55 results about "Name resolution" patented technology

The invention discloses an encrypted domain name resolution protocol simulation and characterization system, and relates to the technical field of network security and network traffic analysis. The invention aims to simulate an encrypted domain name resolution process in a real network environment, collect the flow of the process and extract features to construct a data set, and ensure the quality of the generated data set through data enhancement and a data set evaluation scheme. The system comprises a traffic simulation module, a traffic representation module, a data enhancement module and a data set evaluation module. The flow simulation and characterization module simulates and encrypts domain name resolution flow and extracts a structured feature vector containing 34 side channel features; and the data enhancement and data set evaluation module is used for enhancing a feature set based on a conditional table generative adversarial network CTGAN so as to construct a feature data set which is closer to traffic in a real network environment, and ensuring that the constructed data set has engineering availability and theoretical rationality through evaluation. The system can be used for constructing a current scarce encrypted domain name resolution protocol side channel feature data set, and provides data support for related security detection and research.

The application discloses a storage system access management method and device, a storage medium and an electronic device, relates to the technical field of storage systems, and comprises the following steps: in the case that a target domain name carried in a domain name resolution request is received, at least one reference address information corresponding to the target domain name is determined, wherein the reference address information is used for indicating a storage node in a storage system; address states corresponding to the at least one reference address information are determined from an address state table, wherein the address state is used for indicating the running state of the storage node corresponding to the reference address information; the reference address information with a first state is determined as target address information, and the target address information is returned to a client, wherein the client is used for accessing the target address information. The technical problem that the storage system in the related art has low performance is solved, and the technical effect of improving the performance of the storage system is achieved.

This application relates to a domain name resolution method, apparatus, computer device, storage medium, and computer program product. The method includes: in response to a domain name resolution request for a target domain name, determining the target load type corresponding to the target domain name; determining a target node identifier array corresponding to the target load type from a node identifier array corresponding to each load type; wherein, in the target node identifier array, the number of node identifiers corresponding to each service node is positively correlated with the weight of each service node for the target load type; the weight of each service node for the target load type is obtained based on the load information of the service node for the target load type; determining the target node identifier in the target node identifier array according to a pre-stored node identifier determination strategy, and generating a response message corresponding to the domain name resolution request based on the Internet Protocol address corresponding to the target node identifier. This method can achieve a relatively balanced load pressure on each service node.

Systems and methods are provided for dynamic name resolution in a distributed software-defined network. An fxDeviceApp registers service metadata with a centralized application manager that maintains authoritative deployment information. A name resolution service receives requests to resolve service names and identifies active instances of the requested services based on real-time deployment state. The name resolution service then returns corresponding network addresses, enabling service-to-service communication within and across network zones. The system supports localized caching, zone-specific resolution rules governed by policy managers, and dynamic updates in response to changes in application deployment. Resolution decisions may account for service health or load metrics, and service lookup requests may be handled using a standardized message format compatible with a virtual messaging fabric. These features enable reliable, scalable, and policy-aware service discovery for distributed applications deployed across heterogeneous execution environments.

The application provides a roaming communication method and network element under a home routing architecture, a storage medium and a computer program product, and comprises the following steps: a first network element receives a domain name resolution request initiated by a terminal; the domain name resolution request carries first domain name information and first DNS address information; in the case that the first domain name information is domain name information of a specific service, the user is a specific user and / or the first DNS address information is specific DNS address information, the first DNS address information is modified into second DNS address information; the DNS server corresponding to the second DNS address information is located in a visited network with the first network element; the domain name resolution request is forwarded to the DNS server, so that the DNS server resolves the first domain name information, obtains first service server address information of the visited network, and returns the first service server address information to the terminal. The service path can be shortened, and the service time delay can be reduced.

The application discloses a kind of power system container operation state information identification and fault detection method and system, comprising: definition includes system identification, container group, container type, scene, container number Container naming rule;Process management, container state management and sub-scene state management model are constructed;Container image is constructed, and container host name resolution engine and process management configuration are preset;By self-defined configuration, the container name, environment variable and container number that meet the container naming rule are set;When container starts, container name is resolved by host name resolution engine, identifies the scene, sub-scene and container number of the container belonging to, and determines sub-scene instance number;Process management calculates the container health index according to the sub-scene process health index in container, triggers container fault, and triggers corresponding fault handling by cascading to host computer sub-scene.The problems of non-standard container identification, low scene deployment flexibility, fault response lag and insufficient full-link association in the prior art are solved.

