Instanced web servers for displaying custom content in a secure context
Systems and methods receiving an indication that a domain has been blocked. A temporary web server is created that has network address that is different from the network address associated with the blocked domain. Content is created that indicates the blocked domain, and optionally, a reason for the blocking. The network address of the temporary web server is returned to a requesting browser application, which can display the content without providing a security warning.
1. A method comprising:
receiving an indication that a domain comprises a blocked domain, the blocked domain associated with a first network address;
creating a temporary web server in response to said receiving the indication, the temporary web server having a second network address different from the first network address associated with the blocked domain;
creating block page content for the temporary web server;
returning the second network address to a browser application requesting a web site of the blocked domain, wherein the browser application is configured to display the block page content without providing a security warning; and
in response to the block page content being served to the browser application, destroying the temporary web server.
2. The method of claim 1 , wherein creating block page content includes setting references to one or more shared resources used in the block page content to refer to the blocked domain.
3. The method of claim 1 , further comprising:
generating a security certificate based, at least in part, on a root certificate; and
associating the temporary web server with the security certificate.
4. The method of claim 3 , further comprising providing the root certificate to a client system prior to the client system issuing a request for the blocked domain.
5. The method of claim 1 , wherein creating the block page content includes identifying the blocked domain and information indicating a reason for blocking the domain in the block page content.
6. The method of claim 1 , further comprising destroying the temporary web server in response to determining that the block page content has been provided to the browser application.
7. The method of claim 1 , further comprising destroying the temporary web server in response to expiration of a timer associated with the temporary web server.
8. The method of claim 1 , further comprising:
receiving a second request for the first network address associated with the blocked domain; and
in response to determining that the temporary web server already exists for the blocked domain, resetting an interval timer associated with the creation of the temporary web server and returning the second network address to a source of the second request.
9. A non-transitory machine-readable storage medium having stored thereon computer-executable instructions for providing instanced web servers, the computer-executable instructions to cause one or more processors to perform operations comprising:
receive an indication that a domain comprises a blocked domain, the blocked domain associated with a first network address;
create a temporary web server in response to said receiving the indication, the temporary web server having a second network address different from the first network address associated with the blocked domain;
create block page content for the temporary web server;
return the second network address to a browser application requesting a web site of the blocked domain, wherein the browser application is configured to display the block page content without providing a security warning; and
destroy the temporary web server in response to the block page content being served to the browser application.
10. The non-transitory machine-readable storage medium of claim 9 , wherein the computer-executable instructions to create the block page content includes computer-executable instructions to set references to one or more shared resources used in the block page content to refer to the blocked domain.
11. The non-transitory machine-readable storage medium of claim 9 , wherein the computer-executable instructions further comprise computer executable instructions to:
generate a security certificate based, at least in part, on a root certificate; and
associate the temporary web server with the security certificate.
12. The non-transitory machine-readable storage medium of claim 11 , wherein the computer-executable instructions further comprise computer executable instructions to:
provide the root certificate to a client system prior to the client system issuing a request for the blocked domain.
13. The non-transitory machine-readable storage medium of claim 9 , wherein the computer-executable instructions to create the block page content further comprise computer executable instructions to:
identify the blocked domain and information indicating a reason for blocking the domain in the block page content.
14. The non-transitory machine-readable storage medium of claim 9 , wherein the computer-executable instructions further comprise computer executable instructions to:
destroy the temporary web server in response to a determination that the block page content has been provided to the browser application.
15. The non-transitory machine-readable storage medium of claim 9 , wherein the computer-executable instructions further comprise computer executable instructions to:
destroy the temporary web server in response to expiration of a timer associated with the temporary web server.
16. The non-transitory machine-readable storage medium of claim 9 , wherein the computer-executable instructions further comprise computer executable instructions to:
receive a second request for the first network address associated with the blocked domain; and
in response to a determination that the temporary web server already exists for the blocked domain, reset an interval timer associated with the creation of the temporary web server and return the second network address to a source of the second request.
17. An apparatus comprising:
one or more processors; and
a machine-readable storage medium having stored thereon computer-executable instructions for providing instanced web servers, the computer-executable instructions to cause the one or more processors to perform operations comprising:
receive an indication that a domain comprises a blocked domain, the blocked domain associated with a first network address;
create a temporary web server in response to said receiving the indication, the temporary web server having a second network address different from the first network address associated with the blocked domain;
create block page content for the temporary web server;
return the second network address to a browser application requesting a web site of the blocked domain, wherein the browser application is configured to display the block page content without providing a security warning; and
in response to the block page content being served to the browser application, destroy the temporary web server.
18. The apparatus of claim 17 , wherein the computer-executable instructions to create the block page content includes computer-executable instructions to set references to one or more shared resources used in the block page content to refer to the blocked domain.
19. The apparatus of claim 17 , wherein the computer-executable instructions further comprise computer executable instructions to:
generate a security certificate based, at least in part, on a root certificate; and
associate the temporary web server with the security certificate.
20. The apparatus of claim 19 , wherein the computer-executable instructions further comprise computer executable instructions to:
provide the root certificate to a client system prior to the client system issuing a request for the blocked domain.
21. The apparatus of claim 17 , wherein the computer-executable instructions to create the block page content further comprise computer executable instructions to:
identify the blocked domain and information indicating a reason for blocking the domain in the block page content.
22. The apparatus of claim 17 , wherein the computer-executable instructions further comprise computer executable instructions to:
destroy the temporary web server in response to a determination that the block page content has been provided to the browser application.
23. The apparatus of claim 17 , wherein the computer-executable instructions further comprise computer executable instructions to:
destroy the temporary web server in response to expiration of a timer associated with the temporary web server.
24. The apparatus of claim 17 , wherein the computer-executable instructions further comprise computer executable instructions to:
receive a second request for the first network address associated with the blocked domain; and
in response to a determination that the temporary web server already exists for the blocked domain, reset an interval timer associated with the creation of the temporary web server and return the second network address to a source of the second request.