CN106657432A - Domain name resolution method and device - Google Patents
Domain name resolution method and device Download PDFInfo
- Publication number
- CN106657432A CN106657432A CN201611019724.6A CN201611019724A CN106657432A CN 106657432 A CN106657432 A CN 106657432A CN 201611019724 A CN201611019724 A CN 201611019724A CN 106657432 A CN106657432 A CN 106657432A
- Authority
- CN
- China
- Prior art keywords
- domain name
- response message
- inquiry request
- parsing
- name mapping
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L61/00—Network arrangements, protocols or services for addressing or naming
- H04L61/45—Network directories; Name-to-address mapping
- H04L61/4505—Network directories; Name-to-address mapping using standardised directories; using standardised directory access protocols
- H04L61/4511—Network directories; Name-to-address mapping using standardised directories; using standardised directory access protocols using domain name system [DNS]
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The embodiments of the invention provide a domain name resolution method and device. The method includes the following steps that: a domain name resolution query request from a user end is received; whether reply information for the domain name resolution query request exists is judged; when no reply information for the domain name resolution query request exists, the domain name resolution query request is forwarded to a domain name resolution server; one or more domain name resolution reply messages for the domain name resolution query request are received, wherein the reply message include the resolution address and domain name resolution type of the domain name resolution query request, the one or more domain name resolution reply messages are resolved, so that a corresponding relationship between the domain name resolution query request and the domain name resolution type can be constructed, and therefore, a full-quantity response message is generated; and the full-quantity response message is stored, and the full-quantity response message is filtered, so that reply information of which the aliases are corresponding to the domain name resolution type can be removed, and therefore, reply information can be generated and is sent to the user end.
Description
Technical field
The invention belongs to network communication technology field, more particularly to a kind of domain name analytic method and device.
Background technology
Domain name analysis system (English：Domain Name System, abbreviation：DNS) be in Internet architecture it is most basic,
A most crucial service, its effect is to realize that domain name and IP address mutually map, and makes net user to access interconnection
Net, and the uninteresting loaded down with trivial details IP number strings of memory are not spent, provide essence for numerous network applications and support.
Another name points to (English：Canonical Name, abbreviation：CNAME it is) that one of resource record types are commonly used in DNS,
Also referred to as specification name, exactly translates domain names into another domain name.
CNAME parsings are mainly used in two aspects, and first is the parsing change of domain name for convenience, for example, there is a meter
Calculation machine entitled " host " (A records), A records are used to refer to determine the corresponding IP address record of host name (or domain name).User can be with
Website server under the domain name is directed on the Website server of oneself.The second level domain of domain name can also be set simultaneously.
It provides WWW and MAIL services simultaneously, for the ease of user's access service.Can be two CNAME of the computer installation：WWW
And MAIL, actually they all point to " host ".Multiple domain names can be pointed to same server ip by same method, such as first will
One domain name A does A records and points to server ip, then other domain names (such as domain name B, domain name C) is done into another name and points to domain name A
On, then when server ip address is changed, it is possible to need not the troublesome change of domain name one by one sensing.Only need to a domain name
The A records of A point to new server ip, and other domain names for being CNAME also will be changed in new IP address automatically.
It is content distributing network (English that CNAME records second effect：Content Delivery Network, abbreviation
CDN) accelerate, such as domain name www.apple.com is pointed to by CNAME layer by layer, by the sensing of the resource IP address of return give from
The nearest CDN edge distribution node of visitor.
The content of the invention
Embodiments of the invention provide a kind of domain name analytic method and device.
On the one hand, the embodiment of the present invention provides a kind of domain name analytic method, including：Receive the domain name mapping from user side
Inquiry request；Judge whether the response message for already existing for domain name mapping inquiry request；Not yet existing for domain name solution
During the response message of analysis inquiry request, translate domain names into inquiry request and be transmitted to domain name resolution server；Receive and be directed to domain name solution
One or more domain name mapping response messages of analysis inquiry request, one or more domain name mapping response messages include domain name mapping
The parsing address of inquiry request and domain name mapping type；One or more of domain name mapping response messages are parsed with
The parsing address of domain name parsing inquiry request and the corresponding relation of domain name mapping type are set up, so as to generate full dose response report
Text；Response message is filtered to remove the response message that type is parsed comprising designated domain name according to filtering policy, so as to generate first
Form response message；First form response message is transmitted to into the user side.
On the other hand, the embodiment of the present invention provides a kind of domain name mapping device, including：Receiving unit, judging unit, process
Unit and transmitting element, the receiving unit is configured to reception and is directed to from the domain name mapping inquiry request of user side and/or reception
One or more domain name mapping response messages of domain name mapping inquiry request, one or more domain name mapping response messages include domain
The parsing address of name parsing inquiry request and domain name mapping type；The judging unit is configured to judge whether to already exist for
The response message of domain name mapping inquiry request；The processing unit, is configured to not yet existing for domain name mapping inquiry request
Response message when, translate domain names into inquiry request and be transmitted to domain name resolution server；To one or more domain name mapping responses
Message is parsed the parsing address to set up domain name mapping inquiry request and the corresponding relation of domain name mapping type, so as to life
Into full dose response message；Response message is filtered to remove the response message that type is parsed comprising designated domain name according to filtering policy,
So as to generate the first form response message；Transmitting element, is configured to for the first form response message to be transmitted to user side.
Further aspect, the embodiment of the present invention provides a kind of domain name mapping device, including：Memory, processor, input set
Standby, output equipment, I/O interfaces and bus.The memory is used to store computer executable instructions；The processor is deposited for execution
The program of reservoir storage, the program causes the above-mentioned domain name analytic method of computing device；Bus, in the processor, deposit
Transmission information between reservoir, input equipment, output equipment and I/O interfaces.
Domain name analytic method provided in an embodiment of the present invention and device, the domain name mapping inquiry request sent by user side
When needing to be inquired about to other domain name resolution servers, above-mentioned domain name resolution server is being received for above-mentioned domain name mapping
The corresponding domain name mapping information of type is translated domain names into during the response of inquiry request according to domain name mapping type to be parsed and torn open
Point, and the address information that domain name mapping type is that another name points to parsing address i.e. CNAME is filtered out, only point to comprising main frame
Parsing address is that the response message of A records is sent to user side, and thoroughly solving CNAME causes that domain name forwarding inquiries are unstable to ask
Topic, and the CNAME records in user response message are optionally filtered, realize domain name mapping device for user's inquiry request
Response message compression optimization, effectively reduce domain name mapping device for the response message of user's inquiry request is to bandwidth resources
Consume, lift domain name mapping device process performance, improve domain name mapping device anti-attack ability, and the domain name mapping device and side
Method is simple and practical, and lower deployment cost is cheap, is easy to promote.
