Method, apparatus and device for querying IP on basis of identifier DNS query request

Abstract

The present invention relates to the field of domain name querying. Disclosed are a method, apparatus and device for querying an IP on the basis of an identifier DNS query request. The method comprises: a client sending a domain name query request to a domain-name recursive resolver, wherein the domain name query request comprises a combined domain name, and the combined domain name comprises a query identifier and a domain name to be queried; sending the domain name query request to a domain-name authoritative name server by means of the domain-name recursive resolver; and the client receiving a query result that is dynamically returned by the domain-name authoritative name server. The present invention solves problems such as the implementation of existing domain-name intelligent querying being tedious, the dependence on network environment being high, the accuracy of query results being low, and the overheads being large.

Description

Method, device and equipment for querying IP based on identifying DNS query request Technical Field

[0001] The present invention relates to the field of domain name query, and in particular to a method, device and equipment for querying an IP address based on an identified DNS query request. Background Art

[0002] Domain names are a set of address translation systems specifically created for ease of memorization. To access a server's internet connection, you must ultimately use its IP address. Domain name resolution is the process of converting a domain name back into an IP address. A domain name generally corresponds to one IP address, and one IP address can correspond to multiple domain names.

[0003] The domain name resolution process involves the query client, end resolver, authoritative resolution server, recursive resolver, and forwarding resolver.

[0004] Query Client: One of the end resolver, forward resolver, or recursive resolver. The client of a recursive resolver or forward resolver.

[0005] Stub Resolver: A simple DNS protocol implementation on the client side, acting as a client of a forwarding resolver or a recursive resolver.

[0006] Authoritative Nameserver: An authoritative nameserver for one or more DNS zones. Authoritative nameservers typically do not communicate directly with end-user resolvers or end users, but rather with recursive resolvers.

[0007] Recursive Resolver: A name server that resolves domain names for clients along the domain authority chain. Recursive resolvers often use caches to speed up responses to client queries.

[0008] Forwarding Resolver: A name server that does not perform iterative resolution itself, but instead forwards requests to other recursive resolution servers for iterative resolution.

[0009] RFC2671 proposed an extension mechanism for the Domain Name System (DNS), Extension Mechanisms for DNS (EDNS0), which extended the packet length and field content of the original DNS protocol. The EDNS0 protocol supports the use of RDDATA with TYPE=41 in resource records (RR) to store network information. On this basis, Google and other companies proposed the DNS extension protocol EDNS Client Subnet (ECS for short), which can add a new option to the extension header of the DNS message to carry the address of the original user who initiated the DNS request. This DNS option content can be relayed by the intermediate recursive server to the authoritative resolution server. The authoritative resolution server obtains the original user's address and then accurately identifies the user's network topology location based on the user address, so that different resolution results can be returned for different users, which is intelligent resolution. Intelligent resolution can be achieved through ECS, but there are the following problems:

[0010] 1. ECS is not widely deployed: Multiple links, including clients, recursive resolution servers, and authoritative resolution servers, need to be modified to support the ECS protocol. Currently, domestic operators have not widely deployed ECS, leaving many network environments unsupported.

[0011] 2. ECS increases recursion overhead, making it vulnerable to DDoS attacks: Query requests for the same domain name from different user address segments require recursive queries, significantly increasing the consumption of cache, recursion, and authoritative resources. DDoS attackers can launch DDoS attacks against the DNS system by changing the domain name prefix and the ECS address segment, making it more difficult for the DNS system to defend against DDoS attacks.

[0012] 3. ECS scheduling is inaccurate: Global IPv4 addresses have been basically allocated, and operators generally have a shortage of IPv4 addresses. The user address allocation strategy of using a large number of private addresses + Network Address Translation (NAT) may allow users to directly access local recursive resolution servers with private addresses. As a result, the local recursive server transmits incorrect information to the authoritative resolution server, resulting in inaccurate resolution.

