Bifurcated DNS Gateway for Location-Independent Filtering
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing website filtering techniques rely on local configurations and client software, which are ineffective when users access the internet from different locations, such as public hotspots or friends' homes, as they lack consistent content restrictions.
Innovation Solution
Implementing a bifurcated DNS system where a services gateway splits DNS requests between an ISP DNS server and an external website filtering DNS server, allowing parallel processing and ensuring consistent filtering policies are applied regardless of the user's location by associating device identifiers with filtering policies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If local website filtering is implemented at home gateway, then parental control and content restrictions are effective at home, but filtering is lost when users access internet from different locations such as public hotspots or friends' homes
Solution Approach 1:
The DNS resolution process is segmented into two independent parallel paths: one path queries the ISP's DNS server for standard resolution, while the other path queries an external DNS filtering service for content control decisions. This segmentation allows the system to maintain filtering policies across different locations without complicating the overall DNS configuration, as each path operates independently but contributes to the final filtering decision.
2Reliability
If DNS requests are forwarded to external filtering service, then consistent filtering policies are applied across different locations, but DNS resolution may be impacted if external DNS fails to respond
Solution Approach 1:
The system performs preliminary DNS resolution by querying the ISP's DNS server in parallel with the external filtering service. This preliminary action ensures that if the external filtering service fails to respond, the DNS resolution has already been completed or is in progress, allowing the system to fall back to the ISP's DNS response without impacting overall resolution speed. This preliminary action maintains filtering reliability while preserving DNS productivity.
3Productivity
If bifurcated DNS system is implemented, then DNS resolution performance is improved through parallel processing, but device complexity increases due to additional DNS server interactions
Solution Approach 1:
The gateway device is configured with multi-functionality to handle both standard DNS resolution and filtering-based DNS resolution simultaneously. By making the gateway universal in its DNS handling capabilities, the system achieves parallel processing for improved resolution speed without requiring separate dedicated devices. The gateway's enhanced configuration manages multiple DNS server interactions through a unified process, reducing the practical complexity despite the increased functional requirements.
Data Source
AI summary
Systems and techniques for location independent website filtering using bifurcated domain name system are described herein. A domain name system (DNS) request may be received. A unique device identifier may be received for the requesting device. The ISP may provide external network services to the services gateway. The DNS service provider may maintain a website filtering policy. The DNS request may be forwarded to the DNS service of the ISP. The DNS service of the ISP may respond with a DNS resolution. An access control request may be forwarded to the DNS service provider external to the ISP. A website filtering policy associated with the device identifier may be used to determine website access. The DNS service provider external to the ISP may respond with a grant/block status. Based on the returned grant/block status, the services gateway may respond to the requesting device with the DNS resolution or access denial.