Level 3 Communications, LLC

Sandpiper Cdn, LLC

Joelle T Maslak

Joseph C Lawrence

Kevin Christopher Johns

William Hopkins

Todd James Williamson

Kevin Brady

Aspects of the present disclosure involve systems, methods, computer program products, and the like, for providing a proxy server or scrubbing service for an authoritative domain name server (DNS) of a CDN to prevent or otherwise mitigate attacks on the server. The proxy server may receive incoming requests to the authoritative DNS and determine which requests are valid and which are potentially part of an attack on the network. In one embodiment, the proxy server may then 'scrub' or otherwise remove the requests of the attack to mitigate the effect of the attack on the network. For example, the proxy server may ignore the request, may direct the request to a “dead-end” server or other device to prevent overloading of the target device, may instruct a device from which the request was sent to discard the request, etc.

System and method for scrubbing DNS in a telecommunications network to mitigate attacks

Aspects of the present disclosure involve systems, methods, computer program products, and the like, for determining an estimated capacity for providing data from a telecommunications network to a plurality of end users. In one implementation, the estimated capacity for delivering the data to the end users is per transmission path or per access network connected to the telecommunications network. This information may be aggregated into a traffic flow table that illustrates the traffic flow and available capacity to one or more end user networks. Through analysis of the traffic flow table, the system determines an estimated available capacity to provide the data to the end users. The traffic flow table thus provides a more accurate estimate of the capacity of the telecommunications network to provide the data to the end users over previous capacity estimates.

System and method for determining capacity of a telecommunications network

Aspects of the present disclosure involve a CDN utilizing a Direct Server Return (DSR) request command to create a tunnel from one content server to another content server of the CDN. Through the DSR tunnel, a request for content may be served from a content server that is more advantageous for the CDN for any number of reasons, such as from a content server that is logically closer to the content server. In determining when a DSR tunnel is created to provide the content, the CDN may access a database storing various information concerning the CDN, such as the location of egress gateways of the CDN in relation to one or more content servers, connecting network location information, the capabilities of one or more content servers, and/or load information of available content servers.

Content delivery systems and methods

Aspects of the present disclosure involve systems, methods, computer program products, and the like, for controlling a congestion window (CWND) value of a communication session of a CDN. In particular, a content server may analyze a request to determine or receive an indication of the type of content being requested. The content server may then set the initial CWND based on the type of content being requested. For example, the content server may set a relatively high CWND value for requested content that is not particularly large, such as image files or text, so that the data of the content is received at the client device quickly. For larger files or files that a have a determined smaller urgency, the initial CWND may be set at a lower value to ensure that providing the data of the content does not congest the link between the devices.

Systems and methods for adjusting a congestion window value of a content delivery network

Implementations described and claimed herein provide systems and methods for serving content over a network. In one implementation, a method of serving content is provided. The method includes maintaining a first address record associated with serving a resource and a second address record associated with serving the same resource. The first address record is further associated with a first protocol for a first device capable of serving the resource. Similarly, the second address record is associated with a second protocol, different from the first protocol, for a second device, distinct from the first device, capable of serving the resource. The method further includes providing, in response to at least one resolution request for the resource, the first address record and the second address record.

Systems and methods for content server rendezvous in a dual stack protocol network

A method of generating a routing table containing information as to the weighted distance between client's that use a resolver and each rack gateway, taking into account how traffic to each client can egress from the CDN AS. The routing table is generated from matrix multiplication of two matrices. One matrix contains information as to the proportion of each client's use of each resolver in a first autonomous system. The second matrix contains information as to the distance between each client and each rack, with respect to an egress gateway, in a second autonomous system. The resulting routing table is used to identify a gateway from which to serve content to a client.

DNS rendezvous localization

Aspects of the present disclosure involve systems, methods, computer program products, and the like, for managing the distribution of content and/or communications from a telecommunications or computer network to an end user of the network. In general, the system receives a request for content from a user of the network and analyzes the request to determine an estimated geographic region and/or an access network associated with the requesting device. Based on the determined geographic region or access network, a networking device returns a specific anycast IP address from which the content may be received. In this manner, the content providing network may utilize multiple anycast IP addresses within the network to provide content to one or more end users of the network. The specific anycast IP address is provided to an end user device to obtain the requested content.

Anycast routing techniques in a network

Aspects of the present disclosure involve systems, methods, computer program products, and the like, for correlating information associated with one networking transmission protocol, such as Internet Protocol version 6 (IPv6), to information associated with a different networking transmission protocol, such as Internet Protocol version 6 (IPv4). More specifically, when resolving an Internet Protocol (IP) address associated with a requesting device to a network, the system may base the resolved destination on one or more attributes of a known address to build a network mapping of the received IP address. In one specific example, an IPv6 address is received and associated with a known IPv4 address to map the network.

System and method for correlating routing protocol information

Aspects of the present disclosure involve systems, methods, computer program products, and the like, for providing a proxy server or scrubbing service for an authoritative domain name server (DNS) of a CDN to prevent or otherwise mitigate attacks on the server. The proxy server may receive incoming requests to the authoritative DNS and determine which requests are valid and which are potentially part of an attack on the network. In one embodiment, the proxy server may then 'scrub' or otherwise remove the requests of the attack to mitigate the effect of the attack on the network. For example, the proxy server may ignore the request, may direct the request to a 'dead-end' server or other device to prevent overloading of the target device, may instruct a device from which the request was sent to discard the request, etc.

Aspects of the present disclosure involve systems, methods, computer program products, and the like, for utilizing multiple anycast addresses within a domain name system (DNS) architecture of a CDN. one or more DNS servers of the architecture may announce a plurality of anycast addresses for receiving DNS requests from requesting devices. The group of addresses may be dispersed (and/or announced by) the DNS servers of the architecture such that each server announces a subset of the available addresses. The number and identity of the subset of available anycast addresses utilized may vary from server to server of the DNS architecture and may be determined based on groups of servers, configurations of metros or gateways of the DNS architecture, or performance metrics of one or more servers.

Growing community of inventors

Golden, CO, United States of America

Joelle T Maslak