WO2018214853A1 - Procédé, appareil, support et dispositif de réduction de longueur de message dns - Google Patents

Procédé, appareil, support et dispositif de réduction de longueur de message dns Download PDF

Info

Publication number
WO2018214853A1
WO2018214853A1 PCT/CN2018/087744 CN2018087744W WO2018214853A1 WO 2018214853 A1 WO2018214853 A1 WO 2018214853A1 CN 2018087744 W CN2018087744 W CN 2018087744W WO 2018214853 A1 WO2018214853 A1 WO 2018214853A1
Authority
WO
WIPO (PCT)
Prior art keywords
dns response
domain name
length
response message
dns
Prior art date
Application number
PCT/CN2018/087744
Other languages
English (en)
Chinese (zh)
Inventor
符立佳
魏静明
苗辉
Original Assignee
贵州白山云科技有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 贵州白山云科技有限公司 filed Critical 贵州白山云科技有限公司
Publication of WO2018214853A1 publication Critical patent/WO2018214853A1/fr

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/45—Network directories; Name-to-address mapping
    • H04L61/4505—Network directories; Name-to-address mapping using standardised directories; using standardised directory access protocols
    • H04L61/4511—Network directories; Name-to-address mapping using standardised directories; using standardised directory access protocols using domain name system [DNS]