The application discloses a domain name resolution method and device, the method comprises the following steps: a satellite accesses a first domain name resolution request sent by a sending device and adds a location identifier to obtain a second domain name resolution request, and sends the second domain name resolution request to a domain name resolution device; the domain name resolution device determines the location of the sending device according to the location identifier, determines a first address from multiple addresses according to the location, the device corresponding to the first address is the device closest to the sending device among multiple devices corresponding to multiple addresses, and the multiple addresses are multiple addresses corresponding to a domain name; the domain name resolution device sends a domain name resolution response comprising the first address; and the satellite accesses receives the domain name resolution response and forwards the domain name resolution response to the sending device. Through the above method, the accuracy of the domain name resolution device in positioning the location of the sending device can be improved, the domain name resolution device can allocate an address of a device closest to the sending device to the sending device, and the ability of the domain name resolution device in scheduling network resources can be improved.

The present disclosure relates to the field of edge cloud technology, and discloses a domain name resolution method, a system, an apparatus, a device, and a medium for edge computing. The domain name resolution method includes: acquiring a first domain name resolution request forwarded by a virtual device through a network module; converting the first domain name resolution request into a second domain name resolution request, and sending the second domain name resolution request to an authoritative domain name system; and receiving a resolution result of the second domain name resolution request by the authoritative domain name system, and forwarding the resolution result to the virtual device through the network module.

The application discloses a domain name resolution method and device, electronic equipment and a storage medium, comprising: a mirror server synchronously acquiring and storing mirror data of an IPv6 root server; a plurality of edge leaf nodes are used as exit hot standby gateways, so that the edge leaf nodes receive access requests of clients to the IPv6 root server; receiving the access request returned by the edge leaf node, and resolving the access request according to the mirror data, and returning the obtained resolution result to the edge leaf node, so that the edge leaf node returns the resolution result to the client. In this way, the deployment of the IPv6 root server mirror on the edge of the new metropolitan area cloud network can be realized, the mirror server can directly serve the edge users, which is equivalent to the function of directly accessing the global IPv6 root server, is simpler and more effective than the traditional non-real-time and step-by-step resolution recursion, and significantly improves the efficiency and response speed of the IPv6 domain name resolution.

The application discloses a domain name resolution method and device based on domain name request risk management and control, the method comprises the following steps: identifying domain name requests as normal domain name requests or abnormal domain name requests; according to the user domain name access behavior data set and the abnormal domain name association strength, evaluating the security rating and the security score of the user; sending the normal domain name requests initiated by users with different security ratings to the DNS server subset cluster corresponding to their levels, so that the DNS server subset cluster of the level responds to the normal domain name requests in order based on the security score; predicting the normal domain names with high probability of access to form a domain name resource list, which is used to cache the domain name resource list to the selected DNS server when the security rating of the user is higher than the set threshold, so as to improve the domain name resolution cache hit rate and the resolution efficiency. The application solves the problem of reduced performance of the domain name server caused by the low utilization rate of the conventional DNS server due to the zombie network attack.

Methods for traffic redirection, corresponding terminal, controller, authorization server, name resolution servers and computer program. A name resolution method implemented in a terminal connected to a communication network includes: transmitting, to a first name resolution server, a name resolution message via a secure communication channel between the terminal and the first name resolution server; if a redirection of the DNS traffic of the terminal is authorized, obtaining at least one identifier of a second name resolution server for the redirection; and executing at least one action for managing the redirection of the DNS traffic of the terminal to the second name resolution server, at least from among: verifying legitimacy of the second name resolution server, sending an indication of a failure of a connection of the terminal with the second name resolution server; and requesting deactivation of the redirection of the DNS traffic to the second name resolution server.

The invention aims to provide a malicious domain name identification system and method based on DNS collision. The system comprises a data acquisition module, an active domain name resolution module, a data cleaning and sorting module, a preliminary matching and screening module, an AI research and judgment module and a storage module. According to the system and the method, active detection and high-confidence verification are organically combined, a brand-new malicious domain name recognition and tracing normal form is constructed, advanced persistent threats which are most hidden and most cunning can be effectively found and traced, and the important blank of a system in the prior art is filled.

