Patent ID: 8977728
Filing Date: 2015-03-10
Classification: H04L

Abstract:
1. A method performed by data processing apparatus, the method comprising: maintaining (i) first data that identifies a set of one or more resources to which a policy of a network applies, and (ii) second data that identifies a set of one or more stored Internet Protocol (IP) addresses, and (iii) third data that associates each resource in the set with one or more IP addresses in the set of IP addresses; monitoring DNS responses; generating, from the monitored DNS responses, (i) fourth data that identifies a second new resource, and (ii) fifth data that identifies one or more second new IP addresses, and (iii) sixth data that associates the second new resource with one or more second new IP addresses; updating the first data, based on the fourth data, to include the new resource in the set of one or more resources; updating the second data, based on the fifth data, to include the one or more new IP addresses in the set of one or more IP addresses; updating the third data, based on the sixth data, to update the associations between the set of resources and the set of IP addresses; intercepting a request from a client device on the network for a requested resource identified by a requested IP address; determining that the requested IP address matches one of the IP addresses in the set of IP addresses; identifying a particular resource in the set of resources that is associated with the requested IP address; identifying a particular policy of the network that applies to the particular resource; and applying the particular policy to the request.