The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Apr. 12, 2022

Filed:

Jan. 15, 2019
Applicant:

Illumio, Inc., Sunnyvale, CA (US);

Inventors:

Jaehong Park, San Jose, CA (US);

Mukesh Gupta, Fremont, CA (US);

Paul James Kirner, Palo Alto, CA (US);

Anish Vinodkumar Desai, Palo Alto, CA (US);

Daniel Richard Cook, San Jose, CA (US);

Assignee:

Illumio, Inc., Sunnyvale, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 29/12 (2006.01); H04L 61/4511 (2022.01); H04L 29/06 (2006.01);
U.S. Cl.
CPC ...
H04L 61/1511 (2013.01); H04L 63/02 (2013.01); H04L 63/101 (2013.01); H04L 63/20 (2013.01);
Abstract

An enforcement module receives a DNS-based rule of a segmentation policy that controls access of a managed workload to workloads in a DNS domain in which the IP addresses of the workloads associated with a domain name are resolved by a DNS server. When the managed workload makes a connection request to the workload associated with the domain name, the enforcement module snoops on a DNS response from the DNS server to learn the IP address of the workload associated with the domain name. If a domain name of the DNS domain is in a whitelist of domain names permitted by the DNS-based rule, the enforcement module adds the learned IP address to a whitelist of IP addresses and configures a firewall associated with the managed workload to permit connections to the IP addresses in the whitelist.


Find Patent Forward Citations

Loading…