Selecting between domain name system servers of a plurality of networks

• US 9,531,664 B2
• Filed: 10/01/2015
• Issued: 12/27/2016
• Est. Priority Date: 05/23/2013
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Smith, Paul D., Stenzel, Harley A.
• Primary Examiner(s): HENDERSON, ESTHER BENOIT
• Application Number:
  US14/872,181
• Publication Number:
  US 20160028684A1
• Time in Patent Office: 453 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 43/04 Processing captured monitoring data, e.g. for logfile generation
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 61/4552 Lookup mechanisms between a plurality of directories; Synchronisation of directories, e.g. metadirectories

Abstract

Managing domain name system services for a plurality of networks is disclosed. A computer identifies information for the plurality of networks to which a client device is connected. The computer receives a request to identify a domain name. In response to the request, the computer selects a particular set of domain name system servers of a particular network in the plurality of networks based on the information for the plurality of networks and a set of rules for selecting the particular set of domain name system servers when identifying the domain name for the Internet protocol address. The computer then sends the request to identify the domain name for the Internet protocol address to a domain name system server in the particular set of domain name system servers.

Claims

1. A method for managing domain name system services for a plurality of networks, the method comprising:

identifying, by one or more processor units, information for the plurality of networks to which a client device is connected, the information for each network in the plurality of networks including a set of private domains, a set of domain name system servers for use in searching for Internet protocol addresses for domain names, and a set of routes, wherein the set of routes is a routing table, and wherein each route in the set of routes comprises a destination and a gateway, and electronic communications to the destination occur through the gateway;

receiving, by the one or more processor units, a request to identify a domain name for an Internet protocol address;

responsive to not having a cached answer for the request to identify the domain name for the Internet protocol address, determining, by the one or more processor units, to which domain name system servers of which network in the plurality of networks to send the request to identify the domain name for the Internet protocol address, using the information for the plurality of networks and a set of rules, wherein the set of rules, for selecting a particular set of domain name system servers when identifying the domain name for the Internet protocol address, includes a rule for selecting the particular set of domain name system servers for a particular network based on matches between portions of the Internet protocol address in the request and portions of destinations in the set of routes for each network in the plurality of networks;

selecting, by the one or more processor units, the particular network as a subset of the plurality of networks and the particular set of domain name system servers of the particular network using the information for the plurality of networks and the set of rules for selecting the particular set of domain name system servers when identifying the domain name for the Internet protocol address, wherein selecting, by the one or more processor units, the particular set of domain name system servers of the particular network in the plurality of networks further comprises;

identifying, by the one or more processor units, a subset of networks in plurality of networks that comprise at least one destination in the set of routes for a respective network that matches a largest number of portions of the Internet protocol address in the request; and

responsive to the subset of networks comprising only one network, selecting, by the one or more processor units, a respective set of domain name system servers of the one network in the subset of networks as the particular set of domain name system servers of the particular network; and

sending, by the one or more processor units, the request to identify the domain name for the Internet protocol address to a domain name system server in the particular set of domain name system servers.

2. The method of claim 1, wherein receiving the request, by the one or more processor units, to identify the domain name for the Internet protocol address further comprises intercepting the request on the client device before the request has been sent to any domain name system servers.

3. The method of claim 2, wherein an interception of the request prevents the client device from sending the request to any domain name system servers that are not in the particular set of domain name system servers of the particular network.

4. The method of claim 1, wherein the plurality of networks is a number of logical networks comprising a number of virtual private networks and number of public networks.

5. The method of claim 1, wherein the domain name is a fully qualified domain name.

6. A computer program product for managing domain name system services for a plurality of networks, the computer program product comprising program instructions stored on a computer readable storage device, for execution by a computer, the program instructions further comprising program instructions for:

identifying information for the plurality of networks to which a client device is connected, the information for each network in the plurality of networks including a set of private domains, a set of domain name system servers for use in searching for Internet protocol addresses for domain names, and a set of routes, wherein the set of routes is a routing table, and wherein each route in the set of routes comprises a destination and a gateway, and electronic communications to the destination occur through the gateway;

receiving a request to identify a domain name for an Internet protocol address;

