CN109151085B

CN109151085B - Method and device for sending domain name query request

Info

Publication number: CN109151085B
Application number: CN201710453682.5A
Authority: CN
Inventors: 张越; 谯倩
Original assignee: ZTE Corp
Current assignee: ZTE Corp
Priority date: 2017-06-15
Filing date: 2017-06-15
Publication date: 2022-06-10
Anticipated expiration: 2037-06-15
Also published as: CN109151085A

Abstract

The invention provides a method and a device for sending a domain name query request, wherein the method comprises the following steps: the home gateway acquires the device type of the home network device according to the domain name query request, and forwards the domain name query request to a corresponding DNS server according to the device type of the home network device and the domain name query request. By adopting the technical scheme, the effective management of the home network devices of different device types and the effective management of different domain name query requests are realized, the domain name query request of the home network device is prevented from being forwarded to a processor of a non-operator, the domain name query request of the home network device is ensured to be processed by a preset server, and the safety of the home network is improved.

Description

Method and device for sending domain name query request

Technical Field

The present invention relates to the field of communications, and in particular, to a method and an apparatus for sending a domain name query request.

Background

In the related art, a home gateway is a network device located inside a user's home, which is connected to the inside of the home as an external access network, and connects the inside of the home to and from an external physical interface. The home gateway becomes a connection bridge and a portal of the home internal network and the external network. At present, the home gateway is compatible with a plurality of external broadband network access modes, and the network side interface types include: the access mode is mainly a PON (Passive Optical Network) broadband access technology, and the technology can provide higher broadband access for users.

A home gateway is a platform that makes various home services available to residential users, including existing services and services that may appear in the future. With the increasing access mode of external networks, the demand of home users is also predicted to increase day by day. By means of computer network technology, various household appliances and equipment inside the household are communicated with the Internet, and the fun of family life is enriched through the network, so that the household is diversified, convenient, comfortable and personalized. And secure and reliable service is ensured. Such as an interactive network Television (IPTV) digital video Box (Set Top Box, STB for short), XBOX, etc., have become essential entertainment devices for most households. Let us perceive the wonderful and wonderful world of the internet by accessing the home gateway.

With high bandwidth deployments becoming more and more popular. The types of devices accessed are also increasingly diverse. According to different home gateway access devices, the domain name server is forwarded to different domain name servers when accessing a specific service website of the Internet. For example, devices other than IPTV and STB can also access massive on-demand resources and video services, but various websites carrying IPTV services are not seen by operators. And at the same time to prevent DOS attacks by DNS. How to guarantee network security through a certain technology, it is very important to defend operator profits and guarantee reliable service.

For the problem of network security caused by forwarding a domain name query request in a home network in the related art, no effective solution is available at present.

Disclosure of Invention

The embodiment of the invention provides a method and a device for sending a domain name query request, which are used for at least solving the problem of network security caused by forwarding the domain name query request in a home network in the related art.

According to an embodiment of the present invention, a method for sending a domain name query request is provided, including: receiving a domain name query request sent by home network equipment; and acquiring the equipment type of the home network equipment according to the Domain Name query request, and forwarding the Domain Name query request to a Domain Name Server (DNS) according to the equipment type of the home network equipment and the Domain Name query request.

Optionally, obtaining the device type of the home network device according to the domain name query request includes: acquiring a network protocol IP address in the domain name query request; and determining the equipment type of the home network equipment according to the IP address and a first preset relation, wherein the first preset relation is the corresponding relation between the IP address and the equipment type in the home network.

Optionally, forwarding the domain name query request to a DNS server according to the device type of the home network device and the domain name query request includes: determining a Wide Area Network (WAN) PORT for forwarding the domain name query request according to the device type of the home network device and a second preset relationship, wherein the second preset relationship is the corresponding relationship between the device type in the home network and the WAN PORT; and forwarding the domain name query request to the DNS server through the WAN PORT PORT.

Optionally, forwarding the domain name query request to a DNS server according to the device type of the home network device and the domain name query request includes: determining the DNS server according to a domain name prefix in the domain name query request and a third preset relation, wherein the third preset relation is a corresponding relation between the domain name prefix and the DNS server address; and forwarding the domain name query request to the DNS server through the WAN PORT PORT.

Optionally, after forwarding the domain name query request to a DNS server according to the device type of the home network device and the domain name prefix in the domain name query request, the method further includes:

and receiving an analysis result of the DNS server on the domain name inquiry request, and feeding back the analysis result to the home network equipment.

According to another embodiment of the present invention, there is provided a device for sending a domain name query request, including: the receiving module is used for receiving a domain name query request sent by the home network equipment; and the sending module is used for acquiring the equipment type of the home network equipment according to the domain name query request and forwarding the domain name query request to a DNS (domain name server) according to the equipment type of the home network equipment and the domain name query request.

