A method for improving DNS safety and performance

Abstract

The invention discloses a method for improving DNS safety and performance. Through a DNS VIEW function, domain name resolutions can be carried out by different DNS authorized servers according to different areas, corresponding IP addresses can be returned, proximity resolutions and load balancing can be achieved, and the situation that resolutions are carried out by concentrating on one or severalauthorized DNS servers can be avoided. Compared with the prior art, the method can increase the coverage area of authoritative servers and improve service performance, and the nodes of the authoritative servers can be resolved proximally for different regions of the country. The prevention areas of DNS authoritative servers can be effectively extended because of the dispersion of DNS authority, and therefore, DNS attacks can be effectively defended, and the safety of the DNS authority can be increased.

Description

technical field [0001] The invention relates to the technical field of the Internet, in particular to a method for improving DNS security and performance. Background technique [0002] With the development of society, the rapid growth of Internet users has led to the vigorous development of the Internet economy. Mobile Internet, e-commerce, online video, brand online advertising, online recruitment, online games, etc. have developed rapidly in a very short period of time and accumulated a large number of users. , has become an integral part of people's lives. [0003] DNS is the abbreviation of Domain Name System (Domain Name System or Domain Name Service), which is composed of a resolver and a domain name server. A domain name server refers to a server that saves the domain names and corresponding IP addresses of all hosts in the network and has the function of converting domain names to IP addresses. DNS is divided into authoritative DNS, recursive DNS, and forwarding DN...

AI Technical Summary

Problems solved by technology

[0007] 1. There are few coverage points, and the analysis effect on areas without coverage is not good

Generally speaking, the number of DNS servers is limited, and authorized DNS servers cannot fully cover all regions of the country

The consequence of this is that the analysis effect of the uncovered area will be greatly affected

For example, a region in Xinjiang is not covered by authorized DNS services. When users in this region need to perform DNS resolution, they need to resolve through authorized DNS servers in Qinghai or further regions. Such resolution effect is definitely not as good as through authorized DNS servers in Xinjiang. Good analysis effect

[0008] 2. The number of nodes is small, and it is easy to be attacked by attackers

Therefore, under the current circumstances, the authoritative DNS server faces a greater risk of being maliciously compromised

Images