Apparatus and Method for Domain Name Resolution

Abstract

An apparatus and method for enhancing the infrastructure of a network such as the Internet is disclosed. Multiple edge servers and edge caches are provided at the edge of the network so as to cover and monitor all points of presence. The edge servers selectively intercept domain name translation requests generated by downstream clients, coupled to the monitored points of presence, to subscribing Web servers and provide translations which either enhance content delivery services or redirect the requesting client to the edge cache to make its content requests. Further, network traffic monitoring is provided in order to detect malicious or otherwise unauthorized data transmissions.

We claim: 
     
         1 . An apparatus for facilitating communications between a client and a server over a network, said apparatus comprising:
 a request interceptor coupled with said network, said network operative to transmit a plurality of translation requests including a first translation request generated by said client, said first translation request comprising a first address identifying said server, said first translation request being directed, by said client, to a first address translator separate from said request interceptor, said first address translator being coupled with said network and operative to, when said first translation request is received, translate said first address into a first translated address and to return said first translated address to said client via said network thereby facilitating said communications between said client and said server, said request interceptor being operative to selectively intercept said first translation request from among said plurality of translation requests prior to receipt by said first address translator and to translate said first address into a second translated address and return said second translated address to said client via said network, said selective interception being determined based on a criteria other than only that said first translation request is one of said plurality of translation requests.   
     
     
         2 . The apparatus of  claim 1 , wherein said network comprises the Internet. 
     
     
         3 . The apparatus of  claim 1 , wherein said client comprises a computer. 
     
     
         4 . The apparatus of  claim 1 , wherein said client comprises a private network. 
     
     
         5 . The apparatus of  claim 4 , wherein said private network further comprises a private address translator operative to generate said first translation request. 
     
     
         6 . The apparatus of  claim 1 , wherein said first address comprises a domain name, and said first translated address and said second translated address comprise internet protocol addresses. 
     
     
         7 . The apparatus of  claim 1 , wherein said first address comprises a symbolic network address, and said first translated address and said second translated address comprise physical network addresses. 
     
     
         8 . The apparatus of  claim 7 , wherein said first translated address is different from said second translated address. 
     
     
         9 . The apparatus of  claim 7 , wherein said first translated address is associated with said first server, and said second translated address is associated with a first cache. 
     
     
         10 . The apparatus of  claim 1 , wherein said first address is characterized by being human comprehensible, and said first translated address and said second translated address are characterized by being computer readable. 
     
     
         11 . The apparatus of  claim 1 , wherein said second translated address identifies a cache affiliated with said server and proximate to said client. 
     
     
         12 . The apparatus of  claim 11 , wherein said apparatus further comprises said cache, said cache being coupled with said request interceptor. 
     
     
         13 . The apparatus of  claim 11 , wherein said proximity comprises geographic proximity. 
     
     
         14 . The apparatus of  claim 11 , wherein said network further comprises a topology, said proximity comprising logical proximity based on said topology. 
     
     
         15 . The apparatus of  claim 1 , wherein said request interceptor is coupled with a network router. 
     
     
         16 . The apparatus of  claim 1 , wherein said request interceptor is coupled with a second address translator, said second address translator operative to receive said selectively intercepted first translation request from said request interceptor and translate said first address into said second translated address. 
     
     
         17 . The apparatus of  claim 1 , further comprising a traffic monitor coupled with said network, wherein said network is further operative to transmit data between said client and said server, said traffic monitor operative to monitor said transmitted data. 
     
     
         18 . The apparatus of  claim 17 , wherein said traffic monitor is further operative to detect malicious program code within said transmitted data. 
     
     
         19 . The apparatus of  claim 17 , wherein said traffic monitor is further operative to detect unauthorized data within said transmitted data. 
     
     
         20 . The apparatus of  claim 17 , wherein said traffic monitor is further operative to detect forged communications within said transmitted data. 
     
