This application discloses a method and
system for a secure dynamic host configuration protocol based on HTTPS. The method deploys a bidirectional proxy module between the DHCP
client and
server to construct a secure DHCP over HTTPS
transmission channel. The
client proxy module captures UDP broadcast messages from the DHCP
client, encapsulates them as HTTPS POST requests, and sends them to the
server proxy module via a TLS encrypted channel. The
server proxy module decapsulates the messages, converts them back to UDP messages, forwards them to the DHCP server, and encapsulates the server response as an HTTPS response before returning it. This application inherits the bidirectional
authentication, communication
encryption, and integrity protection mechanisms of the TLS protocol, effectively defending against attacks such as spoofing servers, message
eavesdropping, and tampering; it utilizes the characteristics of the HTTPS standard Web protocol to improve the ability to
traverse complex network environments and firewall compatibility; and it achieves seamless compatibility with existing DHCP systems through a proxy model, significantly enhancing network access security and manageability.