WO2017173766A1

WO2017173766A1 - Domain name parsing acceleration method, system and apparatus

Info

Publication number: WO2017173766A1
Application number: PCT/CN2016/095940
Authority: WO
Inventors: 洪珂; 张�杰; 吴小英
Original assignee: 网宿科技股份有限公司
Priority date: 2016-04-08
Filing date: 2016-08-19
Publication date: 2017-10-12
Also published as: CN105681491A; CN105681491B

Abstract

Provided are a domain name parsing acceleration method, system and apparatus. The domain name parsing acceleration apparatus is connected between a DNS parser and one or more authorized DNS servers. The domain name parsing acceleration method comprises receiving a first request, for parsing a domain name to be parsed, sent by a DNS parser, wherein the first request comprises a record type of a parsing result of the domain name to be parsed; performing recursive parsing on the domain name to be parsed by means of the one or more authorized DNS servers associated with the domain name to be parsed, so as to acquire a parsing result from the one or more authorized DNS servers associated with the domain name to be parsed during the whole recursive parsing process; and collecting all the parsing results and hiding, in all parsing results, an alias record appearing during the recursive parsing process; and choosing a parsing result with the same record type as the parsing result of the domain name to be parsed in the first request to feed back to the DNS parser. The present invention ensures the stable and effective parsing record of the domain name, and allows for improved precision scheduling.

Description

一种域名解析加速方法、***和装置Domain name resolution acceleration method, system and device

技术领域Technical field

本发明涉及一种域名解析领域，特别是涉及一种存在非DNSSEC(Domain Name System Security Extensions，DNS安全扩展)记录的空主机头域名解析的域名解析加速加速方法、***和装置。The present invention relates to the field of domain name resolution, and in particular, to a domain name resolution acceleration method, system and apparatus for performing null host header domain name resolution without DNS SEC (Domain Name System Security Extensions) records.

背景技术Background technique

域名解析是把域名指向网站空间的IP(Internet Protocol)地址，让人们通过注册的域名可以方便地访问到网站的一种技术。但是，IP地址是一组用户标识网络上站点的数字，不便于记忆。因此，为了方便记忆，通常采用域名来代替IP地址来标识站点地址。域名解析就是域名到IP地址的转换过程，并且，域名的解析工作是由DNS(Domain Name System)服务器完成。当客户端需要访问网络时，在浏览器输入域名；该域名经过解析后，客户端便实现了对该IP地址所对应的服务器的访问。其中，主机名或者域名所对应的IP地址被称作A记录。Domain name resolution is a technology that points a domain name to an Internet Protocol (IP) address of a website space, so that people can easily access the website through the registered domain name. However, an IP address is a set of numbers that identify the site on the network and is not easy to remember. Therefore, in order to facilitate the memory, the domain name is usually used instead of the IP address to identify the site address. Domain name resolution is the process of converting a domain name to an IP address, and the domain name resolution is performed by a DNS (Domain Name System) server. When the client needs to access the network, the domain name is entered in the browser; after the domain name is parsed, the client implements access to the server corresponding to the IP address. The IP address corresponding to the host name or domain name is called an A record.

随着互联网技术的发展，为了优化域名解析过程引入了CDN技术。在CDN服务领域，需要对自己网络做访问加速的用户通常将网站的地址(例如：www.163.com)配置一个别名记录(例如：www.163.com.aaa.com)。别名记录(CNAME)中的域名属于CDN服务提供商，由CDN服务提供商为别名记录的域名指定A记录。这样一来，需要做访问加速的原始域名做域名解析的结果就由CDN服务提供商控制，从而达到了优化访问的效果。With the development of Internet technology, CDN technology was introduced to optimize the domain name resolution process. In the field of CDN services, users who need to speed up access to their own networks usually configure an alias record (for example: www.163.com.aaa.com) on the website address (for example: www.163.com). The domain name in the alias record (CNAME) belongs to the CDN service provider, and the A record is specified by the CDN service provider for the domain name recorded by the alias. In this way, the result of domain name resolution of the original domain name that needs to be accelerated by access is controlled by the CDN service provider, thereby achieving the effect of optimizing access.

CDN加速领域还衍生出对顶级域名解析的加速需求，即对形如163.com这样的空主机头域名的A记录解析。其中，顶级域名是一个和权威域名同名的域名(例如：163.com)，或称为“空主机头”，且其配置的资源类型包括NS(Name Serve)记录、SOA(Start of Authority)记录、MX(Mail Exchanger)记录、TXT记录等。The CDN acceleration field also has an accelerated demand for top-level domain name resolution, that is, the A record analysis of an empty host header domain such as 163.com. The top-level domain name is a domain name with the same name as the authoritative domain name (for example, 163.com), or an empty host header, and the configured resource types include NS (Name Serve) records and SOA (Start of Authority) records. , MX (Mail Exchanger) records, TXT records, and so on.

客户端采用现有的CDN加速方式，得到一个域名的解析记录的DNS解析过程如图1所示，包括：The client uses the existing CDN acceleration mode to obtain a DNS resolution process for the resolution record of a domain name, as shown in Figure 1, including:

步骤001，客户端向本地DNS解析器请求要访问域名的A记录；假设域名为www.163.com； Step 001, the client requests the local DNS resolver to access the A record of the domain name; assuming the domain name is www.163.com;

步骤002，本地DNS解析器向域163.com的权威DNS服务器发出请求解析域名www.163.com的A记录；Step 002: The local DNS resolver sends an A record requesting to resolve the domain name www.163.com to the authoritative DNS server of the domain 163.com;

步骤003，域名163.com的权威DNS服务器给本地DNS解析器返回www.163.com的别名记录www.163.com.aaa.com，该别名记录通常由客户www.163.com自行配置，别名记录由CDN服务提供商配置管理，授权域名为aaa.com； Step 003, the authoritative DNS server of the domain name 163.com returns the local DNS resolver to the www.163.com The name record www.163.com.aaa.com, the alias record is usually configured by the customer www.163.com, the alias record is managed by the CDN service provider, and the authorized domain name is aaa.com;

步骤004，本地DNS解析器解析步骤003返回的响应，并向域名aaa.com的权威DNS服务器请求www.163.com.aaa.com的A记录；Step 004: The local DNS resolver parses the response returned by step 003, and requests an A record of www.163.com.aaa.com from the authoritative DNS server of the domain name aaa.com;

步骤005，域名aaa.com的权威DNS服务器向本地DNS解析器返回www.163.com.aaa.com的别名记录163.xdwscache.bbb.com，该别名记录通常由CDN服务提供商配置管理，别名记录的授权域名为bbb.com；In step 005, the authoritative DNS server of the domain name aaa.com returns an alias record 163.xdwscache.bbb.com of www.163.com.aaa.com to the local DNS resolver, which is usually managed by the CDN service provider configuration, alias The authorized domain name recorded is bbb.com;

步骤006，本地DNS解析器解析步骤005返回的响应，并向域名bbb.com的权威DNS服务器请求163.xdwscache.bbb.com的A记录；Step 006: The local DNS resolver parses the response returned in step 005, and requests an A record of 163.xdwscache.bbb.com from the authoritative DNS server of the domain name bbb.com;

步骤007，域名bbb.com的权威DNS服务器向本地DNS解析器响应域名163.xdwscache.bbb.com的A记录，即IP地址；Step 007, the authoritative DNS server of the domain name bbb.com responds to the local DNS resolver with the A record of the domain name 163.xdwscache.bbb.com, that is, the IP address;

步骤008，本地DNS解析器解析007返回的响应，并对上网终端用户响应如下内容：www.163.com的别名记录www.163.com.aaa.com，www.163.com.aaa.com的别名记录163.xdwscache.bbb.com，163.xdwscache.bbb.com的A记录(即IP地址)，bbb.com的权威记录(NS类型记录)以及附加段。 Step 008, the local DNS resolver parses the response returned by 007, and responds to the Internet terminal user as follows: www.163.com's alias record www.163.com.aaa.com, www.163.com.aaa.com The alias record 163.xdwscache.bbb.com, the A record of 163.xdwscache.bbb.com (ie IP address), the authoritative record of bbb.com (NS type record) and the additional section.

但是，依据国际互联网协会ISOC赞助发行的RFC1034文件的规定：已经注册了CNAME类型的域名记录不能再注册除DNSSEC相关类型记录(包括RRSIG记录、NSEC记录等)外的任何其他类型记录(包括MX记录、A记录、NS记录等等)。所有的DNS解析器对空机头域名解析时均需要遵守该规定，从而对于空主机头的域名出现CNAME类型配置时将影响其它类型的记录(如NS记录、MX记录、SOA记录等)，势必会导致该空主机头域名解析失败。However, according to the RFC1034 document issued by the Internet Society's ISOC sponsorship: domain name records that have been registered with the CNAME type can no longer register any other type of records (including MX records) other than DNSSEC related type records (including RRSIG records, NSEC records, etc.). , A record, NS record, etc.). All DNS resolvers need to comply with this rule when parsing the domain name of the empty head. Therefore, when the CNAME type configuration occurs for the domain name of the empty host header, other types of records (such as NS records, MX records, SOA records, etc.) will be affected. This will cause the empty host header domain name resolution to fail.

