The Construction Of Intelligent DNS System In Campus Network And Analysis On Request Of DNS

Campus network is widely used as the basic platform for teaching, research and other activities at university. And its structure and integration are relatively complicated. Therefore, a better DNS system should be available.The project attempts to set up an intelligent DNS system in the fact that there is more than one outlet in campus network at Inner Mongolia Agricultural University. By the means of view character of BIND, several ACL are defined to match different users in the system. According to different IP addresses of clients, different resolved IP addresses return to the server. With Policy Route and NAT technology, the problem that different ISP users have to access to CERNet to visit resources of campus network at the university is solved.It is also concerned with the storage and statistic analysis on query data of DNS. According to the frame of network equipment, the query data stream of DNS is filtered by use of NetFlow and flow-tools. Meanwhile, the historical data of DNS is held at MySql database at intervals using Perl as the tool. In order to avoid the delay of observation, a real time monitoring module is employed to observe and analyze some statistic data concerning DNS in a fixed period of time. When the data stream is found abnormal, the relevant equipment will operate to protect DNS server from attack.