112 results about "Name resolution" patented technology

Systems and methods for dynamic distributed name resolution. In various embodiments, steps include receiving a request from a user to access a destination service; resolving an Internet Protocol (IP) address for the destination service based on one or more characteristics of the request; enforcing one or more controls on the request based on a configuration provided by an owner of the destination service; and providing access to the destination service to the user based on the one or more controls.

The invention discloses an encrypted domain name resolution protocol simulation and characterization system, and relates to the technical field of network security and network traffic analysis. The invention aims to simulate an encrypted domain name resolution process in a real network environment, collect the flow of the process and extract features to construct a data set, and ensure the quality of the generated data set through data enhancement and a data set evaluation scheme. The system comprises a traffic simulation module, a traffic representation module, a data enhancement module and a data set evaluation module. The flow simulation and characterization module simulates and encrypts domain name resolution flow and extracts a structured feature vector containing 34 side channel features; and the data enhancement and data set evaluation module is used for enhancing a feature set based on a conditional table generative adversarial network CTGAN so as to construct a feature data set which is closer to traffic in a real network environment, and ensuring that the constructed data set has engineering availability and theoretical rationality through evaluation. The system can be used for constructing a current scarce encrypted domain name resolution protocol side channel feature data set, and provides data support for related security detection and research.

The present disclosure provides a method of traffic scheduling implementation, including: receiving a domain name resolution request sent by a first business application on a first terminal device, and performing domain name resolution on the domain name resolution request to determine a to-be-resolved domain name; if the to-be-resolved domain name is a target domain name, determining, from a preset network segment, a first virtual network address corresponding to the to-be-resolved domain name, and using the first virtual network address as a first traffic destination address corresponding to the to-be-resolved domain name, where the preset network segment includes a plurality of virtual network addresses; and sending the first traffic destination address to the first business application on the first terminal device, to cause the first business application to perform data transmission based on the first traffic destination address.

Some embodiments construct a set of build dependencies for a program without access to a full set of build instructions. When multiple clashing name resolutions are identified for a particular dependency, a union of the alternative versions is formed. Intermediate representations of the union of program versions, such as symbol tables, abstract syntax trees, and other internal compiler data structures, are emitted to persistent non-volatile storage, instead of using a single resolution to create temporary intermediate data to build an executable program. Security analysis and licensing analysis utilize the persisted program representations to analyze the union of multiple overlapping but different versions of the program.

The application discloses a storage system access management method and device, a storage medium and an electronic device, relates to the technical field of storage systems, and comprises the following steps: in the case that a target domain name carried in a domain name resolution request is received, at least one reference address information corresponding to the target domain name is determined, wherein the reference address information is used for indicating a storage node in a storage system; address states corresponding to the at least one reference address information are determined from an address state table, wherein the address state is used for indicating the running state of the storage node corresponding to the reference address information; the reference address information with a first state is determined as target address information, and the target address information is returned to a client, wherein the client is used for accessing the target address information. The technical problem that the storage system in the related art has low performance is solved, and the technical effect of improving the performance of the storage system is achieved.

This application relates to a domain name resolution method, apparatus, computer device, storage medium, and computer program product. The method includes: in response to a domain name resolution request for a target domain name, determining the target load type corresponding to the target domain name; determining a target node identifier array corresponding to the target load type from a node identifier array corresponding to each load type; wherein, in the target node identifier array, the number of node identifiers corresponding to each service node is positively correlated with the weight of each service node for the target load type; the weight of each service node for the target load type is obtained based on the load information of the service node for the target load type; determining the target node identifier in the target node identifier array according to a pre-stored node identifier determination strategy, and generating a response message corresponding to the domain name resolution request based on the Internet Protocol address corresponding to the target node identifier. This method can achieve a relatively balanced load pressure on each service node.

Systems and methods are provided for dynamic name resolution in a distributed software-defined network. An fxDeviceApp registers service metadata with a centralized application manager that maintains authoritative deployment information. A name resolution service receives requests to resolve service names and identifies active instances of the requested services based on real-time deployment state. The name resolution service then returns corresponding network addresses, enabling service-to-service communication within and across network zones. The system supports localized caching, zone-specific resolution rules governed by policy managers, and dynamic updates in response to changes in application deployment. Resolution decisions may account for service health or load metrics, and service lookup requests may be handled using a standardized message format compatible with a virtual messaging fabric. These features enable reliable, scalable, and policy-aware service discovery for distributed applications deployed across heterogeneous execution environments.

The application provides a roaming communication method and network element under a home routing architecture, a storage medium and a computer program product, and comprises the following steps: a first network element receives a domain name resolution request initiated by a terminal; the domain name resolution request carries first domain name information and first DNS address information; in the case that the first domain name information is domain name information of a specific service, the user is a specific user and / or the first DNS address information is specific DNS address information, the first DNS address information is modified into second DNS address information; the DNS server corresponding to the second DNS address information is located in a visited network with the first network element; the domain name resolution request is forwarded to the DNS server, so that the DNS server resolves the first domain name information, obtains first service server address information of the visited network, and returns the first service server address information to the terminal. The service path can be shortened, and the service time delay can be reduced.

The embodiment of the invention relates to a domain name resolution method and device based on a container arrangement engine, equipment and a medium, and is applied to a resolution cluster group, the resolution cluster group comprises a first resolution cluster and a second resolution cluster, a main resolution cluster is the first resolution cluster, and a standby resolution cluster is the second resolution cluster. The method comprises the following steps: a first resolution cluster deletes first domain name resolution rule information corresponding to the first resolution cluster in response to a degradation instruction; the second resolution cluster generates second domain name resolution rule information corresponding to the second resolution cluster according to a preset domain name address relationship in response to the upgrading instruction; wherein the domain name address relationship is used for recording the corresponding relationship between the entry domain name and the domain name resolution address of the member cluster; and the second analysis cluster sends an analysis cluster switching instruction to a member cluster corresponding to the analysis cluster group, so that the member cluster updates the main analysis cluster from the first analysis cluster to the second analysis cluster. Therefore, the duration of cross-cluster analysis abnormal interruption in the cluster federation is reduced.

The invention provides a security enhancement method and device for domain name resolution, equipment, a medium and a program product, and the method comprises the steps: querying whether a first NS record list corresponding to a to-be-verified domain name exists in a parent domain server, and verifying the validity of parent domain authorization of the to-be-verified domain name; a first NS record corresponding to a domain name to be verified is inquired from a sub-domain server indicated by the first NS record, a second NS record corresponding to the domain name to be verified is inquired from a sub-domain server indicated by the first NS record, whether the NS record of the domain name to be verified is credible or not is judged by comparing the first NS record with the second NS record, and a local credible NS database is constructed based on a strict data verification process, so that a technical basis is provided for real-time domain name resolution; and the domain name resolution result is returned to the user terminal in combination with the query result of the credible NS record and the real-time NS record, so that the accuracy of domain name resolution can be guaranteed to the greatest extent, and domain name resolution abnormity and network attacks caused by the problems of conflict authorization, invalid authorization, cyclic authorization and the like are effectively reduced.

The application discloses a kind of power system container operation state information identification and fault detection method and system, comprising: definition includes system identification, container group, container type, scene, container number Container naming rule;Process management, container state management and sub-scene state management model are constructed;Container image is constructed, and container host name resolution engine and process management configuration are preset;By self-defined configuration, the container name, environment variable and container number that meet the container naming rule are set;When container starts, container name is resolved by host name resolution engine, identifies the scene, sub-scene and container number of the container belonging to, and determines sub-scene instance number;Process management calculates the container health index according to the sub-scene process health index in container, triggers container fault, and triggers corresponding fault handling by cascading to host computer sub-scene.The problems of non-standard container identification, low scene deployment flexibility, fault response lag and insufficient full-link association in the prior art are solved.

The application discloses a domain name resolution method and device, the method comprises the following steps: a satellite accesses a first domain name resolution request sent by a sending device and adds a location identifier to obtain a second domain name resolution request, and sends the second domain name resolution request to a domain name resolution device; the domain name resolution device determines the location of the sending device according to the location identifier, determines a first address from multiple addresses according to the location, the device corresponding to the first address is the device closest to the sending device among multiple devices corresponding to multiple addresses, and the multiple addresses are multiple addresses corresponding to a domain name; the domain name resolution device sends a domain name resolution response comprising the first address; and the satellite accesses receives the domain name resolution response and forwards the domain name resolution response to the sending device. Through the above method, the accuracy of the domain name resolution device in positioning the location of the sending device can be improved, the domain name resolution device can allocate an address of a device closest to the sending device to the sending device, and the ability of the domain name resolution device in scheduling network resources can be improved.

The present disclosure relates to the field of edge cloud technology, and discloses a domain name resolution method, a system, an apparatus, a device, and a medium for edge computing. The domain name resolution method includes: acquiring a first domain name resolution request forwarded by a virtual device through a network module; converting the first domain name resolution request into a second domain name resolution request, and sending the second domain name resolution request to an authoritative domain name system; and receiving a resolution result of the second domain name resolution request by the authoritative domain name system, and forwarding the resolution result to the virtual device through the network module.

The present disclosure provides an IP address identification method and device of a CDN source station and a storage medium, comprising: collecting user online logs, and establishing a DNS record database based on the online logs; establishing a CDN domain name feature library based on the DNS record database; establishing a domain name resolution time chain table based on the CDN domain name feature library; determining a target IP address and a candidate IP address of a target domain name based on the CDN domain name feature library and the domain name resolution time chain table; determining the page similarity corresponding to the target IP address and the candidate IP address, and determining the candidate IP address corresponding to the page similarity meeting the first threshold condition as the real IP address of the target domain name. Thus, the present disclosure determines the real IP address of the target domain name through the CDN domain name feature library, the page similarity corresponding to the target IP address and the candidate IP address, without assuming domain name features, improving the accuracy of the CDN domain name, and without deploying servers, reducing the cost.

The application discloses a domain name resolution method and device, electronic equipment and a storage medium, comprising: a mirror server synchronously acquiring and storing mirror data of an IPv6 root server; a plurality of edge leaf nodes are used as exit hot standby gateways, so that the edge leaf nodes receive access requests of clients to the IPv6 root server; receiving the access request returned by the edge leaf node, and resolving the access request according to the mirror data, and returning the obtained resolution result to the edge leaf node, so that the edge leaf node returns the resolution result to the client. In this way, the deployment of the IPv6 root server mirror on the edge of the new metropolitan area cloud network can be realized, the mirror server can directly serve the edge users, which is equivalent to the function of directly accessing the global IPv6 root server, is simpler and more effective than the traditional non-real-time and step-by-step resolution recursion, and significantly improves the efficiency and response speed of the IPv6 domain name resolution.

The application discloses a domain name resolution method and device based on domain name request risk management and control, the method comprises the following steps: identifying domain name requests as normal domain name requests or abnormal domain name requests; according to the user domain name access behavior data set and the abnormal domain name association strength, evaluating the security rating and the security score of the user; sending the normal domain name requests initiated by users with different security ratings to the DNS server subset cluster corresponding to their levels, so that the DNS server subset cluster of the level responds to the normal domain name requests in order based on the security score; predicting the normal domain names with high probability of access to form a domain name resource list, which is used to cache the domain name resource list to the selected DNS server when the security rating of the user is higher than the set threshold, so as to improve the domain name resolution cache hit rate and the resolution efficiency. The application solves the problem of reduced performance of the domain name server caused by the low utilization rate of the conventional DNS server due to the zombie network attack.

Methods for traffic redirection, corresponding terminal, controller, authorization server, name resolution servers and computer program. A name resolution method implemented in a terminal connected to a communication network includes: transmitting, to a first name resolution server, a name resolution message via a secure communication channel between the terminal and the first name resolution server; if a redirection of the DNS traffic of the terminal is authorized, obtaining at least one identifier of a second name resolution server for the redirection; and executing at least one action for managing the redirection of the DNS traffic of the terminal to the second name resolution server, at least from among: verifying legitimacy of the second name resolution server, sending an indication of a failure of a connection of the terminal with the second name resolution server; and requesting deactivation of the redirection of the DNS traffic to the second name resolution server.

The application is suitable for the field of data processing, and provides a general data file batch intelligent processing method, which comprises the following steps: reading and analyzing data files with different content formats, unifying the data file formats, and generating encapsulated data; identifying the content of the encapsulated data to determine the matching relationship between the corresponding files of the encapsulated data and the business elements; determining at least one analysis result of the encapsulated data and the corresponding analysis mode of each database field in the uploading process according to the matching relationship, so as to fill in the database field, wherein the analysis mode comprises one or more of file column analysis, file name analysis and content area analysis before the table header; and performing encapsulated data reading and warehousing operation according to the warehousing filling result, wherein the application has the beneficial effect that when a large amount of business data with different formats is imported, the complexity and time consumption of the user are significantly reduced.

The invention aims to provide a malicious domain name identification system and method based on DNS collision. The system comprises a data acquisition module, an active domain name resolution module, a data cleaning and sorting module, a preliminary matching and screening module, an AI research and judgment module and a storage module. According to the system and the method, active detection and high-confidence verification are organically combined, a brand-new malicious domain name recognition and tracing normal form is constructed, advanced persistent threats which are most hidden and most cunning can be effectively found and traced, and the important blank of a system in the prior art is filled.

The embodiment of the invention provides a source returning method and related equipment / products, and belongs to the field of communication. The back-to-source method comprises the steps of selecting a first address from a first address set in a process of initiating a back-to-source operation, and sending a first back-to-source request based on the first address; wherein the first address set is an address set which is newly analyzed according to the back-to-source domain name; switching from the first address set to a second address set under the condition of source returning failure based on the first source returning request; wherein the second address set is composed of a plurality of addresses which are used for historical back-to-source requests in the first address set; and selecting a second address from the second address set, and sending a second back-to-source request based on the second address. According to the technical scheme provided by the embodiment of the invention, system faults caused by abnormity (such as hijacking, pollution or configuration errors) of a single domain name resolution result can be effectively avoided, and the source returning robustness and success rate are improved.

To suppress an increase in a load required for the determination compared to when an electronic certificate is used to determine whether to permit access, and to prevent unnecessary prohibition of access to the system to be accessed compared to when the permission of access is determined only on the basis of information indicating the destination.SOLUTION: In a case in which a user specifies a system to be accessed and an operation to be performed on that system, when the information indicating the destination of the system specified by a user and the information indicating the operation specified by the user are not linked and stored in memory, a processor requests the system to perform name resolution based on the information indicating the destination of the system specified by the user, and accesses the system according to the address obtained in response to the request.SELECTED DRAWING: Figure 1

The invention discloses a network access method and device in a DNS hijacked scene and a related product, and relates to the technical field of network security. The method comprises the following steps: firstly, checking a local domain name resolution cache of a client, preferentially multiplexing a valid IP address cache, if the valid IP address cache is invalid, acquiring an IP address list corresponding to a target domain name through an IP direct connection trusted service interface, and bypassing a DNS resolution link; an IP address set with timeliness is generated and stored persistently, and address validity is guaranteed through regular refreshing of a double-judgment mechanism; a main domain name, a standby domain name and a local cache IP address are obtained based on the set, and a domain name-first progressive failover access strategy is generated in combination with multi-network configuration; and when the access of the main domain name and the standby domain name fails, automatically switching to the local cache IP address to initiate the access. According to the method and the device, stable network access in a DNS hijacking scene is realized, and reliable network access guarantee is provided for various software which depends on domain name access.

Ensure that devices connected to the LAN can be reliably accessed using their hostnames. [Solution] The hostnames and MAC addresses of devices connected to LAN2 are associated and registered in the device information file 104. When a request for confirmation of duplicate IP addresses (GARP, DAD-NS) is received, the address information collection unit 112 functions and updates the address information file 105 by associating the IP addresses and MAC addresses contained therein. When a destination resolution request (mDNS) including a hostname is received, the name resolution unit 113 functions, identifies the MAC address by referring to the device information file 104 from the hostname, and identifies the IP address by referring to the address information file 105 from the identified MAC address. The resolution result provision unit 114 notifies the sender of the destination resolution request (mDNS) of this identified IP address.

The invention relates to the technical field of communication, and discloses a domain name resolution method, a server and a computer program product. In the method, a first server receives a first request message sent by a terminal device, and sends a second request message to a second server. The first request message comprises first analysis information, first identification information of the terminal equipment and a query type; the second request message comprises the first analysis information, the second identification information of the first server and the first parameter determined by the first request message. The first server receives a first response message containing an analysis result of the first analysis information; and then sending a second response message comprising an analysis result of the first analysis information to the terminal equipment. Thus, the first server takes the first request message as a parameter, interaction between the first server and the terminal equipment in the process does not need to be recorded to the session, the storage space occupied by the session is effectively reduced, and the speed of domain name resolution is improved.

A computer-implemented method for transforming a library from a source operating system to a target operating system is disclosed. Thereby, the source operating system comprises an ABI, the target operating system comprises a target ABI, the target ABI is different from the source ABI, the library is implemented by a source object file, the source object file conforms to the source application binary interface and comprises a source memory image, a source symbol and source relocation information. The method further includes creating a target memory image conforming to the target application binary interface, where the target memory is derived from the source memory image; enriching the target memory image with address information directed to the variable length information; and writing the target memory image to the target object file to implement the transformed library from the target object file.

The present disclosure provides a security enhancement method, device, equipment, medium and program product for domain name resolution. The method comprises the following steps: querying a parent domain server to determine whether a first NS record list corresponding to a to-be-verified domain name exists; verifying the parent domain authorization validity of the to-be-verified domain name; querying a sub-domain server indicated by the first NS record to obtain a second NS record corresponding to the to-be-verified domain name; comparing the first NS record with the second NS record to determine whether the NS record of the to-be-verified domain name is trustworthy; constructing a local trustworthy NS database based on a strict data verification process to provide a technical basis for real-time domain name resolution; and returning a domain name resolution result to a user terminal in combination with the trustworthy NS record and the real-time NS record query result, which can maximize the accuracy of domain name resolution and effectively reduce domain name resolution abnormalities and network attacks caused by problems such as conflict authorization, invalid authorization and circular authorization.

The application discloses a domain name resolution method suitable for mobile target defense, and comprises the following steps: 1) a domain name system continuous updating device random address flow; 2) an identity authentication-oriented key negotiation flow; 3) a network device identity authentication flow; 4) a network device random address obtaining flow of a communication opposite end device; and 5) a network communication flow. The method can realize convenient authentication and security protection of internet devices, and help to improve the security of next-generation internet devices on the basis of guaranteeing the security of the internet.

Systems and methods are disclosed for enabling service-based communication among distributed application components in a software-defined network. A centralized application manager registers metadata for application instances, each associated with a common service identifier, and maintains an up-to-date mapping of these identifiers to network addresses across execution environments. When an application component initiates a request to communicate with a service by referencing its service identifier, a name resolution component dynamically resolves the identifier to an active network address using real-time deployment state. Communication is established via a virtual messaging fabric, facilitating reliable service discovery and inter-component messaging. The system supports load-balanced address selection, enforcement of security policy constraints, and synchronization across multiple network zones through a shared service registry. Application instances may include fxDeviceApp and fxCloudApp components executing on network devices and cloud platforms, respectively. These capabilities provide scalable, policy-driven, and secure service-level interaction within distributed application environments.

The embodiment of the invention relates to a processing method and system for a domain name resolution interface of an eSIM module. The method comprises the following steps: the domain name resolution interface processes an interface resolution request of an application program in linkage with a domain name resolution server in a BIP mode; when the continuous failure times of the connection between the analysis interface and the server reach the preset times, the analysis interface is linked with the server in a short message mode to carry out one-time parameter setting; when the current online MCC + MNC is different from the interface built-in MCC0 + MNC0, the analysis interface is linked with the server in a short message mode to carry out one-time parameter built-in; and the server completes updating of a batch of built-in parameters through linkage between a short message group sending mode and the domain name resolution interface every time a record of a local configuration list of the server is changed. According to the invention, a universal interface which can be used for querying the domain name IP address is provided for the upper-layer application program of the eSIM module, so that the development difficulty of the application program can be reduced, and the abnormal connection probability of the application program in different network states can be reduced.

Methods, systems, and devices in which a computer networking device may compare the destination address of the a name resolution request with a stored list of addresses. If the destination address does not match any of the addresses from the stored list, the computer networking device may perform one or more actions, such as sending a notification, redirecting the name resolution request to one of the servers in the list, or generating a new name resolution request. For example, a method may include receiving network traffic from a client device including a first name resolution request; comparing a first destination address from the first name resolution request with a list of addresses indicating servers to which the client device is to communicate name resolution requests; and detecting that the first destination address does not match any of the addresses from the list of addresses.