CN115297088A - System and method for domain name resolution in cloud computing environment - Google Patents
System and method for domain name resolution in cloud computing environment Download PDFInfo
- Publication number
- CN115297088A CN115297088A CN202210929421.7A CN202210929421A CN115297088A CN 115297088 A CN115297088 A CN 115297088A CN 202210929421 A CN202210929421 A CN 202210929421A CN 115297088 A CN115297088 A CN 115297088A
- Authority
- CN
- China
- Prior art keywords
- dns
- request message
- response message
- domain name
- server
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000000034 method Methods 0.000 title claims abstract description 35
- 210000002304 esc Anatomy 0.000 claims abstract description 39
- 238000010586 diagram Methods 0.000 description 3
- 230000009286 beneficial effect Effects 0.000 description 1
- 230000007812 deficiency Effects 0.000 description 1
- 230000000977 initiatory effect Effects 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
- H04L69/22—Parsing or analysis of headers
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
Description
技术领域technical field
本发明涉及域名解析技术领域,尤其涉及一种云计算环境中域名解析系统和方法。The invention relates to the technical field of domain name resolution, in particular to a domain name resolution system and method in a cloud computing environment.
背景技术Background technique
虚拟私有云(virtual private cloud,VPC)是用户在云环境中自定义的私有网络,弹性云服务器(elastic compute service,ECS)是用户在VPC内创建的虚拟服务器,ECS将会同时访问共有网络以及私有网络的需求。访问公有网络以及私有网络的第一步都是向域名系统(domain name system,DNS)发送请求,DNS是因特网上实现域名与IP地址相互映射的系统,请求该系统后将告知ECS域名对应的IP地址,从而发起继续的IP地址访问。A virtual private cloud (virtual private cloud, VPC) is a private network customized by the user in the cloud environment. An elastic cloud server (elastic compute service, ECS) is a virtual server created by the user in the VPC. The ECS will simultaneously access the public network and private network needs. The first step in accessing public and private networks is to send a request to the Domain Name System (DNS). DNS is a system on the Internet that maps domain names to IP addresses. After requesting the system, ECS will be notified of the IP address corresponding to the domain name. address, thereby initiating continued IP address access.
目前云计算环境中的ECS发起的DNS请求,将首先到达云环境内DNS服务,云环境内DNS服务判断自己是否是域名(record)所在的域(zone)的权威DNS服务器,如果是,那么将会在zone的数据库中查找对应的record,如果查到就返回对应的IP地址,如果查不到就返回错误;如果不是,DNS请求将迭代发送到公共DNS服务器继续解析。现有技术存在以下不足,当云环境内DNS认为自己是zone的权威DNS服务器时,record又不在云环境内DNS服务器的数据库内,而在公共DNS服务器的数据库内时,DNS请求就无法正常解析。At present, the DNS request initiated by the ECS in the cloud computing environment will first reach the DNS service in the cloud environment. The DNS service in the cloud environment judges whether it is the authoritative DNS server of the domain (zone) where the domain name (record) is located. If so, then it will It will search the corresponding record in the zone database, and return the corresponding IP address if it is found, and return an error if it cannot be found; if not, the DNS request will be iteratively sent to the public DNS server for further analysis. The existing technology has the following shortcomings. When the DNS in the cloud environment considers itself to be the authoritative DNS server of the zone, and the record is not in the database of the DNS server in the cloud environment, but in the database of the public DNS server, the DNS request cannot be resolved normally. .
造成该不足的原因是在当前云计算的DNS系统中,在一条解析路径上(从云环境内到云环境外)同一个域仅能属于云环境内DNS或仅能属于公共DNS,如果域属于云环境内DNS即在云环境内DNS服务器的数据库中可以查询到域,那么该域仅能由云环境内解析,无法由公共DNS解析,此时如果客户在公共DNS服务器已经注册了大量相同域的记录,对于这些记录的解析需要重新在云环境内DNS重新注册,造成了极大的不便利性。The reason for this deficiency is that in the current DNS system of cloud computing, on a resolution path (from inside the cloud environment to outside the cloud environment), the same domain can only belong to the DNS in the cloud environment or only to the public DNS. The DNS in the cloud environment means that the domain can be queried in the database of the DNS server in the cloud environment, so the domain can only be resolved in the cloud environment and cannot be resolved by the public DNS. At this time, if the customer has registered a large number of identical domains in the public DNS server records, the resolution of these records needs to be re-registered in the DNS in the cloud environment, which causes great inconvenience.
因此,如何通过一种对于同一个域既能有云环境内DNS解析又能由公共DNS解析的方法,成为云计算DNS领域一个亟需解决的问题。Therefore, how to use a method for DNS resolution in the cloud environment and public DNS resolution for the same domain has become an urgent problem in the field of cloud computing DNS.
发明内容Contents of the invention
有鉴于此,本发明提供一种云计算环境中域名解析系统和方法。In view of this, the present invention provides a domain name resolution system and method in a cloud computing environment.