Definitions

  • This document relates to, but is not limited to, the field of Internet communication technologies, and in particular, to a method, device, medium and device for reducing the length of a DNS message.
  • the Domain Name Server is an important device in the network access process.
  • LDNS local domain name server
  • the DNS sends the domain name resolution request.
  • the DNS resolves the access target domain name in the domain name resolution request and determines that there is a list of IP addresses of the network server corresponding to the access target domain name
  • the corresponding IP address is encapsulated in the response packet and returned to the LDNS.
  • the LDNS sends the contents of this response packet to the client, and the client performs network access based on the IP address.
  • the client-to-LDNS, LDNS, and authoritative DNS are generally transmitted through the User Datagram Protocol (UDP) protocol.
  • UDP User Datagram Protocol
  • TCP Transmission Control Protocol
  • a checksum error occurs when the auth and add fields in the DNS packet are truncated.
  • Some clients that do not support the TCP protocol will cause parsing failure when executing the parsing service.
  • the method of controlling the length of the DNS response packet by reducing the number of IPs in the analysis result may result in an unbalanced load when serving multiple devices.
  • the method of reducing the length of the DNS response message by reducing the CNAME is prohibited in the current partial fusion CDN business mode.
  • Controlling the length of the DNS packet by deleting the auth and add fields globally will result in the failure to obtain the A record of the NS record and the NS record from the authoritative server itself.
  • the LDNS NS record and the NS record A record completely trust the result of the upper-level authoritative server. This method will affect the robustness of the system and will cause trouble for problem queries.
  • the number of bytes occupied by other parts of the parsing chain cannot be known, and solving the problem from the perspective of the entire parsing chain may result in the response packet sent by the authoritative server not exceeding 512 words. Section, but the LDNS resolution plus the response result of other links in the parsing chain, the response packet exceeds 512 bytes, how to properly control the length of the DNS response message becomes a technical problem to be solved.
  • the embodiment of the present invention provides a method, an apparatus, a medium, and a device for reducing the length of a DNS message.
  • Step 1 After receiving the access request, the authoritative DNS server constructs a DNS response message.
  • Step 2 Determine a source network area of the access request, and obtain information about a domain name from the domain name in the access request to the domain name in the DNS response domain in the process of resolving the domain name of the source network area. capacity;
  • Step 3 When the length of the DNS response packet is greater than the difference between the length of the transport protocol packet and the information capacity of the parsed information, reduce the content of the authoritative field in the DNS response packet and modify the content of the additional field accordingly. Sending the updated DNS response message to the sender of the access request.
  • the above method for reducing the length of the DNS response message has the following features:
  • Step 1 and step 2 are further included between the steps 1 and 2,
  • Step 1 ′ obtaining the information capacity of the local DNS from the domain name in the access request to the domain information in the DNS response message in the process of resolving the domain name of the local network, determining the maximum information capacity, and determining the location Step 2 is performed when the length of the DNS response message is greater than the difference between the length of the transport protocol packet and the maximum information capacity.
  • the above method for reducing the length of the DNS response message has the following features:
  • the reducing the content of the authoritative field in the DNS response message and modifying the content of the additional field includes: deleting part of the NS record of the authoritative field in the DNS response message, retaining at least one NS record, and recording the A record of the additional field Modified to the A record corresponding to the retained NS record.
  • the above method for reducing the length of the DNS response message has the following features:
  • the step 1 s further includes: when determining that the length of the DNS response message is not greater than a difference between a length of the transport protocol data packet and the maximum information capacity, sending the DNS response message to the sending of the access request square;
  • the step 3 further includes: when determining that the length of the DNS response packet is not greater than a difference between a length of the transport protocol data packet and a data capacity of the parsing information, sending the DNS response packet to the access request The sender.
  • the above method for reducing the length of the DNS response message has the following features:
  • the information capacity of the domain name in the process of resolving the domain name of the source network to the domain name in the DNS request message includes: maintaining a domain name association list, and the domain name association The list includes the domain name and the corresponding analytic chain entry domain name; and the corresponding analytics chain information capacity list is obtained according to the domain name association list, and the analytics chain information capacity list includes the domain name, the network area, and the analytic chain information capacity, and the chain information capacity list is resolved from this list.
  • the known analysis chain information capacity is used as the information capacity from the domain name in the access request to the parsing information of the domain name in the DNS response message.
  • the apparatus for reducing the length of a DNS response message provided by the embodiment of the present invention is applied to an authoritative DNS server, including:
  • a source network area information capacity obtaining module configured to determine a source network area of the access request, and obtain a local DNS from a domain name in the access request to the DNS response message in a process of resolving a domain name of the source network area