Optionally, the sending module is further configured to obtain an IP address in the domain name query request, and determine the device type of the home network device according to the IP address and a first preset relationship, where the first preset relationship is a corresponding relationship between the IP address and the device type in the home network.

Optionally, the sending module is further configured to determine a WAN PORT for forwarding the domain name query request according to the device type of the home network device and a second preset relationship, where the second preset relationship is a correspondence between the device type in the home network and the WAN PORT; the sending module is further configured to forward the domain name query request to the DNS server through the WAN PORT.

According to another embodiment of the invention, there is provided a storage medium comprising a stored program, wherein the program when executed performs the method of any of the above-described alternative embodiments.

According to another embodiment of the invention, a processor for running a program is provided, wherein the program when running performs the method of any of the above optional embodiments.

According to the invention, the home gateway acquires the device type of the home network device according to the domain name query request, and forwards the domain name query request to the corresponding DNS according to the device type of the home network device and the domain name query request, so that the home network device with different device types can be effectively managed, the domain name query request of the home network device can be prevented from being forwarded to a processor of a non-operator, the domain name query request of the home network device can be guaranteed to be processed by the preset server, and the safety of the home network can be improved.

Drawings

The accompanying drawings, which are included to provide a further understanding of the invention and are incorporated in and constitute a part of this application, illustrate embodiment(s) of the invention and together with the description serve to explain the invention without limiting the invention. In the drawings:

fig. 1 is a flowchart of a method of transmitting a domain name query request according to an embodiment of the present invention;

fig. 2 is a diagram illustrating a comparison relationship between an IP and a device service class according to different device classes when a device according to an embodiment acquires a DHCP IP;

fig. 3 is a diagram of core DNS filtering and routing mechanisms, according to a particular embodiment.

Detailed Description

Example one

The technical scheme in the embodiment of the invention can be used for a home network, including a home gateway and home network equipment, such as IPTV and the like.

In this embodiment, a method for sending a domain name query request operating in a home network is provided, and fig. 1 is a flowchart of a method for sending a domain name query request according to an embodiment of the present invention, as shown in fig. 1, the method includes the following steps:

step S102, the home gateway receives a domain name query request sent by the home network device;

step S104, the home gateway obtains the device type of the home network device according to the domain name query request, and forwards the domain name query request to a DNS server according to the device type of the home network device and the domain name query request.

It should be noted that the above method steps are preferably executed by the home gateway, and may also be executed by other network management devices.

Through the steps and by adopting the technical scheme, the effective management of the home network devices of different device types and the effective management of different domain name query requests are realized, the domain name query requests of the home network devices are prevented from being forwarded to a processor of a non-operator, the domain name query requests of the home network devices are guaranteed to be processed by a preset server, and the safety of a home network is improved.

Optionally, the acquiring, by the home gateway according to the domain name query request, the device type of the home network device includes: the home gateway acquires the IP address in the domain name query request; and determining the equipment type of the home network equipment according to the IP address and a first preset relation, wherein the first preset relation is the corresponding relation between the IP address and the equipment type in the home network.

Optionally, forwarding the domain name query request to a DNS server according to the device type of the home network device and the domain name query request includes: determining a Wide Area Network (WAN) PORT for forwarding the domain name query request according to the equipment type of the home network equipment and a second preset relationship, wherein the second preset relationship is the corresponding relationship between the equipment type in the home network and the WAN PORT; and forwarding the domain name query request to the DNS server through the WAN PORT PORT.

Optionally, after forwarding the domain name query request to the DNS server according to the device type of the home network device and the domain name prefix in the domain name query request, the method further includes:

and the home gateway receives the resolution result of the DNS server on the domain name query request and feeds the resolution result back to the home network equipment.

The following detailed description will proceed with reference being made to the preferred embodiments of the invention

The preferred embodiment of the invention provides a method for a specified device to access a specific domain name through a specified WAN port accessed by a home gateway. The home gateway recognizes the type of the drop access device, and currently, a PC, IPHONE, IPTV STB, XBOX, and the like can be supported. The common data type of PC is routed out through default WAN PORT, and when the appointed device accesses the appointed domain name, the common data type is forwarded to WAN PORT of corresponding service class through the home gateway, and the domain name is resolved through corresponding DNS SERVER. The following takes an IPTV STB device as an example, and the steps are as follows:

step 1, after the device is normally accessed to the online in the home gateway, a matching comparison table of the IP address of the device and the service type (PC, IPHONE, IPTV STB, XBOX) of the device is established.

2. After the UP is normally opened at the WAN PORT PORT of the home gateway, a binding relation table between the WAN PORT and data stream SERVICE categories (currently supporting Internet, VOIP and IPTV) is established.

3. After the device is normally accessed to the home gateway, a specific domain name prefix is established, and a matching rule table of DNS SERVER on a WAN PORT PORT is appointed.

When the IPTV STB device accesses a domain name (e.g., x.iptv.microsoft.com) containing a prefix of the specified IPTV domain name, the DNS query message exits from the specified WAN PORT PORT, and the SERVER IP is resolved through the specification DNS SERVER.

5. When the non-IPTV STB device accesses a domain name (such as x.iptv.microsoft.com) containing a prefix of a specified IPTV domain name, the DNS query message cannot go out from a WAN PORT PORT of the home gateway, so that domain name resolution fails and a specified website cannot be accessed.

When the IPTV STB device accesses a domain name (such as google. com) of a non-specified domain name prefix, a DNS query message goes out of a default WAN PORT PORT, and a SERVER IP is resolved through a default DNS SERVER.

The following are specific embodiments of preferred embodiments of the invention

In order to make the objects, technical solutions and advantages of the present invention more apparent, the present invention is further described in detail below with reference to the accompanying drawings.

Fig. 2 is a diagram illustrating a mapping relationship between an IP and a device service class according to different device classes when a device acquires a DHCP IP, as shown in fig. 2: when the device acquires an address through the home gateway, the ONU device judges which device type is according to the OPTION60 VID value reported by the DHCP request message, and generates a corresponding firewall rule chain according to the acquired device IP address and the device type. If the OPTION60 VID value is not carried, the default is the PC device and no special processing is performed.

Meanwhile, the matching relation of the equipment IP and the equipment type is informed to a DNS module to make a record.

On the other hand, while the WAN PORT of the home gateway is online, the DNS module will also pay attention. The setting of the corresponding WAN PORT on the home gateway, namely the bound service type (Internet service, IPTV service or VOIP service), is inquired, and the corresponding DNS SERVER information connected by the WAN PORT is inquired at the same time. And storing the rule information.

Fig. 3 is a schematic diagram of a core DNS filtering and routing mechanism according to an embodiment, as shown in fig. 3, a DNS management module establishes device IP, domain name prefix, and WAN PORT attribute, generates a rule linked list of designation DNS SERVER, and completes DNS domain name query through the rule linked list of designation DNS SERVER. And when the IPTV STB accesses the website, performing DNS domain name protocol resolution. When the device obtains the address through the home gateway, the device can be bound according to the device type and the source IP, and a matching table is established to inform the DNS management module. The DNS management module generates a DNS specific domain name forwarding rule file (DOMMATHRESOLV.CONF) by combining the service type information reported by the WAN PORT. Before forwarding the query message to the WAN, the DNS module first determines whether the query message belongs to a prefix (suffix) range of a specific domain name of the IPTV STB according to the query domain name. The specific domain name prefix information of each device can be stored by being configured in the home gateway in advance.

If the domain name prefix belongs to a specific domain name prefix (such as the DNS query 301 in the figure), matching the WAN PORT PORT needing to be bound according to the service type of the domain name prefix, and forwarding the DNS record query to DNS SERVER corresponding to the bound WAN PORT.

If the website domain name accessed by the IPTV STB device does not belong to a specific domain name prefix category (such as the DNS query 302 in the figure), the website domain name which is not bound to the IPTV service type is still routed out by default, and the DNS record query is forwarded to the default DNS SERVER.

If a Personal Computer (PC) (non-IPTV STB device) accesses an IPTV specific domain name prefix (suffix) website (such as the DNS query 303 in the drawings), when the DNS management module retrieves the DNS query packet, since the specific domain name is analyzed, the rule file forwarded needs to be checked, but the source IP carried by the DNS query packet is not in the rule file, and the DNS query packet is not allowed to be forwarded to the WAN PORT. Thereby achieving the effect of failure of domain name resolution.

If the PC (non-IPTV STB device) accesses a website without a domain name prefix (suffix) (e.g., DNS query 304 in the figure), it belongs to normal domain name forwarding service. And as the analyzed non-specific domain name is the specific domain name, the forwarding file of the specific domain name of the DNS does not need to be checked, and the forwarding is normally performed.

Through the above description of the embodiments, those skilled in the art can clearly understand that the method according to the above embodiments can be implemented by software plus a necessary general hardware platform, and certainly can also be implemented by hardware, but the former is a better implementation mode in many cases. Based on such understanding, the technical solutions of the present invention may be embodied in the form of a software product, which is stored in a storage medium (e.g., ROM/RAM, magnetic disk, optical disk) and includes instructions for enabling a terminal device (e.g., a mobile phone, a computer, a server, or a network device) to execute the method according to the embodiments of the present invention.