Description of the drawings
The features and advantages of the present invention can be more clearly understood from by reference to accompanying drawing, accompanying drawing is schematic and should not manage
Solution is to carry out any restriction to the present invention, in the accompanying drawings：
Fig. 1 shows the example process of the user side domain name mapping realized via traditional domain name mapping device；
Fig. 2 is illustrated according to a kind of method flow diagram of the domain name analytic method of embodiment；
Fig. 3 illustrates a kind of structured flowchart of the domain name mapping device according to embodiment；
Fig. 4 illustrates the structured flowchart of the domain name mapping device according to another kind of embodiment.
Specific embodiment
To make purpose, technical scheme and the advantage of the embodiment of the present invention clearer, below in conjunction with the embodiment of the present invention
In accompanying drawing, the technical scheme in the embodiment of the present invention is described.
The feature and exemplary embodiment of various aspects of the invention is described more fully below.In following detailed description
In, it is proposed that many details, to provide complete understanding of the present invention.But, to those skilled in the art
It will be apparent that the present invention can be implemented in the case of some details in not needing these details.Below to implementing
The description of example is just for the sake of by illustrating that the example of the present invention is better understood to provide to the present invention.The present invention is never limited
In any concrete configuration and algorithm set forth below, but cover under the premise of without departing from the spirit of the present invention element,
Any modification, replacement and the improvement of part and algorithm.In the the accompanying drawings and the following description, known structure and skill is not shown
Art, to avoid that unnecessary obscuring is caused to the present invention.
Example embodiment is described more fully with referring now to accompanying drawing.However, example embodiment can be with various shapes
Formula is implemented, and is not understood as limited to embodiment set forth herein；Conversely, thesing embodiments are provided so that the present invention more
Fully and completely, and by the design of example embodiment those skilled in the art is comprehensively conveyed to.In figure, in order to clear
It is clear, may be exaggerated the thickness of region and layer.Identical reference represents same or similar structure in figure, thus will save
Omit their detailed description.
Additionally, described feature, structure or characteristic can be combined in one or more enforcements in any suitable manner
In example.In the following description, there is provided many details fully understand so as to be given to embodiments of the invention.However,
It will be appreciated by persons skilled in the art that technical scheme can be put into practice without in the specific detail or more
It is many, or can be using other methods, constituent element, material etc..In other cases, be not shown in detail or describe known features,
Material or operation to avoid the major technique intention for obscuring the present invention it should be noted that in the case where not conflicting, this Shen
Please in embodiment and the feature in embodiment can be mutually combined.
Fig. 1 shows the example process of the user side domain name mapping realized via traditional domain name mapping device.Such as Fig. 1
Shown, local operator domain name resolution system Local DNS are generally configured with two most basic functional modules：DNS cache is inquired about
Module and DNS recursion resolution modules：DNS cache enquiry module, the DNS query request of receive user, if there is caching record,
Then directly return user's Query Result；If there is no caching record, DNS recursion resolution resume modules are transferred to；And receive recurrence
The Query Result that module is returned, by Query Result user is returned, and Query Result recorded in caching record.Because DNS delays
Enquiry module is deposited closest to user, security function can be usually integrated, and performs forwarding strategy, it is local to force parsing etc. to customize plan
Slightly.In fact, except the precisely CNAME record cases of user's inquiry, the DNS user responses that DNS cache enquiry module is produced
Multi-layer CNAME records in message are not of practical significance to domestic consumer, such as to initiating the user that A record queries are asked
For only need to obtain the IP address of last layer of A record and be capable of achieving service communication.DNS recursion resolution modules, process DNS and delay
The recurrence request that enquiry module is sended over is deposited, has been performed and return result to after recursive query DNS cache enquiry module.
CNAME records are typically indispensable in DNS recursion resolution modules, and CNAME is recorded as following the trail of domain name resolution process, investigation domain name event
Barrier provides necessary means.
Virtual network operator accelerates to realize Web caching, domain name to be resolved (is abbreviated as can afterwards in LOCAL DNS
LDNS the DNS of web caching servers is transmitted on), the local cache server IP gone out by the dns resolution of web caching servers
Address returns to operator LDNS, then returns to user by operator LDNS, and this is to realize web caching applications based on pass-through mode
Know-why.Here web caching servers are the resource mirrors built relative to source station server for Web caching speed-raising
As server.It should be understood that web caching servers here can with source station server be arranged on identical network, or
In being separately provided at different networks.By taking the CMNET networks that operator of China Mobile provides as an example, above DNS is deployed in
In CMNET networks, accelerate to save inter-network resource and caching, web caching DNS can be by the authoritative DNS resources mirror of outer net source station
Can be the domain name solution from the authoritative DNS crawls to outer net source station as in net, being deployed in web caching servers in CMNET networks
A records in analysis resource redistribute internal address.By taking www.sina.com.cn as an example, the address in the authoritative DNS of source station is
189.189.189.189, the address after Intranet is mirrored to for 139.139.139.139.Because traditional DNS device and methods are
Domain name recursion parsing, analysis result storage, user's inquiry response and domain name forwarding are carried out in units of domain, the mechanism can cause to work as
When certain domain name has CNAME, if only itself doing forwarding inquiries to the domain name, its forwarding inquiries analysis result is usually unstable
Fixed, the source station address that the CNAME in addition to 139.139.139.139 is pointed to can in the lump be forwarded and stored by LDNS, so that base
Have a greatly reduced quality in the network application effect of forwarding inquiries mode.And it is steady to realize forwarding inquiries parsing on traditional DNS devices
It is fixed, need for all CNAME that CNAME strings are related to be forwarded response to user side domain name mapping inquiry request together, on
Line is operated and later maintenance difficulty is significantly increased.
In addition CNAME is recorded and is caused the length of operator's LDNS response messages to become big, consumes the bandwidth money of DNS systems
Source, weakens the ability to network attacks, if the user response message compression that can for example produce caching DNS is to 512 words
Within section, it is possible to close the ports of tcp 53 of caching DNS, udp53 ends are only opened, and the ports of tcp 53 are relatively weak, easily
By network attack.
