CN111107175B - Method and device for constructing DNS response message - Google Patents

Method and device for constructing DNS response message Download PDF

Info

Publication number
CN111107175B
CN111107175B CN201911228838.5A CN201911228838A CN111107175B CN 111107175 B CN111107175 B CN 111107175B CN 201911228838 A CN201911228838 A CN 201911228838A CN 111107175 B CN111107175 B CN 111107175B
Authority
CN
China
Prior art keywords
alias
domain name
response message
record
selecting
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201911228838.5A
Other languages
Chinese (zh)
Other versions
CN111107175A (en
Inventor
符立佳
苗辉
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Guizhou Baishancloud Technology Co Ltd
Original Assignee
Guizhou Baishancloud Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Guizhou Baishancloud Technology Co Ltd filed Critical Guizhou Baishancloud Technology Co Ltd
Priority to CN201911228838.5A priority Critical patent/CN111107175B/en
Publication of CN111107175A publication Critical patent/CN111107175A/en
Application granted granted Critical
Publication of CN111107175B publication Critical patent/CN111107175B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00Network arrangements, protocols or services for addressing or naming
    • H04L61/45Network directories; Name-to-address mapping
    • H04L61/4505Network directories; Name-to-address mapping using standardised directories; using standardised directory access protocols
    • H04L61/4511Network directories; Name-to-address mapping using standardised directories; using standardised directory access protocols using domain name system [DNS]

Abstract

The invention discloses a method, a device and a medium for constructing a DNS response message, wherein the method for constructing the DNS response message comprises the following steps: obtaining a response message aiming at the domain name resolution request message; analyzing an analysis chain of the alias records and/or the A records corresponding to the access target domain name from the response message, structuring the ordered data of the analysis chain, selecting the target records from the structured ordered data, and repackaging the target records in sequence; and sending the packaged response message to a sender of the domain name resolution request message. The invention can effectively control the length of the response message under the condition of ensuring normal communication and improve the transmission rate and the safety of the response message.

