CN110417935A - A Reverse Domain Name Resolution Method Based on IPv6 Technology - Google Patents

Abstract

The present invention relates to a reverse domain name analysis method based on IPv6 technology, comprising: S1, creating an IPv6 reverse resolution area in a DNS server supporting IPv6, and the domain suffix is "IP6.ARPA."; S2, when receiving reverse resolution When requesting the domain name corresponding to the IPv6 address, point the request to the AAAA record in the DNS server resource record through the IPv6 reverse solution area; S3, perform query matching according to the AAAA record, and finally the suffix name ".IP6.ARPA" The format plus the domain name is returned to the requester. Compared with the prior art, on the basis of the existing DNS IPv4 domain name server, the present invention can use the original environment to add IPv6 corresponding areas and files. It ensures the coexistence of IPv6 and IPv4 without additional hardware equipment, saving cost.

Description

A Reverse Domain Name Resolution Method Based on IPv6 Technology

technical field

The invention relates to the field of network technology, in particular to a reverse domain name resolution method based on IPv6 technology.

Background technique

The biggest problem with IPv4 is that the network address resources are limited, which seriously restricts the application and development of the Internet. The use of IPv6 can not only solve the problem of the number of network address resources, but also solve the obstacles for various access devices to connect to the Internet, so IPv6 is gradually becoming popular.

IPv6, as the name suggests, is version 6 of the IP address protocol. We are using IPv4 now, and IPv4 addresses are 32 bits, and the total number is about 4.3 billion, and the 192 and 170 address segments dedicated to the intranet are also subtracted, which is even less. The IPv6 address is 128 bits, which is about 4.3 billion to the 4th power. The addresses are extremely rich and almost inexhaustible. IPv6 is more secure, with standard encryption options, the communication between the user and the server is difficult to crack. In addition, IPv6 can greatly reduce network latency, which can be reduced from the current general 100ms to single digits. The existing IPv4 DNS cannot resolve IPv6 addresses, and additional hardware equipment is needed to implement it, which is costly.

Contents of the invention

The object of the present invention is to provide a reverse domain name resolution method based on IPv6 technology in order to overcome the above-mentioned defects in the prior art.

The purpose of the present invention can be achieved through the following technical solutions:

A reverse domain name resolution method based on IPv6 technology, comprising:

S1. Create an IPv6 anti-resolution zone in a DNS server that supports IPv6, and the domain suffix is "IP6.ARPA.";

S2. When receiving a request for reverse resolution of the domain name corresponding to the IPv6 address, point the request to the AAAA record in the resource record of the DNS server through the IPv6 reverse resolution area;

S3. Query and match according to the AAAA record, and finally return to the requesting end in the format with the suffix ".IP6.ARPA" plus the domain name.

Preferably, the IPv6 anti-decomposition area includes: a nibble hexadecimal digital format string separated by ".", the low-order address comes first, and the high-order address follows.

Preferably, before creating the IPv6 anti-resolution area, the step S1 further includes: modifying the DNS configuration file, enabling IPv6 port monitoring and modifying the IPv6 address.

Preferably, after creating the IPv6 anti-decomposition zone, the step S1 further includes: using the named-checkzone command to check whether the configuration file is wrong.

Preferably, the DNS server is connected with a slave DNS server.

Preferably, IPv4 and IPv6 of the DNS server share a unified domain name space.

Preferably, the DNS server adopts a Linux system supporting IPv6.

Preferably, the network accessed by the DNS server is an intranet or an extranet.

Compared with the prior art, the present invention integrates IPv4 and IPv6 DNS service architecture technologies, and uses the original environment to add IPv6 corresponding areas and files on the basis of the existing DNS IPv4 domain name server, ensuring the coexistence of IPv6 and IPv4 without additional Adding hardware equipment saves costs.

Description of drawings

Fig. 1 is the block diagram of realization of the present invention.

Detailed ways

The present invention will be described in detail below in conjunction with the accompanying drawings and specific embodiments. This embodiment is carried out on the premise of the technical solution of the present invention, and detailed implementation and specific operation process are given, but the protection scope of the present invention is not limited to the following embodiments.