一方面,本发明提供一种云计算环境中域名解析系统,包括:On the one hand, the present invention provides a domain name resolution system in a cloud computing environment, comprising:
弹性云服务器,包括多个客户机ESC,用于发送DNS请求报文和接收DNS应答报文;An elastic cloud server, including multiple client ESCs, is used to send DNS request packets and receive DNS response packets;
云环境内DNS服务器,由缓存模块、私网域解析模块和迭代模块组成,用于解析DNS请求报文,解析成功后将DNS应答报文发送至客户机ESC,解析失败后将DNS请求报文发送至公共DNS服务器;The DNS server in the cloud environment is composed of a cache module, a private network domain resolution module and an iteration module. It is used to resolve DNS request messages. After the resolution is successful, the DNS response message is sent to the client ESC. After the resolution fails, the DNS request message is sent to sent to a public DNS server;
公共DNS服务器,用于对DNS请求报文进行解析,解析成功后将DNS应答报文缓存至云环境内DNS服务器的缓存模块并发送至客户机ESC。The public DNS server is used to analyze the DNS request message. After the resolution is successful, the DNS response message is cached to the cache module of the DNS server in the cloud environment and sent to the client ESC.
进一步地,本发明的云计算环境中域名解析系统中,缓存模块用于缓存相同域名的DNS请求报文的DNS应答报文;还用于查找是否存在与本次DNS请求报文具有相同域名的请求的缓存DNS应答报文记录,当存在所述缓存DNS应答报文记录,将所述缓存DNS应答报文发送至客户机ECS;当不存在所述缓存DNS应答记录,将本次DNS请求报文发送至私网域解析模块。Further, in the domain name resolution system in the cloud computing environment of the present invention, the caching module is used to cache the DNS response message of the DNS request message of the same domain name; The requested cached DNS response message record, when the cached DNS response message record exists, the cached DNS response message is sent to the client ECS; when the cached DNS response record does not exist, the DNS request is reported to The text is sent to the private network domain analysis module.
进一步地,本发明的云计算环境中域名解析系统中,私网域名解析模块用于判断接收的DNS请求报文是否属于私网域,当DNS请求报文属于私网域,查询私网域数据库内是否存在与本次DNS请求报文对应的DNS应答报文记录;当DNS请求报文不属于私网域,将DNS请求报文通过迭代模块转发至公共DNS服务器进行解析。Further, in the domain name resolution system in the cloud computing environment of the present invention, the private network domain name resolution module is used to judge whether the received DNS request message belongs to the private network domain, and when the DNS request message belongs to the private network domain, query the private network domain database Whether there is a DNS response message record corresponding to this DNS request message; when the DNS request message does not belong to the private network domain, forward the DNS request message to the public DNS server for analysis through the iterative module.
进一步地,本发明的云计算环境中域名解析系统中,当DNS请求报文属于私网域,查询私网域数据库内是否存在与本次DNS请求报文对应的DNS应答报文记录,包括:当存在所述DNS应答报文记录时,从所述DNS应答报文记录获得对应的IP地址,组装DNS应答报文,将组装的DNS应答报文缓存至云环境内DNS服务器的缓存模块并发送至客户机ESC;当不存在所述DNS应答报文记录时,将DNS请求报文通过迭代模块转发至公共DNS服务器进行解析。Further, in the domain name resolution system in the cloud computing environment of the present invention, when the DNS request message belongs to the private network domain, query whether there is a DNS response message record corresponding to the DNS request message in the private network domain database, including: When there is the DNS response message record, obtain the corresponding IP address from the DNS response message record, assemble the DNS response message, cache the assembled DNS response message to the cache module of the DNS server in the cloud environment and send it To the client ESC; when there is no record of the DNS response message, the DNS request message is forwarded to the public DNS server through the iterative module for resolution.
进一步地,本发明的云计算环境中域名解析系统中,迭代模块用于将云环境内DNS服务器无法解析的DNS请求报文转发至公共DNS服务器进行解析。Further, in the domain name resolution system in the cloud computing environment of the present invention, the iteration module is used to forward the DNS request message that cannot be resolved by the DNS server in the cloud environment to the public DNS server for resolution.
另一方面,本发明提供一种云计算环境中域名解析方法,包括:On the other hand, the present invention provides a domain name resolution method in a cloud computing environment, comprising:
客户机ESC向云环境内DNS服务器发送域名解析的DNS请求报文;The client ESC sends a DNS request message for domain name resolution to the DNS server in the cloud environment;
云环境内DNS服务器对DNS请求报文进行解析,解析成功后将DNS应答报文发送至客户机ESC,解析失败后将DNS请求报文发送至公共DNS服务器;The DNS server in the cloud environment parses the DNS request message, and sends the DNS response message to the client ESC after the resolution is successful, and sends the DNS request message to the public DNS server after the resolution fails;
公共DNS服务器对DNS请求报文进行解析,解析成功后将DNS应答报文缓存至云环境内DNS服务器的缓存模块并发送至客户机ESC。The public DNS server parses the DNS request message, and after the resolution is successful, caches the DNS response message to the cache module of the DNS server in the cloud environment and sends it to the client ESC.