Description

Method and device for constructing DNS response message
The application is a divisional application of China patent application of which the patent office of China national intellectual property office, the application number is 201710207628.2 and the invention name is a method and a device for reducing the length of a DNS response message are submitted on 31 th 2017.
Technical Field
The present invention relates to the field of internet technologies, and in particular, to a method, an apparatus, and a medium for constructing a DNS reply message.
Background
When the local domain name server (Local Domain Name Server, abbreviated as LDNS) receives a domain name resolution request sent by a local client, the LDNS sends the domain name resolution request to the domain name server (Domain Name Server, abbreviated as DNS), the DNS resolves an access target domain name in the domain name resolution request, and when judging that an IP address list of a network server corresponding to the access target domain name exists, the LDNS packages the corresponding IP address in a response packet and returns the response packet to the LDNS. The LDNS sends the response including the content to the client, and the client performs network access according to the IP address. When the alias (cname) name of the access target domain name and the IP address list of the network server corresponding to the last layer of alias name exist in the DNS, the alias record of the access target domain name and the IP address list of the network server corresponding to the last layer of alias name are encapsulated in a response packet to return to the LDNS, or only the IP address list of the network server corresponding to the last layer of alias name is encapsulated in the response packet to return to the LDNS.
The data transmission is generally performed between the LDNS and the DNS by using a user datagram protocol (User Datagram Protocol, abbreviated as UDP), and when the length of a message is large, a transmission control protocol (Transmission Control Protocol, abbreviated as TCP) needs to be established before the LDNS and the DNS to perform the data transmission. The DNS in some scenarios does not support TCP protocol, for example, in order to defend DDOS attacks, the LDNS of some operators may close the TCP resolution function, and some public DNS, mobile terminals, clients or players do not support the TCP resolution function because of more custom development. Thus, existing data transmission methods will affect the effectiveness of the data transmission.
Disclosure of Invention
In order to solve the technical problems, the invention provides a method and a device for reducing the length of a DNS response message.
The invention provides a method for reducing the length of a DNS response message, which comprises the following steps:
step 1, constructing a response message aiming at a domain name resolution request message;
step 2, resolving an alias record and an A record corresponding to the access target domain name from the response message, and packaging the access target domain name and the A record into the response message; or selecting a part of alias records from the alias records, and packaging the access target domain name, the A records and the selected alias records into a response message; or selecting a part of A records from the A records, and packaging the access target domain name, the selected A records and the alias records into a response message; selecting a part of alias records from the alias records, selecting a part of A records from the A records, and packaging the access target domain name, the selected A records and the selected alias records into a response message;
and step 3, sending the packaged response message to the sender of the domain name resolution request message.
The method for reducing the length of the DNS response message has the following characteristics:
the step 2 further includes: when only the alias record corresponding to the access target domain name is resolved from the response message, selecting the target domain name and the last alias, or selecting the target domain name, the last alias and at least one intermediate alias to be packaged into the response message; and when the alias record corresponding to the access target domain name is not resolved from the response message, repackaging the response message.
The method for reducing the length of the DNS response message has the following characteristics:
the selecting a portion of the alias records from the alias records includes:
querying an alias blacklist, and selecting aliases which do not exist in the alias blacklist in the alias record;
or, inquiring an alias white list, and selecting an alias existing in the alias white list in the alias record;
alternatively, an alias blacklist and an alias whitelist are queried, and aliases that do not exist in the alias blacklist and exist in the alias whitelist are selected.
The method for reducing the length of the DNS response message has the following characteristics:
the step 1 and the step 2 further comprise the step 1': and (2) judging whether the length of the received response message is greater than or equal to a preset length, if so, executing the step (2) to enable the length of the packaged response message to be smaller than the preset length, and if not, sending the received response message to a sender of the domain name resolution request message.
The method for reducing the length of the DNS response message has the following characteristics:
step 1' is also included between step 1 and step 2: and analyzing the access target domain name from the response message, judging whether the access target domain name is positioned in a domain name set, if so, executing the step 2, and if not, sending the received response message to a sender of the domain name analysis request message.
The method for reducing the length of the DNS response message has the following characteristics:
the method further includes a method of setting a set of domain names, including one of:
receiving a user-defined domain name input by a user, and adding the received domain name into the domain name set;
judging whether the sender of the domain name resolution request message is a client which does not support TCP resolution or a local DNS server, and adding the access target domain name carried in the domain name resolution request message into the domain name set.
The device for reducing the length of the DNS response message provided by the invention comprises the following components:
the construction module is used for constructing or receiving a response message aiming at the domain name resolution request message;
the analysis module is used for analyzing the alias record and the A record corresponding to the access target domain name from the response message, and packaging the response message into a response message and sending the response message to the repackaging module;
the repackaging module is used for packaging the access target domain name and the A record into a response message; or selecting a part of alias records from the alias records, and packaging the access target domain name, the A records and the selected alias records into a response message; or selecting a part of A records from the A records, and packaging the access target domain name, the selected A records and the alias records into a response message; selecting a part of alias records from the alias records, selecting a part of A records from the A records, and packaging the access target domain name, the selected A records and the selected alias records into a response message;
and the sending module is used for sending the packaged response message to the sender of the domain name resolution request message.
The device for reducing the length of the DNS response message has the following characteristics:
the analysis module is further used for sending the alias record to the repackaging module when only the alias record corresponding to the access target domain name is analyzed from the response message; when the alias record corresponding to the access target domain name is not resolved in the response message, the response message is sent to the repackaging module;
the repackaging module is further used for selecting the target domain name and the last alias or selecting the target domain name, the last alias and at least one intermediate alias to be packaged into a response message when the alias record is received from the analysis module; and the system is also used for repackaging the response message after receiving the response message from the analysis module.
The device for reducing the length of the DNS response message has the following characteristics:
the repackaging module is used for selecting a part of alias records from the alias records according to the following modes:
querying an alias blacklist, and selecting aliases which do not exist in the alias blacklist in the alias record;
or, inquiring an alias white list, and selecting an alias existing in the alias white list in the alias record;
alternatively, an alias blacklist and an alias whitelist are queried, and aliases that do not exist in the alias blacklist and exist in the alias whitelist are selected.
The device for reducing the length of the DNS response message has the following characteristics:
the device also comprises a judging module for judging whether the length of the received response message is larger than or equal to a preset length, and if so, sending a repackaging trigger signal and the preset length to the analyzing module and the repackaging module; if not, forwarding the response message to the sending module;
the repackaging module is used for controlling the length of the packaged response message to be smaller than the preset length when the response message is held.
The device for reducing the length of the DNS response message has the following characteristics:
the system also comprises a judging module for analyzing the access target domain name from the response message, judging whether the access target domain name is positioned in a preset domain name set, if so, sending a repackaging trigger signal to the analyzing module and the repackaging module, and if not, sending the received response message to a sender of the domain name analysis request message.
The device for reducing the length of the DNS response message has the following characteristics:
the device also comprises a domain name set maintenance module;
the domain name set maintenance module is used for receiving a user-defined domain name input by a user and adding the received domain name into the domain name set; or, the method is used for judging whether the sender of the domain name resolution request message is a client which does not support TCP resolution or the sender of the domain name resolution request message is a local DNS server, and adding the access target domain name carried in the domain name resolution request message into the domain name set.
The invention can effectively control the length of the response message under the condition of ensuring normal communication and improve the transmission rate and the safety of the response message.
Drawings
The accompanying drawings, which are included to provide a further understanding of the invention and are incorporated in and constitute a part of this specification, illustrate embodiments of the invention and together with the description serve to explain the invention. In the drawings:
fig. 1 is a flow chart of a method of reducing the length of DNS reply messages in an embodiment.
Fig. 2 is a block diagram of an apparatus for reducing the length of a DNS reply message in an embodiment.
Detailed Description
For the purpose of making the objects, technical solutions and advantages of the embodiments of the present invention more apparent, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention, and it is apparent that the described embodiments are some embodiments of the present invention, but not all embodiments of the present invention. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention. It should be noted that, in the case of no conflict, the embodiments and features in the embodiments may be arbitrarily combined with each other.
Fig. 1 is a method for reducing the length of a DNS reply message in an embodiment, the method including:
step 1, a DNS server constructs a response message aiming at a domain name resolution request message;
step 2, resolving an alias record and an A record corresponding to the access target domain name from the response message, and packaging the access target domain name and the A record into the response message; or selecting a part of alias records from the alias records, and packaging the access target domain name, the A records and the selected alias records into a response message; or selecting a part of A records from the A records, and packaging the access target domain name, the selected A records and the alias records into a response message; selecting a part of alias records from the alias records, selecting a part of A records from the A records, and packaging the access target domain name, the selected A records and the selected alias records into a response message;
