Intelligent DNS message processing method and processing device

Abstract

The invention provides an intelligent domain name system (DNS) service processing method and an intelligent DNS service processing device. The method comprises the following steps of: judging whether the connection to which a DNS response message belongs undergoes network address translation (NAT) processing or not; matching an I address of a HTTP Server in a message with a private network E address in a static mapping list item; if the matching is successful, modifying an HTTP Server address in the message according to a mapping relation and then forwarding the modified HTTP Server address; if the matching fails, entering a message forwarding process, namely matching the connection which does not undergo the NAT processing with a public network IP address in the static mapping list item; if the matching is successful, modifying the HTTP Server address according to the mapping relation and then forwarding the modified HTTP Server address; and if the matching fails, entering the massage forwarding process. By the method and the device, the configuration work of users is greatly simplified.

Description

technical field [0001] The invention relates to an intelligent gateway technology, in particular to a technology for processing intelligent DNS messages on a gateway device. Background technique [0002] For enterprise HTTP applications, the HTTP Server (Hypertext Transfer Protocol server) is usually placed in the intranet behind the gateway device with security functions. And the security mechanism of the security device effectively resists various network attacks, such as flood attacks based on the TCP protocol or various attacks based on the HTTP protocol, so as to achieve the purpose of protecting the HTTP Server. [0003] Because the IP address configured or assigned by the HTTP Server in the internal network is a private network IP address, internal users (Clients) can communicate with it, but it cannot directly communicate with external Clients. For this reason, it is usually necessary to enable the NAT function on the gateway device to convert the private network IP...

AI Technical Summary

Problems solved by technology

[0006] For the above figure 1 and figure 2 For two typical actual networking applications, additional DNSALG configuration is required, and it is necessary to further distinguish the situation of the internal network or the public network; and once the IP address of the HTTPServer changes, it needs to be reconfigured on the gateway device. Increased the complexity of the management and application of ordinary enterprise users

for image 3 Although it does not require additional configuration, the DNS Server is located on the public network and lacks the protection of security devices. It may become the target of attacks, which brings great security risks, and the deployment cost is relatively high. Conducive to the saving of public network IP addresses

Images