Patent ID: 8825839

Claim:
A method comprising: receiving a first Domain Name System (DNS) update request at a tenant router in a server hosting system from a first tenant, the first DNS update request addressed to a DNS server and requesting the DNS server to associate a first tenant-side fully-qualified domain name (FQDN) with a first tenant-side IP address, the server hosting system comprising one or more computing devices that provide the tenant router, a first managed server, and a second managed server, the tenant router and the first managed server associated with the first tenant of the server hosting system, the second managed server associated with a second tenant of the server hosting system, the first tenant-side IP address concurrently being an IP address of the first managed server and the second managed server; and in response to receiving the first DNS update request at the tenant router via a tenant virtual local area network, sending a first DNS data message from the tenant router to a management system for the server hosting system via a system virtual local area network, the first DNS data message indicating the first tenant-side IP address, the first tenant-side FQDN, and a router IP address of the tenant router, the router IP address associated with the first tenant but not the second tenant; wherein subsequent communications from the first tenant to the first tenant-side IP address are routed to the first managed server and not the second managed server; wherein receiving the first DNS update request comprises receiving the first DNS update request from a first virtual local-area network (VLAN), wherein the first managed server and the tenant router are hosts on the first VLAN, wherein the second managed server is not a host on the first VLAN, the first VLAN comprising the tenant virtual local area network; wherein sending the first DNS data message comprises sending the first DNS data message on a second VLAN, the tenant router and the management system being hosts on the second VLAN; receiving, by the tenant router, a given packet on the second VLAN, the given packet having a destination address field specifying a management-side IP address in a management-side IP address range, the management-side IP address range associated with a tenant cloud, wherein the management-side IP address range does not overlap with management-side IP address ranges for other tenant clouds in the server hosting system; replacing, by the tenant router, the management-side IP address specified by the destination address field of the given packet with the first tenant-side IP address; and after replacing the management-side IP address specified by the destination address field, sending, by the tenant router, the given packet on the first VLAN.