IP Library Patent Application 14294298
Patent Application
App. No. 14/294,298

Using Distributed Network Elements to Send Authoritative DNS Responses

Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US None
App. No.
14/294,298
Abstract

This disclosure describes a network element controller that communicates with a bank of network elements over a software defined network (SDN) to provide DNS responds to external users. The network elements, such as switches and routers, reside within a computer perimeter network or data center and intercept DNS requests from resolving DNS servers that are destined for an authoritative name server. The network elements, in turn, send a DNS response to the resolving DNS servers on behalf of the authoritative name server, which include a corresponding DNS record and a source address of the authoritative name server. In one embodiment, the network element controller proactively programs DNS records on each of the network elements included in the perimeter network.

Claims (72)

1 . A method for sending domain name system (DNS) responses from a network element, the method comprising:

intercepting, at a network element, a DNS request to an authoritative name server, wherein the DNS request is initiated by a resolving DNS server and comprises a domain name and an address of the authoritative name server, and wherein the authoritative name server is different than the network element;

locating, by the network element, a DNS record that corresponds to the DNS request, wherein the DNS record comprises a computer readable address corresponding to the domain name; and

sending a DNS response from the network element to the resolving DNS server over a computer network, wherein the DNS response comprises the DNS record and the address of the authoritative name server.

2 . The method of claim 1 further comprising:

receiving a first set of DNS records at the network element from a network element controller; and

storing the first set of DNS records in a network element local storage area, wherein the locating of the DNS record involves searching the first set of DNS records.

3 . The method of claim 2 further comprising:

sending a request from the network element to the network element controller in response to determining that the DNS record is not located in the first set of DNS records;

receiving a response at the network element from the network element controller that comprises the DNS record;

storing the received DNS record in the network element local storage area; and

sending the received DNS record to the resolving DNS server.

4 . The method of claim 2 further comprising:

receiving a record delete request at the network element from the network element controller, wherein the record delete request corresponds to a zone change of the authoritative name server;

receiving a second set of DNS records at the network element from the network element controller; and

replacing, by the network element, the first set of DNS records with the second set of DNS records in the network element local storage area.

5 . The method of claim 2 further comprising:

receiving a request at the network element from the network element controller to provide statistical data to the network element controller;

collecting the statistical data at the network element; and

sending the collected statistical data from the network element to the network element controller.

6 . The method of claim 2 wherein the network element communicates with the network element controller using a software defined network protocol.

7 . The method of claim 1 wherein the network element is selected from the group consisting of a switch and a router.

8 . A method for distributing domain name system (DNS) records to network elements, the method comprising:

receiving a first set of DNS records at a network element controller from an authoritative name server, wherein each of the DNS records comprises

a human readable address and a corresponding computer readable address;

storing, by the network element controller, the first set of DNS records in a network element controller storage area; and

distributing, by the network element controller, the first set of DNS records to each of a plurality of network elements.

9 . The method of claim 8 wherein the network element controller communicates to the plurality of network elements using a software defined network protocol.

10 . The method of claim 8 further comprising:

receiving, at the network element controller, a first request for a DNS record from a requesting one of the plurality of network elements;

determining, by the network element controller, whether the DNS record is located in the network element controller storage area; and

in response to locating the DNS record in the network element controller storage area, sending the located DNS record from the network element controller to the requesting network element.

11 . The method of claim 10 further comprising:

distributing the located DNS record to each of the plurality of network elements.

12 . The method of claim 10 further comprising:

sending, by the network element controller, a second request to the authoritative name server in response to determining that the DNS record is not located in the network element controller local storage area;

receiving the DNS record at the network element controller from the authoritative name server;

storing the received DNS record in the network element controller storage area; and

distributing the received DNS record from the network element controller to each of the plurality of network elements.

13 . The method of claim 10 further comprising:

receiving a second set of DNS records at the network element controller from the authoritative name server in response to receiving a zone change notification from the authoritative name server;

sending a request from the network element controller to each of the plurality of network elements to delete the first set of DNS records; and

sending the second set of DNS records from the network element controller to each of the plurality of network elements.