[0013] Summary of the Invention

[0014] The present invention provides a method, device and equipment for querying IP based on identifying DNS query request, which solves the problems of existing domain name intelligent query, such as cumbersome implementation and strong dependence on network environment, low query result accuracy and high overhead.

[0015] A method for querying an IP address based on a DNS query request, comprising:

[0016] The client sends a domain name query request to the recursive domain name resolution server; wherein the domain name query request includes a combined domain name, and the combined domain name includes a query identifier and a domain name to be queried;

[0017] Sending the domain name query request to the domain name authoritative resolution server through the domain name recursive resolution server;

[0018] The client receives the query result dynamically returned from the domain name authoritative resolution server.

[0019] In an embodiment of the present invention, the query identifier begins with an identification characteristic character and includes a client identifier, a client geographic location, network topology information, a request identifier, and query settings.

[0020] In one embodiment of the present invention, before the client submits a domain name query request to the recursive domain name resolution server, the method further includes: the client generating a query identifier and obtaining a domain name to be queried; combining the query identifier and the domain name to be queried to generate a combined domain name; and generating a domain name query request based on the combined domain name.

[0021] In one embodiment of the present invention, after sending the domain name query request to the domain name authoritative resolution server, the method further includes: the domain name authoritative resolution server identifying the query identifier and specific information in the domain name query request, querying the corresponding IP address based on the query identifier and specific information, and returning the query result to the client.

[0022] In one embodiment of the present invention, the domain name authoritative resolution server identifies the query identifier and specific information in the domain name query request, specifically including: after the authoritative resolution server receives the combined domain name with the query identifier, splitting the combined domain name into the query identifier and the domain name to be queried; reading the client identifier, client geographic location and network topology information, request identifier and query settings in the query identifier.

[0023] In one embodiment of the present invention, querying the corresponding domain name based on the query identifier and specific information and returning the query result to the client specifically includes: querying the corresponding IP address based on the client identifier, client geographic location and network topology information, request identifier and query settings in the query identifier, and dynamically returning the query result to the domain name recursive resolution server; the domain name recursive resolution server then returns the query result to the client.

[0024] In an embodiment of the present invention, the query identifier is located before the domain name to be queried.

[0025] A device for querying an IP address based on a DNS query request, comprising:

[0026] A domain name query request sending module, configured to send a domain name query request to a recursive domain name resolution server; wherein the domain name query request includes a combined domain name, and the combined domain name includes a query identifier and a domain name to be queried;

[0027] A request forwarding module, configured to send the domain name query request to an authoritative domain name resolution server;

[0028] The query result receiving module is used to receive the query result dynamically returned from the domain name authoritative resolution server.

[0029] A device for querying an IP address based on a DNS query request, comprising:

[0030] at least one processor; and,

[0031] A memory connected to the at least one processor via a bus; wherein,

[0032] The memory stores instructions that can be executed by the at least one processor, and the instructions are executed to implement the method as described in any one of the above embodiments.

[0033] A non-volatile storage medium stores computer-executable instructions, wherein the computer-executable instructions are executed by a processor to implement the method described in any one of the above embodiments.

[0034] The present invention provides a method, apparatus, and device for querying an IP address based on a DNS query request, which at least have the following beneficial effects:

[0035] 1. Simple implementation

[0036] The present invention utilizes the multi-level characteristics of the domain name itself, does not require modification of the recursive server, and is simple to deploy and implement.

[0037] 2. The query results are accurate and reliable, and the analysis results are not contaminated

[0038] By adding a specific query identifier to the domain name query request, the authoritative resolution server dynamically returns the query result based on the domain name query request. The query requests of different clients will not be mixed and cached together at the recursive resolution server level, thereby effectively avoiding cache pollution of the recursive resolution server.

