Packet receiving method, deep packet inspection device and system
Embodiments of the present invention provide a packet receiving method, a deep packet inspection device and system, which relates to the field of communications. The packet receiving method includes: receiving a service request packet sent by a terminal device, where the packet carries a terminal domain name indicating the terminal device and a server domain name indicating a service server required by the service request; resolving the received server domain name to obtain a service server Internet protocol (IP) address; and discarding the packet if the resolved service server IP address does not belong to the preset service server IP address corresponding to the received terminal domain name in a preset list. Embodiments of the present invention are applied to the processing of the packet.
1. A packet receiving method, comprising:
receiving a service request packet sent by a terminal device, wherein the service request packet carries a terminal domain name indicating the terminal device and a server domain name indicating a service server required by the service request packet sent by the terminal device;
resolving the received server domain name to obtain a service server Internet protocol (IP) address; and
discarding the service request packet if the resolved service server IP address does not belong to a preset service server IP address corresponding to the received terminal domain name in a preset list, wherein in the preset list the terminal domain name of each terminal device is correspondingly provided with a plurality of accessible service server IP addresses under an access authority of the terminal device.
2. The method according to claim 1 , wherein, before the discarding the service request packet if the resolved service server IP address does not belong to the preset service server IP address corresponding to the received terminal domain name in a preset list, the method further comprises:
receiving a domain name system (DNS) packet sent by the terminal device, wherein the DNS packet carries the terminal domain name and a true domain name of at least one accessible service server corresponding to the terminal domain name, wherein the true domain name of at least one accessible service server is a domain name of the at least one accessible service server, which is not altered by the terminal device;
resolving the received true domain name to obtain at least one accessible service server IP address; and
taking the resolved at least one accessible service server IP address as the preset service server IP address, and setting a corresponding relation between the terminal domain name and the preset service server IP address in the preset list.
3. The method according to claim 2 , wherein, before the receiving the DNS packet sent by the terminal device, the method further comprises:
sending a DNS query request to the terminal device, to enable the terminal device to send the DNS packet.
4. The method according to claim 1 , wherein, after the resolving the received server domain name to obtain the service server Internet protocol (IP) address, the method further comprises:
if the resolved service server IP address belongs to the preset service server IP address corresponding to the received terminal domain name in the preset list, establishing a connection between the terminal device and the service server corresponding to the service server IP address, to enable the service server to provide a service corresponding to the service request of the terminal device to the terminal device.
5. The method according to claim 1 , wherein, after the resolving the received server domain name to obtain the service server Internet protocol (IP) address, the method further comprises:
if the resolved service server IP address belongs to the preset service server IP address corresponding to the received terminal domain name in the preset list, determining a service type of the service request according to the terminal domain name of the terminal device.
6. A deep packet inspection (DPI) device comprising a hardware processor and a non-transitory computer readable storage medium including executable instructions that, when executed by the processor perform a method comprising:
receiving a service request packet sent by a terminal device, wherein the service request packet carries a terminal domain name indicating the terminal device and a server domain name indicating a service server required by the service request packet sent by the terminal device;
resolving the server domain name to obtain a service server Internet protocol (IP) address; and
discarding the packet if the service server IP address resolved does not belong to a preset service server IP address corresponding to the received terminal domain name in a preset list, wherein in the preset list the terminal domain name of each terminal device is correspondingly provided with accessible service server IP addresses under an access authority of the terminal device.
7. The DPI device according to claim 6 , wherein, before the discarding the service request packet if the resolved service server IP address does not belong to the preset service server IP address corresponding to the received terminal domain name in a preset list, the method further comprises:
receiving a domain name system (DNS) packet sent by the terminal device, wherein the DNS packet carries the terminal domain name and a true domain name of at least one accessible service server corresponding to the terminal domain name, wherein the true domain name of at least one accessible service server is a domain name of the at least one accessible service server, which has not been altered by the terminal device;
resolving the true domain name received to obtain at least one accessible service server IP address; and
taking the at least one accessible service server IP address resolved by the resolving unit as the preset service server IP address, and setting a corresponding relation between the terminal domain name and the preset service server IP address in the preset list.
8. The DPI device according to claim 7 , the method further comprising:
sending a DNS query request to the terminal device, to enable the terminal device to send the DNS packet.
9. The DPI device according to claim 6 , wherein after the resolving the received server domain name to obtain the service server Internet protocol (IP) address, the method further comprises:
if the service server IP address resolved belongs to the preset service server IP address corresponding to the received terminal domain name in the preset list, establishing a connection between the terminal device and the service server corresponding to the service server IP address, to enable the service server to provide a service corresponding to the service request of the terminal device to the terminal device.
10. The DPI device according to claim 6 , wherein after the resolving the received server domain name to obtain the service server Internet protocol (IP) address, the method further comprises:
if the service server IP address resolved belongs to the preset service server IP address corresponding to the received terminal domain name in the preset list, determining a service type of the service request according to the terminal domain name of the terminal device.
11. A system, comprising:
a deep packet inspection (DPI) device; and
a terminal device, configured to send a service request packet to the DPI device, wherein the packet carries a terminal domain name indicating the terminal device and a server domain name indicating a service server required by the service request sent by the terminal device;
the DPI device having a hardware processor and a non-transitory computer readable storage medium including executable instructions that, when executed by the processor perform a method comprising:
receiving the service request packet sent by the terminal device;
resolving the server domain name received to obtain a service server Internet protocol (IP) address; and
discarding the packet if the service server IP address resolved does not belong to a preset service server IP address corresponding to the received terminal domain name in a preset list, wherein in the preset list the terminal domain name of each terminal device is correspondingly provided with accessible service server IP addresses under an access authority of the terminal device.