  • the first determining module is configured to determine whether the length of the DNS response packet is greater than a difference between a length of the transport protocol data packet and a data capacity of the parsed information;
  • the message reloading module is configured to reduce the authoritative field in the DNS response message when the determining module determines that the length of the DNS response message is greater than a difference between the length of the transport protocol data packet and the information capacity of the parsing information. And modify the content of the additional field accordingly, and transmit the updated DNS response message to the sending module;
  • the sending module is configured to send the received updated DNS response message to the sender of the access request.
  • the above device for reducing the length of the DNS response message has the following features:
  • the device also includes:
  • the multi-network area information capacity obtaining module is configured to obtain the information capacity of the domain name from the domain name in the access request to the domain name in the DNS response message in the process of resolving the domain name of each local area, and determine the maximum information.
  • the second determining module is configured to determine whether the length of the DNS response packet is greater than a difference between a length of the transport protocol packet and a maximum information capacity, and if yes, triggering the first determining module to perform the determining.
  • the above device for reducing the length of the DNS response message has the following features:
  • the message reloading module is further configured to reduce the content of the authoritative field in the DNS response message by using the following method: and modify the content of the additional field correspondingly: deleting part of the NS record of the authoritative field in the DNS response message, and retaining at least one NS Recording, modifying the A record of the additional field to the A record corresponding to the retained NS record.
  • the above device for reducing the length of the DNS response message has the following features:
  • the first determining module is further configured to: when the length of the DNS response packet is not greater than a difference between a length of the transport protocol data packet and the maximum information capacity, triggering, by the sending module, the sending, by the sending module, DNS response message;
  • the second determining module is further configured to: when determining that the length of the DNS response packet is not greater than a difference between a length of the transport protocol data packet and the maximum information capacity, triggering, by the sending module, the sending, by the sending module, DNS response message;
  • the above device for reducing the length of the DNS response message has the following features:
  • the device further includes an information capacity obtaining module, configured to maintain a domain name association list, where the domain name association list includes the domain name and a corresponding analytic chain entry domain name; and the corresponding analytics chain information capacity list is obtained according to the domain name association list, and the analytics chain information
  • the capacity list includes a domain name, a network area, and a parsing chain information capacity, and the parsing chain information capacity learned from the parsing chain information capacity list is used as the parsing information from the domain name in the access request to the domain name in the DNS response message.
  • Information capacity is used to maintain a domain name association list, where the domain name association list includes the domain name and a corresponding analytic chain entry domain name; and the corresponding analytics chain information capacity list is obtained according to the domain name association list, and the analytics chain information
  • the capacity list includes a domain name, a network area, and a parsing chain information capacity, and the parsing chain information capacity learned from the parsing chain information capacity list is used as the parsing information from the
  • the computer readable storage medium provided by the embodiment of the present invention stores a computer program, and when the program is executed by the processor, the steps of the foregoing method are implemented.
  • a computer device provided by an embodiment of the present invention includes a memory, a processor, and a computer program stored on the memory and operable on the processor, and the processor implements the steps of the foregoing method when the program is executed.
  • This document actively detects the length of the data in other parts of the analytic chain of the domain name.
  • the DNS reply message is not exceeded when the DNS response message is constructed.
  • This paper also reduces the length of the DNS packet by reducing the authoritative field and modifying the additional field mode, and does not cause the disadvantages caused by other methods for reducing the length of the DNS response message in the prior art.
  • Embodiment 1 is a flowchart of a method for reducing a DNS response message in Embodiment 1;
  • Embodiment 2 is a flowchart of a method for reducing a DNS response message in Embodiment 2;
  • Embodiment 3 is a structural diagram of an apparatus for reducing a DNS response message in Embodiment 3;
  • FIG. 4 is a structural diagram of an apparatus for reducing a DNS response message in Embodiment 4.
  • FIG. 1 is a flowchart of a method for reducing a DNS response message in Embodiment 1, and the method for reducing the length of a DNS response message includes:
  • Step 101 After receiving the access request, the authoritative DNS server constructs a DNS response message.
  • Step 102 Determine a source network area of the access request, and obtain an information capacity of the domain name from the access request in the process of resolving the domain name in the source network area to the domain name in the DNS response message;
  • Step 103 When it is determined that the length of the DNS response packet is greater than a difference between the length of the transport protocol packet and the information capacity of the parsed information, reduce the content of the authoritative field in the DNS response packet and modify the content of the additional field accordingly;
