Adaptive DNS Resolution in Virtual Private Clouds

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Virtual private cloud networks face challenges in managing domain name system (DNS) requests due to the lack of direct physical addresses and the complexity of routing communications between virtualized systems, which can lead to inefficiencies and increased resource usage when trying to configure private DNS resolution servers.

Innovation Solution

An adaptive DNS resolution system that processes DNS requests based on rules specified by administrators, allowing requests to be routed to different DNS servers, including private or public systems, depending on the source VPC and configured rules, thereby improving efficiency and flexibility.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If a private DNS resolution server is configured for each VPC to handle DNS requests, then DNS resolution capability is provided, but device complexity and resource usage increase

Engineering Contradiction:
ImproveDNS resolution capabilityVSAvoidconfiguration complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent merges DNS resolution functionality into the network virtualization layer rather than requiring separate private DNS servers for each VPC. The virtual network controller intercepts and processes DNS requests centrally, combining multiple VPC's DNS needs into a unified handling mechanism that reduces overall system complexity while maintaining individual VPC customization capabilities.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The patent introduces an intermediary component (virtual network controller) that sits between VPC instances and external DNS infrastructure. This mediator intercepts DNS requests from virtualized systems, applies appropriate resolution rules, and forwards requests to suitable DNS servers, thereby eliminating the need for each VPC to maintain its own private DNS server while still providing customized DNS resolution.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If public network addressing schemes are used for virtualized systems, then communication between systems is enabled, but direct physical addressing is lost making transmission more difficult

Engineering Contradiction:
Improvecommunication capabilityVSAvoidrouting complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent employs the virtual network controller as an intermediary that translates between virtual network addresses and physical network addresses. When DNS requests or other communications need to traverse the physical network, the controller intercepts these requests, performs address translation using maintained mappings, and forwards them appropriately, thereby hiding the complexity of physical addressing from virtualized systems while enabling efficient transmission.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent segments the addressing function into two distinct layers: virtual addressing for internal VPC communication and physical addressing for external network transmission. The virtual network controller maintains the segmentation boundary by handling address translation only when necessary, allowing virtualized systems to use simple virtual addresses while the underlying physical network infrastructure handles the complexity of actual transmission routing.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS10469442B2Adaptive resolution of domain name requests in virtual private cloud network environments
Publication Date: 2019.11.05 AMAZON TECH INC
  • US10469442B2 patent drawing
  • US10469442B2 patent drawing
  • US10469442B2 patent drawing

AI summary

Systems and methods are described to enable adaptive handling of domain resolution requests originating from a virtual private cloud (VPC) networking environment. An administrator of the VPC can provide a set of rules specific to the VPC that designates how requests for a domain name should be handled. The rules may specify, for example, that a request for a given domain name should be routed to a particular domain name server, which may include a private domain name server, should be dropped, or should be routed according to a default behavior (e.g., a public domain name system). Resolution requests originating in the VPC can be associated with a VPC identifier. When an adaptive resolution system receives the request, it can retrieve rules associated with the VPC identifier, and apply the rules to determine further routing for the request.