Again by taking www.sina.com.cn as an example, the authoritative DNS of www.sina.com.cn. is configured with CNAME sensings
Lifetime value (the English of jupiter.sina.com.cn, CNAME record：Time To Live, abbreviation：TTL it is) 3600
Second.When LDNS www.sina.com.cn wait accelerate domain name be transmitted to the DNS of web caching servers after, in theory LDNS is obtained
Parsing A records should be web caching server IP, but the IP for remaining source station in fact usually obtaining.
First forwarding strategy runs succeeded on packet capturing location finding LDNS, and LDNS can be from the DNS of web caching servers
Local cache server IP address is got, A records the TTL times to adapt to 60 seconds that cache business is customized.When A records in 60 seconds
TTL be gradually decremented to after 0 second time-out, www.sina.com.cn is parsed again, the domains that are actually sent out of DNS are found by packet capturing
Name analysis request is the corresponding norma.sina.com.cn of CNAME, rather than domain name to be resolved, and www.sina.com.cn is former
Because the TTL for being A records is aging be 0 when, CNAME records TTL 3600 seconds also without it is aging be that 0 still effectively, this reason causes
For the forwarding inquiries strategy fails of www.sina.com.cn domain names.
It is right via during the user side domain name mapping that traditional domain name mapping device is realized from above example
In the domain name that website acceleration is carried out by forwarding inquiries mode, in order to lift the hit rate of network-caching, need to examine the domain name
With the presence or absence of CNAME, if there is CNAME, not only domain name itself will carry out forwarding inquiries, and corresponding CNAME also will enter simultaneously
Row forwarding inquiries, otherwise analysis result just occur unstable situation.But additional configuration CNAME forward is address aliases
Forwarding inquiries take time and effort, and not only increase the forwarding inquiries domain name quantity that LDNS is processed, and also add later maintenance and investigation event
The difficulty of barrier.Same Virtual network operator accelerates to realize Web caching, and the domain name for needing domain name mapping is forwarded on LDNS
Inquired about to the DNS of web caching servers, the local cache server IP address gone out by the dns resolution of web caching servers
Operator LDNS is returned to, then user is returned to by operator LDNS.There is CNAME if necessary to the domain name of domain name mapping, that
After the local cache server IP information TTL time-out that accelerated domain name is obtained first, domain name to be accelerated can will likely not be held again
Row forwarding inquiries strategy, and IP is parsed as result with the corresponding source station of CNAME domain names, so as to result in the mistake of network-caching
Effect.
Also, via in the user side domain name resolution process that traditional domain name mapping device is realized, because CNAME records make
Obtain LDNS and big is become to the length of user response message, consume the bandwidth resources of LDNS systems, weaken to network attacks
Ability.Failure generation is also resulted under the super large DNS messages of some situations.For example, the discharge model of current DNS is all DNS
Much larger than DNS request message, this can cause the bandwidth in DNS responses direction congestion first occur to response message.Generally flowed using DNS
Measure amplification ratio parameter to weigh the proportionate relationship of DNS response traffics/request flow.When being configured to normal response using conventional method
During pattern, LDNS Flow amplifications ratio about 3.3.After minimum response pattern is enabled using conventional method, now response message will
Answer fields are only returned, authority and additional fields are deleted, reduces response message length, DNS amplification ratios are reduced to
2.1.So if DNS amplification ratios can be reduced within 2, the bandwidth response potentiality of DNS will be more excavated, because bandwidth
In the case of certain, DNS response messages are less, can response DNS query number of concurrent it is more, improve the response performance of DNS.
More and, via in the user side domain name resolution process that traditional domain name mapping device is realized, due to DNS messages it is general
Using udp protocol, single message byte-sized is limited in 512 bytes, when DNS response messages are more than 512 bytes, then needs client
Reuse TCP and send inquiry request in end.Domain name CNAME level is excessive, may cause response message size more than the words of UDP 512
The restriction of section.Although TCP is high with respect to UDP reliabilities, inefficiency, so considerations of some LOCAL DNS based on performance, can
The inquiry of TCP DNS messages and response can be closed, and then response message can be caused to fail more than the inquiry of the domain name of 512 bytes, shadow
The business for ringing terminal use is used.
In view of the above-mentioned situation described with reference to Fig. 1, the present invention proposes a kind of domain name mapping device and domain name mapping side
Method.
Fig. 2 is illustrated according to a kind of method flow diagram of the domain name analytic method of embodiment.A kind of domain name analytic method,
In S210, the domain name mapping inquiry request from user side is received；It should be understood that in order to reduce inter-network flow, the domain name mapping is looked into
Ask request to can be understood as being produced in the resource that source station authoritative server is captured by the web caching servers in Fig. 1 in request
Mirror image parsing address, can deserve to be called station address based on the parsing address stated can also be indicated with A records.In S220
In, judge whether the response message for already existing for domain name mapping inquiry request；In S230, domain name is not yet being existed for
During the response message of parsing inquiry request, the domain name mapping inquiry request is transmitted to into domain name resolution server；It should be understood that here
Can be divided into two aspects the step of the domain name mapping inquiry request is transmitted to into domain name resolution server, in an example
In, to the domain name resolution server in identical network the domain name mapping inquiry request can be forwarded to be inquired about, here identical
Network refers in Fig. 1 to be built the web caching clothes as outer net resource mirror image server in order to raise speed domain name mapping
The network that business device is located, can be the communication network of identical network operator, the CMNET nets that for example operator of China Mobile provides
Network.In one example, iterative query is initiated, until parsing address is obtained from authoritative domain name resolution server, here from power
The parsing address that prestige domain name resolution server is obtained as parses the CNAME records of address comprising source station, authoritative domain name here
Resolution server can be deployed in consolidated network with above-mentioned resource mirror image server, also can respectively be deployed in heterogeneous networks, for example
The communication network of heterogeneous networks operator, such as telecom operators' communication network or UNICOM's operators communication network.In S240,
Receive one or more domain name mapping response messages that inquiry request is parsed for domain name, one or more of domain name solutions
Analysis response message includes that domain name parses the parsing address of inquiry request and domain name mapping type；In one example, here
One or more domain name mapping response messages include that user side needs the A records of inquiry, that is, web caching servers are in source
The parsing address of the mirror image of the resource production of authoritative server of standing crawl, while also recording including CNAME.In one example,
The points relationship of above-mentioned domain name mapping type field and the parsing address field of domain name mapping inquiry request can be set up.In S250
In, one or more of domain name mapping response messages are parsed to set up the parsing that domain name parses inquiry request
Address and the corresponding relation of domain name mapping type, so as to generate full dose response message.In S260, institute is filtered according to filtering policy
Response message is stated to remove the response message that type is parsed comprising designated domain name, so as to generate the first form response message.Also
It is to say directly to perform filtering policy to the full dose response message and not store.Because filtering policy can set in advance
Put, it is to filter response message to remove the response message that domain name mapping type is pointed to comprising another name that can arrange filtering policy.Example
The another name sensing domain name mapping type that such as can pass through in the full dose response message is corresponding to another name sensing domain name mapping type
Another name points to parsing address field and is filtered.In one example, if establishing domain name mapping type field and domain name solution
The points relationship of the parsing address field of analysis inquiry request, then it is to be responded by the full dose that can select to perform filtering policy
Another name in message points to domain name mapping type and the corresponding another name sensing parsing address field of domain name mapping type is pointed to another name
Filtered.In S270, the first form response message is transmitted to into the user side.In one example, the method
Can also include storing full dose response message.In one example, it is being judged as there are comprising domain name in the method
During the response message of parsing inquiry request, the full dose response message of the response message comprising domain name mapping inquiry request was carried out
Filter to remove the response message that the another name for including points to address style, so as to generate the first form response message.In filtering policy
Be filter response message with remove point to the response message of domain name mapping type comprising another name when, the first form response message can be with
It is interpreted as only comprising the response message of A records.
