Back to results
US 2024/0187447 A1Published application
Systems and methods for protection of authoritative name servers
AssigneeLevel 3 Communications, LLC
InventorsJohn R.B. Woodworth, Dean Ballew, Carol D. Lovell, Dan Luther, James C. Anders, Lisa Lamanna
Life of this patent
Estimating the term…
Abstract
In a network, Domain Name Service (DNS) queries may be handled by one or more resolvers and one or more authoritative name servers. If a DNS distributed denial of service attack is launched against the network, it may degrade the performance of the authoritative name servers. As such, systems and methods for protection of authoritative name servers are provided.
Claims20
A method, comprising:
- receiving a first domain name service (DNS) query for a first domain;
- determining that the first domain is within a first group of domains, each domain of the first group being a sub-domain of a second domain;
- determining that the first domain does not exist;
- in response to determining that the first domain does not exist, transitioning a first DNS resolver to a partially disabled state, for the first group;
- receiving, in the partially disabled state, a second DNS query, for a third domain;
- determining that the third domain is within the first group;
- and
- treating, based on determining that the third domain is in within the first group, the third domain as unavailable in responding to the second DNS query.
5 more elements
A system, comprising:
- a processing circuit;
- and
- one or more memories, operatively connected to the processing circuit and storing instructions that, when executed by the processing circuit, cause the system to perform a method, the method comprising:
- receiving a first domain name service (DNS) query for a first domain;
- determining that the first domain is within a first group of domains, each domain of the first group being a sub-domain of a second domain;
- determining that the first domain does not exist;
- in response to determining that the first domain does not exist, transitioning a first DNS resolver to a partially disabled state, for the first group;
- receiving, in the partially disabled state, a second DNS query, for a third domain;
- determining that the third domain is within the first group;
- and
- treating, based on determining that the third domain is in within the first group, the third domain as unavailable in responding to the second DNS query.
8 more elements
A system, comprising:
- a domain name service (DNS) resolver, and
- an authoritative name server,
- the DNS resolver being configured to:
- receive a first DNS query for a first domain;
- determine that the first domain is within a first group of domains, each domain of the first group being a sub-domain of a second domain;
- determine that the first domain does not exist;
- in response to determining that the first domain does not exist, transition to a partially disabled state, for the first group;
- receive, in the partially disabled state, a second DNS query, for a third domain;
- determine that the third domain is within the first group;
- and
- treat, based on determining that the third domain is in within the first group, the third domain as unavailable in responding to the second DNS query.
8 more elements
Dependencies are inferred from the claim text.