  • Step 104 Send the updated DNS response message to the sender of the access request.
  • the method includes but is not limited to the case where the LDNS and the client, the LDNS and the authoritative DNS adopt the UDP protocol, and other types of protocols may also be used.
  • the transport protocol packet is limited to 512 bytes.
  • the method for determining the source network area of the access request is as follows: parsing the DNS response message in step 101, parsing the request source IP from the source IP address, determining the network area to which the request source IP belongs, and using the network area as the source network area.
  • the content of the authority field in the DNS response packet is reduced in step 103, and the content of the additional field is modified correspondingly: deleting part of the NS record of the authority field in the DNS response message, retaining at least one NS record, and modifying the A record of the additional field to The A record corresponding to the retained NS record.
  • Step 103 further includes: when determining that the length of the DNS response message is not greater than a difference between the length of the transport protocol packet and the information capacity of the parsed information, sending the DNS response message to the sender of the access request.
  • the method further includes the step of transmitting the alarm information when the length of the updated DNS response message is greater than the difference between the length of the transport protocol packet and the information capacity of the parsed information.
  • the method for reducing the length of a DNS response message includes:
  • Step 201 After receiving the access request, the authoritative DNS server constructs a DNS response message.
  • Step 201 ′ obtaining the information capacity of the local DNS from the domain name in the access request to the parsing information of the domain name in the DNS response message in the process of resolving the domain name of each network area, determining the maximum information capacity, and determining the When the length of the DNS response packet is greater than the difference between the length of the transport protocol packet and the maximum information capacity, step 202 is performed.
  • Step 202 Determine a source network area of the access request, and obtain an information capacity of a domain name from the access request to a domain name in the DNS response message in the process of resolving the domain name of the source network area;
  • Step 203 Determine that the length of the DNS response packet is greater than a difference between the length of the transport protocol packet and the information capacity of the parsed information, reduce the content of the authoritative field in the DNS response packet, and modify the content of the additional field accordingly. Sending the updated DNS response message to the sender of the access request.
  • the step 201 ′ further includes: when determining that the length of the DNS response message is not greater than a difference between a length of the transport protocol data packet and the maximum information capacity, sending the DNS response packet to the access request sender.
  • the authoritative DNS server maintains a domain name association list.
  • the domain name association list includes the domain name and the corresponding resolution chain entry domain name, and also maintains a resolution chain information capacity list.
  • the list includes a domain name, a network area, and a parsing chain information capacity.
  • the authoritative DNS server obtains, from the LDNS server, the information capacity of the LDNS from the domain name in the access request to the domain name resolution information in the DNS response message in the process of resolving the domain name in each network area.
  • the authoritative DNS server obtains a corresponding parsing chain information capacity list according to the domain name association list, and uses the parsing chain information capacity learned from the parsing chain information capacity list as the domain name from the access request to the DNS response message. The information capacity of the parsing information in the domain name.
  • FIG. 3 is a structural diagram of an apparatus for reducing the length of a DNS response message in Embodiment 3, which is applied to an authoritative DNS server, including:
  • a source network area information capacity obtaining module configured to determine a source network area of the access request, and obtain a local DNS from a domain name in the access request to the DNS response message in a process of resolving a domain name of the source network area
  • the first determining module is configured to determine whether the length of the DNS response packet is greater than a difference between a length of the transport protocol data packet and a data capacity of the parsed information;
  • the message reloading module is configured to reduce the authoritative field in the DNS response message when the determining module determines that the length of the DNS response message is greater than a difference between the length of the transport protocol data packet and the information capacity of the parsing information. And modify the content of the additional field accordingly, and transmit the updated DNS response message to the sending module;
  • the sending module is configured to send the received updated DNS response message to the sender of the access request.
  • the message reloading module is further configured to reduce the content of the authoritative field in the DNS response message by using the following method: and modify the content of the additional field correspondingly: deleting part of the NS record of the authoritative field in the DNS response message, and retaining at least one NS Recording, modifying the A record of the additional field to the A record corresponding to the retained NS record.
  • the device further includes an information capacity obtaining module, configured to maintain a domain name association list, where the domain name association list includes the domain name and a corresponding analytics chain entry domain name; and the corresponding analytics chain information capacity list is obtained according to the domain name association list, and the analytics chain information capacity