进一步地,本发明的云计算环境中域名解析方法中,云环境内DNS服务器对DNS请求报文进行解析,解析成功后将DNS应答报文发送至客户机ESC,解析失败后将DNS请求报文发送至公共DNS服务器,包括:Further, in the domain name resolution method in the cloud computing environment of the present invention, the DNS server in the cloud environment parses the DNS request message, and sends the DNS response message to the client ESC after the resolution is successful, and sends the DNS request message to the client ESC after the resolution fails. Sent to public DNS servers, including:
云环境内DNS服务器通过缓存模块查找是否存在与本次DNS请求报文具有相同域名的请求的缓存DNS应答报文记录,当存在所述缓存DNS应答报文记录,将所述缓存DNS应答报文发送至客户机ECS;当不存在所述缓存DNS应答记录,将本次DNS请求报文发送至私网域解析模块;The DNS server in the cloud environment searches through the caching module whether there is a cached DNS response message record for the request with the same domain name as the DNS request message, and when the cached DNS response message record exists, the cached DNS response message Send to the client ECS; when the cached DNS response record does not exist, send the DNS request message to the private network domain resolution module;
私网域名解析模块判断接收的DNS请求报文是否属于私网域,当DNS请求报文属于私网域,查询私网域数据库内是否存在与本次DNS请求报文对应的DNS应答报文记录;当不存在所述DNS应答报文记录时,将DNS请求报文通过迭代模块转发至公共DNS服务器进行解析;当DNS请求报文不属于私网域,将DNS请求报文通过迭代模块转发至公共DNS服务器进行解析。The private network domain name resolution module judges whether the received DNS request message belongs to the private network domain. When the DNS request message belongs to the private network domain, it queries whether there is a DNS response message record corresponding to the DNS request message in the private network domain database. ; When the DNS response message record does not exist, the DNS request message is forwarded to the public DNS server through the iterative module for analysis; when the DNS request message does not belong to the private network domain, the DNS request message is forwarded to the public DNS server through the iterative module Public DNS servers for resolution.
进一步地,本发明的云计算环境中域名解析方法中,当DNS请求报文属于私网域,查询私网域数据库内是否存在与本次DNS请求报文对应的DNS应答报文记录,包括:当存在所述DNS应答报文记录时,从所述DNS应答报文记录获得对应的IP地址,组装DNS应答报文,将组装的DNS应答报文缓存至云环境内DNS服务器的缓存模块并发送至客户机ESC。Further, in the domain name resolution method in the cloud computing environment of the present invention, when the DNS request message belongs to the private network domain, query whether there is a DNS response message record corresponding to the DNS request message in the private network domain database, including: When there is the DNS response message record, obtain the corresponding IP address from the DNS response message record, assemble the DNS response message, cache the assembled DNS response message to the cache module of the DNS server in the cloud environment and send it to the client ESC.
进一步地,本发明的云计算环境中域名解析方法中,查询私网域数据库内是否存在与本次DNS请求报文对应的DNS应答报文记录,包括:查询域名所在的域,并在查询所得域的数据库中查询域名的DNS应答报文记录。Further, in the domain name resolution method in the cloud computing environment of the present invention, querying whether there is a DNS response message record corresponding to the DNS request message in the private network domain database includes: querying the domain where the domain name is located, and querying the obtained domain name Query the DNS response message record of the domain name in the domain database.
进一步地,本发明的云计算环境中域名解析方法中,公共DNS服务器对DNS请求报文进行解析,解析成功后将DNS应答报文缓存至云环境内DNS服务器的缓存模块并发送至客户机ESC,包括:公共DNS服务器查询得到与DNS请求报文对应的DNS应答报文记录,从所述DNS应答报文记录获得对应的IP地址,组装DNS应答报文,将DNS应答报文缓存至云环境内DNS服务器的缓存模块并发送至客户机ESC。Further, in the domain name resolution method in the cloud computing environment of the present invention, the public DNS server resolves the DNS request message, and after the resolution is successful, caches the DNS response message to the cache module of the DNS server in the cloud environment and sends it to the client ESC , comprising: querying the public DNS server to obtain a DNS response message record corresponding to the DNS request message, obtaining the corresponding IP address from the DNS response message record, assembling the DNS response message, and caching the DNS response message to the cloud environment cache module of the internal DNS server and send it to the client ESC.
本发明云计算环境中域名解析系统和方法,具有以下有益效果:The domain name resolution system and method in the cloud computing environment of the present invention have the following beneficial effects:
1.即使私网域名与公网域名所属的域存在冲突,也可同时解析私网域名以及公网域名,让使用者无需将已经存在的大量冲突域下注册的公网域名重新注册至云内的私网DNS服务器,给使用者迁移上云提供便利;1. Even if there is a conflict between the private domain name and the domain to which the public domain name belongs, the private domain name and the public domain name can be resolved at the same time, so that users do not need to re-register the public domain names registered under a large number of conflicting domains that already exist in the cloud The private DNS server provides convenience for users to migrate to the cloud;
2.通过缓存公网域名解析结果,可减少云内私网DNS服务器解析公网域名时对公共DNS的请求次数,提升云内DNS对公网域名的解析速度。2. By caching the public network domain name resolution results, it can reduce the number of requests to the public DNS when the private network DNS server in the cloud resolves the public network domain name, and improve the resolution speed of the public network domain name by the cloud DNS.
