Patent ID: 8788708
Filing Date: 2014-07-22
Classification: H04L

Abstract:
1. A method comprising performing the following by a domain name service (DNS) server of a first network: receiving a network address of a DNS server of a second network, the second network coupled to the first network through a first gateway between the second network and a third network and a second gateway between the third network and the first network; receiving a request from a client of the second network for a DNS lookup of a name of a host; determining whether the host is on the second network; and if the host is on the second network: wherein the first gateway is operable to: establish a secure communication tunnel with the client of the second network, the secure communication tunnel extending from the first gateway through the third network and the second gateway to the client; and notify the client that requests to the network address or a network prefix covering the network address of the DNS server of the second network should not pass through the secure communication tunnel.