Calix Limited

Henning Els

Ari Sodhi

Miguel A Alonso Ferre

Systems and techniques for location independent website filtering using bifurcated domain name system are described herein. A domain name system (DNS) request may be received. A unique device identifier may be received for the requesting device. The ISP may provide external network services to the services gateway. The DNS service provider may maintain a website filtering policy. The DNS request may be forwarded to the DNS service of the ISP. The DNS service of the ISP may respond with a DNS resolution. An access control request may be forwarded to the DNS service provider external to the ISP. A website filtering policy associated with the device identifier may be used to determine website access. The DNS service provider external to the ISP may respond with a grant/block status. Based on the returned grant/block status, the services gateway may respond to the requesting device with the DNS resolution or access denial.

Device specific website filtering using a bifurcated domain name system

Systems and techniques for website filtering using bifurcated domain name system are described herein. A domain name system (DNS) request may be received. An internet address for a DNS service of an internet service provider (ISP) and an internet address for a DNS service provider external to the ISP may be determined. The ISP may provide external network services to the services gateway. The DNS service provider may maintain a website filtering list. The DNS request may be forwarded to the internet address for the DNS service of the ISP and the internet address of the DNS service provider external to the ISP. A first response and a second response to the DNS request may be received from the respective DNS services. A DNS request response may be transmitted to a client computing device connected to an internal network of the services gateway upon receipt of the first and second responses.

Website filtering using bifurcated domain name system

Techniques for network packet flow analysis and control are described herein. One example method may include obtaining network topology information corresponding to a plurality of nodes of an access network, receiving communication monitoring messages from two or more of the plurality of nodes, wherein the communication monitoring messages include communication information corresponding to a plurality of communication layers, and determining information loss statistics associated with the plurality of nodes based on the communication monitoring messages and the network topology information.

Growing community of inventors

Penngrove, CA, United States of America

Henning Els