Method and system for managing network access

摘要

In general, embodiments of the invention relate to a method and system for managing network access for applications. More specifically, embodiments of the invention provide mock Internet Protocol (IP) addresses to the applications, where the applications may use the mock IP address to communicate with other systems. Each mock IP address may be associated with one or more policies, where the policies dictate how packets that include the mock IP address is processed.

主权项

1. A method for managing network access for applications, comprising:
issuing, by an application executing in an application virtual machine (AVM), a request for a domain name service (DNS) resolver to resolve a mock fully qualified domain name (FQDN); processing, by a DNS proxy executing in a service virtual machine (SVM), the request in order to obtain a mock Internet Protocol (IP) address; providing, by the DNS proxy, the mock IP address to the application; initiating, by the application, a connection to a remote host server using the mock IP address by issuing a packet comprising the mock IP address; receiving, by a network adaptor, the packet; obtaining, by the network adaptor, a first policy associated with the mock IP address; and processing, by the network adaptor, the packet based on the first policy, wherein the AVM, the SVM and the control domain execute on a computing device, wherein the computing device comprises the network adaptor.