为了解决空主机头域名的CDN加速不适宜直接使用配置别名记录的问题，目前主要通过以下三种方式来实现：In order to solve the problem that the CDN acceleration of the empty host header domain name is not suitable for directly using the configuration alias record, the following three methods are mainly implemented:

1.对空主机头域名直接配置A记录，其基于来访IP或客户子网(edns-client-subnet)来调度解析结果：由于调度解析的资源通常是放在CDN厂商，而域名的授权注册通常在域名注册厂商或第三方的DNS解析服务提供商，因此这种方法需要把CDN厂商的资源暴露给权威域名的管理员，或者权威域名的管理员把权威解析授权给CDN服务厂商，这种耦合了CDN调度和域名解析授权注册的方法增加了管理成本，设置上不灵活，或者引起权利纠纷。1. Directly configure the A record for the empty host header domain name, which is based on the visited IP or client subnet (edns-client-subnet) to schedule the parsing result: since the resource for scheduling parsing is usually placed on the CDN vendor, the domain name authorization registration is usually In the domain name registration vendor or third-party DNS resolution service provider, this method needs to expose the resources of the CDN vendor to the administrator of the authoritative domain name, or the administrator of the authoritative domain name authorizes the authority resolution to the CDN service provider. The method of CDN scheduling and domain name resolution authorization registration increases the management cost, is not flexible in setting, or causes rights disputes.

2.一些第三方的DNS解析服务提供商提出了一种隐式CNAME类型(如：cloudXNS提出的名为LINK的资源类型)：该类型不是DNS标准协议中所规定的类型，属于自定义的私有协议，不能在公开的DNS请求-响应过程中传递。在支持该私有协议的DNS***中，DNS服务器直接给出域名解析的最终结果(即A记录)并隐藏了当前域名的别名记录，但是当解析器请求的类型没有在该DNS***配置时，该DNS***仍然会响应当前域名的CNAME配置，由于公共的DNS解析器遵循RFC1034的规定，缓存的别名类型记录将影响该域名的其他类型，导致其他类型的记录解析失效。另一方面，这种私有的隐式CNAME的机制要求别名记录在同一厂商的***下解析，因此仍然存在方法1中所述CDN加速厂商和解析服务提供商的耦合问题。2. Some third-party DNS resolution service providers have proposed an implicit CNAME type (eg: cloudXNS mention The resource type named LINK): This type is not a type specified in the DNS standard protocol. It is a custom private protocol and cannot be passed in the public DNS request-response process. In the DNS system that supports the private protocol, the DNS server directly gives the final result of the domain name resolution (ie, the A record) and hides the alias record of the current domain name, but when the type requested by the parser is not configured in the DNS system, The DNS system will still respond to the CNAME configuration of the current domain name. Since the public DNS resolver follows RFC1034, the cached alias type record will affect other types of the domain name, causing other types of record resolution to fail. On the other hand, this proprietary implicit CNAME mechanism requires alias records to be parsed under the same vendor's system, so there is still a coupling problem between the CDN acceleration vendor and the resolution service provider described in Method 1.

3.对于http/https协议的加速场景，可以借助http协议的特性来实现规避别名记录和其他记录共存的问题：当HTTP服务器返回一个状态码为302的响应时，可以将HTTP请求重定向到新的资源地址，不依赖DNS的别名记录。然而CDN服务的需求并不仅限于http/https，目前衍生出大量对于非http/https协议的加速需求，如git://协议和ssh://协议，没有具备类似http302跳转的特性，因此该方法不能解决非http/https协议的CDN加速需求。3. For the acceleration scenario of the http/https protocol, you can use the characteristics of the http protocol to avoid the problem of coexistence of alias records and other records: When the HTTP server returns a response with a status code of 302, the HTTP request can be redirected to the new one. Resource address, does not rely on DNS alias records. However, the demand for CDN services is not limited to http/https. Currently, a large number of acceleration requirements for non-http/https protocols, such as git:// protocol and ssh:// protocol, do not have the characteristics of http302 jump, so The method does not address the CDN acceleration requirements of the non-http/https protocol.

因此，在满足RFC1034文件规定的情况下，如何有效实现空主机头域名的解析加速问题是本领域技术人员所亟待解决的问题。Therefore, in the case of satisfying the provisions of the RFC1034 document, how to effectively implement the resolution acceleration problem of the empty host header domain name is a problem to be solved by those skilled in the art.

发明内容Summary of the invention

鉴于以上所述现有技术的缺点，本发明的目的在于提供一种域名解析加速方法、***和装置，用于解决现有技术中，如何实现对空主机头域名的解析加速，以及在解析空主机头域名出现别名记录类型配置时，易导致该空机头域名解析失败的问题。In view of the above-mentioned shortcomings of the prior art, an object of the present invention is to provide a domain name resolution acceleration method, system, and apparatus, which are used to solve the problem of how to implement the parsing acceleration of a null host header domain name in the prior art, and When the host header domain name is configured with the alias record type, the domain name resolution of the empty machine header may fail.

为实现上述目的及其他相关目的，本发明提供一种域名解析加速方法，应用于连接在DNS解析器和一个或多个权威DNS服务器之间的域名解析加速装置，每个权威DNS服务器对应于解析预先指定的域名；所述域名解析加速方法包括：接收由所述DNS解析器发出的解析待解析域名的第一请求，所述第一请求包括所述待解析域名的解析结果的记录类型；通过与所述待解析域名相关联的一个或多个权威DNS服务器进行所述待解析域名的递归解析，以获取整个递归解析过程中与所述待解析域名相关联的一个或多个权威DNS服务器响应的解析结果；收集所有的所述解析结果，并在收集到的所有所述解析结果中，隐藏所述递归解析过程中出现的别名记录，选择与所述第一请求中所述待解析域名的解析结果的记录类型相同的解析结果响应至所述DNS解析器。To achieve the above and other related objects, the present invention provides a domain name resolution acceleration method, which is applied to a domain name resolution acceleration device connected between a DNS resolver and one or more authoritative DNS servers, and each authoritative DNS server corresponds to parsing. a pre-designated domain name; the domain name resolution acceleration method includes: receiving a first request for parsing a domain name to be resolved sent by the DNS resolver, where the first request includes a record type of the parsing result of the domain name to be resolved; Performing recursive resolution of the to-be-resolved domain name by one or more authoritative DNS servers associated with the to-be-resolved domain name to obtain one or more authoritative DNS server responses associated with the to-be-resolved domain name in the entire recursive resolution process The result of the parsing; collecting all the parsing results, and hiding the alias records appearing in the recursive parsing process in all the parsing results collected, and selecting the domain name to be resolved in the first request The parsing result of the same record type of the parsing result is responsive to the DNS parser.

于本发明的一实施例中，所述第一请求中所述待解析域名的解析结果的记录类型包括A 记录、TXT记录、AAAA记录、PTR记录和MX记录。In an embodiment of the present invention, the record type of the parsing result of the domain name to be resolved in the first request includes A Record, TXT record, AAAA record, PTR record and MX record.

于本发明的一实施例中，在整个所述递归解析过程中，向与所述待解析域名相关联的一个或多个权威DNS服务器发出的每一个解析请求中均包括携带了所述DNS解析器的IP地址或所述DNS解析器的子网地址的edns-client-subnet信息。In an embodiment of the present invention, in the entire recursive parsing process, each of the parsing requests sent to one or more authoritative DNS servers associated with the domain name to be resolved includes carrying the DNS resolution. The edns-client-subnet information of the IP address of the device or the subnet address of the DNS resolver.

于本发明的一实施例中，所述递归解析过程中的与所述待解析域名相关联的一个或多个权威DNS服务器是根据所述DNS解析器的IP地址或所述DNS解析器的子网地址而选择的。In an embodiment of the present invention, one or more authoritative DNS servers associated with the domain name to be resolved in the recursive parsing process are based on an IP address of the DNS resolver or a child of the DNS resolver. Selected by the network address.

于本发明的一实施例中，所述域名解析加速方法还包括：若接收到的所有解析结果的记录类型均与所述域名的解析结果的记录类型不同，则将所述递归解析过程中所述待解析域名的SOA记录响应至所述DNS解析器。In an embodiment of the present invention, the method for accelerating the domain name resolution further includes: if the record type of all the parsed results received is different from the record type of the parsing result of the domain name, The SOA record that resolves the domain name is responsive to the DNS resolver.

