Operation mechanism for ensuring the stable migration of top-level domain name resolution hosting services with DNSSEC
Based on the migration and deployment practice of the top-level domain resolution service hosting platform, in order to avoid the occurrence of domain name system security extension (DNSSEC, DNS security ex-tension) trust chain and resolution service interruption, domain name NS record inconsistency...
Saved in:
| Main Authors: | , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
POSTS&TELECOM PRESS Co., LTD
2021-06-01
|
| Series: | 网络与信息安全学报 |
| Subjects: | |
| Online Access: | http://www.cjnis.com.cn/thesisDetails#10.11959/j.issn.2096-109x.2021059 |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1841529913452003328 |
|---|---|
| author | Zheng HE Feng LENG Cuiling ZHANG |
| author_facet | Zheng HE Feng LENG Cuiling ZHANG |
| author_sort | Zheng HE |
| collection | DOAJ |
| description | Based on the migration and deployment practice of the top-level domain resolution service hosting platform, in order to avoid the occurrence of domain name system security extension (DNSSEC, DNS security ex-tension) trust chain and resolution service interruption, domain name NS record inconsistency and other security issues in the DNSSEC environment, research and analysis was focused on how to migrate the resolution service between the old and new service hosting platform and the internet assigned numbers authority (IANA) without breaking the integrity of the DNSSEC trust chain during the key rollover, DS and NS record changes, data update and other stages.To improve the availability of domain name system services, the key points of the platform migration operation were analyzed in detail, and the migration mechanism that can ensure business continuity during the migration process were proposed. |
| format | Article |
| id | doaj-art-beff709ab74f47c1ac8c35ad43c0b5e6 |
| institution | Kabale University |
| issn | 2096-109X |
| language | English |
| publishDate | 2021-06-01 |
| publisher | POSTS&TELECOM PRESS Co., LTD |
| record_format | Article |
| series | 网络与信息安全学报 |
| spelling | doaj-art-beff709ab74f47c1ac8c35ad43c0b5e62025-01-15T03:14:53ZengPOSTS&TELECOM PRESS Co., LTD网络与信息安全学报2096-109X2021-06-01715616559564206Operation mechanism for ensuring the stable migration of top-level domain name resolution hosting services with DNSSECZheng HEFeng LENGCuiling ZHANGBased on the migration and deployment practice of the top-level domain resolution service hosting platform, in order to avoid the occurrence of domain name system security extension (DNSSEC, DNS security ex-tension) trust chain and resolution service interruption, domain name NS record inconsistency and other security issues in the DNSSEC environment, research and analysis was focused on how to migrate the resolution service between the old and new service hosting platform and the internet assigned numbers authority (IANA) without breaking the integrity of the DNSSEC trust chain during the key rollover, DS and NS record changes, data update and other stages.To improve the availability of domain name system services, the key points of the platform migration operation were analyzed in detail, and the migration mechanism that can ensure business continuity during the migration process were proposed.http://www.cjnis.com.cn/thesisDetails#10.11959/j.issn.2096-109x.2021059DNS systemDNS security extension systemkey rolloverdomain name resolutiontrust chain |
| spellingShingle | Zheng HE Feng LENG Cuiling ZHANG Operation mechanism for ensuring the stable migration of top-level domain name resolution hosting services with DNSSEC 网络与信息安全学报 DNS system DNS security extension system key rollover domain name resolution trust chain |
| title | Operation mechanism for ensuring the stable migration of top-level domain name resolution hosting services with DNSSEC |
| title_full | Operation mechanism for ensuring the stable migration of top-level domain name resolution hosting services with DNSSEC |
| title_fullStr | Operation mechanism for ensuring the stable migration of top-level domain name resolution hosting services with DNSSEC |
| title_full_unstemmed | Operation mechanism for ensuring the stable migration of top-level domain name resolution hosting services with DNSSEC |
| title_short | Operation mechanism for ensuring the stable migration of top-level domain name resolution hosting services with DNSSEC |
| title_sort | operation mechanism for ensuring the stable migration of top level domain name resolution hosting services with dnssec |
| topic | DNS system DNS security extension system key rollover domain name resolution trust chain |
| url | http://www.cjnis.com.cn/thesisDetails#10.11959/j.issn.2096-109x.2021059 |
| work_keys_str_mv | AT zhenghe operationmechanismforensuringthestablemigrationoftopleveldomainnameresolutionhostingserviceswithdnssec AT fengleng operationmechanismforensuringthestablemigrationoftopleveldomainnameresolutionhostingserviceswithdnssec AT cuilingzhang operationmechanismforensuringthestablemigrationoftopleveldomainnameresolutionhostingserviceswithdnssec |