live expires;
- and
- sending, to a source of the DNS request, the response.
A method comprising:
- receiving, by a proxy service executed on a user device, a domain name system (DNS) request;
- sending, to a DNS server via a firewall service, the DNS request;
- receiving, from the DNS server, a response to the DNS request;
- and
- sending, to the firewall service, instructions to generate a rule permitting access to an internet protocol (IP) address until a time-to-live indicated in the response.
A method comprising:
- receiving, by a firewall service, from a user device, a domain name system (DNS) request comprising a uniform resource locator (URL);
- sending, to a DNS server, the DNS request;
- receiving, from the DNS server, a response to the DNS request, wherein the response comprises an internet protocol (IP) address corresponding to the URL and a time-to-live period for a DNS entry associated with the IP address and the URL;
- sending, to the user device, the response;
- and
- generating a firewall rule permitting access to the IP address until an expiration of the time-to-live period.
Dependencies are inferred from the claim text.