The domain name mapping inquiry request sent by user side when needing to be inquired about to other domain name resolution servers,
Receive above-mentioned domain name resolution server for above-mentioned domain name mapping inquiry request response when according to domain name mapping type by domain
The corresponding domain name mapping information of name parsing type is parsed and split, and the response message after fractionation is stored, and is filtered
Fall the address information that domain name mapping type is that another name points to parsing address i.e. CNAME, only point to parsing address comprising main frame
That is the response message of A records is sent to user side, thoroughly solves the problems, such as that CNAME causes domain name forwarding inquiries unstable, and can
The CNAME records in user response message are optionally filtered, response of the domain name mapping device for user's inquiry request is realized
Message compression optimizes, and effectively reduces consumption of response message of the domain name mapping device for user's inquiry request to bandwidth resources,
Domain name mapping device process performance is lifted, domain name mapping device anti-attack ability is improved, and the domain name analytic method is simple and practical,
Lower deployment cost is cheap, is easy to promote
Fig. 3 illustrates a kind of structured flowchart of the domain name mapping device according to embodiment.As shown in figure 3, the domain name mapping dress
Put, including：Receiving unit 310, judging unit 320, processing unit 330 and transmitting element 340, the receiving unit 310 is configured to
Receive from user side domain name mapping inquiry request and/or receive for domain name mapping inquiry request one or more domain names
Parsing response message, one or more domain name mapping response messages include the parsing address of domain name mapping inquiry request and domain name solution
Analysis type；The judging unit 320 is configured to the response message for judging whether to already exist for domain name mapping inquiry request；Should
Processing unit 330 is configured to when the response message of domain name mapping inquiry request is not yet existed for, and translates domain names into inquiry
Request is transmitted to domain name resolution server；One or more domain name mapping response messages are parsed to set up domain name
The parsing address of parsing inquiry request and the corresponding relation of domain name mapping type, so as to generate full dose response message；According to filtration
Policy filtering response message parses the response message of type to remove comprising designated domain name, so as to generate the first form response letter
Breath；The transmitting element 340 is configured to for the first form response message to be transmitted to user side.It should be noted that the device with
The method is corresponding, and the two has similar function, can solve similar technical problem, therefore, the two is same or like
Where repeat no more.
In one embodiment, in the device, filtering policy includes that filter response message points to domain to remove comprising another name
The response message of name parsing type.In one example, the filtering policy also includes referring to by the another name in full dose response message
The corresponding another name sensing parsing address field of domain name mapping type is pointed to another name to domain name mapping type to filter.
In one embodiment, the device can also include memory cell, be configured to deposit full dose response message
Storage.
In one embodiment, the processing unit 330 of the device can with by there are comprising domain name mapping inquiry please
During the response message asked, the full dose response message of the response message comprising domain name mapping inquiry request is filtered to remove bag
The another name for containing points to the response message of address style, so as to generate the first form response message.
In one embodiment, the processing unit 330 of the device can be additionally configured to enter the first form response message
Row is filtered, to remove response message in unnecessary host name refer to the response message of domain name mapping type, make in response message at least
Comprising a host name directional information.In one example, the processing unit 330 of the device can be additionally configured to identical net
Domain name resolution server forwarding domain name mapping inquiry request in network is inquired about.In one example, the process list of the device
Unit 330 can also include recursive query module, be configured to initiate iterative query, until obtaining from authoritative domain name resolution server
Address must be parsed.In one example, the processing unit 330 of the device can be additionally configured to set up domain name mapping type field
With the points relationship of the parsing address field of domain name mapping inquiry request.
The domain name analytic method described with reference to Fig. 2 and Fig. 3 and at least a portion of domain name mapping device can be set by calculating
It is standby to realize.Fig. 4 illustrates the structured flowchart of the domain name mapping device according to another kind of embodiment.As shown in figure 4, computing device 400
Including input equipment 401, input port 402, processor 403, memory 404, output port 405 and output equipment 406.
Wherein, input port 402, processor 403, memory 404 and output port 405 are connected with each other by bus 410, input
Equipment 401 and output equipment 406 are connected respectively by input port 402 and output port 405 with bus 410, so with calculating
The other assemblies connection of equipment 400.It should be noted that output interface and input interface here can also use I/O interface tables
Show.Specifically, input equipment 401 is received from outside input information, and is sent to input information by input port 402
Processor 403；Processor 403 based on the computer executable instructions stored in memory 404 input information is processed with
Output information is generated, output information is temporarily or permanently stored in memory 404, then will by output port 405
Output information is sent to output equipment 406；Output equipment 406 is arrived the outside of computing device 400 by output information output.