14 . The method of claim 8 further comprising:

sending a statistical data request from the network element controller to the plurality of network elements;

receiving statistical data at the network element controller from each of the plurality of network elements;

aggregating, by the network element controller, the received statistical data; and

storing the aggregated statistical data in the network element controller local storage area.

15 . A system comprising:

one or more processors;

a memory accessible by the one or more processors;

a DNS record interception tool executed by at least one of the one or more processors and configured to:

intercept a DNS request to an authoritative name server, wherein the DNS request is initiated by a resolving DNS server and comprises a domain name and an address of the authoritative name server;

locating a DNS record that corresponds to the DNS request, wherein the DNS record comprises a computer readable address corresponding to the domain name; and

sending a DNS response to the resolving DNS server over a computer network, wherein the DNS response comprises the DNS record and the address of the authoritative name server.

16 . The system of claim 15 wherein the DNS record interception tool is further configured to:

receive a first set of DNS records from a network element controller; and

store the first set of DNS records in the memory, wherein the locating of the DNS record involves searching the first set of DNS records.

17 . The system of claim 16 wherein the DNS record interception is further configured to:

send a request to the network element controller in response to determining that the DNS record is not located in the first set of DNS records;

receive a response from the network element controller that comprises the DNS record;

store the received DNS record in the memory; and

send the received DNS record to the resolving DNS server.

18 . The system of claim 16 wherein the DNS record interception tool is further configured to:

receive a record delete request from the network element controller, wherein the record delete request corresponds to a zone change of the authoritative name server;

receive a second set of DNS records from the network element controller; and

replace the first set of DNS records with the second set of DNS records in the memory.

19 . The system of claim 16 wherein the DNS record interception tool is further configured to:

receive a request from the network element controller to provide statistical data to the network element controller;

collect the statistical data at the network element; and

send the collected statistical data to the network element controller.

20 . The system of claim 16 wherein the system communicates with the network element controller using a software defined network protocol.