     
         21 . A method of facilitating communications over a network, said network comprising a server and at least one sub-network coupled with said server, said at least one sub-network coupled with a first translator and a client, said method comprising:
 monitoring said at least one sub-network for a first translation request of a plurality of translation requests, said first translation request generated by said client and directed by said client to said first translator, said first translation request comprising a first address intended to be translated into a first translated address by said first translator;   intercepting, selectively by a device separate from said first translator, said first translation request from among said plurality of translation requests prior to receipt by said first translator and translation of said first address thereby, based on a criteria other than only that said first translation request is one of said plurality of translation requests;   translating, by said device, said first address of said intercepted first translation request into a second translated address; and   returning said second translated address to said client.   
     
     
         22 . The method of  claim 21 , wherein said first address is a domain name, said first translated address is a first internet protocol address and said second translated address is a second internet protocol address different from said first internet protocol address. 
     
     
         23 . The method of  claim 21 , wherein said second translated address is associated with a cache affiliated with said server. 
     
     
         24 . The method of  claim 23 , wherein said translating further comprises determining said second translated address to be an address associated with a proximately optimal cache affiliated with said server relative to said client. 
     
     
         25 . The method of  claim 24 , wherein said cache is geographically optimal. 
     
     
         26 . The method of  claim 24 , wherein said cache is proximately optimal based on a topology of said network. 
     
     
         27 . The method of  claim 21 , wherein said translating comprises translating, by a second translator coupled with said device, said first address of said intercepted first translation request into a second translated address. 
     
     
         28 . An apparatus for facilitating communications between a client and a first server and a second server over a network, said apparatus comprising:
 a request interceptor coupled with said network, said network operative to transmit a plurality of translation requests including a first translation request and a second translation request generated by said client, said first translation request comprising a first address identifying said first server and said second translation request comprising a second address identifying said second server, said first translation request and said second translation request being directed by said client to a first address translator separate from said request interceptor, said first address translator being coupled with said network and operative to, when said first translation request and said second translation request are received, translate said first address into a first translated address and translate said second address into a second translated address and to return said first translated address and said second translated address to said client via said network thereby facilitating said communications between said client and said first server and said second server, said request interceptor being operative to selectively intercept said first translation request from among said plurality of translation requests prior to receipt by said first address translator and to translate said first address into a third translated address and return said third translated address to said client via said network, said selective interception being determined based on a criteria other than only that said first translation request is one of said plurality of translation requests   
     
     
         29 . The apparatus of  claim 28 , wherein said request interceptor is coupled with a second address translator, said second address translator operative to receive said selectively intercepted first translation request from said request interceptor and translate said first address into said third translated address. 
     
     
         30 . The apparatus of  claim 28 , wherein said request interceptor is further operative to selectively intercept said second translation request from among said plurality of translation requests prior to receipt by said first address translator, said selective interception being determined based on said criteria other than only that said second translation request is one of said plurality of translation requests, and wherein the apparatus further comprises a request modifier coupled with said request interceptor and operative to modify said second address to a modified address and a request forwarder coupled with said request modifier and operative to forward said modified second translation request to said first address translator. 
     
     
         31 . A method of facilitating communications over a network, said network comprising a first server and a second server and at least one sub-network coupled with said first server and said second server, said at least one sub-network coupled with a translator and a client, said method comprising:
 monitoring said at least one sub-network for a first translation request and a second translation request of a plurality of translation requests, said first translation request and said second translation request generated by said client and directed by said client to said translator, said first translation request comprising a first address intended to be translated into a first translated address by said translator and said second translation request comprising a second address intended to be translated into a second translated address by said translator;   intercepting, selectively by a device separate from said translator, said first translation request from among said plurality of translation requests prior to receipt by said translator based on a criteria other than only that said first translation request is one of said plurality of translation requests;   translating said first address of said intercepted first translation request into a third translated address; and   returning said third translated address to said client.   
     
     
         32 . The method of  claim 31 , further comprising:
 intercepting, selectively by said device, said second translation request from among said plurality of translation requests prior to receipt by said translator based on said criteria other than only that said second translation request is one of said plurality of translation requests;   modifying said second address of said intercepted second translation request into a modified address; and   forwarding said modified second translation request to said translator.