于本发明的一实施例中，所述域名解析加速还包括：所述DNS解析器将接收到的与所述待解析域名的解析结果的记录类型相同的解析结果和/或所述SOA记录返回至客户端。In an embodiment of the present invention, the domain name resolution acceleration further includes: the DNS resolver returns the received parsing result and/or the SOA record that are the same as the record type of the parsing result of the domain name to be resolved. To the client.

本发明还公开了一种域名解析加速***，应用于连接在DNS解析器和一个或多个权威DNS服务器之间的域名解析加速装置，每个权威DNS服务器对应于解析预先指定的域名，所述域名解析加速***包括：接收模块，用于接收所述DNS解析器发出的解析待解析域名的第一请求，所述第一请求包括所述待解析域名的解析结果的记录类型；域名解析模块，用于通过与所述待解析域名相关联的一个或多个权威DNS服务器对所述待解析域名进行递归解析，以获取整个递归解析过程中与所述待解析域名相关联的一个或多个权威DNS服务器响应的解析结果；收集模块，用于收集所述待解析域名的递归解析过程中一个或多个权威DNS服务器响应的所有解析结果；选择输出模块，用于在收集到的所有所述解析结果中，隐藏所述递归解析过程中出现的别名记录，选择与所述第一请求中所述待解析域名的解析结果的记录类型相同的解析结果，并响应至所述DNS解析器。The invention also discloses a domain name resolution acceleration system, which is applied to a domain name resolution acceleration device connected between a DNS resolver and one or more authoritative DNS servers, each authoritative DNS server corresponding to parsing a pre-designated domain name, The domain name resolution acceleration system includes: a receiving module, configured to receive a first request for parsing a domain name to be resolved sent by the DNS resolver, where the first request includes a record type of the parsing result of the domain name to be resolved; Recursively parsing the to-be-resolved domain name by one or more authoritative DNS servers associated with the to-be-resolved domain name to obtain one or more authorities associated with the to-be-resolved domain name in the entire recursive parsing process a parsing result of the DNS server response; a collecting module, configured to collect all parsing results of one or more authoritative DNS server responses in the recursive parsing process of the domain name to be resolved; and selecting an output module for collecting all the parsings In the result, the alias record appearing in the recursive parsing process is hidden, and the first request is selected Record type to be described later analysis result of resolving a domain name of the analysis result of the same, and in response to the DNS resolver.

于本发明的一实施例中，所述域名解析模块在整个所述递归解析过程中，向与所述待解析域名相关联的一个或多个权威DNS服务器发出的每一个解析请求中均包括携带了所述DNS解析器的IP地址或所述DNS解析器的子网地址的edns-client-subnet信息。In an embodiment of the present invention, the domain name parsing module includes, in the entire recursive parsing process, each parsing request sent to one or more authoritative DNS servers associated with the domain name to be resolved. The edns-client-subnet information of the IP address of the DNS resolver or the subnet address of the DNS resolver.

本发明还公开了一种域名解析加速装置，所述域名解析加速连接在DNS解析器和一个或多个权威DNS服务器之间，其中，每个权威DNS服务器对应于解析预先指定的域名，所述域名解析加速装置包括如上所述的域名解析加速***。The invention also discloses a domain name resolution acceleration device, wherein the domain name resolution acceleration connection is between a DNS resolver and one or more authoritative DNS servers, wherein each authoritative DNS server corresponds to parsing a pre-designated domain name, The domain name resolution acceleration device includes the domain name resolution acceleration system as described above.

如上所述，本发明的一种域名解析加速方法、***和装置，是一种智能的DNS解析服务器，并提供了隐藏别名记录的配置接口，以控制域名在反馈时是否需要隐藏别名记录。本发明具备以下有益效果：As described above, a domain name resolution acceleration method, system and device of the present invention are an intelligent DNS resolution service. Server, and provides a configuration interface for hiding alias records to control whether the domain name needs to hide the alias record when feedback. The invention has the following beneficial effects:

1)本发明具备DNS转发的功能，能够处理解析其他权威DNS服务器反馈的别名类型记录并递归查找最终的解析结果，也能直接缓存其他权威DNS服务器反馈的记录作为最终解析结果。在反馈行为上完全隐藏了别名类型记录的反馈，避免别名记录出现在DNS解析器的缓存中，规避了RFC1034文件中的别名记录和其他类型记录不能共存的问题，保证了域名的各类解析记录稳定有效；1) The present invention has the function of DNS forwarding, and can process the alias type records fed back by other authoritative DNS servers and recursively search for the final parsing result, and can directly cache the records fed back by other authoritative DNS servers as the final parsing result. The feedback behavior of the alias type record is completely hidden in the feedback behavior, avoiding the alias record appearing in the cache of the DNS parser, avoiding the problem that the alias record and other types of records in the RFC1034 file cannot coexist, and ensuring various types of parsing records of the domain name. Stable and effective;

2)本发明允许需要享有加速服务的待解析域名使用传统的别名记录类型配置接入方式配置在任意的DNS解析提供商中，由于本发明采用DNS协议规范中的edns-client-subnet扩展机制来联合不同DNS授权***，因此可以无障碍地联合不同的权威DNS服务器***。2) The present invention allows the domain name to be resolved that needs to enjoy the accelerated service to be configured in any DNS resolution provider using the traditional alias record type configuration. The present invention adopts the edns-client-subnet extension mechanism in the DNS protocol specification. Combined with different DNS authorization systems, it is possible to unconditionally combine different authoritative DNS server systems.

3)本发明采用DNS协议规范中的edns-client-subnet扩展机制来联合不同的DNS授权***，因此对于支持edns-client-subnet协议的CDN厂商来说，能够在得到DNS请求时获取实际用户的IP地址子网，根据实际用户的子网地址调度解析结果。相较于不具备edns-client-subnet协议扩展支持的权威DNS服务器，具有更精准的调度能力。3) The present invention uses the edns-client-subnet extension mechanism in the DNS protocol specification to combine different DNS authorization systems. Therefore, for a CDN vendor supporting the edns-client-subnet protocol, the actual user can be obtained when the DNS request is obtained. IP address subnet, and the result of the analysis is scheduled according to the subnet address of the actual user. Compared with an authoritative DNS server that does not have edns-client-subnet protocol extension support, it has more accurate scheduling capabilities.

4)本发明代替DNS解析器做递归解析操作，并在对DNS解析器响应时隐藏了别名记录，减少了DNS解析器从权威DNS服务器递归解析的时间，改善了DNS解析效果，且在本发明的应用场景上减少了一层对外服务的机器，将更多的机器放在前端，加强了防攻击能力。4) The present invention replaces the DNS parser for recursive parsing operation, and hides the alias record when responding to the DNS parser, reduces the time for the DNS parser to recursively resolve from the authoritative DNS server, improves the DNS parsing effect, and is in the present invention. The application scenario reduces the number of externally serviced machines, placing more machines on the front end and enhancing anti-attack capabilities.

附图说明DRAWINGS

图1显示为传统的CDN加速进行域名解析的流程示意图。FIG. 1 shows a schematic diagram of a process for performing domain name resolution for a conventional CDN acceleration.

图2显示为本发明实施例公开的一种域名解析加速方法的流程示意图。FIG. 2 is a schematic flowchart diagram of a domain name resolution acceleration method according to an embodiment of the present invention.

图3显示为本发明实施例公开的一种采用域名解析加速方法进行域名解析且解析成功的流程示意图。FIG. 3 is a schematic flowchart of a domain name resolution using a domain name resolution acceleration method and successfully parsing according to an embodiment of the present invention.

图4显示为本发明实施例公开的一种采用域名解析加速方法进行域名解析且解析失败的流程示意图。FIG. 4 is a schematic flowchart of a method for performing domain name resolution and parsing failure by using a domain name resolution acceleration method according to an embodiment of the present invention.

图5显示为本发明实施例公开的一种域名解析加速***的结构示意图。FIG. 5 is a schematic structural diagram of a domain name resolution acceleration system according to an embodiment of the present invention.