附图说明Description of drawings
为了更清楚地说明本发明实施例的技术方案,下面将对实施例中所需要使用的附图作简单地介绍,显而易见地,下面描述中的附图仅仅是本发明的一些实施例,对于本领域普通技术人员来讲,在不付出创造性劳动的前提下,还可以根据这些附图获得其它的附图。In order to illustrate the technical solutions of the embodiments of the present invention more clearly, the accompanying drawings used in the embodiments will be briefly introduced below. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention. Those of ordinary skill in the art can also obtain other drawings based on these drawings without any creative effort.
图1为本发明示例性第一实施例一种云计算环境中域名解析系统的架构图。FIG. 1 is an architecture diagram of a domain name resolution system in a cloud computing environment according to the first exemplary embodiment of the present invention.
图2为本发明示例性第二实施例一种云计算环境中域名解析方法的流程图。Fig. 2 is a flowchart of a domain name resolution method in a cloud computing environment according to the second exemplary embodiment of the present invention.
图3为本发明示例性第三实施例一种云计算环境中域名解析方法的流程图。Fig. 3 is a flowchart of a domain name resolution method in a cloud computing environment according to the third exemplary embodiment of the present invention.
图4为本发明示例性第四实施例一种云计算环境中域名解析方法的应用场景示意图。Fig. 4 is a schematic diagram of an application scenario of a domain name resolution method in a cloud computing environment according to the fourth exemplary embodiment of the present invention.
具体实施方式Detailed ways
下面结合附图对本发明实施例进行详细描述。Embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings.
需说明的是,在不冲突的情况下,以下实施例及实施例中的特征可以相互组合;并且,基于本公开中的实施例,本领域普通技术人员在没有作出创造性劳动前提下所获得的所有其他实施例,都属于本公开保护的范围。It should be noted that, in the case of no conflict, the following embodiments and the features in the embodiments can be combined with each other; and, based on the embodiments in the present disclosure, those of ordinary skill in the art obtained without creative work All other embodiments belong to the protection scope of the present disclosure.
需要说明的是,下文描述在所附权利要求书的范围内的实施例的各种方面。应显而易见,本文中所描述的方面可体现于广泛多种形式中,且本文中所描述的任何特定结构及/或功能仅为说明性的。基于本公开,所属领域的技术人员应了解,本文中所描述的一个方面可与任何其它方面独立地实施,且可以各种方式组合这些方面中的两者或两者以上。举例来说,可使用本文中所阐述的任何数目个方面来实施设备及/或实践方法。另外,可使用除了本文中所阐述的方面中的一或多者之外的其它结构及/或功能性实施此设备及/或实践此方法。It is noted that the following describes various aspects of the embodiments that are within the scope of the appended claims. It should be apparent that the aspects described herein may be embodied in a wide variety of forms and that any specific structure and/or function described herein is illustrative only. Based on the present disclosure one skilled in the art should appreciate that an aspect described herein may be implemented independently of any other aspects and that two or more of these aspects may be combined in various ways. For example, any number of the aspects set forth herein can be used to implement an apparatus and/or practice a method. In addition, such an apparatus may be implemented and/or such a method practiced using other structure and/or functionality than one or more of the aspects set forth herein.
图1为根据本发明示例性第一实施例的一种云计算环境中域名解析系统的架构图,如图1所示,本实施例的系统,包括:Fig. 1 is an architecture diagram of a domain name resolution system in a cloud computing environment according to an exemplary first embodiment of the present invention. As shown in Fig. 1, the system of this embodiment includes:
弹性云服务器,包括多个客户机ESC,用于发送DNS请求报文和接收DNS应答报文;An elastic cloud server, including multiple client ESCs, is used to send DNS request packets and receive DNS response packets;
云环境内DNS服务器,由缓存模块、私网域解析模块和迭代模块组成,用于解析DNS请求报文,解析成功后将DNS应答报文发送至客户机ESC,解析失败后将DNS请求报文发送至公共DNS服务器;The DNS server in the cloud environment is composed of a cache module, a private network domain resolution module and an iteration module. It is used to resolve DNS request messages. After the resolution is successful, the DNS response message is sent to the client ESC. After the resolution fails, the DNS request message is sent to sent to a public DNS server;
公共DNS服务器,用于对DNS请求报文进行解析,解析成功后将DNS应答报文缓存至云环境内DNS服务器的缓存模块并发送至客户机ESC。The public DNS server is used to analyze the DNS request message. After the resolution is successful, the DNS response message is cached to the cache module of the DNS server in the cloud environment and sent to the client ESC.
本实施例系统的云环境内DNS服务器中,缓存模块用于缓存相同域名的DNS请求报文的DNS应答报文;还用于查找是否存在与本次DNS请求报文具有相同域名的请求的缓存DNS应答报文记录,当存在所述缓存DNS应答报文记录,将所述缓存DNS应答报文发送至客户机ECS;当不存在所述缓存DNS应答记录,将本次DNS请求报文发送至私网域解析模块。In the DNS server in the cloud environment of the system of this embodiment, the caching module is used to cache the DNS response message of the DNS request message of the same domain name; it is also used to find out whether there is a cache of the request with the same domain name as the DNS request message DNS response message record, if there is the cached DNS response message record, send the cached DNS response message to the client ECS; if there is no cached DNS response record, send this DNS request message to Private domain analysis module.