and step 3, sending the packaged response message to a sender of the domain name resolution request message.
In the method, the sender of the domain name resolution request message can be an LDNS, a client or a detector, etc.
Wherein, step 2 further includes: when only the alias record corresponding to the access target domain name is resolved from the response message, selecting the target domain name and the last alias, or selecting the target domain name, the last alias and at least one intermediate alias to be packaged into the response message; and when the alias record corresponding to the access target domain name is not resolved from the response message, repackaging the response message.
In step 2, selecting a portion of the alias records from the alias records includes:
querying an alias blacklist, and selecting aliases which do not exist in the alias blacklist in the alias record;
or, inquiring the alias white list, and selecting the aliases existing in the alias white list in the alias record;
alternatively, the alias blacklist and the alias whitelist are queried, and an alias that does not exist in the alias blacklist and exists in the alias whitelist is selected.
The black-and-white list in the method is used for manually maintaining a domain name list, so that the method is used for determining which domain name alias records can be deleted or reserved when the response message is recombined. The black and white list function is designed to meet special requirements, for example, default CNAME links in CNAME chains cannot be eliminated, and the situation that multiple CDN vendors require vendor information to be reserved generally occurs.
For example, the domain name and the acceleration domain name of a company can be processed by default if the company confirms that the special processing is not possible, if no special exchange exists, the company is not arranged on any list, and if the special exchange needs to be reserved, the company is arranged on a white list; special generations must be placed on the blacklist without being reserved.
The CNAME record and the A record in the whole analysis process can ensure normal analysis as long as the analysis chain is ensured to be completed.
For example, CNAME record and A record are as follows:
www.a.com cname test.a.com
test.a.com cname test1.a.com
test1.a.com cname test2.a.com
test2.a.com cname test3.a.com
test3.a.com A 1.1.1.1
the whole parsing process is structured in sequence in the processing process:
www.a.com
test.a.com
test1.a.com
test2.a.com
test3.a.com
1.1.1.1
and combining the black-and-white list, selecting a part capable of being re-packaged from the structured data, and then reconstructing the cname and the A record, wherein the analysis chain structure is unchanged because the data is orderly, and the analysis process is normal. The final analysis result is:
the alias name selected by the target domain name cname comprises: www.a.com, test.a.com, test1.a.com.
Selected a was recorded as 1.1.1.1.
In the method, the DNS server can comprise an LDNS server and an authoritative DNS, and if the DNS server is the LDNS server, a plurality of response messages aiming at the domain name resolution request message are received from the authoritative DNS, wherein part of the response messages only comprise the alias records, and part of the response messages comprise the alias records and the A records. If the DNS is authoritative, directly constructing a response message aiming at the domain name resolution request message. The reply message includes an alias record and an A record.
In the method, the step 1 and the step 2 further comprise the step 1': and judging whether the length of the received response message is greater than or equal to the preset length, if so, executing the step 2 to enable the length of the packaged response message to be smaller than the preset length. If not, the received response message is sent to the sender of the domain name resolution request message. The preset length may be set to a value between 500 and 512 bytes.
In addition, under the authority DNS, the set condition is that the length of the response message is not more than 500 bytes, the number of the IP of the A records is not more than 8, the length of the packaged response message is not more than 500 bytes and the number of the IP of the A records is not more than 8 after the step 2 is executed, if the number of the IP of the A records in the received response message is more than 8, the IP of which the number is less than 8 is selected from the A records as the selected A records.
Step 1": and analyzing the access target domain name from the response message, judging whether the access target domain name is positioned in a preset domain name set, if so, executing the step 2, and if not, sending the received response message to a sender of the domain name analysis request message.
The method also includes a method of setting a set of domain names, including one of:
firstly, receiving a user-defined domain name input by a user, and adding the received domain name into the domain name set;
and secondly, judging whether the sender of the domain name resolution request message is a client which does not support TCP resolution or a local DNS server, and adding the access target domain name carried in the domain name resolution request message into the domain name set.
3. When the domain name resolution request message is a TCP request sent by the detector, judging that a target domain name can be resolved from the domain name resolution request message, and when other contents cannot be resolved, adding the target domain into the domain name set.
Fig. 2 is an apparatus for reducing the length of a DNS reply message in an embodiment, the apparatus comprising:
the construction module is used for constructing a response message aiming at the domain name resolution request message;
the analysis module is used for analyzing the alias record and the A record corresponding to the access target domain name from the response message;
the repackaging module is used for packaging the access target domain name and the A record into a response message; or selecting a part of alias records from the alias records, and packaging the access target domain name, the A records and the selected alias records into a response message; or selecting a part of A records from the A records, and packaging the access target domain name, the selected A records and the alias records into a response message; selecting a part of alias records from the alias records, selecting a part of A records from the A records, and packaging the access target domain name, the selected A records and the selected alias records into a response message;
