 | eXtensible DNS Resolver (XDR) – carrier scale recursive resolver that includes a subscriber-aware policy state engine |
With minimal service disruption and subscriber-aware preferences such as opt-out, Xerocole switches: (a) subscribers to a search page (“Internet Guide”) when non-existing URLs are entered into a browser address bar and (b) ad queries to back-end marketing systems for optimization.
Software Components
The rest of Search Guide’s software components are unix complaint modules that run on Linux (Redhat), FreeBSD, Solaris Sparc and Solaris x86 and Sandvine’s Policy Traffic Switch. Ports to additional platforms are available on request for proposal basis.
DNS Traffic Switch (DTS)
The DTS is an extremely scaleable ( rated at over 100k TPS) software that acts as a DNS proxy server allowing ISPs to easily insert policy to switch DNS responses based on several criteria. The policy also supports permanent opt out of policy by IP address / netblock, subscriber ID, and domain. The DTS has several security features that enable it rate limit malicious queries, divert select DNS packets for inspection by security systems and selectively redirect known bot infected users to walled gardens where they can be notified of the infection and be presented with tools to clean up their machine.
Reputation Knowledge Server (RKS)
The RKS is software that manages subscriber preferences and then communicates those in a real time basis to its peers in partially and fully meshed network topologies. The RKS can also act as a versatile DNSBL in calculating end user reputation for the purpose of bot infection notification. It also maintains subscriber mappings and subscriber preferences.
Walled Garden Server (WGS)
The WGS is a hosted software component that primarily responds to non-HTTP (POP, IMAP, SMTP, etc) traffic that has been NXDOMAIN redirected to the hosted environment.