Resolution of domain name requests in heterogeneous network environments

• US 10,862,852 B1
• Filed: 11/16/2018
• Issued: 12/08/2020
• Est. Priority Date: 11/16/2018
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Thunga, Kiran, Damick, Jeffrey J., Santoso, Yohanes, Xia, Bing, Li, Glen, Ghazanfari, Parham, Bradley, Daniel, Wagner, Brandon Mark, Wang, Yu, Tao, Huida, Yohannes, Mekias Mebrahtu, Singer, Jordan Harris, Tyler, Kevin, McCullagh, Gavin Derek
• Primary Examiner(s): Wang, Liang Che A
• Application Number:
  US16/194,229
• Time in Patent Office: 753 Days
• Field of Search: 709217, 709218, 709219, 709245, 709247
• CPC Class Codes: H04L 61/2557 Translation policies or rules
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 67/565 Conversion or adaptation of application format or content adding application control or application functional data H04L67/561
• CPC Class Codes: H04L 67/60 Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources admission control or resource allocation H04L47/70

Abstract

Systems and methods are for domain name system (DNS) resolutions in heterogeneous network environments including a virtual private cloud (VPC). An administrator of a virtual private cloud (VPC) specifies rules identifying sources for resolving DNS resolution requests. The rules may include routing a request to a source outside the VPC such as to an on-premises DNS resolver through an outbound IP endpoint.

Claims

1. A system for resolution of domain name system (DNS) requests obtained from devices of a virtual private cloud network environment (VPC), wherein the VPC includes one or more virtual computing devices arranged within a virtualized local area network, the virtualized local area network generated by a substrate network hosting the VPC, the system comprising:

a non-transitory data store including data identifying one or more rules designated by a VPC administrator for handling requests to resolve domain names into corresponding network addresses, wherein a rule included in the one or more rules designates a network address of a resolution server for resolving domain names;

at least one computing device configured with computer-executable instructions that, when executed, cause the at least one computing device to;

receive, at a resolver endpoint of a VPC, a request from a client computing device to resolve a domain name into a corresponding network address;

identify the rule included in the one or more rules to apply for the request based at least in part on the domain name included in the request;

transmit the request to the network address of the resolution server designated within the rule, wherein the resolution server is a DNS server implemented within the VPC;

receive, from the resolution server, the corresponding network address; and

transmit, to the client computing device, the corresponding network address in fulfillment of the request.

2. The system of claim 1, wherein the private DNS server is identified within the one or more rules by at least one of a network address or an identifier associated with the VPC.

3. The system of claim 1, wherein the computer-executable instructions further cause the at least one computing device to:

receive the request from the device via a private network connection over a public network.

4. The system of claim 1, wherein the VPC administrator designates the one or more rules for a different VPC than the VPC hosting the resolver endpoint.

5. A computer-implemented method comprising:

receiving, from a virtual private cloud network environment (VPC) administrator, one or more rules for handling requests to resolve domain names into corresponding network addresses, wherein a rule included in the one or more rules designates a network address of a resolution server for resolving domain names;

receiving, at a resolver endpoint of a VPC, a request from a computing device to resolve a domain name into a corresponding network address, wherein the VPC includes one or more computing devices arranged within a virtualized local area network, wherein the virtualized local area network is generated by a substrate network hosting the VPC;

identifying the rule included in the one or more rules to apply for the request based at least in part on the domain name included in the request;

transmitting the request to the network address of the resolution server designated within the rule, wherein the resolution server is a DNS server implemented within the VPC;

receiving, from the resolution server, the corresponding network address; and

transmitting, to the computing device, the corresponding network address in fulfillment of the request.

6. The computer-implemented method of claim 5, wherein the request is transmitted to the network address via a resolver egress endpoint of the VPC.

7. The computer-implemented method of claim 5, wherein the request is formatted according to a domain name system (DNS) protocol.

8. The computer-implemented method of claim 5 further comprising receiving the request from the computing device via a private network connection over a public network.

9. The computer-implemented method of claim 5, wherein the VPC administrator designates the one or more rules for a different VPC than the VPC hosting the resolver endpoint.

10. The computer-implemented method of claim 5 further comprising:

identifying the rule and a second candidate rule for the request;

comparing a first quantity of the domain name designated in the rule to a second quantity of the domain name designated in the second candidate rule; and

determining that the first quantity exceeds the second quantity.

11. A computing system comprising:

at least one processing device; and

a non-transitory computer readable media including computer-executable instructions that, when executed by the at least one processing device, cause the computing system to;

receive, from a virtual private cloud network environment (VPC) administrator, one or more rules for handling requests to resolve domain names into corresponding network addresses, wherein a rule included in the one or more rules designates a network address of a resolution server for resolving domain names;

receive, at a resolver endpoint of a VPC, a request from a computing device to resolve a domain name into a corresponding network address, wherein the VPC includes one or more computing devices arranged within a virtualized local area network, wherein the virtualized local area network is generated by a substrate network hosting the VPC;

identify the rule included in the one or more rules to apply for the request based at least in part on the domain name included in the request;

route the request to the network address of the resolution server designated within the rule, wherein the resolution server is a DNS server implemented within the VPC or another VPC, and wherein the request is routed directed to the network address over one or more private networks;

receive, from the resolution server, the corresponding network address; and

transmit, to the computing device, the corresponding network address in fulfillment of the request.

12. The computing system of claim 11, wherein the request is routed to the network address via a resolver egress endpoint of the VPC.

13. The computing system of claim 11, wherein the VPC administrator designates the one or more rules for a different VPC than the VPC hosting the resolver endpoint.

14. The computing system of claim 11, wherein the computer-executable instructions that, when executed by the at least one processing device, further cause the computing system to:

identify the rule and a second candidate rule for the request;

compare a first quantity of the domain name designated in the rule to a second quantity of the domain name designated in the second candidate rule; and

determine that the first quantity exceeds the second quantity.