Research And Implementation Of DNS64Key Technology In The IPv4/IPv6Transition

As the number of Internet users growing, the IPv4addresses is running out, using thenext-generation Internet protocol IPv6replace IPv4is the fundamental way to solve theaddress shortage problem. But the agreement can not be completed in a short period of timeto upgrade, so IPv4to IPv6transition technology is developed. Current there are dual-stacktechnology, tunneling and protocol translation technology.In protocol translation technology, DNS64and NAT64are impressive. So this papercarried out in-depth research into DNS64. In the future, DNS64server faces enormouspressure. so it is necessary to solve this problem by using the cluster approach and goodload balancing algorithm to improve cluster performance; DNS64also facing serioussecurity issues with DNS, especially the DDoS attacks.So a timely and effective DDoSattack detection method is required to improve its early warning capacity.First, through the researh on DNS64load balanced clusters, we work out a method thatbased on minimum discrete degrees of load balanced method.This method fullly considerthe role of DNS cache. The requests that acess to the same domain are sent to same serverto reduce the response time. And collection server load, According to the dispersion of theload rate to measure whether the load is balanced, If the discrete too large means that theload is not balanced. Based server state the distribution of the allocation table,Clusterprocessing performance into full play.Second, through research on DNS of DDoS attack detection, we work out a methodbased on linear proposed collection of information entropy.This method can set thresholdvalue dynamicly, is sensitive to mutations. From the angle of reducing the rate of falsereport andcombined the feature of DDoS attack to DNS64, we work out a method based onattack features, this method reduces the rate of false report.Finally, through research on DNS64, we designed and implemented DNS64system,this system works correctly and efficiently.Through research, improved to some extent the capacity of the DNS64to deal withlarge-scale access, enhanced the ability that against DDoS attacks and laid the foundation ofdeployment in the future.