本实施例系统的云环境内DNS服务器中,私网域名解析模块用于判断接收的DNS请求报文是否属于私网域,当DNS请求报文属于私网域,查询私网域数据库内是否存在与本次DNS请求报文对应的DNS应答报文记录,当存在所述DNS应答报文记录时,从所述DNS应答报文记录获得对应的IP地址,组装DNS应答报文,将组装的DNS应答报文缓存至云环境内DNS服务器的缓存模块并发送至客户机ESC;当不存在所述DNS应答报文记录时,将DNS请求报文通过迭代模块转发至公共DNS服务器进行解析;当DNS请求报文不属于私网域,将DNS请求报文通过迭代模块转发至公共DNS服务器进行解析。In the DNS server in the cloud environment of the system of this embodiment, the private network domain name resolution module is used to judge whether the DNS request message received belongs to the private network domain, and when the DNS request message belongs to the private network domain, query whether there is The DNS response message record corresponding to this DNS request message, when the DNS response message record exists, obtain the corresponding IP address from the DNS response message record, assemble the DNS response message, and assemble the DNS response message The response message is cached to the caching module of the DNS server in the cloud environment and sent to the client ESC; when the DNS response message record does not exist, the DNS request message is forwarded to the public DNS server through the iterative module for resolution; when the DNS The request message does not belong to the private network domain, and the DNS request message is forwarded to the public DNS server for analysis through the iterative module.
本实施例系统的云环境内DNS服务器中,迭代模块用于将云环境内DNS服务器无法解析的DNS请求报文转发至公共DNS服务器进行解析。In the DNS server in the cloud environment of the system in this embodiment, the iteration module is used to forward the DNS request message that cannot be resolved by the DNS server in the cloud environment to the public DNS server for resolution.
本实施例系统中,私网域名解析模块用于判断接收的DNS请求报文是否属于私网域的原理如下:DNS的分布数据库是以域名为索引的,每个域名实际上是一个树形结构中从叶子节点向根节点搜索得路径,这棵逆向树称为域名空间,属于私有域也就是说在云环境内的DNS服务器中的DNS分布式数据库内可以查询到DNS请求域名的后缀,例如查询www.baidu.com域名所对应的IP,云环境内DNS服务器的数据库中可以查询到baidu.com,此时就认为www.baidu.com属于私有域。In the system of this embodiment, the principle of the private network domain name resolution module for judging whether the received DNS request message belongs to the private network domain is as follows: the distributed database of the DNS is indexed by the domain name, and each domain name is actually a tree structure The path searched from the leaf node to the root node in the reverse tree is called the domain name space, which belongs to the private domain, that is to say, the suffix of the DNS request domain name can be queried in the DNS distributed database of the DNS server in the cloud environment, for example Query the IP corresponding to the www.baidu.com domain name, and baidu.com can be found in the database of the DNS server in the cloud environment. At this time, www.baidu.com is considered to be a private domain.
图2为根据本发明示例性第二实施例的一种云计算环境中域名解析方法的流程图,如图2所示,本实施例的方法,包括:Fig. 2 is a flowchart of a domain name resolution method in a cloud computing environment according to the second exemplary embodiment of the present invention. As shown in Fig. 2, the method of this embodiment includes:
客户机ESC向云环境内DNS服务器发送域名解析的DNS请求报文;The client ESC sends a DNS request message for domain name resolution to the DNS server in the cloud environment;
云环境内DNS服务器对DNS请求报文进行解析,解析成功后将DNS应答报文发送至客户机ESC,解析失败后将DNS请求报文发送至公共DNS服务器;The DNS server in the cloud environment parses the DNS request message, and sends the DNS response message to the client ESC after the resolution is successful, and sends the DNS request message to the public DNS server after the resolution fails;
公共DNS服务器对DNS请求报文进行解析,解析成功后将DNS应答报文缓存至云环境内DNS服务器的缓存模块并发送至客户机ESC。The public DNS server parses the DNS request message, and after the resolution is successful, caches the DNS response message to the cache module of the DNS server in the cloud environment and sends it to the client ESC.