[0039] 3. No need to increase recursive resolution server overhead

[0040] Domain name query requests can include a data time-to-live (TTL) setting, which can dynamically set the recursive resolution server cache time. The recursive resolution server's cache of the query domain name resolution results can be appropriately increased or decreased, thereby avoiding increasing the recursive server overhead. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] FIG1 is a schematic diagram of steps of a method for querying an IP address based on an identified DNS query request according to an embodiment of the present invention;

[0042] FIG2 is a flow chart of a method for querying an IP address based on an identified DNS query request according to an embodiment of the present invention;

[0043] 3 is a schematic diagram of an apparatus for querying an IP address based on an identified DNS query request according to an embodiment of the present invention;

[0044] FIG4 is a schematic diagram of a device for querying an IP address based on an identified DNS query request provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0045] The present invention proposes a method, apparatus, and device for querying IP addresses based on an identified DNS query request. When a client submits a domain name query request, it adds a query identifier and query settings before the queried domain name. The query identifier includes the client identifier, client geographic location, network topology information, request identifier, and query settings. The request is then submitted to an authoritative domain name resolution server via a recursive domain name resolution server. The authoritative domain name resolution server identifies the query identifier and specific information in the query and dynamically returns a query result based on the query identifier and specific information. This is described in detail below.

[0046] FIG1 is a schematic diagram of the steps of a method for querying an IP address based on an identified DNS query request provided by an embodiment of the present invention, which may include the following steps:

[0047] S110: The client sends a domain name query request to the recursive domain name resolution server.

[0048] The domain name query request includes a combined domain name, and the combined domain name includes a query identifier and a domain name to be queried.

[0049] In one embodiment of the present invention, before a client submits a domain name query request to a recursive domain name resolution server, the client generates a query identifier and obtains a domain name to be queried; combines the query identifier and the domain name to be queried to generate a combined domain name; and generates a domain name query request based on the combined domain name.

[0050] In one embodiment of the present invention, the query identifier begins with an identification characteristic character, includes a client identifier, a client geographic location, network topology information, a request identifier, and a query setting, and the query identifier is located before the domain name to be queried.

[0051] Specifically, as shown in Figure 2, the client generates a query identifier. The query identifier begins with an identifier character and may include the client identifier, client geographic location, network topology information, request identifier, and query settings (such as query result cache timeliness requirements).

[0052] The client obtains the domain name to be queried, combines it with the query identifier, generates a combined domain name, and submits the combined domain name including the query identifier to the domain name recursive resolution server for query.

[0053] S120: Sending the domain name query request to the authoritative domain name resolution server through the recursive domain name resolution server.

[0054] Specifically, the recursive resolution server submits the combined domain name including the query identifier to the authoritative resolution server for query.

[0055] In one embodiment of the present invention, after sending a domain name query request to an authoritative domain name resolution server, the authoritative domain name resolution server identifies the query identifier and specific information in the domain name query request, queries the corresponding IP address based on the query identifier and specific information, and returns the query result to the client.

[0056] In one embodiment of the present invention, a domain name authoritative resolution server identifies a query identifier and specific information in a domain name query request, specifically including: after receiving a combined domain name with a query identifier, the authoritative resolution server splits the combined domain name into a query identifier and a domain name to be queried; and reads a client identifier, a client geographic location and network topology information, a request identifier, and query settings in the query identifier.

[0057] In one embodiment of the present invention, a corresponding domain name is queried based on a query identifier and specific information and a query result is returned to the client, specifically including: querying a corresponding IP address based on a client identifier, a client geographic location and network topology information, a request identifier and a query setting in the query identifier, and dynamically returning the query result to a recursive domain name resolution server; the recursive domain name resolution server then returns the query result to the client.

[0058] Specifically, after receiving the combined domain name with the query identifier, the authoritative resolution server splits the combined domain name into the query identifier and the domain name to be queried, and reads the client identifier, client geographic location and network topology information, request identifier, query settings and other information in the query identifier.

[0059] The domain name authoritative resolution server dynamically returns the query result according to the submitted domain name to be queried, and based on the client identifier, client geographic location and network topology information, request identifier, query settings and other information in the query identifier.

[0060] S130: The client receives the query result dynamically returned from the domain name authoritative resolution server.

[0061] Next, the steps of the present invention are further described through two embodiments.

