Request routing processing
AssigneeAmazon Technologies, Inc.
InventorsColm MacCarthaigh, David R. Richardson, Benjamin W. S. Redman
Life of this patent
Estimating the term…
Abstract
Generally described, the present disclosure is directed to managing request routing functionality corresponding to resource requests for one or more resources associated with a content provider. The processing of the DNS requests by the service provider can include the selective filtering of DNS queries associated with a DNS query-based attack. A service provider can assign DNS servers corresponding to a distributed set of network addresses, or portions of network addresses, such that DNS queries exceeding a threshold, such as in DNS query-based attacks, can be filtered in a manner that can mitigate performance impact on for the content provider or service provider.
Claims33
A computer-implemented method for managing DNS queries comprising:
- obtaining, by a service provider, a request for hosting DNS query services for an identifiable domain;
- determining, by the service provider, a number of assignable network address subdivisions, wherein each network address subdivision corresponds to a range within a pool of available network addresses for service provider DNS server computing devices;
- assigning, by the service provider, a network address in each of the determined network address subdivisions, wherein the assigned network addresses from each subdivision for the identifiable domain are not matching;
- and
- transmitting, by the service provider, the assigned network address for each determined network address subdivision, wherein DNS server computing devices corresponding to the assigned network addresses will be delegated to be authoritative to respond to DNS queries for the identifiable domain.
A system for managing DNS queries comprising:
- a DNS query processor device, at a service provider, operative to:
- obtain, by the service provider, a request for hosting DNS query services for an identifiable domain;
- determine, by the service provider, a number of assignable network address subdivisions, wherein each network address subdivision corresponds to a range within a pool of available network addresses for service provider DNS server computing devices;
- assign, by the service provider, a network address in each of the determined network address subdivisions, wherein the assigned network addresses from each subdivision for the identifiable domain are not matching;
- and
- transmit, by the service provider, the assigned network address for each determined network address subdivision, wherein DNS server computing devices corresponding to the assigned network addresses will be delegated to be authoritative to respond to DNS queries for the identifiable domain.
A non-transitory, computer-readable storage medium having one or more computer-executable components for managing DNS queries, the one or more computer-executable components comprising computer-executable instructions to:
- obtain, by a service provider, a request for hosting DNS query services for an identifiable domain;
- determine, by the service provider, a number of assignable network address subdivisions, wherein each network address subdivision corresponds to a range within a pool of available network addresses for service provider DNS server computing devices;
- assign, by the service provider, a network address in each of the determined network address subdivisions, wherein the assigned network addresses from each subdivision for the identifiable domain are not matching;
- and
- transmit, by the service provider, the assigned network address for each determined network address subdivision, wherein DNS server computing devices corresponding to the assigned network addresses will be delegated to be authoritative to respond to DNS queries for the identifiable domain.
Dependencies are inferred from the claim text.