Patent ID: 8800011

Claim:
A system comprising: a domain name system (DNS) service configured on a first set of servers of a data center, the DNS service having a DNS public application programming interface (API) to associate a fully qualified domain name (FQDN) with a resource of the data center allocated to a customer, the DNS service to generate and store a forward zone to return an Internet protocol (IP) address for the resource responsive to receipt of the FQDN and to generate and store a reverse zone to return the FQDN responsive to receipt of the IP address; and a cloud server service configured on a second set of servers of the data center coupled to the DNS service, the cloud server service including a plurality of cloud server resources each associated with at least one IP address, the cloud server service having a block of unallocated IP addresses and an allocator to allocate, in a decentralized manner, at least one of the IP addresses to a cloud server resource and to record the allocation in a table that associates a list of one or more IP addresses for each of the plurality of cloud server resources, the cloud server service to receive the block of unallocated IP addresses from a network authority of the data center that receives the block of unallocated IP addresses from a central DNS authority, wherein the DNS service is to validate a customer request to modify a reverse zone using the list of the one or more IP addresses for a cloud server resource associated with the reverse zone and received from the cloud server service responsive to a query from the DNS service, the DNS service to receive an authentication token with the customer request, and issue the authentication token with the query to enable the query to masquerade as originating from the customer, the authentication token issued to the customer from an authentication service of the data center responsive to a private key of the customer.