and the sending module is used for sending the packaged response message to a sender of the domain name resolution request message.
Wherein, the liquid crystal display device comprises a liquid crystal display device,
the analysis module is also used for sending the alias record to the repackaging module when only analyzing the alias record corresponding to the access target domain name from the response message; and the method is used for sending the response message to the repackaging module when the alias record corresponding to the access target domain name is not resolved in the response message. The repackaging module is also used for selecting the target domain name and the last alias or selecting the target domain name, the last alias and at least one intermediate alias to be packaged into a response message when the alias record is received from the analysis module; and the system is also used for repackaging the response message after receiving the response message from the analysis module.
The repackaging module is specifically configured to select a part of alias records from the alias records according to the following manner:
querying an alias blacklist, and selecting aliases which do not exist in the alias blacklist in the alias record;
or, inquiring the alias white list, and selecting the aliases existing in the alias white list in the alias record;
alternatively, the alias blacklist and the alias whitelist are queried, and an alias that does not exist in the alias blacklist and exists in the alias whitelist is selected.
The device also comprises a judging module, wherein the judging module is used for judging whether the length of the received response message is larger than or equal to the preset length, and if so, the judging module is used for sending a repackaging trigger signal and the preset length to the analyzing module and the repackaging module; if not, forwarding the response message to the sending module. The repackaging module is used for controlling the length of the packaged response message to be smaller than the preset length when the response message is held.
Or the judging module is used for analyzing the access target domain name from the response message, judging whether the access target domain name is positioned in the preset domain name set, if so, sending a repackaging trigger signal to the analyzing module and the repackaging module, and if not, sending the received response message to a sender of the domain name analysis request message.
The device also comprises a domain name set maintenance module; the domain name set maintenance module is used for receiving a user-defined domain name input by a user and adding the received domain name into the domain name set; or, the method is used for judging whether the sender of the domain name resolution request message is a client which does not support TCP resolution or the sender of the domain name resolution request message is a local DNS server, and adding the access target domain name carried in the domain name resolution request message into the domain name set.
The present invention will be described in detail with reference to the following examples.
DETAILED DESCRIPTION OF EMBODIMENT (S) OF INVENTION
Establishing UDP connection between the DNS server and the LDNS server, receiving a domain name resolution request message from the LDNS server, wherein the access target in the domain name resolution request message is protein.
And the DNS server encapsulates the access target, the alias record and the A record into a response message by using a response method of the response message in the prior art, and sends the response message to the LDNS server. If the length of the bytes occupied by the name record is larger, the length of the response message is larger than the preset length, for example, larger than 512 bytes, and the DNS server needs to reestablish a TCP connection with the LDNS server, and the encapsulated response message is sent to the LDNS server through the TCP connection.
By using the response method of the response message in the invention, the DNS server selects a part of the alias records from the alias records, and encapsulates the access target domain name, the selected alias records and the A records into the response message. When the byte length occupied by the alias record is larger, the length of the encapsulated response message will be more likely to be smaller than the preset length, for example, smaller than 512 bytes, and the DNS server directly uses the established UDP connection to send the encapsulated response message to the LDNS server, without re-switching the protocol and establishing a connection.
The above description may be implemented alone or in various combinations and these modifications are within the scope of the present invention.
Those of ordinary skill in the art will appreciate that all or a portion of the steps of the methods described above may be implemented by a program that instructs associated hardware, and the program may be stored on a computer readable storage medium such as a read-only memory, a magnetic or optical disk, etc. Alternatively, all or part of the steps of the above embodiments may be implemented using one or more integrated circuits, and accordingly, each module/unit in the above embodiments may be implemented in hardware or may be implemented in a software functional module. The present invention is not limited to any specific form of combination of hardware and software.
It should be noted that, in this document, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that an article or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such article or apparatus. Without further limitation, an element defined by the phrase "comprising … …" does not exclude the presence of additional identical elements in an article or apparatus that comprises the element.
The above embodiments are only for illustrating the technical scheme of the present invention, not for limiting the same, and the present invention is described in detail with reference to the preferred embodiments. It will be understood by those skilled in the art that various modifications and equivalent substitutions may be made to the technical solution of the present invention without departing from the spirit and scope of the technical solution of the present invention, and the present invention is intended to be covered by the scope of the appended claims.