  • the list includes a domain name, a network area, and a parsing chain information capacity, and the parsing chain information capacity learned from the parsing chain information capacity list is used as information from the domain name in the access request to the parsing information of the domain name in the DNS response message. capacity.
  • FIG. 4 is a structural diagram of an apparatus for reducing the length of a DNS response message in the fourth embodiment, and the apparatus for reducing the length of the DNS response message in the fourth embodiment is further included:
  • the multi-network area information capacity obtaining module is configured to obtain the information capacity of the domain name from the domain name in the access request to the domain name in the DNS response message in the process of resolving the domain name of each local area, and determine the maximum information.
  • the second determining module is configured to determine whether the length of the DNS response packet is greater than a difference between a length of the transport protocol packet and a maximum information capacity, and if yes, triggering the first determining module to perform the determining.
  • the first determining module is further configured to: when the length of the DNS response packet is not greater than a difference between the length of the transport protocol packet and the maximum information capacity, triggering, by the sending module, the DNS response generated by the building module Message
  • the second determining module is further configured to: when the length of the DNS response packet is not greater than a difference between a length of the transport protocol data packet and the maximum information capacity, triggering, by the sending module, to send the DNS response generated by the building module Message.
  • the domain resolved by the authoritative server is c.com.
  • This authoritative server is called the authoritative DNS server of c.com.
  • This authoritative server can construct the response message requested by www.c.com.
  • the relationship between www.a.com and www.c.com is maintained in the domain name relationship list, and www.a.com is the resolution entry domain name of www.c.com.
  • the parsing process is as follows: The client sends an access request and the domain name requested to be accessed is www.a.com. After receiving this access request, LDNS performs recursive parsing in different network areas. A combination of general geographical areas (such as Beijing, Shanghai, etc.) and operators (China Unicom, Telecom, etc.) in the network area, such as Beijing Unicom and Shanghai Telecom.
  • the parsing chain is:
  • this authoritative server is determined to be the authoritative DNS server of c.com with the IP address 1.1.1.1 .
  • the response message of this authoritative DNS server includes:
  • LDNS resolves the chain information capacity in the parsing chain to the capacity of the following CNAME.
  • the capacity is 62 bytes, and the information recorded in the analysis chain information capacity list for this network area of Beijing Unicom is:
  • the parsing chain is:
  • the authoritative server is determined to be the authoritative DNS server of c.com with the IP address 2.2.2.2 .
  • the response message of this authoritative DNS server includes:
  • LDNS resolves the chain information capacity in the parsing chain to the capacity of the following CNAME.
  • the capacity is 30 bytes, and the information recorded in the analysis chain information capacity list for this network area of Shanghai Telecom is:
  • the list of authoritative server maintenance parsing chain information capacity includes:
  • the authoritative server After receiving the access request, the authoritative server constructs a DNS response message.
  • the length of the DNS response message is 500 bytes.
  • the maximum information capacity of the analysis chain information capacity is 62 bytes, 512.
  • the difference between the byte and the maximum information capacity is 450 bytes. It is determined that the length of the DNS response message is greater than the 450 bytes, and the second judgment is made.
  • the source network area for determining the access request is Shanghai Telecom.
  • the analysis chain information capacity list the information capacity corresponding to the network area is determined to be 30 bytes, and the difference between the 512 bytes and the information capacity is 480 bytes, and the DNS response is determined. If the length of the text is greater than the 480 bytes, the content of the authoritative field in the DNS response message is reduced, and the content of the additional field is modified accordingly, and the updated DNS response message is sent to the sender of the access request.
  • the scheme of this paper can reduce the number of bytes of DNS packets by 44.1% compared with the scheme of the prior art.
  • the total length of the authoritative field and the additional field in the DNS response message using the prior art scheme is 229 bytes.
  • the authoritative field and the additional field in the DNS response message is 112 bytes. According to the scheme described herein above, the length of the additional field does not change because the content of the authoritative field is reduced to achieve the effect of reducing the length of the DNS response message.
  • the embodiment of the present invention considers that the DNS response message returned by the authoritative DNS server at the LDNS needs to increase the data of other parts of the parsing chain, and introduces the judgment of the length of the response chain response packet when determining the length of the DNS response message. To make the control of message length more accurate and reasonable.
  • computer storage medium includes volatile and nonvolatile, implemented in any method or technology for storing information, such as computer readable instructions, data structures, program modules or other data. Sex, removable and non-removable media.
  • Computer storage media includes, but is not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disc (DVD) or other optical disc storage, magnetic cartridge, magnetic tape, magnetic disk storage or other magnetic storage device, or may Any other medium used to store the desired information and that can be accessed by the computer.
  • communication media typically includes computer readable instructions, data structures, program modules, or other data in a modulated data signal, such as a carrier wave or other transport mechanism, and can include any information delivery media. .

