Domain name service protection for secure web gateway

A method for performing DNS resolution comprising:

• receiving, by a front-end domain name service (DNS) of a data plane component, an inbound DNS request;
• mapping, by the front-end DNS, an IP address of the inbound DNS request to a policy identification value corresponding to a customer policy;
• utilizing, by the front end DNS, a plurality of plugin modules to process the DNS request according to the mapping of the IP address from which the DNS originates to the policy identification value;
• configuring, by a control plane component connected to the front-end DNS service, the IP address to permit access to the front-end DNS service according to the customer policy;
• and
• providing, by the control plane component, the customer policy to the front-end DNS.

A method for performing DNS resolution comprising:

• receiving, by a front-end domain name service (DNS) of a data plane component, an inbound DNS request;
• mapping, by the front-end DNS, an IP address of the inbound DNS request to a policy identification value corresponding to a customer policy;
• utilizing, by the front end DNS, a plurality of plugin modules to process the DNS request according to the mapping of the IP address from which the DNS originates to the policy identification value;
• configuring, by a control plane component connected to the front-end DNS service, the IP address to permit access to the front-end DNS service according to the customer policy;
• providing, by the control plane component, the customer policy to the front-end DNS;
• controlling, by the control plane component, access to the front-end DNS service according to the customer policy;
• and
• providing access, by a DNS Protection resolver of the control plane controller located at a domain of a customer environment, to the domain according to the customer policy,
• wherein the front-end domain name service and the control plane component are cloud-based and connected to customer system, wherein the inbound DNS request originates from the customer system.