Claims (13)

1.A method for constructing a DNS reply message, comprising:
step 1, obtaining a response message aiming at a domain name resolution request message;
step 2, resolving an resolving chain of the alias record and/or the A record corresponding to the access target domain name from the response message, structuring the ordered data of the resolving chain, selecting the target record from the structured ordered data, and repackaging the access target domain name and the selected target record in sequence;
step 3, the encapsulated response message is sent to the sender of the domain name resolution request message;
the selecting the target record from the structured ordered data comprises:
when the alias record and the A record corresponding to the access target domain name are analyzed from the response message, selecting the A record or selecting a part or all of the alias record and the A record;
when only the alias record corresponding to the access target domain name is resolved from the response message, selecting the last alias, or selecting the last alias and at least one intermediate alias.
2. The method for constructing a DNS reply message of claim 1,
the step 2 further includes: and when the alias record corresponding to the access target domain name is not resolved from the response message, repackaging the response message.
3. The method for constructing a DNS reply message of claim 1,
the selecting a part of the alias records includes:
querying an alias blacklist, and selecting aliases which do not exist in the alias blacklist in the alias record;
or, inquiring an alias white list, and selecting an alias existing in the alias white list in the alias record;
alternatively, an alias blacklist and an alias whitelist are queried, and aliases that do not exist in the alias blacklist and exist in the alias whitelist are selected.
4. The method for constructing a DNS reply message of claim 1,
further comprises: and (2) judging whether the length of the received response message is greater than or equal to a preset length, if so, executing the step (2) to enable the length of the packaged response message to be smaller than the preset length, and if not, sending the received response message to a sender of the domain name resolution request message.
5. The method for constructing a DNS reply message of claim 1,
further comprises: and analyzing the access target domain name from the response message, judging whether the access target domain name is positioned in a domain name set, if so, executing the step 2, and if not, sending the received response message to a sender of the domain name analysis request message.
6. The method for constructing a DNS reply message of claim 5,
the method further includes a method of setting a set of domain names, including one of:
receiving a user-defined domain name input by a user, and adding the received domain name into the domain name set;
judging whether the sender of the domain name resolution request message is a client which does not support TCP resolution or a local DNS server, and adding the access target domain name carried in the domain name resolution request message into the domain name set.
7. An apparatus for constructing a DNS reply message, comprising:
the construction module is used for acquiring a response message aiming at the domain name resolution request message;
the analysis module analyzes an analysis chain of the alias record and/or the A record corresponding to the access target domain name from the response message, and performs ordered data structuring on the analysis chain;
the repackaging module is used for selecting target records from the structured data and repackaging the access target domain name and the selected target records in sequence;
the sending module is used for sending the packaged response message to the sender of the domain name resolution request message;
the parsing module selecting a target record from the structured ordered data includes:
when the alias record and the A record corresponding to the access target domain name are analyzed from the response message, selecting the A record or selecting a part or all of the alias record and the A record;
when only the alias record corresponding to the access target domain name is resolved from the response message, selecting the last alias, or selecting the last alias and at least one intermediate alias.
8. The apparatus for constructing a DNS reply message of claim 7,
and the analysis module is also used for sending the response message to the repackaging module when the alias record corresponding to the access target domain name is not analyzed from the response message.
9. The apparatus for constructing a DNS reply message of claim 7,
the repackaging module is used for selecting a part of the alias records, wherein the repackaging module is used for selecting the part of the alias records, and the repackaging module is used for selecting the part of the alias records, which comprises the following steps:
querying an alias blacklist, and selecting aliases which do not exist in the alias blacklist in the alias record;
or, inquiring an alias white list, and selecting an alias existing in the alias white list in the alias record;
alternatively, an alias blacklist and an alias whitelist are queried, and aliases that do not exist in the alias blacklist and exist in the alias whitelist are selected.
10. The apparatus for constructing a DNS reply message of claim 7,
the device also comprises a judging module for judging whether the length of the received response message is larger than or equal to a preset length, and if so, sending a repackaging trigger signal and the preset length to the analyzing module and the repackaging module; if not, forwarding the response message to the sending module;
the repackaging module is used for controlling the length of the packaged response message to be smaller than the preset length when the response message is held.
11. The apparatus for constructing a DNS reply message of claim 7,
the system also comprises a judging module for analyzing the access target domain name from the response message, judging whether the access target domain name is positioned in a preset domain name set, if so, sending a repackaging trigger signal to the analyzing module and the repackaging module, and if not, sending the received response message to a sender of the domain name analysis request message.
12. The apparatus for constructing a DNS reply message of claim 11,
the device also comprises a domain name set maintenance module;
the domain name set maintenance module is used for receiving a user-defined domain name input by a user and adding the received domain name into the domain name set; or, the method is used for judging whether the sender of the domain name resolution request message is a client which does not support TCP resolution or the sender of the domain name resolution request message is a local DNS server, and adding the access target domain name carried in the domain name resolution request message into the domain name set.
13. A computer readable storage medium, on which a computer program is stored, characterized in that the computer program, when executed, implements the steps of the method according to any one of claims 1-6.
CN201911228838.5A 2017-03-31 2017-03-31 Method and device for constructing DNS response message Active CN111107175B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201911228838.5A CN111107175B (en) 2017-03-31 2017-03-31 Method and device for constructing DNS response message