responsive to not having a cached answer for the request to identify the domain name for the Internet protocol address, for determining to which domain name system servers of which network in the plurality of networks to send the request to identify the domain name for the Internet protocol address, using the information for the plurality of networks and a set of rules, wherein the set of rules, for selecting a particular set of domain name system servers when identifying the domain name for the Internet protocol address, includes a rule for selecting the particular set of domain name system servers for the particular network based on matches between portions of the Internet protocol address in the request and portions of destinations in the set of routes for each network in the plurality of networks;

selecting a particular network as a subset of the plurality of networks and the particular set of domain name system servers of the particular network using the information for the plurality of networks and the set of rules for selecting the particular set of domain name system servers when identifying the domain name for the Internet protocol address, wherein selecting the particular set of domain name system servers of the particular network in the plurality of networks further comprises;

identifying a subset of networks in plurality of networks that comprise at least one destination in the set of routes for the respective network that matches a largest number of portions of the Internet protocol address in the request; and

responsive to the subset of networks comprising only one network, selecting the respective set of domain name system servers of the one network in the subset of networks as the particular set of domain name system servers of the particular network; and

sending the request to identify the domain name for the Internet protocol address to a domain name system server in the particular set of domain name system servers.

7. The computer program product of claim 6, wherein the program instructions for receiving the request to identify the domain name for the Internet protocol address further comprise program instructions for intercepting the request on the client device before the request has been sent to any domain name system servers.

8. The computer program product of claim 7, wherein the program instructions for intercepting the request prevent the client device from sending the request to any domain name system servers that are not in the particular set of domain name system servers of the particular network.

9. The computer program product of claim 6, wherein the plurality of networks is a number of logical networks comprising a number of virtual private networks and number of public networks.

10. The computer program product of claim 6, wherein the domain name is a fully qualified domain name.

11. An apparatus for managing domain name system services for a plurality of networks, the apparatus comprising:

a bus;

a memory, having program instructions stored thereon, connected to the bus;

one or more processor units connected to the bus, wherein the one or more processor units execute the program instructions to direct the apparatus to;

identify, by the one or more processor units, information for the plurality of networks to which a client device is connected, the information for each network in the plurality of networks including a set of private domains, a set of domain name system servers for use in searching for Internet protocol addresses for domain names, and a set of routes, wherein the set of routes is a routing table, and wherein each route in the set of routes comprises a destination and a gateway, and electronic communications to the destination occur through the gateway;

receive, by the one or more processor units, a request to identify a domain name for an Internet protocol address;

responsive to not having a cached answer for the request to identify the domain name for the Internet protocol address, determine, by the one or more processor units, to which domain name system servers of which network in the plurality of networks to send the request to identify the domain name for the Internet protocol address, using the information for the plurality of networks and a set of rules, wherein the set of rules, for selecting a particular set of domain name system servers when identifying the domain name for the Internet protocol address, includes a rule for selecting the particular set of domain name system servers for the particular network based on matches between portions of the Internet protocol address in the request and portions of destinations in the set of routes for each network in the plurality of networks;

select, by the one or more processor units, a particular network as a subset of the plurality of networks and the particular set of domain name system servers of the particular network using the information for the plurality of networks and the set of rules for selecting the particular set of domain name system servers when identifying the domain name for the Internet protocol address, wherein selecting, by the one or more processor units, the particular set of domain name system servers of the particular network in the plurality of networks further comprises;

identify, by the one or more processor units, a subset of networks in plurality of networks that comprise at least one destination in the set of routes for the respective network that matches a largest number of portions of the Internet protocol address in the request; and

responsive to the subset of networks comprising only one network, select, by the one or more processor units, the respective set of domain name system servers of the one network in the subset of networks as the particular set of domain name system servers of the particular network; and

send, by the one or more processor units, the request to identify the domain name for the Internet protocol address to a domain name system server in the particular set of domain name system servers.

12. The apparatus of claim 11, wherein the one or more processor units further execute the program instructions to receive the request to identify the domain name for the Internet protocol address to intercept the request on the client device before the request has been sent to any domain name system servers.

13. The apparatus of claim 12, wherein an interception of the request prevents the client device from sending the request to any domain name system servers, that are not in the particular set of domain name system servers of the particular network.

14. The apparatus of claim 11, wherein the plurality of networks is a number of logical networks comprising a number of virtual private networks and number of public networks.

15. The apparatus of claim 11, wherein the domain name is a fully qualified domain name.