Example two

In this embodiment, a sending device for a domain name query request is further provided, where the sending device is used to implement the foregoing embodiments and preferred embodiments, and details are not repeated for what has been described. As used below, the term "module" may be a combination of software and/or hardware that implements a predetermined function. Although the means described in the embodiments below are preferably implemented in software, an implementation in hardware, or a combination of software and hardware is also possible and contemplated.

The sending device of the domain name inquiry request comprises: the receiving module is used for receiving a domain name query request sent by the home network equipment; and the sending module is used for acquiring the equipment type of the home network equipment according to the domain name query request and forwarding the domain name query request to the DNS according to the equipment type of the home network equipment and the domain name query request.

It should be noted that, the above modules may be implemented by software or hardware, and for the latter, the following may be implemented, but not limited to: the modules are all positioned in the same processor; alternatively, the modules are respectively located in different processors in any combination.

EXAMPLE III

Optionally, in this embodiment, the storage medium may include, but is not limited to: a U-disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a removable hard disk, a magnetic or optical disk, and other various media capable of storing program codes.

Optionally, in this embodiment, the processor executes the method steps in the above embodiments according to program codes stored in the storage medium.

Optionally, for a specific example in this embodiment, reference may be made to the examples described in the above embodiment and optional implementation, and this embodiment is not described herein again.

Example four

According to another embodiment of the invention, a processor for running a program is provided, wherein the program when running performs the method of any of the above-mentioned alternative embodiments.

It will be apparent to those skilled in the art that the modules or steps of the present invention described above may be implemented by a general purpose computing device, they may be centralized on a single computing device or distributed across a network of multiple computing devices, and alternatively, they may be implemented by program code executable by a computing device, such that they may be stored in a storage device and executed by a computing device, and in some cases, the steps shown or described may be performed in an order different than that described herein, or they may be separately fabricated into individual integrated circuit modules, or multiple ones of them may be fabricated into a single integrated circuit module. Thus, the present invention is not limited to any specific combination of hardware and software.

The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention, and various modifications and changes may be made by those skilled in the art. Any modification, equivalent replacement, or improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A method for sending a domain name query request, comprising:

receiving a domain name query request sent by home network equipment;

acquiring the equipment type of the home network equipment according to the domain name query request, and forwarding the domain name query request to a Domain Name Server (DNS) according to the equipment type of the home network equipment and the domain name query request;

wherein, forwarding the domain name query request to a DNS server according to the device type of the home network device and the domain name query request includes:

confirming whether the domain name prefix in the domain name inquiry request belongs to the range of the specific domain name prefix corresponding to the equipment type;

if the domain name prefix in the domain name query request belongs to the range of the specific domain name prefix corresponding to the equipment type, determining a Wide Area Network (WAN) PORT PORT for forwarding the domain name query request according to the service type of the domain name prefix in the domain name query request and a fourth preset relation, and forwarding the domain name query request to the DNS through the WAN PORT PORT; and the fourth preset relationship is the corresponding relationship between the service type and the WAN PORT PORT.

2. The method according to claim 1, wherein obtaining the device type of the home network device according to the domain name query request comprises:

acquiring a network protocol IP address in the domain name query request;

and determining the equipment type of the home network equipment according to the IP address and a first preset relation, wherein the first preset relation is the corresponding relation between the IP address and the equipment type in the home network.

3. The method according to claim 1, wherein after forwarding the domain name query request to a DNS server according to the device type of the home network device and the domain name prefix in the domain name query request, the method further comprises:

4. A device for transmitting a domain name query request, comprising:

the receiving module is used for receiving a domain name query request sent by the home network equipment;

the sending module is used for acquiring the equipment type of the home network equipment according to the domain name query request and forwarding the domain name query request to a DNS (domain name server) according to the equipment type of the home network equipment and the domain name query request;

the sending module is further configured to determine whether the domain name prefix in the domain name query request belongs to a range of a specific domain name prefix corresponding to the device type; if the domain name prefix in the domain name query request belongs to the range of the specific domain name prefix corresponding to the equipment type, determining a Wide Area Network (WAN) PORT PORT for forwarding the domain name query request according to the service type of the domain name prefix in the domain name query request and a fourth preset relation, and forwarding the domain name query request to the DNS through the WAN PORT PORT; and the fourth preset relationship is the corresponding relationship between the service type and the WAN PORT PORT.

5. The apparatus according to claim 4, wherein the sending module is further configured to obtain an IP address in the domain name query request, and determine a device type of the home network device according to the IP address and a first preset relationship, where the first preset relationship is a correspondence between an IP address and a device type in a home network.

6. A storage medium storing a program, wherein the program is executed by a processor to execute the method for sending a domain name query request according to any one of claims 1 to 3.

7. A device for sending a domain name query request, comprising a memory and a processor, wherein the memory stores a program, and wherein the program is executed by the processor to execute the method for sending a domain name query request according to any one of claims 1 to 3.