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201710207628.2A CN108667947B (en) 2017-03-31 2017-03-31 A kind of method and device for the length reducing DNS response message
CN201911228838.5A CN111107175B (en) 2017-03-31 2017-03-31 Method and device for constructing DNS response message

Related Parent Applications (1)

Application Number Title Priority Date Filing Date
CN201710207628.2A Division CN108667947B (en) 2017-03-31 2017-03-31 A kind of method and device for the length reducing DNS response message

Publications (2)

Publication Number Publication Date
CN111107175A CN111107175A (en) 2020-05-05
CN111107175B true CN111107175B (en) 2023-08-08

Family

ID=63783672

Family Applications (2)

Application Number Title Priority Date Filing Date
CN201911228838.5A Active CN111107175B (en) 2017-03-31 2017-03-31 Method and device for constructing DNS response message
CN201710207628.2A Active CN108667947B (en) 2017-03-31 2017-03-31 A kind of method and device for the length reducing DNS response message

Family Applications After (1)

Application Number Title Priority Date Filing Date
CN201710207628.2A Active CN108667947B (en) 2017-03-31 2017-03-31 A kind of method and device for the length reducing DNS response message

Country Status (1)

Country Link
CN (2) CN111107175B (en)

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109327559B (en) * 2018-11-08 2022-03-25 同盾控股有限公司 Domain name resolution method and device based on hybrid cloud platform
CN109802883B (en) * 2018-12-27 2021-07-30 南京信息职业技术学院 Mail transmission method and system thereof
CN111343042B (en) * 2020-02-05 2022-02-22 网宿科技股份有限公司 DNS analysis test method and test system
CN113014684A (en) * 2021-01-18 2021-06-22 珠海莲鸿科技有限公司 Communication transfer method and device for saving message verification time of Internet of things equipment
CN115378884B (en) * 2022-04-27 2023-09-15 国家计算机网络与信息安全管理中心 DNS message processing method, device, processing equipment and storage medium

Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102025794A (en) * 2010-01-22 2011-04-20 中国移动通信集团北京有限公司 Domain name resolution method, DNS (Domain Name Server) server and system
CN102291268A (en) * 2011-09-23 2011-12-21 杜跃进 Safety domain name server and hostile domain name monitoring system and method based on same
CN103188104A (en) * 2011-12-31 2013-07-03 中国移动通信集团浙江有限公司 Method and device for analyzing user behaviors
CN103973827A (en) * 2013-02-05 2014-08-06 中国移动通信集团公司 Domain name resolution method and device
CN104144222A (en) * 2014-08-20 2014-11-12 北京阅联信息技术有限公司 Method and system for load balancing in DNS system based on alias record
CN104303489A (en) * 2012-04-30 2015-01-21 Nec欧洲有限公司 Method for performing dns resolution in a network, content distribution system and client terminal for deployment in a content distribution system
CN105959433A (en) * 2016-07-22 2016-09-21 无锡华云数据技术服务有限公司 Domain name resolution method and domain name resolution system
CN105991793A (en) * 2015-05-27 2016-10-05 杭州迪普科技有限公司 Message forwarding method and device
CN106506726A (en) * 2016-12-12 2017-03-15 北京云端智度科技有限公司 A kind of method of verification DNS real users