元件标号说明Component label description

S10～S30 步骤 S10~S30 steps

001～008 步骤001~008 steps

009～018 步骤009~018 steps

019～028 步骤019~028 steps

100 DNS解析器100 DNS resolver

200 权威DNS服务器200 authoritative DNS server

300 客户端300 client

400 域名解析加速装置400 domain name resolution accelerator

500 域名解析加速***500 Domain Name Resolution Acceleration System

510 接收模块510 receiving module

520 域名解析模块520 domain name resolution module

530 收集模块530 collection module

540 选择输出模块540 Select output module

具体实施方式detailed description

以下通过特定的具体实例说明本发明的实施方式，本领域技术人员可由本说明书所揭露的内容轻易地了解本发明的其他优点与功效。本发明还可以通过另外不同的具体实施方式加以实施或应用，本说明书中的各项细节也可以基于不同观点与应用，在没有背离本发明的精神下进行各种修饰或改变。需说明的是，在不冲突的情况下，以下实施例及实施例中的特征可以相互组合。The embodiments of the present invention are described below by way of specific examples, and those skilled in the art can readily understand other advantages and effects of the present invention from the disclosure of the present disclosure. The present invention may be embodied or applied in various other specific embodiments, and various modifications and changes can be made without departing from the spirit and scope of the invention. It should be noted that the features in the following embodiments and embodiments may be combined with each other without conflict.

请参阅附图。需要说明的是，以下实施例中所提供的图示仅以示意方式说明本发明的基本构想，遂图式中仅显示与本发明中有关的组件而非按照实际实施时的组件数目、形状及尺寸绘制，其实际实施时各组件的型态、数量及比例可为一种随意的改变，且其组件布局型态也可能更为复杂。Please refer to the attached picture. It should be noted that the illustrations provided in the following embodiments merely illustrate the basic concept of the present invention in a schematic manner, and only the components related to the present invention are shown in the drawings, rather than the number and shape of components in actual implementation. Dimensional drawing, the actual type of implementation of each component's type, number and proportion can be a random change, and its component layout can be more complicated.

本发明的一种域名解析加速方法、***和装置是为了解决空主机头域名在存在非DNSSEC记录等其他记录时的域名解析加速的问题。The method, system and device for speeding up domain name resolution of the present invention are to solve the problem of accelerated domain name resolution when an empty host header domain name has other records such as non-DNSSEC records.

本发明允许待解析域名进行解析加速时，仍然使用传统的别名类型记录配置方式接入服务，不需要改变接入方式，但解析待解析域名是直接解析出域名对应的IP地址。和直接在待解析域名解析注册商配置A记录的方法相比，CDN资源通常包括大量的主机用于缓存待解析域名网站的内容，因而直接配置A记录，需要暴露所有的CDN资源给域名解析注册商才能满足多线路的加速访问效果，对于不具备智能调度的注册解析***来说，管理成本是不可估量的。而保持原有的传统接入方式，则可以不增加任何管理成本，仅需要在解析注册处设置域名的别名记录，对使用本发明的域名解析加速服务的客户来讲最为方便。The present invention allows the domain name to be resolved to be accelerated, and still uses the traditional alias type record configuration mode to access the service, and does not need to change the access mode, but parsing the domain name to be resolved directly resolves the IP address corresponding to the domain name. Compared with the method for configuring the A record to be resolved by the domain name resolution registrar, the CDN resource usually includes a large number of hosts for caching the content of the domain name website to be resolved. Therefore, the A record is directly configured, and all CDN resources need to be exposed to the domain name resolution registration. The quotient can satisfy the accelerated access effect of multiple lines. For the registration resolution system without intelligent scheduling, the management cost is not available. Estimated. While maintaining the original traditional access method, it is possible to increase the management cost, and only need to set the alias record of the domain name in the resolution registry, which is most convenient for the client who uses the domain name resolution acceleration service of the present invention.

并且，本发明在公网DNS体系中的角色是权威DNS服务器，但在反馈行为上完全隐藏了别名记录类型的反馈，避免别名记录类型出现在DNS解析器的缓存中，规避了RFC 1034文件中的别名记录和其他记录类型不能共存的问题。对于现有的一些技术方案中，当DNS解析器向权威DNS请求域名的某种类型时，若该域名做了隐式CNAME的别名，但别名后的域名没有所请求的记录类型，则仍然会对DNS解析器返回别名记录类型，从而使DNS解析器对于该域名的其他类型记录失效。而完全隐藏别名类型记录的反馈行为则避免了这样的解析问题，当DNS解析器向本发明的域名解析加速装置请求域名的某种记录类型时，本发明的域名解析加速装置将返回该域名的最终解析类型或者返回空结果，不会造成DNS解析器的缓存中出现别名记录和其他类型共存冲突的问题。Moreover, the role of the present invention in the public network DNS system is an authoritative DNS server, but the feedback of the alias record type is completely hidden in the feedback behavior, and the alias record type is prevented from appearing in the cache of the DNS resolver, and the RFC 1034 file is avoided. The problem of alias records and other record types cannot coexist. For some existing technical solutions, when the DNS resolver requests a certain type of domain name from the authoritative DNS, if the domain name has an implicit CNAME alias, but the domain name after the alias does not have the requested record type, it will still The alias record type is returned to the DNS resolver, causing the DNS resolver to invalidate other types of records for the domain name. The feedback behavior of completely hiding the alias type record avoids such a parsing problem. When the DNS resolver requests a certain record type of the domain name from the domain name resolution acceleration device of the present invention, the domain name resolution acceleration device of the present invention will return the domain name. Final parsing of the type or returning an empty result will not cause aliasing records and other types of coexistence conflicts in the DNS resolver's cache.

本发明使用了DNS协议规范中的edns-client-subnet扩展机制来联合不同DNS授权***。其中，edns-client-subnet是一种由***提交的一种DNS扩展协议，允许DNS解析器传递用户的IP地址给权威DNS服务器。如果CDN服务提供商的DNS支持该协议，就可以获取用户真实的IP地址，从而对域名解析的结果进行准确的调度。不支持该协议的DNS，则通常只能根据来访的IP地址而非用户的真实IP地址来调度解析的结果。因此待解析域名可使用传统的别名记录方式接入解析加速服务时，不需要把待解析域名的解析权和别名记录后的域名解析权集中在同一***中，可以解耦加速解析调度和DNS解析服务提供商的域名管理。由于edns-client-subnet是早已公开的协议，因此使用该机制联合不同的DNS授权配置***障碍很小，而使用私有协议的现有技术则只能要求CDN加速解析调度和DNS解析服务都在同一DNS***中，有更高的管理成本。The present invention uses the edns-client-subnet extension mechanism in the DNS protocol specification to join different DNS authorization systems. Among them, edns-client-subnet is a DNS extension protocol submitted by ***, which allows the DNS resolver to pass the user's IP address to the authoritative DNS server. If the DNS of the CDN service provider supports the protocol, the real IP address of the user can be obtained, thereby accurately scheduling the result of the domain name resolution. If the DNS of the protocol is not supported, the result of the parsing can usually be scheduled based on the IP address of the visit rather than the real IP address of the user. Therefore, when the domain name to be resolved can access the resolution acceleration service by using the traditional alias record mode, the resolution of the domain name to be resolved and the domain name resolution right after the alias record are not concentrated in the same system, and the decomposed acceleration resolution scheduling and DNS resolution can be decoupled. Domain name management for the service provider. Since edns-client-subnet is a well-disclosed protocol, the mechanism for using this mechanism to join different DNS authorization configuration systems is very small, while the existing technology using proprietary protocols can only require CDN acceleration resolution scheduling and DNS resolution services to be the same. In the DNS system, there is a higher management cost.

进一步地，本发明是在域名解析的阶段做了别名记录的隐藏，因此可以使用域名解析加速服务的域名不仅限于http/https协议，而是任何协议都可以支持。而现有技术中借助HTTP协议特性才能做到重定向达到类似别名的效果，适用范围仅限于HTTP协议的内容。Further, the present invention hides the alias record at the stage of domain name resolution, so the domain name that can be used for the domain name resolution acceleration service is not limited to the http/https protocol, but can be supported by any protocol. In the prior art, the HTTP protocol feature can be used to achieve the effect of similar aliases, and the scope of application is limited to the content of the HTTP protocol.

实施例1Example 1

本实施例公开了一种域名解析加速方法，应用于连接在DNS解析器和一个或多个权威DNS服务器之间的域名解析加速装置，且每个权威DNS服务器对应于解析预先指定的域名。其中，域名解析加速装置是由与待解析域名相关联的一个或多个权威DNS服务器所指定授权的服务器。This embodiment discloses a domain name resolution acceleration method, which is applied to a domain name resolution acceleration device connected between a DNS resolver and one or more authoritative DNS servers, and each authoritative DNS server corresponds to parsing a pre-designated domain name. The domain name resolution acceleration device is a server specified by one or more authoritative DNS servers associated with the domain name to be resolved.

如图2所示，本实施例的域名解析加速方法包括： As shown in FIG. 2, the domain name resolution acceleration method in this embodiment includes:

步骤S10，接收由所述DNS解析器发出的解析待解析域名的第一请求，所述第一请求包括所述待解析域名的解析结果的记录类型；Step S10: Receive a first request for parsing a domain name to be resolved sent by the DNS resolver, where the first request includes a record type of the parsing result of the domain name to be resolved.

其中，所述第一请求是由客户端发出，再由DNS解析器转发的。The first request is sent by the client and then forwarded by the DNS resolver.

并且，本实施例的域名解析加速方法中，待解析域名的解析结果的记录类型包括但不限于：A记录、TXT记录、AAAA记录、PTR记录和MX记录。其中，A记录是用来指定主机名(或域名)对应的IP地址记录，该IP地址指的是Ipv4地址。TXT记录是用来保存域名的附加文本信息。AAAA记录是用来将域名解析到IPv6地址的DNS记录。PTR记录是IP地址到DNS名称的映射，用于反向解析。MX记录指向一个邮件服务器，用于电子邮件***发邮件时根据收信人的地址后缀来定位邮件服务器。Moreover, in the domain name resolution acceleration method of the embodiment, the record types of the parsing result of the domain name to be resolved include, but are not limited to, an A record, a TXT record, an AAAA record, a PTR record, and an MX record. The A record is used to specify the IP address record corresponding to the host name (or domain name), and the IP address refers to the Ipv4 address. The TXT record is additional textual information used to store the domain name. AAAA records are DNS records used to resolve domain names to IPv6 addresses. The PTR record is a mapping of IP addresses to DNS names for reverse resolution. The MX record points to a mail server that is used by the email system to locate the mail server based on the address suffix of the recipient.

步骤S20，通过与待解析域名相关联的一个或多个权威DNS服务器进行所述待解析域名的递归解析，以获取整个递归解析过程中与所述待解析域名相关联的一个或多个权威DNS服务器响应的解析结果；Step S20: Perform recursive resolution of the to-be-resolved domain name by using one or more authoritative DNS servers associated with the domain name to be resolved, to obtain one or more authoritative DNSs associated with the to-be-resolved domain name in the entire recursive resolution process. The resolution of the server response;

本实施例的域名解析加速装置对于待解析域名的递归解析过程与传统的DNS解析器对待解析域名的递归解析过程基本相同。如图3和图4所示，在整个的递归解析过程中，域名解析加速装置先向待解析域名对应的权威DNS服务器发出解析请求，并接收该权威DNS服务器响应的解析结果，即别名记录；再向别名记录的权威域名对应的权威DNS服务器发出解析请求，并接受该权威DNS服务器响应的解析结果；再继续向别名记录的权威域名对应的权威DNS服务器发出解析请求，并接受该权威DNS服务器响应的解析结果；以此类推，直至获得最终的解析结果。在本实施例中，与待解析域名相关联的权威DNS服务器包括：待解析域名对应的权威DNS服务器和递归解析过程中权威DNS服务器解析的别名记录的权威域名对应的权威DNS服务器。The recursive resolution process of the domain name resolution acceleration device of the present embodiment is basically the same as the recursive resolution process of the traditional DNS resolver to resolve the domain name. As shown in FIG. 3 and FIG. 4, in the entire recursive parsing process, the domain name resolution acceleration device first sends a parsing request to the authoritative DNS server corresponding to the domain name to be resolved, and receives the parsing result of the authoritative DNS server response, that is, the alias record; And then issue a resolution request to the authoritative DNS server corresponding to the authoritative domain name of the alias record, and accept the parsing result of the authoritative DNS server response; continue to issue a resolution request to the authoritative DNS server corresponding to the authoritative domain name of the alias record, and accept the authoritative DNS server. The result of the analysis of the response; and so on, until the final analytical result is obtained. In this embodiment, the authoritative DNS server associated with the domain name to be resolved includes: an authoritative DNS server corresponding to the domain name to be resolved and an authoritative DNS server corresponding to the authoritative domain name of the alias record resolved by the authoritative DNS server in the recursive resolution process.

但是，本实施例的域名解析加速装置在递归解析过程中，向与待解析域名相关联的一个或多个权威DNS服务器发出的解析请求中，增加了携带DNS解析器的IP地址或DNS解析器的子网地址的edns-client-subnet信息。请求中增加了edns-client-subnet信息，既可以无障碍地联合不同的权威DNS服务***，还可以根据携带的DNS解析器的IP地址或DNS解析器的子网地址选择与待解析的域名相关联的权威DNS服务器。However, in the recursive resolution process, the domain name resolution acceleration apparatus of the embodiment adds an IP address or a DNS resolver that carries the DNS resolver to the resolution request sent by one or more authoritative DNS servers associated with the domain name to be resolved. The edns-client-subnet information for the subnet address. The edns-client-subnet information is added to the request, which can be combined with different authoritative DNS service systems, and can be related to the domain name to be resolved according to the IP address of the DNS resolver or the subnet address of the DNS resolver. The authoritative DNS server.

步骤S30，收集所有的所述解析结果，并在收集到的所有所述解析结果中隐藏所述递归解析过程中的别名记录，选择与所述第一请求中所述待解析域名的解析结果的记录类型相同的解析结果来响应至所述DNS解析器。In step S30, all the parsing results are collected, and the alias records in the recursive parsing process are hidden in all the parsing results collected, and the parsing result of the domain name to be parsed in the first request is selected. The same type of parsing result is recorded to respond to the DNS parser.

整个递归解析过程中，域名解析加速装置会从与待解析域名相关联的一个或多个权威 DNS服务器接收到每一次域名(待解析域名、别名记录的权威域名)解析的解析结果。收集所有的解析结果，隐藏递归解析过程中的别名记录，选出与第一请求中的待解析域名的解析结果的记录类型相同的解析结果，最后将选择出的解析结果响应至DNS解析器。优选地，还将将整个递归解析过程中与待解析域名相关联的一个或多个权威DNS服务器的DNS记录响应至DNS解析器。During the entire recursive parsing process, the domain name resolution acceleration device will be from one or more authorities associated with the domain name to be resolved. The DNS server receives the parsing result of each domain name (the domain name to be resolved, the authoritative domain name of the alias record). Collect all the parsing results, hide the alias records in the recursive parsing process, select the parsing result with the same record type as the parsing result of the domain name to be resolved in the first request, and finally respond the selected parsing result to the DNS parser. Preferably, the DNS records of one or more authoritative DNS servers associated with the domain name to be resolved throughout the recursive parsing process are also responsive to the DNS resolver.

若收集到的所有解析结果的记录类型均与第一请求中的待解析域名的解析结果的记录类型不同，那么，则将整个递归解析过程中与待解析域名相关联的一个或多个权威DNS服务器的SOA记录响应至DNS解析器。If the record type of all the parsed results collected is different from the record type of the parsing result of the domain name to be resolved in the first request, then one or more authoritative DNSs associated with the domain name to be resolved in the entire recursive parsing process The server's SOA record is responsive to the DNS resolver.

进一步地，再由DNS解析器将从域名解析加速装置接收到的与第一请求中的待解析域名的解析结果的记录类型相同的解析结果和/或与待解析域名相关联的一个或多个权威DNS服务器的SOA记录返回至客户端。Further, the DNS parser receives the same analysis result from the domain name resolution acceleration device as the record type of the parsing result of the domain name to be resolved in the first request and/or one or more associated with the domain name to be resolved. The SOA record of the authoritative DNS server is returned to the client.

为了更进一步地说明本实施例的域名解析加速方法，本实施例还列举了一个对域名wcdn.cn4e.com的解析过程，其中，解析成功的整个过程如图3所示，解析失败的过程如图4所示。In order to further illustrate the domain name resolution acceleration method of this embodiment, this embodiment also enumerates a parsing process for the domain name wcdn.cn4e.com, wherein the entire process of parsing success is as shown in FIG. 3, and the process of parsing failure is as follows. Figure 4 shows.

如图3所示，域名解析加速装置400连接在本地DNS解析器100和多个权威DNS服务器200之间，且DNS解析器100与客户端300连接。客户端300向本地DNS解析器100请求要求访问域名的A记录，假设待解析域名为wcdn.cn4e.com。那么，DNS解析过程包括：As shown in FIG. 3, the domain name resolution acceleration device 400 is connected between the local DNS resolver 100 and a plurality of authoritative DNS servers 200, and the DNS resolver 100 is connected to the client 300. The client 300 requests the local DNS resolver 100 to request access to the A record of the domain name, assuming that the domain name to be resolved is wcdn.cn4e.com. Then, the DNS resolution process includes:

步骤009，客户端300向本地DNS解析器100请求要访问待解析域名的A记录，其中，待解析域名为wcdn.cn4e.com； Step 009, the client 300 requests the local DNS resolver 100 to access the A record of the domain to be resolved, wherein the domain to be resolved is wcdn.cn4e.com;

步骤010，本地DNS解析器100向域名解析加速装置400发出解析待解析域名wcdn.cn4e.com的第一请求，第一请求中包括待解析域名的解析结果为A记录；其中，域名解析加速装置400已经在父域cn4e.com的权威DNS服务器中被指定授权为权威DNS服务器地址；In step 010, the local DNS resolver 100 sends a first request to the domain name resolution acceleration device 400 to resolve the domain name to be resolved, wcdn.cn4e.com. The first request includes the analysis result of the domain name to be resolved as the A record. 400 has been designated as the authoritative DNS server address in the authoritative DNS server of the parent domain cn4e.com;

步骤011，域名解析加速装置400向待解析域名wcdn.cn4e.com的权威DNS服务器发起解析wcdn.cn4e.com的A记录的解析请求，其中，解析请求中携带了本地DNS解析器100的IP或本地DNS解析器100中的子网地址作为DNS请求中的edns-client-subnet信息；Step 011, the domain name resolution acceleration device 400 initiates a resolution request for parsing the A record of the wcdn.cn4e.com to the authoritative DNS server of the domain name to be resolved, where the resolution request carries the IP of the local DNS resolver 100 or The subnet address in the local DNS resolver 100 is used as edns-client-subnet information in the DNS request;

步骤012，wcdn.cn4e.com的权威DNS服务器对域名解析加速装置400进行响应，返回wcdn.cn4e.com的别名记录wcdn.cn4e.com.ccc.com.，别名记录的域名的权威域为ccc.com； Step 012, the authoritative DNS server of wcdn.cn4e.com responds to the domain name resolution acceleration device 400, and returns the alias record wcdn.cn4e.com.ccc.com of wcdn.cn4e.com, and the authoritative domain of the domain name of the alias record is ccc .com;

步骤013，域名解析加速装置400解析wcdn.cn4e.com的权威DNS服务器对域名解析加速装置400的响应，然后向域名ccc.com的权威DNS服务器请求wcdn.cn4e.com.ccc.com.的A 记录； Step 013, the domain name resolution acceleration device 400 parses the response of the authoritative DNS server of the wcdn.cn4e.com to the domain name resolution acceleration device 400, and then requests the Wdcn.cn4e.com.ccc.com.A from the authoritative DNS server of the domain name ccc.com. recording;

步骤014，域名ccc.com的权威DNS服务器对域名解析加速装置400响应，返回wcdn.cn4e.com.ccc.com.的别名记录1st.appat108.bbb.com.，别名记录的域名的权威域为bbb.com； Step 014, the authoritative DNS server of the domain name ccc.com responds to the domain name resolution acceleration device 400, and returns the alias record 1st.appat108.bbb.com. of the wcdn.cn4e.com.ccc.com., and the authoritative domain of the domain name of the alias record is Bbb.com;

步骤015，域名解析加速装置400解析域名ccc.com的权威DNS服务器对域名解析加速装置400的响应，然后向域bbb.com的权威DNS服务器请求1st.appat108.bbb.com.的A记录；Step 015, the domain name resolution acceleration device 400 resolves the response of the authoritative DNS server of the domain name ccc.com to the domain name resolution acceleration device 400, and then requests the A record of 1st.appat108.bbb.com. from the authoritative DNS server of the domain bbb.com;

步骤016，域名bbb.com的权威DNS服务器对域名解析加速装置400响应，返回1st.appat108.bbb.com.的A记录，即IP地址； Step 016, the authoritative DNS server of the domain name bbb.com responds to the domain name resolution acceleration device 400, and returns an A record of 1st.appat108.bbb.com., that is, an IP address;

步骤017，域名解析加速装置400解析域名bbb.com的权威DNS服务器对域名解析加速装置400的响应，然后将步骤012、步骤014和步骤016的响应重新组装，对本地DNS解析器100响应如下内容：Step 017, the domain name resolution acceleration device 400 resolves the response of the authoritative DNS server of the domain name bbb.com to the domain name resolution acceleration device 400, and then reassembles the responses of

steps

012, 014, and 016, and responds to the local DNS resolver 100 as follows. :

将步骤016的响应中的A记录作为待解析域名wcdn.cn4e.com的A记录，隐藏且不返回012、014中出现的别名记录；The A record in the response of step 016 is taken as the A record of the domain name wcdn.cn4e.com to be parsed, and the alias record appearing in 012, 014 is not returned;

步骤018，本地DNS解析器100得到步骤017的响应，返回给客户端300，响应内容为wcdn.cn4e.com的A记录以及wcdn.cn4e.com的权威记录(NS类型记录)以及附加记录。In step 018, the local DNS resolver 100 obtains the response of step 017, returns to the client 300, responds to the A record of wcdn.cn4e.com, and the authority record (NS type record) of wcdn.cn4e.com and the additional record.

其中，与待解析域名wcdn.cn4e.com相关联的权威DNS服务器包括：域名wcdn.cn4e.com的权威DNS服务器、域名ccc.com的权威DNS服务器、域名bbb.com的权威DNS服务器。The authoritative DNS server associated with the domain name to be resolved, wcdn.cn4e.com, includes: an authoritative DNS server of the domain name wcdn.cn4e.com, an authoritative DNS server of the domain name ccc.com, and an authoritative DNS server of the domain name bbb.com.

图4表示的是客户端300请求解析一个待解析域名，但最终收集的解析结果中没有满足待解析域名的解析结果的记录类型的情况，即解析失败。以客户端300向本地DNS解析器100请求要求访问域名的TXT记录为例，同样假设待解析域名为wcdn.cn4e.com。那么，DNS解析过程包括：FIG. 4 shows a case where the client 300 requests to parse a domain name to be resolved, but the parsing result finally collected does not satisfy the record type of the parsing result of the domain name to be resolved, that is, the parsing fails. The client 300 requests the local DNS resolver 100 for the TXT record requesting access to the domain name as an example, and also assumes that the domain name to be resolved is wcdn.cn4e.com. Then, the DNS resolution process includes:

步骤019，客户端300向本地DNS解析器100请求要访问待解析域名的A记录，其中，待解析域名为wcdn.cn4e.com； Step 019, the client 300 requests the local DNS resolver 100 to access the A record of the domain to be resolved, wherein the domain to be resolved is wcdn.cn4e.com;

步骤020，本地DNS解析器100向域名解析加速装置400发出解析待解析域名wcdn.cn4e.com的第一请求，第一请求中包括待解析域名的解析结果为TXT记录；其中，域名解析加速装置400已经在父域cn4e.com的权威DNS服务器中被指定授权为权威DNS服务器地址； Step 020, the local DNS resolver 100 sends a first request to the domain name resolution acceleration device 400 to resolve the domain name to be resolved, wcdn.cn4e.com, where the first request includes the resolution result of the domain name to be resolved as a TXT record; 400 has been designated as the authoritative DNS server address in the authoritative DNS server of the parent domain cn4e.com;

步骤021，域名解析加速装置400向待解析域名wcdn.cn4e.com的权威DNS服务器发起解析wcdn.cn4e.com的TXT记录的解析请求，其中，解析请求中携带了本地DNS解析器100 的IP或本地DNS解析器中的子网地址作为DNS请求中的edns-client-subnet信息；In step 021, the domain name resolution acceleration device 400 initiates a resolution request for parsing the TXT record of wcdn.cn4e.com to the authoritative DNS server of the domain name to be resolved, where the resolution request carries the local DNS resolver 100. IP address or subnet address in the local DNS resolver as the edns-client-subnet information in the DNS request;

步骤022，与步骤012相同，wcdn.cn4e.com的权威DNS服务器对域名解析加速装置400进行响应，返回wcdn.cn4e.com的别名记录wcdn.cn4e.com.ccc.com.，别名记录的域名的权威域为ccc.com； Step 022, in the same manner as step 012, the authoritative DNS server of wcdn.cn4e.com responds to the domain name resolution acceleration device 400, and returns the alias record wcdn.cn4e.com.ccc.com. of the wcdn.cn4e.com, the domain name of the alias record. The authoritative domain is ccc.com;

步骤023，域名解析加速装置400解析wcdn.cn4e.com的权威DNS服务器对域名解析加速装置400的响应，然后向域名ccc.com的权威DNS服务器请求wcdn.cn4e.com.ccc.com.的TXT记录；Step 023, the domain name resolution acceleration device 400 parses the response of the authoritative DNS server of the wcdn.cn4e.com to the domain name resolution acceleration device 400, and then requests the TXT of the wcdn.cn4e.com.ccc.com. from the authoritative DNS server of the domain name ccc.com. recording;

步骤024，与步骤014相同，域名ccc.com的权威DNS服务器对域名解析加速装置400响应，返回wcdn.cn4e.com.ccc.com.的别名记录1st.appat108.bbb.com.，别名记录的域名的权威域为bbb.com； Step 024, the same as step 014, the authoritative DNS server of the domain name ccc.com responds to the domain name resolution acceleration device 400, and returns the alias record 1st.appat108.bbb.com. of the wcdn.cn4e.com.ccc.com. The authoritative domain of the domain name is bbb.com;

