Managing domain name system (DNS) queries using a proxy DNS server

    公开(公告)号:US10033692B1

    公开(公告)日:2018-07-24

    申请号:US15726309

    申请日:2017-10-05

    申请人: Cloudflare, Inc.

    摘要: A proxy server for an authoritative nameserver of a domain receives a query from a requesting device directed to the authoritative nameserver for a resource record associated with the domain. The proxy server receives the query from the requesting device instead of the authoritative nameserver for the domain. The proxy server determines that a cached record for the queried resource record is in cache available to the proxy server but is expired, and queries the authoritative nameserver of the domain for the resource record. In response to determining that the authoritative nameserver of the domain failed to respond with the queried resource record, the proxy server accesses, in the cache available to the proxy server, the cached record for the resource record that is expired, and transmits the expired cached record for the resource record to the requesting device.

    Protecting Internet of Things (IoT) Devices at the Network Level

    公开(公告)号:US20190334869A1

    公开(公告)日:2019-10-31

    申请号:US16397536

    申请日:2019-04-29

    申请人: CLOUDFLARE, INC.

    发明人: Dani Grant

    摘要: An Internet of Things (IoT) protection service at the network level is described. A secure session is established between an edge server and an IoT client that is requesting to send data to an IoT device. The edge server receives the request from the IoT client over the secure session instead of the IoT device directly because a Domain Name System (DNS) request for a unique fully qualified domain name assigned to the IoT device returns an IP address of the edge server instead of an IP address of the IoT device. The edge server analyzes the request to determine whether to transmit the request to the IoT device, including applying web application firewall rule(s) against the request. If the request does not trigger any rule, then the edge server transmits the request to the IoT device. If the request triggers any rule, then the edge server blocks the request.