Above-mentioned memory 404 includes the mass storage for data or instruction.For example it is unrestricted, memory
404 may include HDD, floppy disk, flash memory, CD, magneto-optic disk, tape or USB (USB) driver or two
Individual or more the above combinations.In a suitable case, memory 404 may include removable or non-removable (or solid
Medium calmly).In a suitable case, memory 404 can be inside or outside computing device 400.In a particular embodiment,
Memory 404 is non-volatile solid state memory.In a particular embodiment, memory 404 includes read-only storage (ROM).
In the case of suitable, the ROM can be the ROM of masked edit program, programming ROM (PROM), erasable PROM (EPROM), electricity can
Erasing PROM (EEPROM), electrically-alterable ROM (EAROM) or the combination of flash memory or two or more the above.
Bus 410 includes hardware, software or both, and the part of computing device 400 is coupled to each other together.For example
And it is unrestricted, bus 410 may include AGP (AGP) or other graphics bus, strengthen Industry Standard Architecture (EISA)
Bus, Front Side Bus (FSB), super transmission (HT) interconnection, the interconnection of Industry Standard Architecture (ISA) bus, infinite bandwidth, low pin count
(LPC) bus, memory bus, micro- channel architecture (MCA) bus, periphery component interconnection (PCI) bus, PCI-Express
(PCI-X) bus, Serial Advanced Technology Attachment (SATA) bus, VESA's local (VLB) bus or other conjunctions
The combination of suitable bus or two or more the above.In a suitable case, bus 410 may include one or more
Bus 410.Although the embodiment of the present invention has been described and illustrated specific bus, the present invention considers any suitable bus or mutual
Even.
When the domain name mapping device with reference to Fig. 2 and Fig. 3 descriptions is realized by the computing device 400 shown in Fig. 4, input sets
Standby 401 receive the domain name mapping inquiry request from user side and/or receive for domain name mapping inquiry request one or many
Individual domain name mapping response message, in a particular embodiment, the I/O interfaces being connected with output equipment can include hardware, software or
Both, there is provided are for one or more interfaces of the communication between computing device 400 and one or more I/O equipment.Closing
In the case of suitable, computing device 400 may include one or more of these I/O equipment.One or more of these I/O equipment can be allowed
Communication between people and computer system 400.For example it is unrestricted, I/O equipment may include keyboard, keypad, microphone,
Monitor, mouse, printer, scanner, loudspeaker, still camera, contact pilotage, handwriting pad, touch-screen, trace ball, video are taken the photograph
The combination of camera, another suitable I/O equipment or two or more the above.I/O equipment may include one or more
Sensor.The embodiment of the present invention considers any suitable I/O equipment and any suitable I/O interfaces for them.Suitable
In the case of, I/O interfaces may include one or more devices or can allow for processor 703 to drive one or more of these I/O
The software driver of equipment.In a suitable case, I/O interfaces may include one or more I/O interfaces.Although the present invention is implemented
Example has been described and illustrated specific I/O interfaces, but the embodiment of the present invention considers any suitable I/O interfaces.The base of processor 403
The computer executable instructions stored in memory 404, in the response message for not yet existing for domain name mapping inquiry request
When, translate domain names into inquiry request and be transmitted to domain name resolution server；One or more domain name mapping response messages are solved
The parsing address to set up domain name mapping inquiry request and the corresponding relation of domain name mapping type are analysed, so as to generate full dose response
Message；Response message is filtered to remove the response message that type is parsed comprising designated domain name according to filtering policy, so as to generate the
One form response message.Subsequently translate domain names into result via output port 405 and output equipment 406 in needs and be sent to user
End.
That is, domain name mapping device according to embodiments of the present invention can also be implemented as including the computer that is stored with
The memory 404 of executable instruction；And processor 403, the processor 403, can be with when computer executable instructions are performed
Realize domain name analytic method and the domain name mapping device described with reference to Fig. 2 and Fig. 3.
In a suitable case, computer executable instructions may include one or more based on semiconductor or other are integrated
Circuit (IC) (for example, such as field programmable gate array (FPGA) or application-specific integrated circuit (ASIC)), hard disk drive (HDD), mixing
Hard disk drive (HHD), CD, CD drive (ODD), magneto-optic disk, magneto optical driver, floppy disk, floppy disk
(FDD), tape, hologram memory medium, solid-state drive (SSD), ram driver, safe digital card or drive or other are suitable
Computer-readable non-transitory storage medium or two or more the above combination.
Need clearly, to the invention is not limited in particular configuration that is described above and illustrating in figure and process.Also,
For brevity, the detailed description to known method technology is omitted here.In the above-described embodiments, have been described and illustrated some
Concrete step is as an example.But, method of the present invention process is not limited to described and illustrated concrete steps, this area
Technical staff can understand the present invention spirit after be variously modified, change and add, or change step between
Sequentially.
Those of ordinary skill in the art are it is to be appreciated that the list of each example with reference to the embodiments described herein description
Unit and algorithm steps, can with electronic hardware, computer software or the two be implemented in combination in, in order to clearly demonstrate hardware
With the interchangeability of software, according to function the composition and step of each example have been generally described in the above description.This
A little functions are performed with hardware or software mode actually, depending on the application-specific and design constraint of technical scheme.Specially
Industry technical staff can use different methods to realize described function to each specific application, but this realization is not
It is considered as beyond the scope of this invention.
Those skilled in the art can be understood that, for convenience of description and succinctly, foregoing description is
The specific work process of system, device and unit, may be referred to the corresponding process in preceding method embodiment, will not be described here.
In several embodiments provided herein, it should be understood that disclosed system, apparatus and method, can be with
Realize by another way.For example, device embodiment described above is only schematic, for example, the unit
Divide, only a kind of division of logic function can have other dividing mode, such as multiple units or component when actually realizing
Can with reference to or be desirably integrated into another system, or some features can be ignored, or not perform.In addition, shown or beg for
By coupling each other or direct-coupling or communication connection can be INDIRECT COUPLING by some ports, device or unit
Or communication connection, or electricity, machinery or other forms connections.
The unit as separating component explanation can be or may not be it is physically separate, it is aobvious as unit
The part for showing can be or may not be physical location, you can with positioned at a place, or can also be distributed to multiple
On NE.Some or all of unit therein can be according to the actual needs selected to realize embodiment of the present invention scheme
Purpose.
In addition, each functional unit in each embodiment of the invention can be integrated in a processing unit, it is also possible to
It is that unit is individually physically present, or two or more units are integrated in a unit.It is above-mentioned integrated
Unit both can be realized in the form of hardware, it would however also be possible to employ the form of SFU software functional unit is realized.
