IP Library Granted Patent US 11,245,662
Granted Patent B2
US 11,245,662 · App. 16/835,042 · Granted Feb 8, 2022

Registering for internet-based proxy services

Inventors: Matthew Browning Prince (San Francisco, CA); Lee Hahn Holloway (Santa Cruz, CA); Michelle Marie Zatlyn (San Francisco, CA)
Assignee: CLOUDFLARE, INC.
H04L61/2007H04L61/1511H04L63/14H04L67/1034H04L67/2814H04L67/2842H04L69/40H04L41/069H04L63/0281
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,245,662
App. No.
16/835,042
Granted
Feb 8, 2022
Kind
B2
Abstract

A domain name is received from a customer. DNS is queried for multiple possible subdomains of the domain. For each subdomain that resolves, information about that subdomain's corresponding resource record is stored in a zone file that also includes a resource record for the domain name. The zone file is presented to the customer. A designation from the customer of which of the resource records are to point to an IP address of a proxy server is received. The resource records are modified according to the input of the customer and the zone file is propagated including the modified resource records.

Claims (56)

1. A method in a server, comprising:

receiving a name of a domain from a customer;

causing a plurality of DNS (Domain Name System) queries to be made for a predefined plurality of subdomains of the domain respectively to determine whether those predefined plurality of subdomains for the domain exist for the domain;

for each subdomain of the predefined plurality of subdomains that resolves, storing information about a resource record that corresponds with that subdomain in a zone file that also includes a resource record for the domain name;

presenting the zone file to the customer, wherein the presented zone file includes the resource record for the domain name and each resource record that corresponds with each subdomain of the predefined plurality of subdomains that resolves;

receiving a designation from the customer of which of the resource records are to be protected by a proxy server;

determining that a first one of those resource records that have been designated by the customer to be protected by the proxy server is of a type that is not permitted to be protected by the proxy server, and responsive to this determination, causing that first resource record to point to a subdomain of the domain that points to an IP address of an origin server of the domain;

for those other ones of the resource records that have been designated by the customer to be protected by the proxy server, automatically causing those resource records to be modified to point to an IP address of the proxy server; and

causing the zone file including the modified resource records to be propagated.

2. The method of claim 1 , wherein prior to causing the zone file including the modified resource records to be propagated, performing the following:

providing an identification of a plurality of name servers; and

determining that the plurality of name servers have been modified to be authoritative for the domain.

3. The method of claim 1 , wherein the predefined plurality of subdomains are common across a plurality of domains.

4. The method of claim 3 , wherein the predefined plurality of subdomains include www, blog, web, and mail.

5. The method of claim 1 , wherein the proxy server is part of a cloud-based proxy service.

6. The method of claim 1 , wherein those resource records designated by the customer that are not the first resource record are modified to point to the IP address of the proxy server instead of the origin server of the domain.

7. The method of claim 1 , wherein the first one of those resource records is an MX record, and wherein causing the first resource record to point to the subdomain of the domain that points to an IP address of the origin server includes:

establishing the subdomain of the domain that resolves to the origin server of the domain instead of the proxy server; and

causing the MX record of the zone file to point to the established subdomain.

8. A non-transitory machine-readable storage medium that provides instructions that, when executed by a processor of a server, cause said processor to perform operations comprising:

receiving a name of a domain from a customer;

causing a plurality of DNS (Domain Name System) queries to be made for a predefined plurality of subdomains of the domain respectively to determine whether those predefined plurality of subdomains for the domain exist for the domain;

for each subdomain of the predefined plurality of subdomains that resolves, storing information about a resource record that corresponds with that subdomain in a zone file that also includes a resource record for the domain name;

presenting the zone file to the customer, wherein the presented zone file includes the resource record for the domain name and each resource record that corresponds with each subdomain of the predefined plurality of subdomains that resolves;

receiving a designation from the customer of which of the resource records are to be protected by a proxy server;

determining that a first one of those resource records that have been designated by the customer to be protected by the proxy server is of a type that is not permitted to be protected by the proxy server, and responsive to this determination, causing that first resource record to point to a subdomain of the domain that points to an IP address of an origin server of the domain;

for those other ones of the resource records that have been designated by the customer to be protected by the proxy server, automatically causing those resource records to be modified to point to an IP address of the proxy server; and

causing the zone file including the modified resource records to be propagated.

