INCOMPATIBLE NETWORK GATEWAY PROVISIONED THROUGH DNS

• US 20140115188A1
• Filed: 12/30/2013
• Published: 04/24/2014
• Est. Priority Date: 09/27/2011
• Status: Active Grant

• Current Assignee: CloudFlare Incorporated
• Original Assignee: CloudFlare Incorporated
• Inventors: Prince, Matthew Browning, Holloway, Lee Hahn, Conrad, David Randolph
• Granted Patent: US 10,447,649 B2
• Time in Patent Office: Days
• US Class Current: 709/245
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 61/5076 Update or notification mechanisms, e.g. DynDNS
• CPC Class Codes: H04L 61/59 using proxies for addressing
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 69/08 Protocols for interworking; Protocol conversion

Abstract

A first packet of a first protocol version type that includes an incoming request for an action to be performed on an identified resource is received from a client at a proxy server as a result of a DNS request resolving to a network address of the proxy server. The proxy server transmits an outgoing request for the action to be performed on the identified resource to a network address of the destination origin server in a second packet that is of the second protocol version type. The proxy server receives a third packet that includes an incoming response from the destination origin server, the third packet being of the second protocol version type. The proxy server transmits a fourth packet to the client, the fourth packet being of the first protocol version type, wherein the fourth packet includes an outgoing response that is based on the incoming response.

Claims

1. A method in a proxy server for transitioning between different incompatible networks, comprising:

receiving, from a client, a first packet of a first protocol version type that includes an incoming request for an action to be performed on an identified resource, wherein the first packet is received at the proxy server as a result of a Domain Name System (DNS) request for a domain corresponding to the identified resource resolving to a network address of the proxy server;

determining that the incoming request is to be transmitted to a destination origin server that hosts the identified resource in a packet of a second protocol version type that is different than the first protocol version type;

transmitting a second packet that includes an outgoing request for the action to be performed on the identified resource to a network address of the destination origin server, the second packet being of the second protocol version type, wherein the outgoing request is based on the incoming request;

receiving a third packet that includes an incoming response from the destination origin server, the third packet being of the second protocol version type; and

transmitting a fourth packet to the client, the fourth packet being of the first protocol version type, wherein the fourth packet includes an outgoing response that is based on the incoming response.

2. The method of claim 1, wherein the first protocol version type is Internet Protocol (IP) version 4 (IPv4) and the second protocol version type is IP version 6 (IPv6).

3. The method of claim 1, wherein the first protocol version type is Internet Protocol (IP) version 6 (IPv6) and the second protocol version type is IP version 4 (IPv4).

4. The method of claim 1, wherein prior to the step of transmitting the second packet to the network address of the destination origin server, performing the following:

selecting one of a plurality of network addresses of a network address pool of the proxy server for use as a source network address of the second packet, wherein the selected network address is of the second protocol version type, and wherein the step of selecting is based on a set of one or more parameters associated with the first packet.

5. The method of claim 1, wherein the incoming request is a Hypertext Transfer Protocol (HTTP) request and the outgoing request is identical or substantially identical as the incoming request.

6. The method of claim 5, wherein the incoming response is an HTTP response and the outgoing response is identical or substantially identical as the incoming response.

7. The method of claim 1, wherein prior to the step of transmitting the second packet to the network address of the destination origin server, performing the following:

selecting the network address of the destination origin server from a plurality of network address of the destination origin server, wherein the step of selecting is based on a set of one or more destination address rules configured by a domain owner of the destination origin server.

8. A non-transitory machine-readable storage medium that provides instructions that, when executed by a processor of a proxy server, cause said processor to perform operations comprising:

receiving, from a client, a first packet of a first protocol version type that includes an incoming request for an action to be performed on an identified resource, wherein the first packet is received at the proxy server as a result of a Domain Name System (DNS) request for a domain corresponding to the identified resource resolving to a network address of the proxy server;

determining that the incoming request is to be transmitted to a destination origin server that hosts the identified resource in a packet of a second protocol version type that is different than the first protocol version type;

transmitting a second packet that includes an outgoing request for the action to be performed on the identified resource to a network address of the destination origin server, the second packet being of the second protocol version type, wherein the outgoing request is based on the incoming request;

receiving a third packet that includes an incoming response from the destination origin server, the third packet being of the second protocol version type; and

transmitting a fourth packet to the client, the fourth packet being of the first protocol version type, wherein the fourth packet includes an outgoing response that is based on the incoming response.