[0062] Example 1: Intelligent Analysis

[0063] The authoritative resolution server dynamically returns query results based on the network topology of the querying domain name user. If the user is from China Unicom, the server IP address within the China Unicom network corresponding to the domain name is returned; if the user is from China Telecom, the server IP address within the China Telecom network corresponding to the domain name is returned. This ensures that the user can access servers within the local network, improving user access speed and user experience.

[0064] 1. The client obtains the domain name to be queried and resolved (e.g. abc.cn);

[0065] 2. The client generates a query identifier: The client is assigned a unified number, set to bjnode01, and obtains the user's IPv4 address (e.g., 218.241.1.5, converted to hexadecimal daf10105). The request TTL lifetime is 180 seconds. The query identifier combination is _bjnode01_daf10105_t180. The combined domain name to be queried is _bjnode01_daf10105_t180.abc.cn.

[0066] 3. The client submits a domain name query request for _bjnode01_daf10105_t180.abc.cn to the recursive resolution server;

[0067] 4. The recursive resolution server submits a query request for the domain name _bjnode01_daf10105_t180.abc.cn to the authoritative resolution server of abc.cn;

[0068] 5. The authoritative resolution server obtains the query identifier _bjnode01_daf10105_t180 and the domain name abc.cn to be queried. The authoritative resolution server obtains the client's unique identifier, the user's IPv4 address, and the TTL lifetime request from the query identifier. Based on the client identifier and network address requested by the user, the authoritative resolution server returns the server address closest to the user for the domain name abc.cn and sets the TTL lifetime of the returned result to 180 seconds (the recursive resolution server caches the returned result for 180 seconds).

[0069] Example 2: Recursive resolution server backend IP analysis

[0070] When a client queries a specific domain name (such as def.cn), it adds the unique identifier of the client machine (such as: _client001) and sets the lifetime to 0 (i.e., no caching). The authoritative resolution server for the specific domain name can distinguish this type of query received from the recursive resolution server as a request submitted by a specific client, so that the performance indicators of the recursive server (such as query latency, query backend IP, and whether clustering is used) can be analyzed.

[0071] The present invention adds a query identifier to the domain name query request of the client, and the authoritative resolution server can accurately obtain the corresponding IP address according to the query identifier. There is no need to modify the recursive domain name resolution server. By utilizing the characteristics of the domain name itself and modifying the content end and the authoritative resolution server, the domain name query request can be accurately identified and analyzed, and the query result can be dynamically fed back according to the query identifier, thereby realizing functions such as DNS intelligent scheduling and content delivery network (CDN) management.

[0072] The above is a method for querying IP based on an identified DNS query request provided by an embodiment of the present invention. Based on the same inventive idea, an embodiment of the present invention also provides a corresponding device for querying IP based on an identified DNS query request, as shown in FIG3 .

[0073] The domain name query request sending module 302 is used to send a domain name query request to a recursive domain name resolution server; wherein the domain name query request includes a combined domain name, and the combined domain name includes a query identifier and a domain name to be queried; the request forwarding module 304 is used to send the domain name query request to the authoritative domain name resolution server; the query result receiving module 306 is used to receive the query result dynamically returned from the authoritative domain name resolution server.

[0074] In one embodiment of the present invention, the device for querying IP based on the identifier DNS query request also includes a combined domain name generation module, which is used to generate a query identifier and obtain the domain name to be queried; combine the query identifier and the domain name to be queried to generate a combined domain name; and generate a domain name query request based on the combined domain name.

[0075] In one embodiment of the present invention, the device for querying IP based on the identifier DNS query request also includes a domain name resolution module, which is used to identify the query identifier and specific information in the domain name query request, query the corresponding IP address according to the query identifier and specific information, and return the query result to the client.

[0076] The embodiment of the present invention further provides a corresponding device for querying an IP address based on an identified DNS query request, as shown in FIG4 , including:

[0077] At least one processor 402 (processor), a communication interface 404 (Communications Interface), a memory 406 (memory) and a communication bus 408; wherein the processor 402, the communication interface 404, and the memory 406 communicate with each other via the communication bus 408; the processor 402 can call the logic instructions stored in the memory 406 to enable at least one processor 402 to execute the steps of the above embodiments.

