Request routing processing
AssigneeAmazon Technologies, Inc.
InventorsColm MacCarthaigh, David R. Richardson, Benjamin W. S. Redman
Life of this patent
Estimating the term…
Abstract
Generally described, the present disclosure is directed to managing request routing functionality corresponding to resource requests for one or more resources associated with a content provider. The processing of the DNS requests by the service provider can include the selective filtering of DNS queries associated with a DNS query-based attack. A service provider can assign DNS servers corresponding to a distributed set of network addresses, or portions of network addresses, such that DNS queries exceeding a threshold, such as in DNS query-based attacks, can be filtered in a manner that can mitigate performance impact on for the content provider or service provider.
Claims14
A system comprising:
- a processor, at a service provider, coupled to memory and operative to:
- determine whether DNS queries associated with an identifiable domain exceed a threshold number of DNS queries that can be processed by a service provider;
- determine whether to filter one or more DNS queries based on the threshold number of DNS queries;
- cause the filtering of one or more of the DNS queries, wherein the filtering of one or more of the DNS queries comprises filtering one or more of the DNS queries based on an assigned network address from a range of available service provider network addresses;
- obtain one or more additional DNS queries, the additional DNS queries corresponding to the identifiable domain, wherein the one or more additional DNS queries correspond to a different assigned network address from the range of available service provider network addresses;
- associate the one or more additional DNS queries with the DNS queries associated with the identifiable domain exceeding a threshold number of DNS queries that can be processed by the service provider;
- and
- determine not to filter the one or more additional DNS queries.
A computer-implemented method comprising:
- determining, by a service provider, whether DNS queries associated with an identifiable domain exceed a threshold number of DNS queries that can be processed by a service provider;
- determining, by the service provider, whether to filter one or more DNS queries based on the threshold number of DNS queries;
- causing, by the service provider, the filtering of one or more of the DNS queries, wherein the filtering of one or more of the DNS queries comprises filtering one or more of the DNS queries based on an assigned network address from a range of available service provider network addresses;
- obtaining, by the service provider, one or more additional DNS queries, the additional DNS queries corresponding to the identifiable domain, wherein the one or more additional DNS queries correspond to a different assigned network address from the range of available service provider network addresses;
- associating, by the service provider, the one or more additional DNS queries with the DNS queries associated with the identifiable domain exceeding a threshold number of DNS queries that can be processed by the service provider;
- and
- determining, by the service provider, not to filter the one or more additional DNS queries.
Dependencies are inferred from the claim text.