Research And Implementation Of Domain Name System With Control Capacity

The rapid development of the Internet brings us convenience and huge amounts of data and also has gradually become the carrier of dissemination of pornographic and vulgar content. In order to protect young man from being poisoned by pornographic content, we should strengthen the management of the Internet. At a technical level, it’s an effective way to prevent resolving jurisprudence site. The technical means of control based on DNS have been widely used because of its importance. DNS SEC implement data source authentication and integrity verification.With its deployment, control based on DNS tampering is no longer valid. In this paper, we propose a new method of DNS with control capacity to manage network by research on the DNS and network control.Combined with users division and services division, the DNS with capacity can provide a fine-grained network control. Generating a control strategy with domain ip and dynamic control rules can provide more flexible methods.In compliance with the design ideas, the DNS with control capacity can be developed in a variety of DNS implementations. The paper designs and implements DNS with capacity on the platform of BIND9.The system design uses a modular thinking.Finally, I do some performance and functional tests to verify the actual effect.