图3为根据本发明示例性第三实施例的一种云计算环境中域名解析方法的流程图,本实施例是图2所示方法的优选实施例,如图3所示,本实施例方法中,包括:Fig. 3 is a flow chart of a domain name resolution method in a cloud computing environment according to an exemplary third embodiment of the present invention, this embodiment is a preferred embodiment of the method shown in Fig. 2, as shown in Fig. 3, the method of this embodiment , including:
客户机ESC向云环境内DNS服务器发送域名解析的DNS请求报文;The client ESC sends a DNS request message for domain name resolution to the DNS server in the cloud environment;
云环境内DNS服务器通过缓存模块查找是否存在与本次DNS请求报文具有相同域名的请求的缓存DNS应答报文记录,当存在所述缓存DNS应答报文记录,将所述缓存DNS应答报文发送至客户机ECS;当不存在所述缓存DNS应答记录,将本次DNS请求报文发送至私网域解析模块;The DNS server in the cloud environment searches through the caching module whether there is a cached DNS response message record for the request with the same domain name as the DNS request message, and when the cached DNS response message record exists, the cached DNS response message Send to the client ECS; when the cached DNS response record does not exist, send the DNS request message to the private network domain resolution module;
私网域名解析模块判断接收的DNS请求报文是否属于私网域,当DNS请求报文属于私网域,查询私网域数据库内是否存在与本次DNS请求报文对应的DNS应答报文记录,当存在所述DNS应答报文记录时,从所述DNS应答报文记录获得对应的IP地址,组装DNS应答报文,将组装的DNS应答报文缓存至云环境内DNS服务器的缓存模块并发送至客户机ESC;当不存在所述DNS应答报文记录时,将DNS请求报文通过迭代模块转发至公共DNS服务器进行解析;The private network domain name resolution module judges whether the received DNS request message belongs to a private network domain. When the DNS request message belongs to a private network domain, it queries whether there is a DNS response message record corresponding to this DNS request message in the private network domain database. , when the DNS response message record exists, obtain the corresponding IP address from the DNS response message record, assemble the DNS response message, cache the assembled DNS response message to the caching module of the DNS server in the cloud environment and Send to the client ESC; when the DNS response message record does not exist, the DNS request message is forwarded to the public DNS server through the iteration module for analysis;
当DNS请求报文不属于私网域,将DNS请求报文通过迭代模块转发至公共DNS服务器进行解析;When the DNS request message does not belong to the private network domain, the DNS request message is forwarded to the public DNS server for analysis through the iterative module;
公共DNS服务器对DNS请求报文进行解析,解析成功后将DNS应答报文缓存至云环境内DNS服务器的缓存模块并发送至客户机ESC。The public DNS server parses the DNS request message, and after the resolution is successful, caches the DNS response message to the cache module of the DNS server in the cloud environment and sends it to the client ESC.
本实施例中,当DNS请求报文属于私网域,查询私网域数据库内是否存在与本次DNS请求报文对应的DNS应答报文记录,按以下方式进行:查询域名所在的域,并在查询所得域的数据库中查询域名的DNS应答报文记录。具体的,私网域数据库根据DNS请求报文域名后缀的最长匹配找到对应域(如请求www.baidu.com域名,此时私有域数据库内有com域与baidu.com域,那么最长匹配就是baidu.com),然后在对应域的表中查询域名的DNS记录。In this embodiment, when the DNS request message belongs to the private network domain, whether there is a DNS response message record corresponding to the DNS request message in the private network domain database is inquired in the following manner: query the domain where the domain name is located, and Query the DNS response message record of the domain name in the database of the queried domain. Specifically, the private network domain database finds the corresponding domain according to the longest match of the domain name suffix of the DNS request message (for example, if the www.baidu.com domain name is requested, and there are com domains and baidu.com domains in the private domain database, then the longest match is baidu.com), and then query the DNS record of the domain name in the table of the corresponding domain.
本实施例中,公共DNS服务器对DNS请求报文进行解析,解析成功后将DNS应答报文缓存至云环境内DNS服务器的缓存模块并发送至客户机ESC,按以下方式进行:In this embodiment, the public DNS server resolves the DNS request message. After the resolution is successful, the DNS response message is cached to the caching module of the DNS server in the cloud environment and sent to the client ESC, as follows:
公共DNS服务器查询得到与DNS请求报文对应的DNS应答报文记录,从所述DNS应答报文记录获得对应的IP地址,组装DNS应答报文,将DNS应答报文缓存至云环境内DNS服务器的缓存模块并发送至客户机ESC。The public DNS server queries to obtain the DNS response message record corresponding to the DNS request message, obtains the corresponding IP address from the DNS response message record, assembles the DNS response message, and caches the DNS response message to the DNS server in the cloud environment cache module and sent to the client ESC.
本发明示例性第四实施例提供一种云计算环境中域名解析方法,本实施例是本发明示例性第二实施例方法的优选实施例。The fourth exemplary embodiment of the present invention provides a domain name resolution method in a cloud computing environment, and this embodiment is a preferred embodiment of the method in the second exemplary embodiment of the present invention.
在一个应用场景中,客户在云环境内DNS服务器上注册了如图4所示的两个域(zone),zone1为example.com,zone2为test.com,并在zone1下注册了两个记录(record),record1为123.example.com,对应的IP地址为192.168.0.1;record2为456.example.com,对应的IP地址为192.168.0.2;zone2下注册record3,record3为123.test.com,对应的IP地址为1.1.1.1。In an application scenario, the customer registers two domains (zones) as shown in Figure 4 on the DNS server in the cloud environment, zone1 is example.com, zone2 is test.com, and two records are registered under zone1 (record), record1 is 123.example.com, the corresponding IP address is 192.168.0.1; record2 is 456.example.com, the corresponding IP address is 192.168.0.2; register record3 under zone2, record3 is 123.test.com , and the corresponding IP address is 1.1.1.1.