Family Cites Families (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CA2472014C (en) * 2001-11-01 2012-07-10 Verisign, Inc. Method and system for updating a remote database
EP2311228B1 (en) * 2008-07-31 2017-09-06 Tekelec, Inc. Methods, systems, and computer readable media for throttling traffic to an internet protocol (ip) network server using alias hostname identifiers assigned to the ip network server with a domain name system (dns)
US8966122B2 (en) * 2012-04-16 2015-02-24 Opendns, Inc. Cross-protocol communication in domain name systems
CN102984286B (en) * 2012-11-14 2015-03-04 上海牙木通讯技术有限公司 Method and device and system of domain name server (DNS) for buffering updating
CN104427005B (en) * 2013-08-20 2018-01-02 阿里巴巴集团控股有限公司 The method and system that request is accurately dispatched are realized on CDN
CN103501357A (en) * 2013-09-18 2014-01-08 深圳先进技术研究院 Domain name resolution system and domain name resolution method
CN104079681A (en) * 2014-07-07 2014-10-01 中国人民解放军理工大学 Alias analysis method

Patent Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102025794A (en) * 2010-01-22 2011-04-20 中国移动通信集团北京有限公司 Domain name resolution method, DNS (Domain Name Server) server and system
CN102291268A (en) * 2011-09-23 2011-12-21 杜跃进 Safety domain name server and hostile domain name monitoring system and method based on same
CN103188104A (en) * 2011-12-31 2013-07-03 中国移动通信集团浙江有限公司 Method and device for analyzing user behaviors
CN104303489A (en) * 2012-04-30 2015-01-21 Nec欧洲有限公司 Method for performing dns resolution in a network, content distribution system and client terminal for deployment in a content distribution system
CN103973827A (en) * 2013-02-05 2014-08-06 中国移动通信集团公司 Domain name resolution method and device
CN104144222A (en) * 2014-08-20 2014-11-12 北京阅联信息技术有限公司 Method and system for load balancing in DNS system based on alias record
CN105991793A (en) * 2015-05-27 2016-10-05 杭州迪普科技有限公司 Message forwarding method and device
CN105959433A (en) * 2016-07-22 2016-09-21 无锡华云数据技术服务有限公司 Domain name resolution method and domain name resolution system
CN106506726A (en) * 2016-12-12 2017-03-15 北京云端智度科技有限公司 A kind of method of verification DNS real users

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
网络拓扑发现中的路由器别名识别技术研究与实现;张伟明, 罗军勇, 寇晓蕤, 蔡延荣;计算机工程与应用(第13期);全文 *

Also Published As

Publication number Publication date
CN111107175A (en) 2020-05-05
CN108667947B (en) 2019-10-25
CN108667947A (en) 2018-10-16

Similar Documents

Publication Publication Date Title
CN111107175B (en) Method and device for constructing DNS response message
US10972436B1 (en) System and method for session affinity in proxy media routing
EP2253124B1 (en) Method and apparatus for communication of data packets between local networks
US8009670B2 (en) Communication system, information processor, intervening server, identification information transmitting server, communication method and program
US8578057B2 (en) System and method for providing remote data access for a mobile communication device
CN112714194B (en) Method for accessing intranet equipment by extranet host and network topology structure
US20120084382A1 (en) On-the-fly reverse mapping
CN104243627A (en) Domain name resolution method, device and system
EP2469787A1 (en) Method and device for preventing network attacks
US9602333B2 (en) DNS server, gateways and methods for managing an identifier of a port range in the transmission of data
WO2018214853A1 (en) Method, apparatus, medium and device for reducing length of dns message
CN112272164B (en) Message processing method and device
US11425086B2 (en) Using DNS to communicate MC-TCP capability of server devices
CN108667946B (en) Multi-domain name mutual backup analysis management method, device and system
Hendriks et al. On the potential of IPv6 open resolvers for DDoS attacks
Laganier Host Identity Protocol (HIP) Domain Name System (DNS) Extension
Bellis Dns proxy implementation guidelines
US20070100998A1 (en) System and method of accessing a resource on a translated network device
CN107222588A (en) A kind of method and system of raising DNS availabilities
CN109698869B (en) Private network crossing method, communication node and storage medium
KR20190053170A (en) System and method for suppressing DNS requests
CN105939316A (en) Message forwarding method and device
US11368365B2 (en) Methods and systems for determining ICN capability of a node/server
Hankins et al. Guidelines for Creating New DHCPv6 Options
CN114363083B (en) Security protection method, device and equipment of intelligent gateway

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant