Proxy DNS Routing via Private Channels for Reliable Resolution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional DNS systems face performance degradation and security risks due to reliance on publically accessible networks, which can be affected by factors like DDOS attacks, network overload, and unexpected router downtime.
Innovation Solution
Implementing a proxy DNS module within an ISP's DNS resolver to route DNS requests through secure, private communication channels, bypassing public networks and using local or remote private name servers for resolution.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If DNS requests are routed through publically accessible networks, then network connectivity and accessibility are improved, but security and reliability deteriorate due to DDOS attacks, network overload, and router downtime
Solution Approach 1:
The patent introduces a proxy DNS server as an intermediary component between the DNS resolver and public name servers. This proxy server receives DNS requests from the resolver, forwards them through controlled network paths to authoritative name servers, and returns responses. The intermediary isolates the DNS resolution process from direct exposure to public network vulnerabilities while maintaining connectivity, thereby resolving the contradiction between accessibility and reliability.
2Ease of operation
If DNS requests are routed through publically accessible networks, then network connectivity is maintained, but performance deteriorates due to network congestion and attacks
Solution Approach 1:
The patent segments the DNS resolution process into distinct components: local DNS resolvers, proxy DNS servers, and authoritative name servers. By separating the resolution function from public network traffic and creating dedicated proxy servers that handle DNS queries through controlled paths, the system isolates DNS traffic from general network congestion, thereby maintaining connectivity while improving resolution speed and performance.
3Device complexity
If conventional DNS resolution is used without proxy mechanisms, then system complexity is minimized, but security vulnerabilities increase due to direct exposure to public networks
Solution Approach 1:
The proxy DNS server serves as a security intermediary that sits between the DNS resolver and public name servers. It filters and controls DNS traffic, blocking malicious requests and protecting the resolution process from DDOS attacks and other security threats. This adds a layer of security without significantly complicating the overall DNS system architecture, as the proxy operates as a standard network service.
Data Source
AI summary
Systems and methods are described herein for providing proxy mechanisms for DNS services, such as resolving DNS requests. In some embodiments, the systems and methods establish a Proxy DNS module at a DNS resolver of an internet service provider, and access, with the proxy DNS module, DNS queries destined for a public name server. The name server may be accessible by the DNS resolver via a publically-accessible network. Further, the systems and methods may route the accessed DNS queries to a private name server associated with the proxy DNS module and accessible via a private communications channel, and receive, from the private name server and via the private communications channel, IP addresses associated with the DNS queries.