Method, system and device for domain name resolution
A domain name resolution and domain name technology, applied in the Internet field, can solve the problems of resolution failure, low success rate of domain name resolution, and resolution requests sent by protection devices, so as to improve the success rate.
Inactive Publication Date: 2015-02-11
SHENZHEN TENCENT COMP SYST CO LTD
View PDF7 Cites 3 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Since the attacking device cannot respond to the CNAME response, that is, the attacking device cannot send a CNAME response analysis request to the protection device, thereby blocking malicious attacks
[0010] However, in the above technology, since the protection device needs to send two CNAME responses to the user device, in actual applications, the analysis software of some user devices will recognize it as a resolution loop, and will only reply to the first CNAME response, and will not will reply to the second CNAME response, causing the resolution to fail
That is, in the above technical solutions, the success rate of domain name resolution is relatively low
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment approach
[0057] As an optional implementation, the method may also include:
[0058] When the identification information included in the second parsing request passes the verification, the protection device adds the identification field to a whitelist. In this way, when the above-mentioned user equipment sends a parsing request next time, it can directly determine whether the whitelist includes the identification field included in the parsing request. If so, it can be determined that the parsing request is not a malicious attack. step.
[0059] As an optional implementation manner, the above protection device verifies the identification information included in the second parsing request, which may specifically include:
[0060] The protection device performs the hash operation on the identification information included in the second analysis request to obtain a hash result, and when the hash result is consistent with the identification field, then determine the second analysis request...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
A domain name resolution method includes : sending, by user equipment, a first resolution request to a protection device; sending,by the protection device, a first CNAME response to the user equipment in response to the first resolution request; identifying, by the user equipment,the first CNAME response, and sending a second resolution request to the protection device, where the second resolution request includes identification information of the user equipment and a target domain name; validating, by the protection device, the identification information, sending a third resolution request to a domain name server in the case that the identification information in the second resolution request passes the validation; determining, by the domain name server, that the third resolution request is sent by the protection device based on the indicator information,and resolving, by the domain name server, the target domain name in the third resolution request.
Description
technical field [0001] The present invention relates to the technical field of the Internet, in particular to a domain name resolution method, system and device. Background technique [0002] Blocking malicious attacks has always been an important technical feature in the field of Internet technology. At present, malicious attacks are blocked mainly through the following methods: [0003] The user device sends a resolution request of the target domain name to the protection device; [0004] When the protection device receives the parsing request, it performs a certain hash algorithm on the protocol (Internet Protocol, IP) address interconnected between the source networks of the parsing request to obtain identification information (for example: cookie string), and constructs the A first alias record (CNAME) response composed of the identification information and the target domain name, and then send the first CNAME response to the user equipment; [0005] The user equipmen...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/12H04L29/06
CPCH04L29/12H04L61/4511H04L63/0236H04L63/1458H04L2101/604
Inventor 罗喜军白惊涛
Owner SHENZHEN TENCENT COMP SYST CO LTD