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

L'invention concerne un procédé et un appareil de réduction de la longueur d'un message DNS. Le procédé consiste à : après la réception d'une demande d'accès, construire un message de réponse DNS au moyen d'un serveur DNS faisant autorité ; déterminer une zone de réseau source de la demande d'accès, et acquérir une capacité d'informations d'informations d'analyse concernant un DNS local à partir d'un nom de domaine dans la demande d'accès à un nom de domaine dans le message de réponse DNS pendant un processus d'analyse de nom de domaine de la zone de réseau source ; et lorsqu'il est déterminé que la longueur du message de réponse DNS est supérieure à une valeur de différence entre la longueur d'un paquet de données de protocole de transport et la capacité d'informations des informations d'analyse, réduire le contenu d'un champ faisant autorité dans le message de réponse DNS et modifier de manière correspondante le contenu d'un champ supplémentaire, et envoyer le message de réponse DNS mis à jour à un émetteur de la demande d'accès. L'invention, par une réduction d'un champ faisant autorité et par une modification d'un champ supplémentaire, permet d'atteindre le but de réduction de la longueur d'un message DNS, et d'empêcher les inconvénients causés par d'autres procédés de réduction de la longueur d'un message de réponse DNS selon l'état de la technique.
PCT/CN2018/087744 2017-05-22 2018-05-22 Procédé, appareil, support et dispositif de réduction de longueur de message dns WO2018214853A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201710364884.2A CN107707683B (zh) 2017-05-22 2017-05-22 一种减小dns报文长度的方法和装置
CN201710364884.2 2017-05-22

Publications (1)

Publication Number Publication Date
WO2018214853A1 true WO2018214853A1 (fr) 2018-11-29

Family

ID=61169522

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2018/087744 WO2018214853A1 (fr) 2017-05-22 2018-05-22 Procédé, appareil, support et dispositif de réduction de longueur de message dns

Country Status (2)

Country Link
CN (1) CN107707683B (fr)
WO (1) WO2018214853A1 (fr)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112702445A (zh) * 2019-10-23 2021-04-23 中盈优创资讯科技有限公司 基于dns响应数据报文的递归日志提取方法及装置
CN115334040A (zh) * 2022-08-10 2022-11-11 北京百度网讯科技有限公司 域名的互联网协议ip地址的确定方法及其装置
CN115378884A (zh) * 2022-04-27 2022-11-22 国家计算机网络与信息安全管理中心 Dns报文处理方法、装置、处理设备及存储介质

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107707683B (zh) * 2017-05-22 2018-06-08 贵州白山云科技有限公司 一种减小dns报文长度的方法和装置
CN108833424B (zh) * 2018-06-25 2020-11-03 哈尔滨工业大学 一种获取域名所有资源记录的系统
CN113014684A (zh) * 2021-01-18 2021-06-22 珠海莲鸿科技有限公司 节省物联网设备报文验证时间的通信中转方法及装置
CN114143332B (zh) * 2021-11-03 2024-06-11 阿里巴巴（中国）有限公司 基于内容分发网络cdn的处理方法、电子设备和介质

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102025794A (zh) * 2010-01-22 2011-04-20 中国移动通信集团北京有限公司 一种域名解析方法、dns服务器及系统
US7970878B1 (en) * 2005-11-16 2011-06-28 Cisco Technology, Inc. Method and apparatus for limiting domain name server transaction bandwidth
CN106470252A (zh) * 2016-09-29 2017-03-01 广东欧珀移动通信有限公司 应用程序查询ip地址的方法及通信终端
CN106657432A (zh) * 2016-11-17 2017-05-10 中国移动通信集团江苏有限公司 域名解析方法及装置
CN107707683A (zh) * 2017-05-22 2018-02-16 贵州白山云科技有限公司 一种减小dns报文长度的方法和装置

Family Cites Families (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1949783B (zh) * 2005-10-14 2011-03-16 华为技术有限公司 域名解析服务器应答报文网络地址转换中的地址映射方法
CN101969478B (zh) * 2010-10-15 2013-03-20 杭州迪普科技有限公司 一种智能dns报文处理方法及处理装置
CN103812770B (zh) * 2012-11-12 2017-04-12 华为技术有限公司 云业务报文重定向的方法、系统和云网关
CN104754066B (zh) * 2013-12-26 2018-10-09 华为技术有限公司 一种报文处理方法和报文处理设备
CN106550056B (zh) * 2015-09-18 2019-09-10 中国移动通信集团江苏有限公司 一种域名解析方法及装置
CN105721624B (zh) * 2016-01-22 2019-06-21 中国互联网络信息中心 一种新型权威域名解析服务方法和装置
CN111245972B (zh) * 2016-08-31 2023-07-28 贵州白山云科技股份有限公司 一种域名解析方法、装置、介质及设备