The embodiment of the invention provides a source returning method and related equipment / products, and belongs to the field of communication. The back-to-source method comprises the steps of selecting a first address from a first address set in a process of initiating a back-to-source operation, and sending a first back-to-source request based on the first address; wherein the first address set is an address set which is newly analyzed according to the back-to-source domain name; switching from the first address set to a second address set under the condition of source returning failure based on the first source returning request; wherein the second address set is composed of a plurality of addresses which are used for historical back-to-source requests in the first address set; and selecting a second address from the second address set, and sending a second back-to-source request based on the second address. According to the technical scheme provided by the embodiment of the invention, system faults caused by abnormity (such as hijacking, pollution or configuration errors) of a single domain name resolution result can be effectively avoided, and the source returning robustness and success rate are improved.

The invention discloses a network access method and device in a DNS hijacked scene and a related product, and relates to the technical field of network security. The method comprises the following steps: firstly, checking a local domain name resolution cache of a client, preferentially multiplexing a valid IP address cache, if the valid IP address cache is invalid, acquiring an IP address list corresponding to a target domain name through an IP direct connection trusted service interface, and bypassing a DNS resolution link; an IP address set with timeliness is generated and stored persistently, and address validity is guaranteed through regular refreshing of a double-judgment mechanism; a main domain name, a standby domain name and a local cache IP address are obtained based on the set, and a domain name-first progressive failover access strategy is generated in combination with multi-network configuration; and when the access of the main domain name and the standby domain name fails, automatically switching to the local cache IP address to initiate the access. According to the method and the device, stable network access in a DNS hijacking scene is realized, and reliable network access guarantee is provided for various software which depends on domain name access.

Ensure that devices connected to the LAN can be reliably accessed using their hostnames. [Solution] The hostnames and MAC addresses of devices connected to LAN2 are associated and registered in the device information file 104. When a request for confirmation of duplicate IP addresses (GARP, DAD-NS) is received, the address information collection unit 112 functions and updates the address information file 105 by associating the IP addresses and MAC addresses contained therein. When a destination resolution request (mDNS) including a hostname is received, the name resolution unit 113 functions, identifies the MAC address by referring to the device information file 104 from the hostname, and identifies the IP address by referring to the address information file 105 from the identified MAC address. The resolution result provision unit 114 notifies the sender of the destination resolution request (mDNS) of this identified IP address.

The present disclosure provides a security enhancement method, device, equipment, medium and program product for domain name resolution. The method comprises the following steps: querying a parent domain server to determine whether a first NS record list corresponding to a to-be-verified domain name exists; verifying the parent domain authorization validity of the to-be-verified domain name; querying a sub-domain server indicated by the first NS record to obtain a second NS record corresponding to the to-be-verified domain name; comparing the first NS record with the second NS record to determine whether the NS record of the to-be-verified domain name is trustworthy; constructing a local trustworthy NS database based on a strict data verification process to provide a technical basis for real-time domain name resolution; and returning a domain name resolution result to a user terminal in combination with the trustworthy NS record and the real-time NS record query result, which can maximize the accuracy of domain name resolution and effectively reduce domain name resolution abnormalities and network attacks caused by problems such as conflict authorization, invalid authorization and circular authorization.

The application discloses a domain name resolution method suitable for mobile target defense, and comprises the following steps: 1) a domain name system continuous updating device random address flow; 2) an identity authentication-oriented key negotiation flow; 3) a network device identity authentication flow; 4) a network device random address obtaining flow of a communication opposite end device; and 5) a network communication flow. The method can realize convenient authentication and security protection of internet devices, and help to improve the security of next-generation internet devices on the basis of guaranteeing the security of the internet.

Systems and methods are disclosed for enabling service-based communication among distributed application components in a software-defined network. A centralized application manager registers metadata for application instances, each associated with a common service identifier, and maintains an up-to-date mapping of these identifiers to network addresses across execution environments. When an application component initiates a request to communicate with a service by referencing its service identifier, a name resolution component dynamically resolves the identifier to an active network address using real-time deployment state. Communication is established via a virtual messaging fabric, facilitating reliable service discovery and inter-component messaging. The system supports load-balanced address selection, enforcement of security policy constraints, and synchronization across multiple network zones through a shared service registry. Application instances may include fxDeviceApp and fxCloudApp components executing on network devices and cloud platforms, respectively. These capabilities provide scalable, policy-driven, and secure service-level interaction within distributed application environments.

The embodiment of the invention relates to a processing method and system for a domain name resolution interface of an eSIM module. The method comprises the following steps: the domain name resolution interface processes an interface resolution request of an application program in linkage with a domain name resolution server in a BIP mode; when the continuous failure times of the connection between the analysis interface and the server reach the preset times, the analysis interface is linked with the server in a short message mode to carry out one-time parameter setting; when the current online MCC + MNC is different from the interface built-in MCC0 + MNC0, the analysis interface is linked with the server in a short message mode to carry out one-time parameter built-in; and the server completes updating of a batch of built-in parameters through linkage between a short message group sending mode and the domain name resolution interface every time a record of a local configuration list of the server is changed. According to the invention, a universal interface which can be used for querying the domain name IP address is provided for the upper-layer application program of the eSIM module, so that the development difficulty of the application program can be reduced, and the abnormal connection probability of the application program in different network states can be reduced.

Methods, systems, and devices in which a computer networking device may compare the destination address of the a name resolution request with a stored list of addresses. If the destination address does not match any of the addresses from the stored list, the computer networking device may perform one or more actions, such as sending a notification, redirecting the name resolution request to one of the servers in the list, or generating a new name resolution request. For example, a method may include receiving network traffic from a client device including a first name resolution request; comparing a first destination address from the first name resolution request with a list of addresses indicating servers to which the client device is to communicate name resolution requests; and detecting that the first destination address does not match any of the addresses from the list of addresses.

The application provides a scheduling method, device, equipment, cluster, product and medium. The method comprises: a domain name resolution system receiving a first switchable unit identifier sent by a monitoring system in a case where the monitoring system detects that a group failure occurs in a first switchable unit in a first data center, wherein the first switchable unit comprises a plurality of instances of the first data center, and the switchable unit identifier is used to indicate the first switchable unit; and the domain name resolution system inhibiting sending a first processing request to the instance corresponding to the switchable unit identifier according to the switchable unit identifier. The above method can effectively improve the switching efficiency of the instance in the case of group failure.

The embodiment of the application discloses a stateless domain name resolution session keeping method and system based on a hash algorithm, receives a domain name resolution request initiated by a client, wherein the domain name resolution request contains a source LDNS address and a domain name to be resolved; performs network segment convergence processing on the source LDNS address according to a preset CIDR value to obtain a converged address value; performs first hash calculation on the converged address value to determine a target global address pool from a schedulable global address pool; performs second hash calculation to determine a target pool member from available pool members of the target global address pool; and returns an IP address of the pool member to the client as a resolution result. The application does not store any session keeping record, does not need to synchronize any state information among cluster nodes, keeps the resolution result of the same LDNS for the same domain name fixed through a deterministic hash algorithm, and has the advantages of low memory occupation, high search efficiency, accurate resolution result and simple implementation.

The invention discloses a database connection method and device, electronic equipment and a storage medium. Relates to the distributed field, and the method comprises the following steps: when a domain name resolution request sent by a target application is received, extracting a target domain name from the domain name resolution request, the target domain name being configured in a network connection of the target application, the target domain name having a mapping relationship with a plurality of computing node sets of a database; determining network addresses of computing nodes in a plurality of computing node sets associated with the target domain name, the health degree values of the computing nodes in the computing node sets being greater than a preset degree value; and the network addresses of the computing nodes in the plurality of computing node sets are sent to a target application, and the target application is connected with a database based on the network addresses. Through the method and the device, the problem of high configuration cost due to the fact that the IP addresses of all database nodes possibly connected with the application need to be configured in the network connection of the application when the application accesses the database in the prior art is solved.

The invention discloses a security optimization method and device for domain name resolution, a terminal and a storage medium, and relates to the technical field of data security. Registering public key information in a service certificate of the generated security domain name resolution scheme to a public key security record through a secondary domain authority server, and signing a plurality of key resource records; the method comprises the following steps: initiating domain name query to a recursive server through a DNS (Domain Name Server) client, and further initiating domain name query to authoritative servers of a root domain, a top-level domain and a second-level domain to obtain an IP (Internet Protocol) address, and confirming authenticity; and querying and extracting public key information in a public key security record of a name server record domain name of the secondary domain authority server through the recursive server, confirming the credibility, and initiating domain name query to the secondary domain authority server to obtain a domain name query result. According to the method, a closed loop of secure transmission of the query request, legal response of the second-level domain authoritative server and secure return of the domain name query result is realized, and a real domain name resolution result which is not tampered can be obtained.

The present disclosure relates to a fraud domain blocking method, device, system and equipment, the system comprising: a fraud blocking server configured to receive a blocking instruction and generate a domain name blacklist based on the blocking instruction; a traffic detection server configured to obtain a DNS request sent by a terminal and send a mirror DNS message to the fraud blocking server based on the DNS request; the fraud blocking server is further configured to receive the mirror DNS message sent by the traffic detection server, judge whether the mirror DNS message is a fraud domain name based on the domain name blacklist, and obtain a domain name resolution result corresponding to the DNS request. In this way, by setting an independent fraud blocking server, the mirror DNS message is detected by the fraud blocking server, which can avoid the problem of occupying a separate cache for local DNS blocking and causing a decrease in buffer performance and normal user perception as the blocking volume increases, thereby greatly improving the blocking efficiency of the fraud domain name.

The present application relates to the technical field of communications. Disclosed are communication methods, a satellite system, an electronic device and a storage medium. In a communication method disclosed in the present application, when a first server has received a domain name resolution request sent by a terminal device, if the first server stores a first IP address corresponding to a first domain name in the domain name resolution request, the first IP address can be directly returned to the terminal device; and when the first server does not store the first IP address corresponding to the first domain name, the domain name resolution request is forwarded to a local domain name server by means of a second server deployed in a geostationary earth orbit satellite, and the first IP address is acquired from the local domain name server by means of the second server. In this way, satellite communication resources can be effectively saved, and the situation of network access failure of a terminal device can be effectively reduced, thereby improving the user experience.

The method and device for identifying DoH service, the electronic device and the storage medium are disclosed, wherein the method comprises: sending a first domain name resolution request to a domain name resolution server at a preset detection frequency, the first domain name resolution request being used to request a DoH-based domain name resolution service for a first detection domain name; updating a target network address corresponding to the first detection domain name in a database according to each first resolution result; comparing a network address in the database with a network address to be queried in a domain name resolution service type query request when the domain name resolution service type query request is received; and determining that the domain name resolution service in the domain name resolution service type query request is the DoH-based domain name resolution service when there is a network address same as the network address to be queried in the database.

A wireless communication system (1) comprises a closed system (11) and a cloud system (21). The closed system (11) comprises call control servers (12) that control the communication of wireless stations (41, 42) respectively connected to a closed network (10) and an internet network (20), closed-side gateway servers (13), and a closed-side DNS server (14) that performs name resolution. The same domain name is assigned to a plurality of closed-side gateway servers (13) that are associated with the same call control server (12). The closed-side DNS server (14) selects one among a plurality of closed-side devices corresponding to the same domain name, in accordance with at least one of the route to the wireless station (41) and the operation status, and transmits a name resolution response including the address of the selected closed-side device to the wireless station (41).

This control device for controlling a network comprises: a path search unit that is triggered by a request for name resolution related to communication from a first terminal to a second terminal, to determine a communication path from the first terminal to the second terminal in the network; and a setting unit that sets, for the network, the transmission path of the communication path.

The present application relates to a domain name resolution method and apparatus, a communication device, a storage medium, and a product. The method comprises: an edge cloud server receiving a DNS request sent by a terminal on the basis of a first domain name of the edge cloud server, wherein the first domain name is obtained from a local DNS server corresponding to the terminal; on the basis of the DNS request, determining a second domain name and target resource information that the terminal requests to access; and when it is determined on the basis of the target resource information that the terminal possesses a corresponding access permission, the local DNS server sending to the terminal a domain name resolution result corresponding to the second domain name.