CAJ | 학술논문

针对现行域名解析系统存在各种性能和安全上的问题(例如,查询延迟、更新延迟、易受DoS攻击等),提出了一种新型的、可增量部署的、和现行 DNS 兼容的、具有更好性能的域名解析服务模型.此服务模型基于云技术,利用云及其网络架构来发布 DNS 记录,响应用户的域名解析请求,提供域名解析服务.在此服务模型中,云的节点服务器实现了域名解析器和权威域名服务器的功能,域名的权威DNS记录被发布到各节点服务器, DNS查询结果直接由节点服务器返回给用户(现行的DNS则需要访问多级域名服务器来完成对域名解析器中未缓存的DNS 记录的解析).理论分析和实验证明,此服务模型与现行的各种域名解析服务相比,其DNS 查询延迟、更新延迟、故障应变能力、可靠性等各方面性能都有显著提高.
침대현행역명해석계통존재각충성능화안전상적문제(례여,사순연지、경신연지、역수DoS공격등),제출료일충신형적、가증량부서적、화현행 DNS 겸용적、구유경호성능적역명해석복무모형.차복무모형기우운기술,이용운급기망락가구래발포 DNS 기록,향응용호적역명해석청구,제공역명해석복무.재차복무모형중,운적절점복무기실현료역명해석기화권위역명복무기적공능,역명적권위DNS기록피발포도각절점복무기, DNS사순결과직접유절점복무기반회급용호(현행적DNS칙수요방문다급역명복무기래완성대역명해석기중미완존적DNS 기록적해석).이론분석화실험증명,차복무모형여현행적각충역명해석복무상비,기DNS 사순연지、경신연지、고장응변능력、가고성등각방면성능도유현저제고.
The current DNS had various performance and security problems, such as query delay, update latency, vulner-able to DoS attacks etc. Focuses on those problems, a novel, incremental deployable, compatible, and more effective do-main name resolving service model was proposed. The service model was cloud sourcing, by using the cloud and its branch network worldwide to distribute DNS records, response DNS queries, and provide domain name resolved service. In this service model, the cloud edge servers function as local resolvers and authoritative nameservers, and authoritative DNS records were distributed to the edge servers, which directly responsed users’ DNS queries (if the queried record was not cached at local resolver, current DNS needed to access several nameservers in multi-level hierarchy). Compared with current domain name resolving services, the analysis and experiments prove that the service model show advantages in query latency, update latency, resiliency, and reliability etc.