我国互联网域名基础设施集中化程度测量研究  

Measurement study on the DNS centrality in China

作　　者：刘世明 李瑞烜 刘保君 段海新[1] 孙东红[1] LIU Shiming;LI Ruixuan;LIU Baojun;DUAN Haixin;SUN Donghong(Institute for Network Sciences and Cyberspace,Tsinghua University,Beijing 100084,China)

机构地区：[1]清华大学网络科学与网络空间研究院,北京100084

出　　处：《通信学报》2024年第S2期74-81,共8页Journal on Communications

基　　金：国家重点研发计划基金资助项目(No.2023YFB3105600)。

摘　　要：随着互联网商业模式的演变,最初基于分布式设计的域名基础设施呈现集中化趋势,可能造成大范围网络中断。聚焦于我国域名基础设施集中化,构建基于网页广告分发的递归解析器收集系统,结合大型被动域名解析日志主动测量中国国家和教育域名的权威服务器。测量结果表明,我国域名基础设施存在严重的集中化现象,但主要依赖于国内运营商和企业,与国外集中化节点存在显著差异。网络安全部门应加强对国内域名系统集中化节点的监测和风险预警。The Domain Name System(DNS)was initially designed with a distributed architecture to ensure availability.However,with the development of the Internet,the trend of centrality in the DNS has led to a series of potential single points of failure.Focusing on the centrality of China's DNS infrastructure,a passive recursive resolver data collection system based on Internet advertisement distribution was prompted.Combining passive DNS data with active domain authoritative resource record scanning,the authoritative servers for domain names of China and Chinese education were analyzed.The result indicates a high level of centrality,which primarily relies on Internet Service Providers(ISP)and local Internet companies,showing significant differences from the results abroad.Network authorities should strengthen the monitoring and warning mechanisms for centralized nodes in China's DNS infrastructure.

关 键 词：域名系统 服务集中化 递归解析器 权威服务器 网络测量 

分 类 号：TN915.08[电子电信—通信与信息系统]