兼具分流、容錯及安全防護的分散式DNS 建置-以國立中興大學為例

吳欣蒨 ； 張雅婷 ； 吳賢明 ； 陳育毅

《TANET2016 臺灣網際網路研討會》 2016 (2016/11) Pp. 100-105-018

https://doi.org/10.6679/TANET.2016.18

摘要

DNS 是網際網路最重要的資訊基礎服務之一，有效及安全的運作是講求不中斷網路資訊服務的基礎，也一直是廣為探討的議題；然而，商業解決方案通常昂貴，而免費方案則普遍無法同時兼顧效能與安全。本論文透過虛擬網路介面、動態路由交換及網路切割等技術的運用，架構一個高效率且符合安全需求的分散式DNS 系統。本架構兼具容錯、自動備援、負載平衡及安全強化等特性，同時因為僅使用主機作業系統內建網路功能及開源軟體，能夠以最低成本，快速建立一個適合在校園網路環境運作的DNS 服務系統。本文以中興大學校園網路進行的實作為例，說明本系統如何提供高效率網域名稱轉換服務，同時展示本系統在負載平衡及安全防護上優異的表現。

關鍵字

DNS ； 虛擬網卡 ； 動態路由 ； 容錯

並列摘要

The Domain Name System(DNS) is one of the most critical infrastructure components of the current Internet. Performance and security issues of DNS can be regarded as the basis for achieving low-latency and non-stop requirements in all kinds of network applications, and have been studied widely for both now and the past decades. However, known solutions are either too expensive, as for commercial one, or not able to address both these two issues efficiently at the same time. This paper proposed a distributed DNS topology which can guarantee enhancement both in performance and security and also provide extra fault-tolerant capabilities. Our solution requires only OS embedded functions for virtual network interface and open source software for dynamic host routing, thus mostly suitable for deploying in campus where budget can be a major concern.

並列關鍵字

DNS ； virtual network interface ； dynamic routing ； fault-tolerant