Solution for coping with reflection amplification attacks of domain name system (DNS) server

Abstract

The invention belongs to the technical field of domain name system (DNS) security protection, and particularly relates to a solution for coping with reflection amplification attacks of a DNS server. The solution comprises the following steps that: a field of cookie is added into a pseudo resource record of EDNS0; a user generates random cookie while sending a request, and a recursive server checks whether the cookie exists or not after reception of the request, and returns truncate to require the user to perform retransmission by using a transmission control protocol (TCP) if the cookie does not exist; if the cookie exists, the recursive server checks whether the request carries Server Cookie or not, returns the Server Cookie together with Client Cookie if the request does not carry the Server Cookie, checks whether Server Cookie of the user is consistent with the Server Cookie generated by the recursive server if the request carries the Server Cookie, returns the Server Cookie and the Client Cookie to the user if the Server Cookie of the user is consistent with the Server Cookie, and returns the truncate to require the user to perform retransmission by using the TCP if the Server Cookie of the user is not consistent with the Server Cookie; and the user checks whether the Client Cookie is the same as the random cookie or not, receives the data if the Client Cookie is the same as the random cookie, and discards the data if the Client Cookie is not the same as the random cookie.

Description

technical field [0001] The invention belongs to the technical field of DNS security protection, and in particular relates to a solution to the DNS server reflection amplification attack. Background technique [0002] DNS provides an important service on the Internet. Its essence is to establish a bridge between the world of human names and the world of underlying binary protocol addresses. Every time, before we start any transaction over the Internet, a DNS query process must be done first. So a lightweight, fast-response DNS protocol is very necessary, so that the DNS query process can be done transparently to users. The DNS resolution framework uses UDP as the transport protocol, and is implemented through geographically distributed recursive resolvers with caching capabilities. [0003] At the same time, during the development of the Internet, the traditional DNS protocol has also highlighted some problems. With the development of the Internet, the types and numbers o...

AI Technical Summary

Problems solved by technology

If you do not answer, users who do not support co...

Images