Cisco Technology, Inc.

Verisign, Inc.

Sean Mountcastle

David Blacka

Wayne Clayton Cannon

Christopher A Smith

Rudy Zulkarnain

S Daniel James

Piet Barber

Anita Recharla

Michael A Bentofsky

Rich Verjinski

A method for adding a blacklisted site to a whitelist. At least one whitelisting query may be generated for an encoded domain in the tag format: a nonce, a hash, a blocked-domain, and a static domain, each separated by a delimiter. The nonce is a unique identifier for the at least one query. The hash is a cryptographic hash of an IP address of the user, a normalized timestamp, and the blocked domain. The static domain is a constant domain representing the at least one query. The at least one query may be sent to a first recursive DNS server. The first recursive DNS server may create a message including whitelist information. The first recursive DNS server may send the message to a second recursive DNS server.

System and method for adding a whitelist entry via DNS

A method for adding a blacklisted site to a whitelist includes requesting a blacklisted site via a network, the blacklisted site having a domain name of the format &#x3c;blocked-domain&#x3e;. The method includes generating queries for an encoded domain, the encoded domain being of the format &#x3c;nonce&#x3e;.&#x3c;hash&#x3e;.&#x3c;blocked-domain&#x3e;.&#x3c;static domain&#x3e;, sending the queries to a recursive DNS server, and sending responses based on the queries to a cache of a web browser. The method includes requesting by the web browser the blacklisted site, adding the blacklisted site to the whitelist, sending an IP address corresponding to the blacklisted site to the web browsers, and accessing the blacklisted site.

A method of filtering a plurality of DNS queries, wherein each DNS query includes a query name and a resource record type, includes defining a filter rule including a domain name, a filter type, and a throttle percentage and forming a filter file including the filter rule. The method also includes transmitting the filter file from a server to a plurality of filter proxies, transmitting the filter file from each of the plurality of filter proxies to one or more processing engines, and receiving the plurality of DNS queries at one of the one or more processing engines. The method includes determining a match between the domain name and the query name and between the resource record type and the filter type for a subset of the plurality of DNS queries, and blocking a predetermined percentage (equal to the throttle percentage) of the subset of the plurality of DNS queries.

Method and system for filtering of network traffic

Techniques for managing network elements in a network are provided. A network element dependent module is utilized to provide functions for managing a specific type of network element. The network element dependent module can be for a network element type and software version. The network element application can manage new network elements, even those with new features, without requiring an update to the network management application.

Network element management

Techniques for partitioning a network element into multiple virtual network elements are provided. Resources of the network element are allocated to the virtual network elements and a virtual network element manager manages the execution of the virtual network elements. The virtual network elements allow the network element to conceptually function and be customized as distinct network elements.

Growing community of inventors

Herndon, VA, United States of America

Sean Mountcastle