Systems and methods for applying transformations to IP addresses obtained by domain name service (DNS)

• US 9,313,123 B2
• Filed: 07/26/2013
• Issued: 04/12/2016
• Est. Priority Date: 11/25/2008
• Status: Active Grant

• Current Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Original Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Inventors: Degaonkar, Sumedh, Muthiah, Manikam
• Primary Examiner(s): Zong, Ruolei
• Application Number:
  US13/951,761
• Publication Number:
  US 20130311608A1
• Time in Patent Office: 991 Days
• Field of Search: 709/228, 709/227, 709/219, 709/245, 709/246, 370/469, 370/389, 370/475, 370431-463
• US Class Current: 1/1
• CPC Class Codes: H04L 2101/677 Multiple interfaces, e.g. multihomed nodes
• CPC Class Codes: H04L 45/74 Address processing for routing
• CPC Class Codes: H04L 61/2503 Translation of Internet protocol [IP] addresses
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]

Abstract

Described herein are systems and methods for improving networked communication systems by transforming IP addresses. In particular, an intermediary device disposed in a network between a plurality of clients and a plurality of servers can receive a request for a service offered at a specified domain name. The appliance can also receive a DNS-resolved primary address for a server associated with the domain name, and transform the primary address to a secondary address for the server. The address transformation can be done by the intermediary to prevent service interruption between a client and server due, for example, to server maintenance.

Claims

1. A method for transforming by a device an internet protocol address received from a domain name service, the method comprising:

(a) transmitting, by a device intermediary to a plurality of clients and a plurality of servers, a request to a domain name service to determine an internet protocol address corresponding to a domain name of a server of the plurality of servers;

(b) identifying, by the device based on the domain name, a policy to transform an internet protocol address of the server received from the domain name service, the policy comprising a replacement IP address and a bit mask; and

(c) transforming, by the device responsive to receiving the server'"'"'s internet protocol address from the domain name service, the internet protocol address by replacing a portion of the IP address resulting from applying the bit mask of the policy to the IP address with the replacement IP address of the policy.

2. The method of claim 1, wherein step (a) further comprises receiving, by the device, a second request of the client to access the server identified by the domain name and transmitting, by the device, the request to the domain name service responsive to receiving the second request of the client.

3. The method of claim 2, wherein step (c) further comprises transmitting, by the device, the second request of the client to the server corresponding to the transformed IP address.

4. The method of claim 1, wherein step (a) further comprises transmitting, by a monitoring agent of the device, the request comprising a probe to the domain name service to determine a status of the internet protocol address.

5. The method of claim 1, wherein step (a) further comprises transmitting, by a domain name service agent of the device, the request comprising a DNS query to resolve the domain name.

6. The method of claim 1, wherein step (b) further comprises identifying, by the device, via the transformation policy the replacement IP address comprising a fixed set of one or more octet values.

7. The method of claim 1, wherein step (c) further comprises applying by the device the bit mask to the IP address to determine which one or more octets of the IP address to replace with the replacement IP address.

8. The method of claim 7, further comprising replacing by the device the octets of the IP address resulting from applying the bit mask to the IP address with a fixed set of octet values of the replacement IP address.

9. The method of claim 1, wherein step (c) further comprises transforming the IP address by computing a bitwise AND operation between the IP address and the bit mask and computing a bitwise OR operation between the replacement IP address and a result of the bitwise AND operation.

10. The method of claim 1, further comprising receiving, by the device, a configuration command from a user to configure the policy by specifying a domain name of the server and the replacement IP address and bit mask.

11. A system for transforming by a device an internet protocol address received from a domain name service, the system comprising:

a device configured to be intermediary to a plurality of clients and a plurality of servers and a virtual server of the device configured to receive a request to a domain name service to determine an internet protocol address corresponding to a domain name of a server of the plurality of servers;

wherein a policy manager of the device is configured to identify a policy based on the domain name, the policy configured to transform an internet protocol address of the server received from the domain name service,

wherein the policy comprises a replacement IP address and a bit mask; and

wherein a transformer of the device, responsive to receiving the server'"'"'s internet protocol address from the domain name service, is configured to transform the internet protocol address by replacing a portion of the IP address resulting from applying the bit mask of the policy to the IP address with the replacement IP address of the policy.

12. The system of claim 11, wherein the device is configured to receive a second request of the client to access the server identified by the domain name and to transmit the request to the domain name service responsive to receiving the second request of the client.

13. The system of claim 12, wherein the device is configured to transmit the second request of the client to the server corresponding to the transformed IP address.

14. The system of claim 11, further comprising a monitoring agent of the device configured to transmit the request comprising a probe to the domain name service to determine a status of the internet protocol address.

15. The system of claim 11, further comprising a domain name service agent of the device configured to transmit the request comprising a DNS query to resolve the domain name.

16. The system of claim 11, wherein the replacement IP address comprises a fixed set of one or more octet values.

17. The system of claim 11, wherein the device is configured to apply the bit mask to the IP address to determine which one or more octets of the IP address to replace with the replacement IP address.

18. The system of claim 17, wherein the device is configured to replace the octets of the IP address resulting from applying the bit mask to the IP address with a fixed set of octet values of the replacement IP address.

19. The system of claim 11, wherein the device is configured to transform the IP address by computing a bitwise AND operation between the IP address and the bit mask and computing a bitwise OR operation between the replacement IP address and a result of the bitwise AND operation.

20. The system of claim 11, wherein the device is configured to receive a configuration command from a user to configure the policy by specifying a domain name of the server and the replacement IP address and bit mask.