TWISCNCTUDNSSEC与DNS相容性研究报告.pdfVIP

TWISC@NCTU DNSSEC DNS 1.0 TWISC@NCTU 參 錄 1.  1  2.  DNSSEC DNS 2  2.1.  PORT 2  2.2.  DO BIT 2  2.3.  AD BIT 2  2.4.  CD BIT 3  3.  DNSSEC DNS 4  3.1.  DNSSEC DNS行 4  3.2.  LOCAL DNSSEC SERVER 5  3.3.  AUTHORITATIVE SERVER 6  3.4.  WINDOWS 7 DNSSEC 7  4.  8  參 9  錄 1  DNSSEC DNS行 4  1. DNSSEC量 DNSSEC DNS DNSSEC DNS 讀 行 參 2. DNSSEC DNS DNSSEC DNS DNS 立說 理 DNS DNSSEC 兩 DNS DNSSEC 了DNSSEC 2.1. Port DNSSEC port 路連 DNS 53 53 UDP 53 TCP 2.2. DO bit DNSSEC DNS DNSSEC DNS DNS DNS 不 了 DNSSEC EDNS0[1]欄 了DO bit DNSSEC OK DO bit 狀 量 DNSSEC 了DO bit DNSSEC DNS 不若不 DO bit DNS 2.3. AD bit DNSSEC Client Local DNSSEC Server Resolver Authoritative Server DNSSEC DNSSEC 理 DNSSEC Authoritative Server 來 Client Client 來 validation Client 數 Client更 DNSSEC 不易 Local DNSSEC Server 來 Local DNSSEC Server Client AD bit Authenticated Data Local DNSSEC Server Client AD bit Local DNSSEC Server 不AD bit Local DNSSEC Server Client 路 2.4. CD bit AD bitCD bit Check Disable Client 來 Local DNSSEC Server 不Client DNSSEC 力行 Local DNSSEC Server CD bit Local DNSSEC Server 不浪 Client行