DNSÒ»Ö±ÊÇ»¥ÁªÍø¼Ü¹¹ÖдàÈõµÄÒ»»·£¬2009ÄêµÄ¶àÊ¡“¶ÏÍø”ʼþ£¬2010ÄêµÄ°Ù¶È±»“ºÚ”ʼþ£¬¶¼ÊÇÓÉÓÚDNSÊܹ¥»÷ÒýÆðµÄ¡£Ä¿Ç°£¬Õë¶ÔÆóÒµDNS·þÎñÆ÷µÄ¹¥»÷³ÉΪ¹¥»÷Õß×è¶ÏÆóÒµÍøÂç·þÎñµÄÊÖ¶ÎÖ®Ò»¡£³ýÁËDNS¹©Ó¦ÉÌ×ÔÉíµÄÎÊÌ⣬Óû§ÅäÖò»µ±Ò²»á¸øDNS·þÎñÆ÷´øÀ´°²È«Òþ»¼¡£
DNSÒ»Ö±ÊÇ»¥ÁªÍø¼Ü¹¹ÖдàÈõµÄÒ»»·£¬2009ÄêµÄ¶àÊ¡“¶ÏÍø”ʼþ£¬2010ÄêµÄ°Ù¶È±»“ºÚ”ʼþ£¬¶¼ÊÇÓÉÓÚDNSÊܹ¥»÷ÒýÆðµÄ¡£Ä¿Ç°£¬Õë¶ÔÆóÒµDNS·þÎñÆ÷µÄ¹¥»÷³ÉΪ¹¥»÷Õß×è¶ÏÆóÒµÍøÂç·þÎñµÄÊÖ¶ÎÖ®Ò»¡£³ýÁËDNS¹©Ó¦ÉÌ×ÔÉíµÄÎÊÌ⣬Óû§ÅäÖò»µ±Ò²»á¸øDNS·þÎñÆ÷´øÀ´°²È«Òþ»¼¡£
¾ÝÒµÄÚÈËÊ¿½éÉÜ£¬×î½ü¼¸ÄêÍøÂç×ÊÔ´¼°·þÎñ³É±¾ÈÕÒæ½µµÍ£¬ÌرðÊÇ´ø¿í³É±¾´ó·ùϽµ£¬DNS¹¥»÷Á÷Á¿ÂÅ´´Ð¸ߡ£¹¥»÷Õß¿ØÖÆ??ʬÍøÂçËͳö´óÁ¿µÄDNS²éѯ·â°ü£¬ËÍÖÁÍøÕ¾µÄ½âÎö·þÎñÆ÷£¬Ê¹ÆäÄÑÓÚÓ¦¸¶×îÖÕµ¼ÖÂÍøÂç·þÎñ±»×è¶Ï(Direct DNS Attack)¡£ÕâÊǽñºóÈκÎÒ»¼ÒÆóÒµ¶¼¿ÉÄÜÃæÁÙµÄÎÊÌâ¡£
ÔÚ¾ßÌå»·¾³Ï£¬ÅäÖò»µ±Ò²»á´øÀ´Òþ»¼¡£DNS°²È«À©Õ¹ÐÒé(DNSSEC, DNS Security Extensions)Ö÷ҪĿµÄÔÚÓÚÇ¿»¯DNS·þÎñÑéÖ¤£¬¶øÒª´ï³ÉÕâ¸öÐÒéÔò±ØÐ뿪ÆôDNSÀ©Õ¹Ãû»úÖÆ(EDNS0, Extension Mechanisms for DNS)µÄ¹¦ÄÜ£¬µ«¾ßÓзí´ÌÒâζµÄÊÇ£¬Èç¹û¿ªÆôÕâ¸ö¹¦ÄÜÈ´²»ÖªÈçºÎ½øÐа²È«ÉèÖã¬Ôò·´¶ø»áÈÃËü±ä³ÉÒ»¸ö°²È«Â©¶´¡£EDNS0±¾Ó¦³ÉΪ°²È«ÅäÖõē±êÅ䔣¬µ«Êµ¼ÊʹÓÃÖÐÈ´ÓÉÓÚÈËÃÇȱ·¦°²È«·À·¶µÄÒâʶ½«ÆäÒÅ©¡£