Example

This application proposes a reverse domain name resolution method based on IPv6 technology, including:

S1. Create an IPv6 anti-resolution zone in a DNS server that supports IPv6, and the domain suffix is "IP6.ARPA.";

S2. When receiving a request for reverse resolution of the domain name corresponding to the IPv6 address, point the request to the AAAA record in the resource record of the DNS server through the IPv6 reverse resolution area;

S3. Query and match according to the AAAA record, and finally return to the requesting end in the format with the suffix ".IP6.ARPA" plus the domain name.

There is no need to build an additional IPv6 DNS server, just add areas and files on the basis of the original IPv4 DNS. The difference between the IPv4 protocol and the IPv6 protocol does not mean that two separate IPv4DNS systems and IPv6DNS systems are required. On the contrary, the DNS system and domain name space must be consistent, that is, IPv4 and IPv6 share a unified domain name space.

The self-built IPv6 DNS domain name server can reduce the risk caused by random configuration and use of public DNS in IPv6 network. In the IPv4 network environment, the problem is not big, because the host can configure the intranet IP behind the NAT device, and there is no public IP address. However, in the IPv6 network, all hosts will be configured with real IPv6 Public IP addresses. Once the IP address is exposed, it can be accurately scanned, and there is a possibility of being attacked and stealing data at any time.

The network connected to the DNS server can be an internal network or an external network environment. In this embodiment, the DNS server adopts a Linux system supporting IPv6.

Step S1 specifically includes:

(1) Confirm that IPv6 is enabled through the inet6 option;

(2) Modify the network card configuration:

IPV6INIT=yes

IPV6_AUTOCONF=yes

IPV6_DEFROUTE=yes

IPV6_FAILURE_FATAL=no

IPV6_ADDR_GEN_MODE=stable-privacy

IPV6_PEERDNS=yes

IPV6_PEERROUTES=yes

IPV6_PRIVACY=no;

(3) Modify the configuration file of DNS, open IPv6 port monitoring and modify IPv6 address;

(4) Create an IPv6 anti-decomposition area, a half-byte hexadecimal digital format string separated by ".", the low-order address comes first, the high-order address follows, and the domain suffix is "IP6.ARPA.";

(5) Modify the reverse solution file of IPV6;

(6) After all the configurations are completed, check whether the configuration file is correct, use the named-checkzone command, if it returns OK, it is correct;

(7) Finally restart the dns service.

This method can also set up master and slave DNS servers, the master DNS server is to create the DNS server of the IPv6 anti-resolution area, as shown in Figure 1, realizes data synchronization, provides redundancy, avoids single point of failure; balances load query requirements, improves system availability.

Claims (8)

1. a kind of reverse domain name analysis method based on IPv6 technology characterized by comprising

S1, creation IPv6 is counter in the dns server for supporting IPv6 and IPv4 solves region, and domain suffix is " IP6.ARPA. "；

S2, when receiving the request of the corresponding domain name in the address reverse resolution IPv6, by the anti-region that solves the IPv6 by the request The AAAA record being directed toward in dns server resource record；

S3, progress match query is recorded according to AAAA, finally returned to the format of suffix entitled " .IP6.ARPA " plus domain name Request end.

2. a kind of reverse domain name analysis method based on IPv6 technology according to claim 1, which is characterized in that described IPv6 is counter, and the region that solves includes: the 16 binary digits format string of nibble that use " " separates, and low order address is in preceding, high address Rear.

3. a kind of reverse domain name analysis method based on IPv6 technology according to claim 1, which is characterized in that the step Rapid S1 creation IPv6 is counter solve region before further include: modify the configuration file of DNS, open IPv6 port snoop and modification IPv6 Address.

4. a kind of reverse domain name analysis method based on IPv6 technology according to claim 1, which is characterized in that the step Rapid S1 creation IPv6 is counter solve region after further include: it is whether wrong with named-checkzone order inspection configuration file.

5. a kind of reverse domain name analysis method based on IPv6 technology according to claim 1, which is characterized in that described Dns server is connected to from dns server.

6. a kind of reverse domain name analysis method based on IPv6 technology according to claim 1, which is characterized in that described The IPv4 and IPv6 of dns server co-own unified name space.

7. a kind of reverse domain name analysis method based on IPv6 technology according to claim 1, which is characterized in that described Dns server is using the linux system for supporting IPv6.

8. a kind of reverse domain name analysis method based on IPv6 technology according to claim 1, which is characterized in that described The network of dns server access is Intranet or outer net.