步骤025，域名解析加速装置400解析域名ccc.com的权威DNS服务器对域名解析加速装置400的响应，然后向域bbb.com的权威DNS服务器请求1st.appat108.bbb.com.的TXT记录； Step 025, the domain name resolution acceleration device 400 resolves the response of the authoritative DNS server of the domain name ccc.com to the domain name resolution acceleration device 400, and then requests the TXT record of 1st.appat108.bbb.com. from the authoritative DNS server of the domain bbb.com;

步骤026，域名bbb.com的权威DNS服务器对域名解析加速装置400响应，由于没有1st.appat108.bbb.com.的TXT记录，因此返回中没有TXT类型的结果，只有bbb.com的权威记录；Step 026, the authoritative DNS server of the domain name bbb.com responds to the domain name resolution acceleration device 400. Since there is no TXT record of 1st.appat108.bbb.com., there is no TXT type result in the return, only the authority record of bbb.com;

步骤027，域名解析加速装置400解析域名bbb.com的权威DNS服务器对域名解析加速装置400的响应，然后将步骤022、步骤024和步骤026的响应重新组装，对本地DNS解析器100的响应中隐藏且不返回步骤022和步骤024中出现的别名记录，仅返回包含待请求域名wcdn.cn4e.com的权威记录(SOA类型)；Step 027, the domain name resolution acceleration device 400 resolves the response of the authoritative DNS server of the domain name bbb.com to the domain name resolution acceleration device 400, and then reassembles the responses of

steps

022, 024, and 026, in response to the local DNS resolver 100. Hide and return no alias records appearing in step 022 and step 024, only return the authority record (SOA type) containing the domain name to be requested, wcdn.cn4e.com;

步骤028，本地DNS解析器100得到步骤027响应，并返回给客户端300。In step 028, the local DNS resolver 100 obtains a response in step 027 and returns it to the client 300.

并且，由于从步骤019到步骤028中，本地DNS解析器100均没有得到wcdn.cn4e.com的别名记录，因此本地DNS解析器100仍然保持wcdn.cn4e.com的其他记录类型有效。Moreover, since the local DNS resolver 100 does not obtain the alias record of wcdn.cn4e.com from step 019 to step 028, the local DNS resolver 100 still keeps other record types of wcdn.cn4e.com valid.

上面方法的步骤划分，只是为了描述清楚，实现时可以合并为一个步骤或者对某些步骤进行拆分，分解为多个步骤，只要包含相同的逻辑关系，都在本专利的保护范围内；对算法中或者流程中添加无关紧要的修改或者引入无关紧要的设计，但不改变其算法和流程的核心设计都在该专利的保护范围内。The steps of the above method are divided for the sake of clear description. The implementation may be combined into one step or split into certain steps and decomposed into multiple steps. As long as the same logical relationship is included, it is within the protection scope of the patent; Adding insignificant modifications to an algorithm or process, or introducing an insignificant design, without changing the core design of its algorithms and processes, is within the scope of this patent.

实施例2Example 2

本实施例还公开了一种域名解析加速***，应用于连接在DNS解析器和一个或多个权威DNS服务器之间的域名解析加速装置，每个权威DNS服务器对应于解析预先指定的域名。This embodiment further discloses a domain name resolution acceleration system, which is applied to a domain name resolution acceleration device connected between a DNS resolver and one or more authoritative DNS servers, and each authoritative DNS server corresponds to parsing a pre-specified domain. name.

如图5所示，本实施例的域名解析加速***500包括：As shown in FIG. 5, the domain name resolution acceleration system 500 of this embodiment includes:

接收模块510，用于接收DNS解析器100发出的解析待解析域名的第一请求，所述第一请求包括所述待解析域名的解析结果的记录类型；其中，第一请求中待解析域名的解析结果的记录类型包括A记录、TXT记录、AAAA记录、PTR记录和MX记录。The receiving module 510 is configured to receive a first request for parsing the domain name to be resolved sent by the DNS resolver 100, where the first request includes a record type of the parsing result of the domain name to be parsed; The record types of the analysis results include A record, TXT record, AAAA record, PTR record, and MX record.

域名解析模块520，用于通过与待解析域名相关联的一个或多个权威DNS服务器200对待解析域名进行递归解析，以获取整个递归解析过程中与待解析域名相关联的一个或多个权威DNS服务器响应的解析结果。其中，域名的递归解析过程与传统的域名递归解析过程相同，在此不再赘述。但是值得注意的是，递归过程中，向与待解析域名相关联的一个或多个权威DNS服务器200发出的每一个解析请求中，均包括携带了DNS解析器100的IP地址或DNS解析器100的子网地址的edns-client-subnet信息。The domain name resolution module 520 is configured to recursively resolve the domain name to be resolved by one or more authoritative DNS servers 200 associated with the domain name to be resolved, to obtain one or more authoritative DNSs associated with the domain name to be resolved in the entire recursive resolution process. The resolution of the server response. The recursive resolution process of the domain name is the same as the traditional domain name recursive parsing process, and will not be described here. It is worth noting, however, that in the recursive process, each of the resolution requests issued to one or more authoritative DNS servers 200 associated with the domain name to be resolved includes an IP address or DNS resolver 100 carrying the DNS resolver 100. The edns-client-subnet information for the subnet address.

收集模块530，用于收集待解析域名的递归解析过程中一个或多个权威DNS服务器200响应的所有解析结果。The collecting module 530 is configured to collect all the parsing results responded by one or more authoritative DNS servers 200 in the recursive parsing process of the domain name to be resolved.

选择输出模块540，用于在收集到的所有所述解析结果中，隐藏所述递归解析过程中出现的别名记录，选择与第一请求中所述待解析域名的解析结果的记录类型相同的解析结果，并响应至DNS解析器100。The selection output module 540 is configured to hide the alias record that appears in the recursive parsing process in all the parsed results collected, and select the same parsing type as the parsing result of the parsing domain name in the first request. As a result, and responding to the DNS resolver 100.

进一步地，如果收集模块530收集的所有解析结果中没有与第一请求中待解析域名的解析记录相同的解析结果，那么，选择输出模块540则将递归解析过程中待解析域名的SOA记录响应至DNS解析器100。Further, if all the parsing results collected by the collecting module 530 do not have the same parsing result as the parsing record of the domain name to be resolved in the first request, the selection output module 540 responds to the SOA record of the domain name to be resolved in the recursive parsing process to DNS resolver 100.

此外，为了突出本发明的创新部分，本实施例中并没有将与解决本发明所提出的技术问题关系不太密切的模块引入，但这并不表明本实施例中不存在其它的模块。In addition, in order to highlight the innovative part of the present invention, the present embodiment does not introduce a module that is not closely related to solving the technical problem proposed by the present invention, but this does not mean that there are no other modules in this embodiment.

并且不难发现，本实施例为与第一实施例相对应的***实施例，本实施例可与第一实施例互相配合实施。第一实施例中提到的相关技术细节在本实施例中依然有效，为了减少重复，这里不再赘述。相应地，本实施例中提到的相关技术细节也可应用在第一实施例中。And it is not difficult to find that the embodiment is a system embodiment corresponding to the first embodiment, and the embodiment can be implemented in cooperation with the first embodiment. The related technical details mentioned in the first embodiment are still effective in this embodiment, and are not described herein again in order to reduce repetition. Accordingly, the related art details mentioned in the embodiment can also be applied to the first embodiment.

实施例3Example 3

本实施例公开了一种域名解析加速装置，其采用实施例2所公开的域名解析加速***，此处不再赘述。This embodiment discloses a domain name resolution acceleration device, which uses the domain name resolution acceleration system disclosed in Embodiment 2, and details are not described herein again.

综上所述，本发明的一种域名解析加速方法、***和装置，是一种智能的DNS解析服务器，并提供了隐藏别名类型的配置接口控制域名在反馈时是否需要隐藏别名类型。本发明避免了别名记录出现在DNS解析器的缓存中，规避了RFC1034文件中别名记录和其他类型记录不能共存的问题，保证了域名的各类解析记录稳定有效；且本发明可以无障碍地联合不同的权威DNS服务器***；本发明还采用了DNS协议规范中的edns-client-subnet扩展机制，具有更精准的调度能力。所以，本发明有效克服了现有技术中的种种缺点而具高度产业利用价值。In summary, the method, system and device for accelerating the domain name resolution of the present invention are an intelligent DNS resolution server, and provide a configuration interface for hiding the alias type to control whether the domain name needs to hide the alias type when feeding back. The invention avoids the alias record appearing in the cache of the DNS parser, avoiding alias records and other types in the RFC1034 file. Recording problems that cannot coexist, ensuring that all kinds of analytical records of domain names are stable and effective; and the present invention can unify various authoritative DNS server systems without barriers; the present invention also adopts the edns-client-subnet extension mechanism in the DNS protocol specification. With more accurate scheduling capabilities. Therefore, the present invention effectively overcomes various shortcomings in the prior art and has high industrial utilization value.