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7970878B1 (en) * 2005-11-16 2011-06-28 Cisco Technology, Inc. Method and apparatus for limiting domain name server transaction bandwidth
CN102025794A (zh) * 2010-01-22 2011-04-20 中国移动通信集团北京有限公司 一种域名解析方法、dns服务器及系统
CN106470252A (zh) * 2016-09-29 2017-03-01 广东欧珀移动通信有限公司 应用程序查询ip地址的方法及通信终端
CN106657432A (zh) * 2016-11-17 2017-05-10 中国移动通信集团江苏有限公司 域名解析方法及装置
CN107707683A (zh) * 2017-05-22 2018-02-16 贵州白山云科技有限公司 一种减小dns报文长度的方法和装置

Cited By (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112702445A (zh) * 2019-10-23 2021-04-23 中盈优创资讯科技有限公司 基于dns响应数据报文的递归日志提取方法及装置
CN112702445B (zh) * 2019-10-23 2023-04-07 中盈优创资讯科技有限公司 基于dns响应数据报文的递归日志提取方法及装置
CN115378884A (zh) * 2022-04-27 2022-11-22 国家计算机网络与信息安全管理中心 Dns报文处理方法、装置、处理设备及存储介质
CN115378884B (zh) * 2022-04-27 2023-09-15 国家计算机网络与信息安全管理中心 Dns报文处理方法、装置、处理设备及存储介质
CN115334040A (zh) * 2022-08-10 2022-11-11 北京百度网讯科技有限公司 域名的互联网协议ip地址的确定方法及其装置
CN115334040B (zh) * 2022-08-10 2023-07-18 北京百度网讯科技有限公司 域名的互联网协议ip地址的确定方法及其装置

Also Published As

Publication number Publication date
CN107707683A (zh) 2018-02-16
CN107707683B (zh) 2018-06-08

Similar Documents

Publication Publication Date Title
WO2018214853A1 (fr) Procédé, appareil, support et dispositif de réduction de longueur de message dns
US9794216B2 (en) Request routing in a networked environment
US10230760B2 (en) Real-time cloud-based detection and mitigation of DNS data exfiltration and DNS tunneling
US10284516B2 (en) System and method of determining geographic locations using DNS services
EP2266064B1 (fr) Routage de demandes
US9319315B2 (en) Distributing transmission of requests across multiple IP addresses of a proxy server in a cloud-based proxy service
US10560422B2 (en) Enhanced inter-network monitoring and adaptive management of DNS traffic
US10735461B2 (en) Method for minimizing the risk and exposure duration of improper or hijacked DNS records
US10469532B2 (en) Preventing DNS cache poisoning
US20120084382A1 (en) On-the-fly reverse mapping
US9648033B2 (en) System for detecting the presence of rogue domain name service providers through passive monitoring
US20160036848A1 (en) Intercloud security as a service
US20180041466A9 (en) Surrogate name delivery network
US8886750B1 (en) Alias resource record sets
US10225105B2 (en) Network address translation
US20180287940A1 (en) Data universal forwarding plane for information exchange
WO2017161965A1 (fr) Procédé, dispositif et système de redirection d'un système de noms de domaine (dns) dynamique
WO2017000144A1 (fr) Serveur dns, client et procédé de synchronisation de données
Alani et al. Tcp/ip model
CN112437127A (zh) 报文处理方法、装置以及负载均衡器和服务器
CN103581361A (zh) 一种域名解析代理方法、设备及系统
US11658995B1 (en) Methods for dynamically mitigating network attacks and devices thereof
US10021176B2 (en) Method and server for managing traffic-overload on a server
US10009258B2 (en) Methods, systems, and computer readable media for routing a redirected request message
KR101645222B1 (ko) 어드밴스드 도메인 네임 시스템 및 운용 방법

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 18805285

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 18805285

Country of ref document: EP

Kind code of ref document: A1