9. The non-transitory machine-readable storage medium of claim 8, wherein the first protocol version type is Internet Protocol (IP) version 4 (IPv4) and the second protocol version type is IP version 6 (IPv6).

10. The non-transitory machine-readable storage medium of claim 8, wherein the first protocol version type is Internet Protocol (IP) version 6 (IPv6) and the second protocol version type is IP version 4 (IPv4).

11. The non-transitory machine-readable storage medium of claim 8, wherein prior to the step of transmitting the second packet to the network address of the destination origin server, performing the following:

selecting one of a plurality of network addresses of a network address pool of the proxy server for use as a source network address of the second packet, wherein the selected network address is of the second protocol version type, and wherein the step of selecting is based on a set of one or more parameters associated with the first packet.

12. The non-transitory machine-readable storage medium of claim 8 wherein the incoming request is a Hypertext Transfer Protocol (HTTP) request and the outgoing request is identical or substantially identical as the incoming request.

13. The non-transitory machine-readable storage medium of claim 12, wherein the incoming response is an HTTP response and the outgoing response is identical or substantially identical as the incoming response.

14. The non-transitory machine-readable storage medium of claim 8, wherein prior to the step of transmitting the second packet to the network address of the destination origin server, performing the following:

selecting the network address of the destination origin server from a plurality of network address of the destination origin server, wherein the step of selecting is based on a set of one or more destination address rules configured by a domain owner of the destination origin server.

15. A proxy server for transitioning between different Internet Protocol (IP) version types, comprising:

a non-transitory machine-readable storage medium that stores instructions that, when executed by a processor, cause said processor to perform the following;

receive, from a client, a first packet of a first protocol version type that includes an incoming request for an action to be performed on an identified resource, wherein the first packet is received at the proxy server as a result of a Domain Name System (DNS) request for a domain corresponding to the identified resource resolving to a network address of the proxy server;

determine that the incoming request is to be transmitted to a destination origin server that hosts the identified resource in a packet of a second protocol version type that is different than the first protocol version type;

transmit a second packet that includes an outgoing request for the action to be performed on the identified resource to a network address of the destination origin server, the second packet being of the second protocol version type, wherein the outgoing request is based on the incoming request;

receive a third packet that includes an incoming response from the destination origin server, the third packet being of the second protocol version type; and

transmit a fourth packet to the client, the fourth packet being of the first protocol version type, wherein the fourth packet includes an outgoing response that is based on the incoming response.

16. The proxy server of claim 15, wherein the first protocol version type is Internet Protocol (IP) version 4 (IPv4) and the second protocol version type is IP version 6 (IPv6).

17. The proxy server of claim 15, wherein the first protocol version type is Internet Protocol (IP) version 6 (IPv6) and the second protocol version type is IP version 4 (IPv4).

18. The proxy server of claim 15, wherein the non-transitory machine-readable storage medium further stores instructions, that when executed by the processor, cause the processor to perform the following:

prior to transmission of the second packet to the network address of the destination origin server, select one of a plurality of network addresses of a network address pool of the proxy server for use as a source network address of the second packet, wherein the selected network address is of the second protocol version type, and wherein the step of selecting is based on a set of one or more parameters associated with the first packet.

19. The proxy server of claim 15, wherein the incoming request is a Hypertext Transfer Protocol (HTTP) request and the outgoing request is identical or substantially identical as the incoming request.

20. The proxy server of claim 19, wherein the incoming response is an HTTP response and the outgoing response is identical or substantially identical as the incoming response.

21. The proxy server of claim 15, wherein the non-transitory machine-readable storage medium further stores instructions, that when executed by the processor, cause the processor to perform the following:

prior to transmission of the second packet to the network address of the destination origin server, select the network address of the destination origin server from a plurality of network address of the destination origin server, wherein the step of selecting is based on a set of one or more destination address rules configured by a domain owner of the destination origin server.