The above, the only specific embodiment of the present invention, but protection scope of the present invention is not limited thereto, any
Those familiar with the art the invention discloses technical scope in, various equivalent modifications can be readily occurred in or replaced
Change, these modifications or replacement all should be included within the scope of the present invention.Therefore, protection scope of the present invention should be with right
The protection domain of requirement is defined.
Claims (19)
1. a kind of domain name analytic method, including：
Receive the domain name mapping inquiry request from user side；
Judge whether to already exist for the response message that domain name parses inquiry request；
When the response message of domain name parsing inquiry request is not yet existed for, by domain name parsing inquiry request forwarding
To domain name resolution server；
Receive one or more domain name mapping response messages that inquiry request is parsed for domain name, one or more of domains
Name parsing response message includes that domain name parses the parsing address of inquiry request and domain name mapping type；
One or more of domain name mapping response messages are parsed to set up the solution that domain name parses inquiry request
Analysis address and the corresponding relation of domain name mapping type, so as to generate full dose response message；
The response message is filtered to remove the response message that type is parsed comprising designated domain name according to filtering policy, so as to generate
First form response message；
The first form response message is transmitted to into the user side.
2. method according to claim 1, wherein, the filtering policy is to filter the response message to remove comprising other
Name points to the response message of domain name mapping type.
3. method according to claim 1, also includes storing the full dose response message.
4. method according to claim 1, wherein, there are response message that inquiry request is parsed comprising domain name
When, filtered to remove the another name for including to parsing the full dose response message of response message of inquiry request comprising domain name
The response message of address style is pointed to, so as to generate the first form response message.
5. the method according to claim 1 or 4, wherein, it is described that the first form response message is transmitted to into the use
Also include before the step of family end：The first form response message is filtered, to remove the response message in it is unnecessary
Host name refer to the response message of domain name mapping type, make to include at least a host name directional information in the response message.
6. method according to claim 1, wherein, it is described should not yet existing for domain name parsing inquiry request
When answering information, domain name is parsed the step of inquiry request is transmitted to domain name resolution server to be included：To in identical network
Domain name resolution server forwarding domain name parsing inquiry request is inquired about.
7. the method according to claim 1 or 6, wherein, it is described not yet to exist for domain name parsing inquiry request
Response message when, by domain name parsing inquiry request be transmitted to domain name resolution server the step of include：Initiate iteration to look into
Ask until obtaining parsing address from authoritative domain name resolution server.
8. method according to claim 1, wherein, it is described that one or more of domain name mapping response messages are solved
Analyse to set up the parsing address of domain name parsing inquiry request and the corresponding relation of domain name mapping type, so as to generate full dose
The step of response message, includes：Set up domain name parsing type field and the parsing address field of domain name mapping inquiry request
Points relationship.
9. method according to claim 8, wherein, it is described the response message is filtered according to filtering policy to be included with removing
Designated domain name parses the response message of type, so as to include the step of generating the first form response message：Rung by the full dose
Answer the another name in message to point to domain name mapping type and the corresponding another name sensing parsing address word of domain name mapping type is pointed to another name
Duan Jinhang is filtered.
10. a kind of domain name mapping device, including：
Receiving unit, is configured to reception from the domain name mapping inquiry request of user side and/or receives for domain name parsing
One or more domain name mapping response messages of inquiry request, one or more of domain name mapping response messages include the domain
The parsing address of name parsing inquiry request and domain name mapping type；
Judging unit, is configured to judge whether to already exist for the response message that domain name parses inquiry request；
Processing unit, is configured to when the response message of domain name parsing inquiry request is not yet existed for, by the domain
Name parsing inquiry request is transmitted to domain name resolution server；
One or more of domain name mapping response messages are parsed to set up the solution that domain name parses inquiry request
Analysis address and the corresponding relation of domain name mapping type, so as to generate full dose response message,
The response message is filtered to remove the response message that type is parsed comprising designated domain name according to filtering policy, so as to generate
First form response message；
Transmitting element, is configured to for the first form response message to be transmitted to the user side.
11. devices according to claim 10, wherein, the filtering policy includes filtering the response message to remove bag
The response message of domain name mapping type is pointed to containing another name.
12. device according to claim 10, also including memory cell, is configured to carry out the full dose response message
Storage.
13. devices according to claim 10, wherein, the processing unit is additionally configured to there are comprising the domain
During the response message of name parsing inquiry request, the full dose response message of the response message to parsing inquiry request comprising domain name
Filtered to remove the response message that the another name for including points to address style, so as to generate the first form response message.
14. devices according to claim 10 or 13, wherein, the processing unit is additionally configured to first form
Response message is filtered, to remove the response message in unnecessary host name refer to the response message of domain name mapping type, make
A host name directional information is included at least in the response message.
15. devices according to claim 10, wherein, the processing unit is additionally configured to the domain name in identical network
Resolution server forwarding domain name parsing inquiry request is inquired about.
16. devices according to claim 10 or 15, wherein, the processing unit also includes recursive query module, is matched somebody with somebody
Initiation iterative query is set to, until obtaining parsing address from authoritative domain name resolution server.
17. devices according to claim 10, wherein, the processing unit is additionally configured to set up domain name parsing class
The points relationship of the parsing address field of type-word section and domain name mapping inquiry request.
18. devices according to claim 17, wherein, the filtering policy is included by the full dose response message
Another name point to domain name mapping type to another name point to domain name mapping type it is corresponding another name point to parsing address field filter.
