Name resolving in segmented networks

1. A method, comprising:

connecting a client computing device with a plurality of segments of a private network, wherein network access is restricted from one segment to another of the plurality of segments, the private network comprises a plurality of name resolving servers, and each name resolving server is configured to resolve name requests for networking devices in a respective segment of the plurality of segments;

registering the client computing device as primary name resolving server for serving name requests for names in the private network received from applications on the client computing device, the name requests including a first name request from a first application;

in response to receiving the first name request, forwarding the first name request simultaneously to the plurality of name resolving servers;

selecting a name resolution that is first received from the plurality of name resolving servers in response to the first name request; and

returning the selected name resolution to the first application.

2. The method of claim 1 , wherein the connecting is performed over one or more network interfaces of the client computing device, and wherein the registering comprises assigning the client computing device as primary name resolving server to the one or more network interfaces.

3. The method of claim 2 , wherein the connecting further comprises establishing networking tunnels with gateways providing access to the respective segments.

4. The method of claim 2 , wherein the one or more network interfaces correspond to virtual network interfaces.

5. The method of claim 3 , further comprising:

providing authentication information to an authentication server; and

in response to successful authentication from the authentication server, receiving a listing of the plurality of name resolving servers.

6. The method of claim 4 , further comprising:

providing authentication information to an authentication server; and

in response to successful authentication from the authentication server, receiving a listing of the plurality of name resolving servers.

7. The method of claim 5 , wherein the connecting further comprises:

in response to successful authentication, receiving a client access list in return, wherein the client access list identifies a selection of networking devices in the private network that the client computing device is authorized to access;

establishing the networking tunnels with tunnel modules of the respective gateways providing network access to the private network; and

sending the client access list over the networking tunnels to the gateways in order to enable the gateways to configure a firewall with firewall rules derived from the client access list to allow the client computing device network access to the selection of the networking devices in accordance with the firewall rules.

8. The method of claim 7 , wherein the plurality of name resolving servers is specified in the client access list.

9. The method of claim 7 , further comprising:

in response to successful authentication from the authentication server, receiving a client tunnel list comprising information for establishing the networking tunnels; and

using the client tunnel list for the establishing the networking tunnels.

10. The method of claim 9 , wherein the plurality of name resolving servers is specified in the client tunnel list.

11. The method of claim 9 , wherein the client tunnel list comprises addressing information about the gateways and tunnel authentication information, the method further comprising:

retrieving the addressing information from the client tunnel list;

sending requests to the tunnel modules by the addressing information together with the tunnel authentication information; and

in response to successful authentication with the tunnel modules, establishing the networking tunnels.

12. The method of claim 7 , wherein the client access list is readable by the client computing device, and wherein the client access list further comprises a digital signature made by a key shared between the authentication server and the gateways thereby making the client access list not alterable by the client computing device without notification from the gateways.

13. A non-transitory computer readable storage medium storing instructions configured to instruct a data processing system to:

connect a client computing device with a plurality of segments of a private network, wherein network access is restricted from one segment to another of the plurality of segments, the private network comprises a plurality of name resolving servers, and each name resolving server is configured to resolve name requests for networking devices in a respective segment of the plurality of segments;

register the client computing device as primary name resolving server for serving name requests for names in the private network received from applications on the client computing device, the name requests including a first name request from a first application;

in response to receiving the first name request, forward the first name request simultaneously to the plurality of name resolving servers;

select a name resolution that is first received from the plurality of name resolving servers in response to the first name request; and

return the selected name resolution to the first application.

14. A system, comprising:

at least one processor; and

memory storing instructions programmed to instruct the at least one processor to:

connect a client computing device with a plurality of segments of a private network, wherein network access is restricted from one segment to another of the plurality of segments, the private network comprises a plurality of name resolving servers, and each name resolving server is configured to resolve name requests for networking devices in a respective segment of the plurality of segments;

register the client computing device as primary name resolving server for serving name requests for names in the private network received from applications on the client computing device, the name requests including a first name request from a first application;

in response to receiving the first name request, forward the first name request simultaneously to the plurality of name resolving servers;

select a name resolution that is first received from the plurality of name resolving servers in response to the first name request; and

return the selected name resolution to the first application.