# US 11,122,083 B1 · Methods for managing network connections based on DNS data and network policies and devices thereof > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,122,083 B1 - Document ID: US11122083B1 - Status: Granted - Kind: B1 - Application number: 16/125,272 - Filed: 2018-09-07 - Granted: 2021-09-14 - Earliest claimed: 2017-09-08 - Assignees: F5 Networks, Inc. - Applicants: F5 Networks, Inc. - Inventors: Mark Quevedo - Web page: https://patentgrep.com/patent/US11122083B1 ## CPC - H04L 61/2528: {Translation at a proxy} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04L 61/2503: Translation of Internet protocol [IP] addresses - H04L 61/4511: using domain name system [DNS] - H04L 63/0236: {Filtering by address, protocol, port number or service, e.g. IP-address or URL} - H04L 63/101: {Access control lists [ACL]} - H04L 63/102: {Entity profiles} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Methods, non-transitory computer readable media, and network traffic manager apparatus that assists with managing network connections includes obtaining a destination internet protocol (IP) address and a domain name from a received request sent by a client. A determination is made about when the obtained domain name identifies a trusted service and the obtained destination IP address is included in a current host IP address list. The obtained destination IP address is replaced with a new IP address from the current host IP address list when the obtained domain name is determined to be present and the obtained destination IP address is determined to be absent from the current host IP address list. The received request is managed based on one or more network policies, wherein one of the one or more network policies includes providing the client access to the service identified by the obtained domain name hosted at the replaced new IP address. ## Claims ### Claim 1 A method for managing network connections based on DNS data and network policies, the method implemented by a network traffic management system comprising one or more network traffic apparatuses, client devices, or server devices, the method comprising: determining when an obtained domain name identifies a trusted service and an obtained destination IP address is included in a current host IP address list; replacing the obtained destination IP address with a new IP address from the current host IP address list when the obtained domain name is determined to be present and the obtained destination IP address is determined to be absent from the current host IP address list; and managing a received request based on a network policy comprising providing a client access to the trusted service identified by the obtained domain name hosted at the replaced new IP address. ### Claim 2 (depends on 1) The method as set forth in claim 1 further comprising selecting the new IP address from the current host IP address list comprising a plurality of IP addresses. ### Claim 3 (depends on 1) The method as set forth in claim 1 further comprising, declining the client access to the service identified by the obtained domain name when the obtained domain name is not the trusted domain name. ### Claim 4 (depends on 1) The method as set forth in claim 1 further comprising: obtaining the current host IP address list from a DNS server; determining when the obtained current host IP address list is empty; and managing the received request based on another network policy comprising declining the client access to the trusted service identified by the obtained domain name when the obtained current host IP address list is determined to be empty. ### Claim 5 (depends on 1) The method as set forth in claim 1 further comprising, providing the client access to the trusted service identified by the obtained domain name hosted at the obtained destination IP address when the obtained destination IP address is determined to be present in the current host IP address list. ### Claim 6 A non-transitory computer readable medium having stored thereon instructions for managing network connections based on DNS data and network policies comprising executable code which when executed by one or more processors, causes the processors to: determine when an obtained domain name identifies a trusted service and an obtained destination IP address is included in a current host IP address list; replace the obtained destination IP address with a new IP address from the current host IP address list when the obtained domain name is determined to be present and the obtained destination IP address is determined to be absent from the current host IP address list; and manage a received request based on a network policy comprising providing a client access to the trusted service identified by the obtained domain name hosted at the replaced new IP address. ### Claim 7 (depends on 6) The medium as set forth in claim 6 further comprises, select the new IP address from the current host IP address list comprising a plurality of IP addresses. ### Claim 8 (depends on 6) The medium as set forth in claim 6 further comprises, decline the client access to the service identified by the obtained domain name when the obtained domain name is not the trusted domain name. ### Claim 9 (depends on 6) The medium as set forth in claim 6 further comprises: obtain the current host IP address list from a DNS server; determine when the obtained current host IP address list is empty; and manage the received request based on another network policy comprising declining the client access to the trusted service identified by the obtained domain name when the obtained current host IP address