Method for policy-driven, classifying, and routing traffic using the domain name system

A system for routing traffic, the system comprising:

• a processor;
• and
• a computer-readable device storing instructions which, when executed by the processor, cause the processor to perform operations comprising:
• instructing a virtual private network (VPN) client to clear any previously resolved domain-name based requests stored in memory;
• receiving, at the VPN client, a domain name-based request to access a network-based service at a client device, wherein the VPN client is forced to operate as a DNS proxy in response to clearing of the any of the previously resolved domain-name based requests stored in the memory;
• forwarding the domain name-based request from the VPN client acting as the DNS proxy to a policy service;
• identifying, by the policy service, a policy for the VPN client of the client device based on receipt of the domain name-based request at the policy service, wherein the policy provides instructions to the VPN client for routing a flow path between the client device and the network-based service;
• generating, by the policy service, routing instructions for the VPN client of the client device based on the instructions provided by the identified policy, wherein the routing instructions include identifying whether to route the flow path from the VPN client over a private network or a public network;
• routing, from the VPN client, the domain name-based request to a domain name system (DNS) to obtain IP addresses associated with the network-based service, wherein the DNS used to resolve the domain name-based request is based on the routing instructions provided by the identified policy, and wherein the IP addresses are stored in a routing table associated with the VPN client;
• and
• establishing the flow path between the client device and the network-based service, wherein the VPN client routes the flow path to the network-based service using the IP addresses stored in the routing table of the VPN client and in accordance with the generated routing instructions.

A computer-readable device storing instructions which, when executed by a computer device, cause the computer device to perform operations comprising:

• instructing a virtual private network (VPN) client to clear any previously resolved domain-name based requests stored in memory;
• receiving, at the VPN client, a domain name-based request to access a network-based service at a client device, wherein the VPN client is forced to operate as a DNS proxy in response to clearing of the any of the previously resolved domain-name based requests stored in the memory;
• forwarding the domain name-based request from the VPN client acting as the DNS proxy to a policy service;
• identifying, by the policy service, a policy for the VPN client of the client device based on receipt of the domain name-based request at the policy serve, wherein the policy provides instructions to the VPN client for routing a flow path between the client device and the network-based service;
• generating, by the policy service, routing instructions for the VPN client of the client device based on the instructions provided by the identified policy, wherein the routing instructions include identifying whether to route the flow path from the VPN client over a private network or a public network;
• routing, from the VPN client, the domain name-based request to a domain name system (DNS) to obtain IP addresses associated with the network-based service, wherein the DNS used to resolve the domain name-based request is based on the routing instructions provided by the identified policy, and wherein the IP addresses are stored in a routing table associated with the VPN client;
• and
• establishing the flow path between the client device and the network-based service, wherein the VPN client routes the flow path to the network-based service using IP addresses stored in the routing table of the VPN client and in accordance with the generated routing instructions.