Beijing Qihoo Technology Company Limited

Beijing Qihoo Technology Limited

Xiaosheng Tan

Can Pu

Xiangdong Qi

Hongyi Zhou

The present invention provides a DNS security system and failure processing method. The DNS security system comprises: at least one client, configured to initiate a DNS request; a root node, configured to provide authorization information to the DNS request; an authorization information database, configured to store all DNS requests and corresponding authorization information in a designated area; a virtual root node, configured to invoke corresponding authorization information from the authorization information database when a DNS resolution failure occurs on the root node, and to provide a resolution service to a corresponding client. Using the present invention enhances the security and stability of DNS resolution.

DNS security system and failure processing method

The invention provides a method, device and system for processing DNS behavior. The method comprises: resolving received network data packet; judging a DNS behavior type corresponding to the network data packet according to the resolution result; determining a processing body according to the DNS behavior type, wherein the processing body comprises a kernel and/or an application layer; and transferring the network data packet to the determined processing body, and processing the network data packet by the determined processing body. The method in the disclosure can improve the DNS defense capability, while improving the service processing capability of a single machine.

Method, device and system for processing DNS behavior

Provided are a DNS cache information processing method, device and system. The method comprises: upon reception of a client request, resolving and obtaining domain name information requested by the client; querying in a database a data structure corresponding to the domain name information; when finding the data structure, acquiring read lock information corresponding to the data structure, the read lock information being permission information allowing performing a read operation of the cache information stored in the data structure; reading the cache information in the data structure by using the permission of the read lock information, and transmitting the read cache information to a sender requested by the client. The embodiment of the present invention can improve caching speed and cache information throughput, improving the flexibility of cache information, and enhancing the quality of stored information.

Growing community of inventors

Beijing, China

Xiaosheng Tan