9. The non-transitory machine-readable storage medium of claim 8 , wherein the non-transitory machine-readable storage medium further provides instructions that, when executed by the processor, cause said processor to perform operations prior to causing the zone file including the modified resource records to be propagated including the following:

providing an identification of a plurality of name servers; and

determining that the plurality of name servers have been modified to be authoritative for the domain.

10. The non-transitory machine-readable storage medium of claim 8 , wherein the predefined plurality of subdomains are common across a plurality of domains.

11. The non-transitory machine-readable storage medium of claim 10 , wherein the predefined plurality of subdomains include www, blog, web, and mail.

12. The non-transitory machine-readable storage medium of claim 8 , wherein the proxy server is part of a cloud-based proxy service.

13. The non-transitory machine-readable storage medium of claim 8 , wherein those resource records designated by the customer that are not the first resource record are modified to point to the IP address of the proxy server instead of the origin server of the domain.

14. The non-transitory machine-readable storage medium of claim 8 , wherein the first one of those resource records is an MX record, and wherein causing the first resource record to point to the subdomain of the domain that points to an IP address of the origin server includes:

establishing the subdomain of the domain that resolves to the origin server of the domain instead of the proxy server; and

causing the MX record of the zone file to point to the established subdomain.

15. An apparatus, comprising:

a set of one or more processors;

a set of one or more non-transitory computer-readable storage mediums storing instructions, that when executed by the set of processors, cause the set of processors to perform the following operations:

receive a name of a domain from a customer;

cause a plurality of DNS (Domain Name System) queries to be made for a predefined plurality of subdomains of the domain respectively to determine whether those predefined plurality of subdomains for the domain exist for the domain;

for each subdomain of the predefined plurality of subdomains that resolves, store information about a resource record that corresponds with that subdomain in a zone file that also includes a resource record for the domain name;

present the zone file to the customer, wherein the presented zone file is to include the resource record for the domain name and each resource record that corresponds with each subdomain of the predefined plurality of subdomains that resolves;

receive a designation from the customer of which of the resource records are to be protected by a proxy server;

determine that a first one of those resource records that have been designated by the customer to be protected by the proxy server is of a type that is not permitted to be protected by the proxy server, and responsive to this determination, cause that first resource record to point to a subdomain of the domain that points to an IP address of an origin server of the domain;

for those other ones of the resource records that have been designated by the customer to be protected by the proxy server, automatically cause those resource records to be modified to point to an IP address of the proxy server; and

cause the zone file including the modified resource records to be propagated.

16. The apparatus of claim 15 , wherein the set of non-transitory computer-readable storage mediums further stores instructions, that when executed by the set of processors, cause the set of processors to perform the following operations prior to causing the zone file including the modified resource records to be propagated:

provide an identification of a plurality of name servers; and

determine that the plurality of name servers have been modified to be authoritative for the domain.

17. The apparatus of claim 15 , wherein the predefined plurality of subdomains are common across a plurality of domains.

18. The apparatus of claim 17 , wherein the predefined plurality of subdomains include www, blog, web, and mail.

19. The apparatus of claim 15 , wherein the proxy server is part of a cloud-based proxy service.

20. The apparatus of claim 15 , wherein those resource records designated by the customer that are not the first resource record are to be modified to point to the IP address of the proxy server instead of the origin server of the domain.

Assignments (2)
SECURITY INTEREST Recorded May 20, 2024
From: CLOUDFLARE, INC.
To: CITIBANK, N.A.
Reel/Frame 067472/0246 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 21, 2021
From: PRINCE, MATTHEW BROWNING; HOLLOWAY, LEE HAHN; ZATLYN, MICHELLE MARIE
To: CLOUDFLARE, INC.
Reel/Frame 058449/0932 →
Continuity (5)
Continuation 15666412 · Aug 1, 2017
Continuation 14728961 · Jun 2, 2015
Continuation 13451353 · Apr 19, 2012
Provisional Application 61477120 · Apr 19, 2011
Related Publication 20200228490A1 · Jul 16, 2020
Cited By (1)
US 12,363,067