Transparent proxy authentication via dns processing

A system for computer network processing, comprising:

• a DNS name server;
• and
• a proxy service, wherein the proxy service is configured to:
• obtain from a Domain Name Server (DNS) nameserver a message that includes mapping information that maps a tracking identifier to a subscriber identifier;
• obtain a first request having a resource identifier including a unique domain name, wherein the unique domain name includes a target domain name;
• provide a redirect response for the first request, the redirect response including a resource identifier associated with the target domain name;
• obtain a second request having a resource identifier associated with the target domain name, the second request including a cookie for the target domain name, wherein the cookie of the second request is associated with the subscriber identifier and includes the tracking identifier;
• in response to the second request, authenticate the subscriber identifier by determining that the subscriber identifier from the cookie maps to the tracking identifier based on the message from the DNS nameserver;
• and
• generate a response to the second request based on the subscriber identifier permitting or denying access to the target domain name.

One or more non-transitory computer readable storage media encoded with instructions that, when executed by one or more processors, cause the one or more processors to:

• obtain at a proxy service from a Domain Name System (DNS) nameserver a message that includes mapping information that maps a tracking identifier to a subscriber identifier;
• obtain at the proxy service a first request having a resource identifier including a unique domain name, wherein the unique domain name includes a target domain name;
• provide a redirect response for the first request, the redirect response including a resource identifier associated with the target domain name;
• obtain at the proxy service a second request having a resource identifier associated with the target domain name, the second request including a cookie for the target domain name, wherein the cookie of the second request is associated with the subscriber identifier and includes the tracking identifier;
• in response to the second request, authenticate the subscriber identifier by determining that the subscriber identifier from the cookie maps to the tracking identifier based on the message from the DNS nameserver;
• and
• generate a response to the second request based on the subscriber identifier permitting or denying access to the target domain name.