Method and system for domain name resolution server to resist flooding attacks of DNS (Domain Name System) request reports

Abstract

The invention discloses a method and a system for a domain name resolution server to resist the flooding attack of DNS (Domain Name System) request messages, which can effectively resist the flooding attacks of the DNS request messages, protect the domain name resolution server, and ensure the normal operation of domain name resolution. In the technical scheme, the method comprises the steps of: combining a plurality of domain name resolution servers into a server cluster which shares one IP address; timely monitoring the service parameters and the cluster service availability of all the domain name resolution servers by a monitoring server, and reporting the service parameters and the cluster service availability to a control server; determining whether attacks exist or not by the control server according to the collected service parameters and cluster service availability of the domain name resolution server; if so, adjusting the domain name resolution server and notifying a refreshing server; and refreshing the domain name resolution server information cached by a public network domain name server by the refreshing server so as to ensure that the adjustment of the domain name resolution server takes effect.

Description

technical field [0001] The present invention relates to a computer network, in particular to a method for pulling DNS (Domain Name Server, Domain Name Server) request message flood attack by timely adjusting and refreshing domain name resolution server information, so as to achieve the goal of resisting DNS request message flood attack Purpose. Background technique [0002] Each host on the Internet has one or more unique IP addresses on the entire network. These hosts use these IP addresses to transmit information, similar to telephone numbers in our daily life. With more and more network applications, the number of hosts in the network is also increasing, and the boring digital form of IP address is difficult to remember, and people can't remember many IP addresses at all, so the Domain Name System (DNS) appeared ), the domain name system is a distributed database for TCP / IP applications, which provides conversion between domain names and IP addresses. Through the domain ...

AI Technical Summary

Problems solved by technology

[0006] When attacking, attackers often send a large number of domain name resolution requests in an instant, causing the bandwidth of the DNS server to be exhausted, or the system resources of the server to be exhausted, resulting in normal customer requests not being served

If the target of the attack is the domain name resolution server, the problem will be magnified

Images