A kind of 19. domain name mapping devices, including：
The memory of storage computer executable instructions；
Processor, for performing the program of the memory storage, described program cause the computing device claim 1 to
Any one domain name analytic method described in claim 9；
Input equipment；
Output equipment；
I/O interfaces；And
Bus, for the transmission information between the processor, memory, input equipment, output equipment and I/O interfaces.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201611019724.6A CN106657432B (en) | 2016-11-17 | 2016-11-17 | Domain name analytic method and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201611019724.6A CN106657432B (en) | 2016-11-17 | 2016-11-17 | Domain name analytic method and device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN106657432A true CN106657432A (en) | 2017-05-10 |
| CN106657432B CN106657432B (en) | 2019-10-15 |
Family
ID=58808102
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201611019724.6A Active CN106657432B (en) | 2016-11-17 | 2016-11-17 | Domain name analytic method and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106657432B (en) |
Cited By (20)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107888717A (en) * | 2017-12-26 | 2018-04-06 | 北京搜狐新媒体信息技术有限公司 | A kind of domain name determines method, apparatus and electronic equipment |
| CN107980217A (en) * | 2017-07-14 | 2018-05-01 | 深圳前海达闼云端智能科技有限公司 | Method and device for acquiring address of local domain name server and authoritative domain name server |
| CN108234209A (en) * | 2017-12-30 | 2018-06-29 | 中国移动通信集团江苏有限公司 | Domain name method for diagnosing faults, device, system, computing device and storage medium |
| CN108234685A (en) * | 2017-12-20 | 2018-06-29 | 中国移动通信集团江苏有限公司 | Method, apparatus, equipment and the medium of user terminal gateway equipment DNS scheduling |
| CN108833424A (en) * | 2018-06-25 | 2018-11-16 | 哈尔滨工业大学 | A kind of system obtaining all resource records of domain name |
| WO2018214853A1 (en) * | 2017-05-22 | 2018-11-29 | 贵州白山云科技有限公司 | Method, apparatus, medium and device for reducing length of dns message |
| CN109936632A (en) * | 2019-03-07 | 2019-06-25 | 杭州又拍云科技有限公司 | A kind of CNAME accelerated method applied to DNS authority server |
| CN110324435A (en) * | 2019-06-19 | 2019-10-11 | 厦门网宿有限公司 | A kind of network request processing method and system, entrance and egress network equipment |
| CN111010460A (en) * | 2019-12-16 | 2020-04-14 | 南京亚信智网科技有限公司 | Domain name resolution method and device |
| CN111371914A (en) * | 2020-02-25 | 2020-07-03 | 网宿科技股份有限公司 | IP library generation method, domain name resolution method, electronic device and readable storage medium |
| CN111866203A (en) * | 2019-04-29 | 2020-10-30 | 贵州白山云科技股份有限公司 | Domain name resolution method and device, readable storage medium and equipment |
| CN112671866A (en) * | 2020-12-15 | 2021-04-16 | 上海牙木通讯技术有限公司 | DNS (Domain name Server) shunt analysis method, DNS server and computer readable storage medium |
| CN112822309A (en) * | 2021-04-19 | 2021-05-18 | 北京视界云天科技有限公司 | Domain name resolution method and device |
| CN113014684A (en) * | 2021-01-18 | 2021-06-22 | 珠海莲鸿科技有限公司 | Communication transfer method and device for saving message verification time of Internet of things equipment |
| CN113301001A (en) * | 2020-04-07 | 2021-08-24 | 阿里巴巴集团控股有限公司 | Attacker determination method, device, computing equipment and medium |
| CN113301445A (en) * | 2020-06-16 | 2021-08-24 | 阿里巴巴集团控股有限公司 | Address allocation method and device for content distribution network |
| CN114051015A (en) * | 2021-11-22 | 2022-02-15 | 北京天融信网络安全技术有限公司 | Method, device and equipment for constructing domain name flow graph and storage medium |
| CN114422476A (en) * | 2021-12-28 | 2022-04-29 | 互联网域名系统北京市工程研究中心有限公司 | Method and device for preventing CNAME cache pollution |
| CN114760267A (en) * | 2022-04-08 | 2022-07-15 | 中国移动通信集团陕西有限公司 | Domain name plugging method, device, equipment, medium and program product |
| CN115442329A (en) * | 2021-06-04 | 2022-12-06 | 贵州白山云科技股份有限公司 | Domain name information query method, system, device, equipment and storage medium |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101135995A (en) * | 2006-08-31 | 2008-03-05 | 国际商业机器公司 | Method and equipment for removing alias addresses from an alias address pool |
| CN104144222A (en) * | 2014-08-20 | 2014-11-12 | 北京阅联信息技术有限公司 | Method and system for load balancing in DNS system based on alias record |
| CN105516391A (en) * | 2015-12-25 | 2016-04-20 | 互联网域名系统北京市工程研究中心有限公司 | CNAME-based DNS (domain name system) domain name resolution method |
| CN105610993A (en) * | 2014-11-20 | 2016-05-25 | 中国移动通信集团河南有限公司 | Method, device and system for domain name resolution |
| US20160323241A1 (en) * | 2014-07-29 | 2016-11-03 | GeoFrenzy, Inc. | Geocoding with geofences |
-
2016
- 2016-11-17 CN CN201611019724.6A patent/CN106657432B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101135995A (en) * | 2006-08-31 | 2008-03-05 | 国际商业机器公司 | Method and equipment for removing alias addresses from an alias address pool |
| US20160323241A1 (en) * | 2014-07-29 | 2016-11-03 | GeoFrenzy, Inc. | Geocoding with geofences |
| CN104144222A (en) * | 2014-08-20 | 2014-11-12 | 北京阅联信息技术有限公司 | Method and system for load balancing in DNS system based on alias record |
| CN105610993A (en) * | 2014-11-20 | 2016-05-25 | 中国移动通信集团河南有限公司 | Method, device and system for domain name resolution |
| CN105516391A (en) * | 2015-12-25 | 2016-04-20 | 互联网域名系统北京市工程研究中心有限公司 | CNAME-based DNS (domain name system) domain name resolution method |
Non-Patent Citations (1)
| Title |
|---|
| 赵洪华 等: ""别名解析中的别名过滤技术"", 《软件学报》 * |
Cited By (30)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2018214853A1 (en) * | 2017-05-22 | 2018-11-29 | 贵州白山云科技有限公司 | Method, apparatus, medium and device for reducing length of dns message |
| CN107980217A (en) * | 2017-07-14 | 2018-05-01 | 深圳前海达闼云端智能科技有限公司 | Method and device for acquiring address of local domain name server and authoritative domain name server |
| CN108234685A (en) * | 2017-12-20 | 2018-06-29 | 中国移动通信集团江苏有限公司 | Method, apparatus, equipment and the medium of user terminal gateway equipment DNS scheduling |
| CN107888717A (en) * | 2017-12-26 | 2018-04-06 | 北京搜狐新媒体信息技术有限公司 | A kind of domain name determines method, apparatus and electronic equipment |