上述实施例仅例示性说明本发明的原理及其功效，而非用于限制本发明。任何熟悉此技术的人士皆可在不违背本发明的精神及范畴下，对上述实施例进行修饰或改变。因此，举凡所属技术领域中具有通常知识者在未脱离本发明所揭示的精神与技术思想下所完成的一切等效修饰或改变，仍应由本发明的权利要求所涵盖。 The above-described embodiments are merely illustrative of the principles of the invention and its effects, and are not intended to limit the invention. Modifications or variations of the above-described embodiments may be made by those skilled in the art without departing from the spirit and scope of the invention. Therefore, all equivalent modifications or changes made by those skilled in the art without departing from the spirit and scope of the invention will be covered by the appended claims.

Claims

一种域名解析加速方法，其特征在于，应用于连接在DNS解析器和一个或多个权威DNS服务器之间的域名解析加速装置，每个权威DNS服务器对应于解析预先指定的域名；所述域名解析加速方法包括：A domain name resolution acceleration method, which is applied to a domain name resolution acceleration device connected between a DNS resolver and one or more authoritative DNS servers, each authoritative DNS server corresponding to parsing a pre-designated domain name; Analytic acceleration methods include:

接收由所述DNS解析器发出的解析待解析域名的第一请求，所述第一请求包括所述待解析域名的解析结果的记录类型；Receiving, by the DNS resolver, a first request for parsing a domain name to be resolved, where the first request includes a record type of the parsing result of the domain name to be resolved;

通过与所述待解析域名相关联的一个或多个权威DNS服务器进行所述待解析域名的递归解析，以获取整个递归解析过程中与所述待解析域名相关联的一个或多个权威DNS服务器响应的解析结果；Performing recursive resolution of the domain to be resolved by one or more authoritative DNS servers associated with the domain name to be resolved, to obtain one or more authoritative DNS servers associated with the domain to be resolved in the entire recursive resolution process The result of the analysis of the response;

收集所有的所述解析结果，并在收集到的所有所述解析结果中，隐藏所述递归解析过程中出现的别名记录，选择与所述第一请求中所述待解析域名的解析结果的记录类型相同的解析结果响应至所述DNS解析器。All the parsing results are collected, and in all the parsing results collected, the alias records appearing in the recursive parsing process are hidden, and the record of the parsing result of the domain name to be parsed in the first request is selected. The same type of parsing result is responsive to the DNS resolver.
根据权利要求1所述的域名解析加速方法，其特征在于：所述第一请求中所述待解析域名的解析结果的记录类型包括A记录、TXT记录、AAAA记录、PTR记录和MX记录。The domain name resolution acceleration method according to claim 1, wherein the record type of the parsing result of the domain name to be resolved in the first request comprises an A record, a TXT record, an AAAA record, a PTR record, and an MX record.
根据权利要求1所述的域名解析加速方法，其特征在于：在整个所述递归解析过程中，向与所述待解析域名相关联的一个或多个权威DNS服务器发出的每一个解析请求中均包括携带了所述DNS解析器的IP地址或所述DNS解析器的子网地址的edns-client-subnet信息。The method for accelerating the domain name resolution according to claim 1, wherein in the recursive parsing process, each of the parsing requests sent to one or more authoritative DNS servers associated with the domain name to be resolved is The edns-client-subnet information carrying the IP address of the DNS resolver or the subnet address of the DNS resolver is included.
根据权利要求5所述的域名解析加速方法，其特征在于：所述递归解析过程中的与所述待解析域名相关联的一个或多个权威DNS服务器是根据所述DNS解析器的IP地址或所述DNS解析器的子网地址而选择的。The method for accelerating the domain name resolution according to claim 5, wherein: one or more authoritative DNS servers associated with the domain name to be resolved in the recursive parsing process are based on an IP address of the DNS resolver or The DNS resolver's subnet address is selected.
根据权利要求1所述的域名解析加速方法，其特征在于：所述域名解析加速方法还包括：若接收到的所有解析结果的记录类型均与所述域名的解析结果的记录类型不同，则将所述递归解析过程中所述待解析域名的SOA记录响应至所述DNS解析器。The method for accelerating the domain name resolution according to claim 1, wherein the method for accelerating the domain name resolution further comprises: if the record type of all the parsed results received is different from the record type of the parsing result of the domain name, The SOA record of the domain name to be resolved in the recursive parsing process is responsive to the DNS resolver.
根据权利要求1或5所述的域名解析加速方法，其特征在于：所述域名解析加速方法还包括：所述DNS解析器将接收到的与所述待解析域名的解析结果的记录类型相同的解析结果和/或所述SOA记录返回至客户端。The domain name resolution acceleration method according to claim 1 or 5, wherein the domain name resolution acceleration method further comprises: the DNS resolver receiving the same record type as the parsing result of the domain name to be resolved. Analytic junction And/or the SOA record is returned to the client.
一种域名解析加速***，其特征在于：应用于连接在DNS解析器和一个或多个权威DNS服务器之间的域名解析加速装置，每个权威DNS服务器对应于解析预先指定的域名，所述域名解析加速***包括：A domain name resolution acceleration system, which is characterized in that it is applied to a domain name resolution acceleration device connected between a DNS resolver and one or more authoritative DNS servers, and each authoritative DNS server corresponds to parsing a pre-designated domain name, the domain name The resolution acceleration system includes:

接收模块，用于接收所述DNS解析器发出的解析待解析域名的第一请求，所述第一请求包括所述待解析域名的解析结果的记录类型；a receiving module, configured to receive a first request that is sent by the DNS resolver to resolve a domain name to be resolved, where the first request includes a record type of the parsing result of the domain name to be resolved;

域名解析模块，用于通过与所述待解析域名相关联的一个或多个权威DNS服务器对所述待解析域名进行递归解析，以获取整个递归解析过程中与所述待解析域名相关联的一个或多个权威DNS服务器响应的解析结果；a domain name resolution module, configured to recursively resolve the domain name to be resolved by using one or more authoritative DNS servers associated with the domain name to be resolved, to obtain one associated with the domain name to be resolved in the entire recursive resolution process Or the resolution result of multiple authoritative DNS server responses;

收集模块，用于收集所述待解析域名的递归解析过程中一个或多个权威DNS服务器响应的所有解析结果；a collecting module, configured to collect all parsing results of one or more authoritative DNS server responses in the recursive parsing process of the domain name to be resolved;

选择输出模块，用于在收集到的所有所述解析结果中，隐藏所述递归解析过程中出现的别名记录，选择与所述第一请求中所述待解析域名的解析结果的记录类型相同的解析结果，并响应至所述DNS解析器。And an output module, configured to hide an alias record that occurs in the recursive parsing process, and select a record type that is the same as the parsing result of the domain name to be resolved in the first request, in all the parsing results that are collected. Parse the results and respond to the DNS resolver.
根据权利要求7所述的域名解析加速***，其特征在于：所述域名解析模块在整个所述递归解析过程中，向与所述待解析域名相关联的一个或多个权威DNS服务器发出的每一个解析请求中均包括携带了所述DNS解析器的IP地址或所述DNS解析器的子网地址的edns-client-subnet信息。The domain name resolution acceleration system according to claim 7, wherein the domain name resolution module sends each of the one or more authoritative DNS servers associated with the domain name to be resolved in the entire recursive resolution process. Each parsing request includes edns-client-subnet information carrying the IP address of the DNS resolver or the subnet address of the DNS resolver.
根据权利要求8所述的域名解析加速***，其特征在于：所述递归解析过程中的与所述待解析域名相关联的一个或多个权威DNS服务器是根据所述DNS解析器的IP地址或所述DNS解析器的子网地址而选择的。The domain name resolution acceleration system according to claim 8, wherein one or more authoritative DNS servers associated with the domain name to be resolved in the recursive resolution process are based on an IP address of the DNS resolver or The DNS resolver's subnet address is selected.
一种域名解析加速装置，其特征在于：所述域名解析加速装置连接在DNS解析器和一个或多个权威DNS服务器之间，其中，每个权威DNS服务器对应于解析预先指定的域名，所述域名解析加速装置包括如权利要求7-9中任意一项所述的域名解析加速***。 A domain name resolution acceleration device, wherein the domain name resolution acceleration device is connected between a DNS resolver and one or more authoritative DNS servers, wherein each authoritative DNS server corresponds to parsing a pre-designated domain name, The domain name resolution acceleration device includes the domain name resolution acceleration system according to any one of claims 7-9.