Assignments (17)
CORRECTIVE ASSIGNMENT TO CORRECT THE REMOVE APPLICATION 11759915 AND REPLACE IT WITH APPLICATION 11759935 PREVIOUSLY RECORDED ON REEL 040925 FRAME 0001. ASSIGNOR(S) HEREBY CONFIRMS THE RELEASE OF SECURITY INTEREST. Recorded Feb 17, 2020
From: MORGAN STANLEY SENIOR FUNDING, INC.
To: NXP, B.V. F/K/A FREESCALE SEMICONDUCTOR, INC.
Reel/Frame 052917/0001 →
CORRECTIVE ASSIGNMENT TO CORRECT THE REMOVE APPLICATION 11759915 AND REPLACE IT WITH APPLICATION 11759935 PREVIOUSLY RECORDED ON REEL 040928 FRAME 0001. ASSIGNOR(S) HEREBY CONFIRMS THE RELEASE OF SECURITY INTEREST. Recorded Jan 17, 2020
From: MORGAN STANLEY SENIOR FUNDING, INC.
To: NXP B.V.
Reel/Frame 052915/0001 →
RELEASE OF SECURITY INTEREST Recorded Sep 10, 2019
From: MORGAN STANLEY SENIOR FUNDING, INC.
To: NXP B.V.
Reel/Frame 050744/0097 →
CORRECTIVE ASSIGNMENT TO CORRECT THE NATURE OF CONVEYANCE PREVIOUSLY RECORDED AT REEL: 040626 FRAME: 0683. ASSIGNOR(S) HEREBY CONFIRMS THE MERGER AND CHANGE OF NAME EFFECTIVE NOVEMBER 7, 2016. Recorded Jan 12, 2017
From: NXP SEMICONDUCTORS USA, INC. (MERGED INTO); FREESCALE SEMICONDUCTOR, INC. (UNDER)
To: NXP USA, INC.
Reel/Frame 041414/0883 →
CHANGE OF NAME Recorded Nov 16, 2016
From: FREESCALE SEMICONDUCTOR INC.
To: NXP USA, INC.
Reel/Frame 040626/0683 →
RELEASE OF SECURITY INTEREST Recorded Nov 7, 2016
From: MORGAN STANLEY SENIOR FUNDING, INC.
To: NXP B.V.
Reel/Frame 040928/0001 →
RELEASE OF SECURITY INTEREST Recorded Sep 21, 2016
From: MORGAN STANLEY SENIOR FUNDING, INC.
To: NXP, B.V., F/K/A FREESCALE SEMICONDUCTOR, INC.
Reel/Frame 040925/0001 →
CORRECTIVE ASSIGNMENT TO CORRECT THE REMOVE APPLICATION 14/258,829 AND REPLACE ITWITH 14/258,629 PREVIOUSLY RECORDED ON REEL 037444 FRAME 0082. ASSIGNOR(S) HEREBY CONFIRMS THE ASSIGNMENT AND ASSUMPTION OFSECURITY INTEREST IN PATENTS. Recorded Aug 10, 2016
From: CITIBANK, N.A.
To: MORGAN STANLEY SENIOR FUNDING, INC.
Reel/Frame 039639/0332 →
CORRECTIVE ASSIGNMENT OF INCORRECT APPLICATION 14/258,829 PREVIOUSLY RECORDED ON REEL 037444 FRAME 0109. ASSIGNOR(S) HEREBY CONFIRMS THE ASSIGNMENT AND ASSUMPTION OF SECURITY INTEREST IN PATENTS. Recorded Aug 10, 2016
From: CITIBANK, N.A.
To: MORGAN STANLEY SENIOR FUNDING, INC.
Reel/Frame 039639/0208 →
SUPPLEMENT TO THE SECURITY AGREEMENT Recorded Jun 16, 2016
From: FREESCALE SEMICONDUCTOR, INC.
To: MORGAN STANLEY SENIOR FUNDING, INC.
Reel/Frame 039138/0001 →
ASSIGNMENT AND ASSUMPTION OF SECURITY INTEREST IN PATENTS Recorded Jan 5, 2016
From: CITIBANK, N.A.
To: MORGAN STANLEY SENIOR FUNDING, INC.
Reel/Frame 037444/0082 →
ASSIGNMENT AND ASSUMPTION OF SECURITY INTEREST IN PATENTS Recorded Jan 5, 2016
From: CITIBANK, N.A.
To: MORGAN STANLEY SENIOR FUNDING, INC.
Reel/Frame 037444/0109 →
PATENT RELEASE Recorded Dec 21, 2015
From: CITIBANK, N.A., AS COLLATERAL AGENT
To: FREESCALE SEMICONDUCTOR, INC.
Reel/Frame 037357/0903 →
SUPPLEMENT TO IP SECURITY AGREEMENT Recorded Aug 1, 2014
From: FREESCALE SEMICONDUCTOR, INC.
To: CITIBANK, N.A., AS NOTES COLLATERAL AGENT
Reel/Frame 033462/0293 →
SUPPLEMENT TO IP SECURITY AGREEMENT Recorded Aug 1, 2014
From: FREESCALE SEMICONDUCTOR, INC.
To: CITIBANK, N.A., AS NOTES COLLATERAL AGENT
Reel/Frame 033462/0267 →
SUPPLEMENT TO IP SECURITY AGREEMENT Recorded Aug 1, 2014
From: FREESCALE SEMICONDUCTOR, INC.
To: CITIBANK, N.A., AS NOTES COLLATERAL AGENT
Reel/Frame 033460/0337 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 3, 2014
From: MYLA, JOHN; ADDEPALLI, SRINIVASA R.
To: FREESCALE SEMICONDUCTOR, INC.
Reel/Frame 033079/0351 →