当客户机ECS请求获取私网域名123.example.com对应的IP地址,根据本发明实施例方法的域名解析流程如下:When the client ECS requests to obtain the IP address corresponding to the private network domain name 123.example.com, the domain name resolution process according to the method of the embodiment of the present invention is as follows:
客户机ESC向云环境内DNS服务器发送私网域名123.example.com解析的DNS请求报文;云环境内DNS服务器的缓存模块,未找到对应的DNS应答报文,将DNS请求报文转发至私网域名解析模块,私网域名解析模块查询123.example.com域名所在的域为example.com(zone1),在zone1的数据库中查询123.example.com记录,得到对应的IP地址为192.168.0.1,私网域名解析模块根据查询结果组装DNS应答报文,返回至客户机ECS。The client ESC sends a DNS request packet resolved by the private network domain name 123.example.com to the DNS server in the cloud environment; the caching module of the DNS server in the cloud environment fails to find the corresponding DNS response packet, and forwards the DNS request packet to Private network domain name resolution module, the private network domain name resolution module queries the domain name of 123.example.com as example.com (zone1), queries the record of 123.example.com in the database of zone1, and obtains the corresponding IP address as 192.168. 0.1, the private network domain name resolution module assembles a DNS response message according to the query result and returns it to the client ECS.
当客户机ECS请求获取公网域名www.example.com对应的IP地址,根据本发明实施例方法的域名解析流程如下:When the client ECS requests to obtain the IP address corresponding to the public network domain name www.example.com, the domain name resolution process according to the method of the embodiment of the present invention is as follows:
客户机ECS向云环境内DNS服务器发送公网域名www.example.com解析的DNS请求报文;云环境内DNS服务器的缓存模块,未找到对应的应答,将DNS请求报文转发至私网域名解析模块,私网域名解析模块查询www.example.com域名所在的域为example.com(zone1),在zone1的数据库中查询www.example.com记录,但该记录未在私网域zone1中注册,私网域名解析模块将DNS请求报文转发至迭代模块,由迭代模块再发送至公共DNS服务器,在公共DNS服务器中查询得到对应的IP地址为93.184.216.34,并组装为DNS应答报文,将该应答报文缓存至云环境内DNS服务器的缓存模块,最后返回至客户机ECS。当客户机ECS再次请求相同的公网域名www.example.com对应的IP地址时,缓存模块将直接给ECS回复DNS应答报文,无需再次访问公共DNS服务器。The client ECS sends a DNS request message resolved by the public network domain name www.example.com to the DNS server in the cloud environment; the caching module of the DNS server in the cloud environment fails to find the corresponding answer, and forwards the DNS request message to the private network domain name Analysis module, private network domain name analysis module queries www.example.com domain name is located in the domain example.com (zone1), queries www.example.com record in the zone1 database, but the record is not registered in the private network domain zone1 , the private network domain name resolution module forwards the DNS request message to the iterative module, and then the iterative module sends it to the public DNS server. The corresponding IP address is 93.184.216.34 obtained by querying the public DNS server, and assembled into a DNS response message. The response message is cached to the cache module of the DNS server in the cloud environment, and finally returned to the client ECS. When the client ECS requests the IP address corresponding to the same public domain name www.example.com again, the cache module will directly reply the DNS response message to the ECS without accessing the public DNS server again.
以上所述,仅为本发明的具体实施方式,但本发明的保护范围并不局限于此,任何熟悉本技术领域的技术人员在本发明揭露的技术范围内,可轻易想到的变化或替换,都应涵盖在本发明的保护范围之内。因此,本发明的保护范围应以权利要求的保护范围为准。The above is only a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Anyone skilled in the art can easily think of changes or substitutions within the technical scope disclosed in the present invention. All should be covered within the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.
Claims (10)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN202210929421.7A CN115297088A (en) | 2022-08-03 | 2022-08-03 | System and method for domain name resolution in cloud computing environment |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN202210929421.7A CN115297088A (en) | 2022-08-03 | 2022-08-03 | System and method for domain name resolution in cloud computing environment |
Publications (1)
Publication Number | Publication Date |
---|---|
CN115297088A true CN115297088A (en) | 2022-11-04 |
Family
ID=83825575
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN202210929421.7A Pending CN115297088A (en) | 2022-08-03 | 2022-08-03 | System and method for domain name resolution in cloud computing environment |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN115297088A (en) |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN116155859A (en) * | 2023-02-15 | 2023-05-23 | 中国工商银行股份有限公司 | Network access method, device, computer equipment and storage medium |
CN116303586A (en) * | 2022-12-09 | 2023-06-23 | 中电云数智科技有限公司 | Metadata cache elimination method based on multi-level b+tree |
Citations (9)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN102685259A (en) * | 2011-03-09 | 2012-09-19 | 中国移动通信集团公司 | Method, system and intelligent DNS (Domain Name Server) for analyzing DNS analysis request |
CN106973122A (en) * | 2016-01-14 | 2017-07-21 | 中国移动通信集团浙江有限公司 | A kind of domain name system and its emergent solution based on cloud storage |