ÀýÈçÔÚDNSÈí¼þBIND 8.3.0ÓëBIND 9.0.0ÒÔºóµÄ°æ±¾¡¢ÌṩDNS·þÎñµÄWindows Server 2003£¬EDNS0¶¼ÊÇĬÈÏ¿ªÆô£¬ÕâЩ¹¦ÄÜÃÀÆäÃûÔ»¿ÉÒÔÂú×ã¶àÈÎÎñµÄ´¦ÀíÐèÇ󣬵«ÊÂʵÉÏÕûÌåЧ¹û²¢²»Í»³ö£¬¶øÇÒ¿ÉÄÜÔì³ÉDNS ServerÔâÊÜDDoS¹¥»÷¡£¾¡¹ÜÕâÊÇ×Ô1996ÄêÒÔÀ´¾Í´æÔڵĩ¶´£¬µ«Ö±µ½2012Ä꣬ÈÔÓÐÈ«ÇòÐÔµÄDNS ·þÎñÉÌÔâÑ꣬×îºóµÄÊܺ¦ÕߺÁÎÞÒÉÎÊÊÇʹÓø÷þÎñµÄ¿Í»§¡£
¼ÈÈ»Õâ²»ÊÇÐÂÊÖ·¨£¬ÎªÊ²Ã´ÖÁ½ñÈÔÓв»ÉÙÆľ߹æÄ£µÄ´óÆóÒµ±»¹¥»÷ÄØ?ÕâÖ÷ÒªÓÉÓÚÁ½¸ö·½ÃæµÄÔÒò£ºÒ»·½ÃæÊÇ»ù´¡ÍøÂçÈÔÑØÓùýÈ¥ÀϾɼܹ¹;ÁíÒ»·½ÃæÊÇÏà¹ØÈËԱȱ·¦ÐÅÏ¢°²È«Òâʶ¡£¹ýÈ¥ÓÉÓÚȱ·¦¶ÔÐÅÏ¢°²È«µÄÇ°Õ°ÐÔÈÏʶ£¬Òò¶øµÃ²»µ½ÖØÊÓ£¬ÍøÂç»ù´¡¼Ü¹¹ÒÔÒµÎñÄÜÁ¦ÎªÖ÷£¬¶ø·Ç×ÅÖØ°²È«£¬Òò´ËÔÚÔâµ½°²È«¹¥»÷ʱÎÞ·¨¿ìËÙÓ¦¶Ô¡£´ËÍâÔÚÈËÔ±Òâʶ·½Ã棬¶ÔÓÚ DNSµÄÅäÖð²È«Ò²Î´Êܵ½ÖØÊÓ¡£
Õë¶ÔÕâ¸öÎÊÌ⣬°²È«×¨¼ÒÌá³öÒÔÏÂËĵ㽨Ò飺
1. ³¹µ×¼ì²éDNS·þÎñÆ÷ÅäÖ㬹رղ»ÐèÒªµÄ·þÎñ;
2. ³ÖÐø¼à¿ØDNSÁ÷Á¿£¬Á˽â×ÔÉíÍøÂçÄܳÐÔصÄÁ÷Á¿;
3. ͨ¹ýÈÕ³£µÄ¼à¿Ø£¬±È¶Ô²»Õý³£Á÷Á¿·¢ÉúµÄ×´¿ö;
4. ×öºÃÔÖÄѾÈÔ®·½°¸¡£¾ÝÁ˽⣬¼´Ê¹ÊÇ¿ç¹úDNS·þÎñ¹©»õÉÌ£¬¿ÉÒÔΪ³ÉǧÉÏÍòµÄ¿Í»§·þÎñ£¬Æäºǫ́·þÎñÈ´¿ÉÄܽöÓÃÊý°Ų̀É豸£¬Ôì³É×´¿ö·¢ÉúʱÎÞ·¨Á¢¼´Çл»¡¢±¸Ô®¡£
Òª¶Å¾øÕë¶ÔDNS·þÎñÆ÷µÄ¹¥»÷£¬Ò»·½ÃæÒª½øÐлù´¡ÍøÂ簲ȫ½¨ÉèµÄÉý¼¶£¬ÁíÒ»·½ÃæÊÇͨ¹ýºóÐø°²È«ÅäÖúͼà¿ØÀ´¸ÄÉÆ¡£×¨¼Ò½¨Ò飬ÆóÒµ»¹¿ÉÒÔʹÓÃרҵDDoS·ÀÓù¹©»õÉ̵ķþÎñ£¬µÃµ½¸üÍêÕûµÄ°²È«·À»¤¡£
(ÔðÈα༣º)