list is determined to be empty. ### Claim 10 (depends on 6) The medium as set forth in claim 6 further comprises, provide the client access to the trusted service identified by the obtained domain name hosted at the obtained destination IP address when the obtained destination IP address is determined to be present in the current host IP address list. ### Claim 11 A network traffic manager apparatus, comprising memory comprising programmed instructions stored in the memory and one or more processors configured to be capable of executing the programmed instructions stored in the memory to: determine when an obtained domain name identifies a trusted service and an obtained destination IP address is included in a current host IP address list; replace the obtained destination IP address with a new IP address from the current host IP address list when the obtained domain name is determined to be present and the obtained destination IP address is determined to be absent from the current host IP address list; and manage a received request based on a network policy comprising providing a client access to the trusted service identified by the obtained domain name hosted at the replaced new IP address. ### Claim 12 (depends on 11) The network traffic manager apparatus as set forth in claim 11 wherein the one or more processors are further configured to be capable of executing the programmed instructions stored in the memory to select the new IP address from the current host IP address list comprising a plurality of IP addresses. ### Claim 13 (depends on 11) The network traffic manager apparatus as set forth in claim 11 wherein the one or more processors are further configured to be capable of executing the programmed instructions stored in the memory to decline the client access to the service identified by the obtained domain name when the obtained domain name is not the trusted domain name. ### Claim 14 (depends on 11) The network traffic manager apparatus as set forth in claim 11 wherein the one or more processors are further configured to be capable of executing the programmed instructions stored in the memory to: obtain the current host IP address list from a DNS server; determine when the obtained current host IP address list is empty; and manage the received request based on another network policy comprising declining the client access to the trusted service identified by the obtained domain name when the obtained current host IP address list is determined to be empty. ### Claim 15 (depends on 11) The network traffic manager apparatus as set forth in claim 11 wherein the one or more processors are further configured to be capable of executing the programmed instructions stored in the memory to provide the client access to the trusted service identified by the obtained domain name hosted at the obtained destination IP address when the obtained destination IP address is determined to be present in the current host IP address list. ### Claim 16 A network traffic management system, comprising one or more traffic management apparatuses, client devices, or server devices, the network traffic management system comprising memory comprising programmed instructions stored thereon and one or more processors configured to be capable of executing the stored programmed instructions to: determine when an obtained domain name identifies a trusted service and an obtained destination IP address is included in a current host IP address list; replace the obtained destination IP address with a new IP address from the current host IP address list when the obtained domain name is determined to be present and the obtained destination IP address is determined to be absent from the current host IP address list; and manage a received request based on a network policy comprising providing a client access to the trusted service identified by the obtained domain name hosted at the replaced new IP address. ### Claim 17 (depends on 16) The network traffic management system of claim 16, wherein the one or more processors are further configured to be capable of executing the programmed instructions stored in the memory to select the new IP address from the current host IP address list comprising a plurality of IP addresses. ### Claim 18 (depends on 16) The network traffic management system of claim 16, wherein the one or more processors are further configured to be capable of executing the programmed instructions stored in the memory to decline the client access to the service identified by the obtained domain name when the obtained domain name is not the trusted domain name. ### Claim 19 (depends on 18) The network traffic management system of claim 18, wherein the one or more processors are further configured to be capable of executing the programmed instructions stored in the memory to: obtain the current host IP address list from a DNS server; determine when the obtained current host IP address list is empty; and manage the received request based on another network policy comprising declining the client access to the trusted service identified by the obtained domain name when the obtained current host IP address list is determined to be empty. ### Claim 20 (depends on 18) The network traffic management system of claim 18, wherein the one or more processors are further configured to be capable of executing the programmed instructions stored in the memory to provide the client access to the trusted service identified by the obtained domain name hosted at the obtained destination IP address when the obtained destination IP address is determined to be present in the current host IP address list.