基于安全可靠的DNS系统构建  

Constructing DNS System Based on Safety and Reliability

作　　者：李森[1] 文静[1] 

机构地区：[1]广西经济信息中心,广西南宁530022

出　　处：《广西科学院学报》2014年第1期16-20,共5页Journal of Guangxi Academy of Sciences

摘　　要：【目的】研究如何将策略路由技术应用到DNS系统的构建上,提出一种构建安全可靠的DNS系统的方法。【方法】从网络安全构架、系统安全和BIND安全等多方面,系统阐述如何增强DNS的安全可靠性,并将策略路由技术应用到DNS的构建上。【结果】提出一种构建安全可靠DNS系统的方法,在国际互联网双出口的网络环境下,策略路由技术由网络中的路由器和DNS服务器协同完成,可实现出口链路冗余及优化访问路径、DNS解析业务冗余等功能。【结论】该方法可以解决DNS系统面临的安全威胁,提高DNS系统的可靠性,特别是策略路由技术的应用,在保证可靠性的基础上还优化了网络性能。[Objective]The application of Policy-Based Routing to DNS system construction is stud-ied and the method of constructing safe and reliable DNS system is illustrated.[Method]From the network security, system security and BIND security aspects, the enhancement on the security and reliability of DNS is stated, and Policy-Based Routing technology is applied to the DNS construction .[Result]A method for constructing safe and reliable DNS system is illustrated. In the double ISP network environment,Policy-Based Routing is accomplished by cooperation of the router and DNS server, which can realize the function of Internet link redundancy, path optimization and domain name resolution redundancy.[Conclusion]The method can solve the security threats faced by DNS system and improve the reliability of the DNS system. Especially, the application of Policy-Based Routing can ensure the reliability and optimize the network performance.

关 键 词：域名系统( DNS) 策略路由 DOMAIN NAME system( DNS) 

分 类 号：TP138[自动化与计算机技术—控制理论与控制工程]