CN108156274A (en) * | 2017-12-18 | 2018-06-12 | 杭州迪普科技股份有限公司 | Equipment is made to obtain the method and device of domain name mapping result in a kind of VPN network |
CN108881515A (en) * | 2018-07-09 | 2018-11-23 | 迈普通信技术股份有限公司 | Domain name analytic method, device and the network equipment |
CN113542292A (en) * | 2021-07-21 | 2021-10-22 | 江南信安(北京)科技有限公司 | Intranet safety protection method and system based on DNS and IP credit data |
CN114189494A (en) * | 2021-12-16 | 2022-03-15 | 牙木科技股份有限公司 | Domain name resolution method, DNS server and readable storage medium |
CN114374669A (en) * | 2022-01-11 | 2022-04-19 | 杭州迪普科技股份有限公司 | VPN client proxy DNS analysis method and system |
CN114553821A (en) * | 2022-02-24 | 2022-05-27 | 杭州迪普科技股份有限公司 | VPN client proxy DNS analysis method and device |
CN114553827A (en) * | 2022-02-24 | 2022-05-27 | 杭州迪普科技股份有限公司 | VPN client proxy DNS analysis method and device |
-
2022
- 2022-08-03 CN CN202210929421.7A patent/CN115297088A/en active Pending
Patent Citations (9)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN102685259A (en) * | 2011-03-09 | 2012-09-19 | 中国移动通信集团公司 | Method, system and intelligent DNS (Domain Name Server) for analyzing DNS analysis request |
CN106973122A (en) * | 2016-01-14 | 2017-07-21 | 中国移动通信集团浙江有限公司 | A kind of domain name system and its emergent solution based on cloud storage |
CN108156274A (en) * | 2017-12-18 | 2018-06-12 | 杭州迪普科技股份有限公司 | Equipment is made to obtain the method and device of domain name mapping result in a kind of VPN network |
CN108881515A (en) * | 2018-07-09 | 2018-11-23 | 迈普通信技术股份有限公司 | Domain name analytic method, device and the network equipment |
CN113542292A (en) * | 2021-07-21 | 2021-10-22 | 江南信安(北京)科技有限公司 | Intranet safety protection method and system based on DNS and IP credit data |
CN114189494A (en) * | 2021-12-16 | 2022-03-15 | 牙木科技股份有限公司 | Domain name resolution method, DNS server and readable storage medium |
CN114374669A (en) * | 2022-01-11 | 2022-04-19 | 杭州迪普科技股份有限公司 | VPN client proxy DNS analysis method and system |
CN114553821A (en) * | 2022-02-24 | 2022-05-27 | 杭州迪普科技股份有限公司 | VPN client proxy DNS analysis method and device |
CN114553827A (en) * | 2022-02-24 | 2022-05-27 | 杭州迪普科技股份有限公司 | VPN client proxy DNS analysis method and device |
Cited By (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN116303586A (en) * | 2022-12-09 | 2023-06-23 | 中电云数智科技有限公司 | Metadata cache elimination method based on multi-level b+tree |
CN116303586B (en) * | 2022-12-09 | 2024-01-30 | 中电云计算技术有限公司 | Metadata cache elimination method based on multi-level b+tree |
CN116155859A (en) * | 2023-02-15 | 2023-05-23 | 中国工商银行股份有限公司 | Network access method, device, computer equipment and storage medium |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US7225272B2 (en) | Method and apparatus for providing name services | |
US11816161B2 (en) | Asset search and discovery system using graph data structures | |
US11632353B2 (en) | Delegating DNS records to additional providers | |
US20230216884A1 (en) | Method for minimizing the risk and exposure duration of improper or hijacked dns records | |
US7558880B2 (en) | Dynamic DNS registration method, domain name solution method, DNS proxy server, and address translation device | |
US8886750B1 (en) | Alias resource record sets | |
JP5249233B2 (en) | IMS service flexible address resolution method | |
US20100064047A1 (en) | Internet lookup engine | |
US20120124087A1 (en) | Method and apparatus for locating naming discrepancies | |
US20200382465A1 (en) | Client subnet efficiency by equivalence class aggregation | |
CN106161667A (en) | A kind of domain name analytic method and device | |
CN115297088A (en) | System and method for domain name resolution in cloud computing environment | |
CN114205330B (en) | Domain name resolution method, domain name resolution device, server, and storage medium | |
CN109995885B (en) | Domain name space structure presentation method, device, equipment and medium | |
WO2023040070A1 (en) | Method and apparatus for detecting domain name takeover vulnerability | |
CN116055449A (en) | A DNS packet forwarding method and device | |
CN111885220B (en) | Active acquisition and verification method for target unit IP assets | |
Jin et al. | Design and Implementation of Secure Prefetch Mechanism for Multi-step Name Resolution in DNS | |
CN116888941A (en) | Domain name system for data discovery | |
WO2025081568A1 (en) | Ipv6 application service address identification method and apparatus, device, and medium | |
Tripathi et al. | Experimental study of DNS performance | |
Pokluda | Components of a Scalable Web Hosting Platform using a Cloud and Peer-to-Peer Hybrid Architecture | |
Tripathi et al. | Research Online | |
Koç | Quantitative Modeling of Domain Name System Protocol |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PB01 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
RJ01 | Rejection of invention patent application after publication |
Application publication date: 20221104 |
|
RJ01 | Rejection of invention patent application after publication |