[0078] Based on the same idea, some embodiments of the present invention also provide a medium corresponding to the above method.

[0079] Some embodiments of the present invention provide a storage medium storing computer-executable instructions, and the computer-executable instructions are executed by a processor to implement the steps of the above embodiments.

[0080] The various embodiments of the present invention are described in a progressive manner. Similar portions between the various embodiments can be referred to in conjunction with each other. Each embodiment focuses on the differences between the other embodiments. In particular, the device and medium embodiments are generally similar to the method embodiments, so their descriptions are relatively simplified. For relevant portions, refer to the descriptions of the method embodiments.

[0081] The devices and media provided in the embodiments of the present invention correspond one-to-one to the methods. Therefore, the devices and media also have similar beneficial technical effects to their corresponding methods. Since the beneficial technical effects of the methods have been described in detail above, the beneficial technical effects of the devices and media will not be repeated here.

Claims

1. A method for querying an IP address based on a DNS query request, characterized in that: include: The client sends a domain name query request to the domain name recursive resolution server; wherein the domain name query request includes a combined domain name, and the combined domain name includes a query identifier and a domain name to be queried; Sending the domain name query request to the domain name authoritative resolution server through the domain name recursive resolution server; The client receives the query result dynamically returned from the domain name authoritative resolution server.

2. The method according to claim 1, characterized in that Also includes: The query identifier begins with an identifier characteristic character and includes a client identifier, a client geographic location, network topology information, a request identifier, and a query setting.

3. The method according to claim 1, characterized in that Before the client submits a domain name query request to the domain name recursive resolution server, the method further includes: The client generates a query identifier and obtains the domain name to be queried; Combining the query identifier and the domain name to be queried to generate a combined domain name; A domain name query request is generated according to the combined domain name.

4. The method according to claim 1, characterized in that: After sending the domain name query request to the domain name authoritative resolution server, the method further includes: The domain name authoritative resolution server identifies the query identifier and specific information in the domain name query request, queries the corresponding IP address according to the query identifier and specific information, and returns the query result to the client.

5. The method according to claim 4, characterized in that The authoritative domain name resolution server identifies the query identifier and specific information in the domain name query request, specifically including: After receiving the combined domain name with the query identifier, the authoritative resolution server splits the combined domain name into the query identifier and the domain name to be queried; The client identifier, the client geographic location and network topology information, the request identifier and the query settings in the query identifier are read.

6. The method according to claim 4, characterized in that The querying of the corresponding domain name according to the query identifier and the specific information and returning the query result to the client specifically includes: Query the corresponding IP address according to the client identifier, the client geographic location and network topology information, the request identifier and the query setting in the query identifier, and dynamically return the query result to the domain name recursive resolution server; The recursive domain name resolution server then returns the query result to the client.

7. The method according to claim 1, characterized in that The query identifier is located before the domain name to be queried.

8. A device for querying IP based on a DNS query request, characterized in that: Applicable to non-domain name identification encoding and resolution systems, including: A domain name query request sending module, used to send a domain name query request to a domain name recursive resolution server; wherein the domain name query request includes a combined domain name, and the combined domain name includes a query identifier and a domain name to be queried; A request forwarding module, used for sending the domain name query request to an authoritative domain name resolution server; The query result receiving module is used to receive the query result dynamically returned from the domain name authoritative resolution server.

9. A device for querying IP based on a DNS query request, characterized in that: include: at least one processor; as well as, A memory connected to the at least one processor via a bus; wherein, The memory stores instructions executable by the at least one processor, and the instructions are executed to implement the method according to any one of claims 1 to 7.

10. A non-volatile storage medium storing computer executable instructions, characterized in that: The computer executable instructions are executed by a processor to implement the method according to any one of claims 1 to 7.

Images