基于安全可靠的DNS系统构建

【目的】研究如何将策略路由技术应用到DNS系统的构建上,提出一种构建安全可靠的DNS系统的方法。【方法】从网络安全构架、系统安全和BIND安全等多方面,系统阐述如何增强DNS的安全可靠性,并将策略路由技术应用到DNS的构建上。【结果】提出一种构建安全可靠DNS系统的方法,在国际互联网双出口的网络环境下,策略路由技术由网络中的路由器和DNS服务器协同完成,可实现出口链路冗余及优化访问路径、DNS解析业务冗余等功能。【结论】该方法可以解决DNS系统面临的安全威胁,提高DNS系统的可靠性,特别是策略路由技术的应用,在保证可靠性的基础上还优化了网络性能。

Constructing DNS System Based on Safety and Reliability

Objective]The application of Policy-Based Routing to DNS system construction is stud-ied and the method of constructing safe and reliable DNS system is illustrated.Method]From the network security, system security and BIND security aspects, the enhancement on the security and reliability of DNS is stated, and Policy-Based Routing technology is applied to the DNS construction .Result]A method for constructing safe and reliable DNS system is illustrated. In the double ISP network environment,Policy-Based Routing is accomplished by cooperation of the router and DNS server, which can realize the function of Internet link redundancy, path optimization and domain name resolution redundancy.Conclusion]The method can solve the security threats faced by DNS system and improve the reliability of the DNS system. Especially, the application of Policy-Based Routing can ensure the reliability and optimize the network performance.