| CN108234209B (en) * | 2017-12-30 | 2021-06-29 | 中国移动通信集团江苏有限公司 | Domain name fault diagnosis method, device, system, computing equipment and storage medium |
| CN108234209A (en) * | 2017-12-30 | 2018-06-29 | 中国移动通信集团江苏有限公司 | Domain name method for diagnosing faults, device, system, computing device and storage medium |
| CN108833424A (en) * | 2018-06-25 | 2018-11-16 | 哈尔滨工业大学 | A kind of system obtaining all resource records of domain name |
| CN109936632A (en) * | 2019-03-07 | 2019-06-25 | 杭州又拍云科技有限公司 | A kind of CNAME accelerated method applied to DNS authority server |
| CN109936632B (en) * | 2019-03-07 | 2021-12-21 | 杭州又拍云科技有限公司 | CNAME acceleration method applied to DNS authoritative server |
| CN111866203B (en) * | 2019-04-29 | 2022-04-19 | 贵州白山云科技股份有限公司 | Domain name resolution method and device, readable storage medium and equipment |
| CN111866203A (en) * | 2019-04-29 | 2020-10-30 | 贵州白山云科技股份有限公司 | Domain name resolution method and device, readable storage medium and equipment |
| CN110324435A (en) * | 2019-06-19 | 2019-10-11 | 厦门网宿有限公司 | A kind of network request processing method and system, entrance and egress network equipment |
| CN111010460A (en) * | 2019-12-16 | 2020-04-14 | 南京亚信智网科技有限公司 | Domain name resolution method and device |
| CN111371914A (en) * | 2020-02-25 | 2020-07-03 | 网宿科技股份有限公司 | IP library generation method, domain name resolution method, electronic device and readable storage medium |
| CN113301001A (en) * | 2020-04-07 | 2021-08-24 | 阿里巴巴集团控股有限公司 | Attacker determination method, device, computing equipment and medium |
| CN113301001B (en) * | 2020-04-07 | 2023-05-23 | 阿里巴巴集团控股有限公司 | Attacker determination method, attacker determination device, computing equipment and attacker determination medium |
| CN113301445A (en) * | 2020-06-16 | 2021-08-24 | 阿里巴巴集团控股有限公司 | Address allocation method and device for content distribution network |
| CN112671866B (en) * | 2020-12-15 | 2022-11-25 | 牙木科技股份有限公司 | DNS (Domain name Server) shunt analysis method, DNS server and computer readable storage medium |
| CN112671866A (en) * | 2020-12-15 | 2021-04-16 | 上海牙木通讯技术有限公司 | DNS (Domain name Server) shunt analysis method, DNS server and computer readable storage medium |
| CN113014684A (en) * | 2021-01-18 | 2021-06-22 | 珠海莲鸿科技有限公司 | Communication transfer method and device for saving message verification time of Internet of things equipment |
| CN112822309A (en) * | 2021-04-19 | 2021-05-18 | 北京视界云天科技有限公司 | Domain name resolution method and device |
| CN112822309B (en) * | 2021-04-19 | 2021-07-16 | 北京视界云天科技有限公司 | Domain name resolution method and device |
| CN115442329A (en) * | 2021-06-04 | 2022-12-06 | 贵州白山云科技股份有限公司 | Domain name information query method, system, device, equipment and storage medium |
| CN115442329B (en) * | 2021-06-04 | 2024-02-23 | 贵州白山云科技股份有限公司 | Domain name information query method, system, device, equipment and storage medium |
| CN114051015A (en) * | 2021-11-22 | 2022-02-15 | 北京天融信网络安全技术有限公司 | Method, device and equipment for constructing domain name flow graph and storage medium |
| CN114051015B (en) * | 2021-11-22 | 2023-07-14 | 北京天融信网络安全技术有限公司 | Domain name traffic map construction method, device, equipment and storage medium |
| CN114422476A (en) * | 2021-12-28 | 2022-04-29 | 互联网域名系统北京市工程研究中心有限公司 | Method and device for preventing CNAME cache pollution |
| CN114422476B (en) * | 2021-12-28 | 2023-09-22 | 互联网域名系统北京市工程研究中心有限公司 | Method and device for preventing CNAME (CNAME) cache pollution |
| CN114760267A (en) * | 2022-04-08 | 2022-07-15 | 中国移动通信集团陕西有限公司 | Domain name plugging method, device, equipment, medium and program product |
| CN114760267B (en) * | 2022-04-08 | 2024-03-19 | 中国移动通信集团陕西有限公司 | Domain name blocking method, device, equipment, medium and program product |
Also Published As
| Publication number | Publication date |
|---|---|
| CN106657432B (en) | 2019-10-15 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN106657432A (en) | Domain name resolution method and device | |
| WO2018107943A1 (en) | Network access control method, apparatus and system | |
| EP2507972B1 (en) | Method, system, and computer readable medium for diameter protocol harmonization | |
| US10374913B2 (en) | Data retention probes and related methods | |
| WO2017004947A1 (en) | Method and apparatus for preventing domain name hijacking | |
| US20060080444A1 (en) | System and method for controlling access to a network resource | |
| EP3145131A1 (en) | Data packet processing method, service node and deliver node | |
| CN107360270B (en) | DNS (Domain name Server) analysis method and device | |
| US9338657B2 (en) | System and method for correlating security events with subscriber information in a mobile network environment | |
| JP4692776B2 (en) | Method for protecting SIP-based applications | |
| WO2013177702A1 (en) | Routing decision context objects | |
| CN107666486A (en) | A kind of network data flow restoration methods and system based on message protocol feature | |
| EP4391448A1 (en) | Method and apparatus for determining lost host | |
| CN108353022A (en) | A kind of processing method of data message, apparatus and system | |
| CN110290233A (en) | Domain name analytic method, device, server and computer readable storage medium | |
| CN108989420A (en) | The method and system of registration service, the method and system for calling service | |
| CN102263837B (en) | A kind of domain name system DNS analysis method and device | |
| JP5649880B2 (en) | Intelligence module sequencing | |
| CN118118268A (en) | Network asset identification method and device and processing equipment | |
| CN112887211B (en) | Internet protocol message data forwarding system | |
| CN108566446A (en) | LAN domain name analytic method, device and system | |
| CN110351159B (en) | Cross-intranet network performance testing method and device | |
| CN112968915B (en) | Processing method, processing system and processing device for DNS (Domain name Server) attack | |
| EP3800833B1 (en) | Deep packet inspection application classification systems and methods | |
| CN114301648A (en) | Data configuration method and device, storage medium and electronic device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |