DNS Answer Augmentation for IPv6 Address Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The challenge of managing large numbers of IPv6 addresses in DNS systems, which are not easily trackable due to their massive scale and dynamic generation, leading to difficulties in reverse and forward DNS lookups and potential security risks, as service providers struggle to maintain mapping records and identify users.
Innovation Solution
A DNS answer augmentation system that dynamically generates domain names and IP addresses in response to DNS queries when authoritative DNS servers lack the necessary information, using algorithms to parse and generate answers without modifying zone files, thus avoiding the need for extensive mapping records.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Quantity of substance
If service providers assign large numbers of IPv6 addresses dynamically, then the number of available IP addresses increases, but the ability to track and identify users deteriorates
Solution Approach 1:
The patent introduces an intermediary system that sits between the DNS infrastructure and the end users. This intermediary maintains the mapping information between IPv6 addresses and user identities, allowing DNS queries to be resolved without requiring the service provider to maintain comprehensive tracking of all assigned addresses. The intermediary acts as a mediator that preserves user identification capability while enabling dynamic address assignment.
2Loss of information
If service providers maintain mapping records for all IPv6 addresses, then user identification capability is improved, but the complexity and cost of managing DNS zone files deteriorates
Solution Approach 1:
The patent segments the DNS management function into multiple components. Instead of maintaining all mapping records in a single centralized zone file, the system divides the management into hierarchical zones and delegations. This segmentation allows different parts of the DNS namespace to be managed independently, reducing the complexity of maintaining comprehensive mapping records while preserving user identification capability.
3Measurement precision
If authoritative DNS servers store extensive mapping records, then reverse and forward DNS lookup accuracy is improved, but the storage requirements and server load deteriorate
Solution Approach 1:
The patent introduces a new dimensional approach to DNS management by implementing hierarchical delegations and zone transfers. Instead of storing all mapping records in a single flat structure, the system organizes data in hierarchical dimensions across multiple DNS servers and zones. This dimensional organization allows accurate DNS lookups to be performed by querying only the relevant portion of the hierarchy, reducing storage requirements while maintaining lookup precision.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
This disclosure describes systems, methods, and apparatus for forward and reverse DNS translation of IPv6 IP addresses. For a PTR request where the authoritative DNS server does not have a domain name associated with the IP address in the request, a DNS answer augmentation system can generate an IP address on the fly using one or more algorithms that take information about the request as an input. Similarly, for an AAAA request where the authoritative DNS server does not have an IP address associated with the domain name in the request, the DNS answer augmentation system can generate a domain name on-the-fly using one or more algorithms that take information about the request as an input. The DNS answer augmentation system can reside between a client or a DNS server and an authoritative DNS server or be a part of the authoritative DNS server.