DNS security system and failure processing method

1. A computing device, comprising:

a memory having instructions stored thereon;

a processor configured to execute the instructions to perform operations for domain name system (DNS security, the operations comprising:

initiating a DNS request;

providing authorization information for the DNS request;

storing all DNS requests and corresponding authorization information in a designated area and generating an authorization information database;

determining whether a DNS resolution failure occurs in a root node, wherein the determining whether a DNS resolution failure occurs in a root node further comprises performing a monitoring on a DNS datagram at an outlet of a critical region of the designated area at a backbone network;

initiating a virtue root node and using the virtual root node to invoke corresponding authorization information from the authorization information database when the DNS resolution failure occurs on the root node; and

providing a resolution service to a corresponding client.

2. The computing device according to claim 1 , wherein the authorization information comprises DNS resolution record with a stored access amount exceeds a visit threshold, and/or a DNS resolution record of an important domain name.

3. The computing device according to claim 1 , wherein storing all DNS requests and corresponding authorization information in a designated area comprises the operation of forming a domain name level space according to the corresponding relation of the authorization information.

4. The computing device according to claim 3 , wherein the authorization information database is a mirror of the internet domain name level.

5. The computing device according to claim 1 , wherein invoking corresponding authorization information from the authorization information database when a DNS resolution failure occurs on the root node comprises the operation of using a distributed deployment to provide DNS resolution service for the client via a boundary gateway protocol (BGP) way.

6. The computing device according to claim 5 , wherein the BGP way comprises an anycast mode.

7. The computing device according to claim 1 , wherein the operations further comprises:

modifying the root node address stored in the local to the address pointing to the virtual root node when the DNS resolution failure occurs in the root node; or, sending the local domain name resolution to the virtual root node.

8. A failure processing method, comprising:

obtaining and storing all domain name system (DNS) requests and corresponding authorization information in a designated area, and generating an authorization information database;

determining whether a DNS resolution failure occurs in a root node, wherein the determining whether a DNS resolution failure occurs in a root node further comprises performing a monitoring on a DNS datagram at an outlet of a critical region of the designated area at a backbone network;

initiating a virtual root node and using the virtual root node to invoke corresponding authorization information stored in the authorization information database in response to a determination that the DNS resolution failure occurs in the root node; and

providing a DNS resolution service for a corresponding client.

9. The method according to claim 8 , wherein the authorization information comprises DNS resolution record with a stored access amount exceeds a visit threshold, and/or a DNS resolution record of an important domain name.

10. The method according to claim 8 , wherein the authorization information database is further configured to form a domain name level space according to the corresponding relation of the authorization information.

11. The method according to claim 10 , wherein the authorization information database is a mirror of the internet domain name level.

12. The method according to claim 8 , wherein the virtual root node is further configured to: use a distributed deployment to provide DNS resolution service for the client via a boundary gateway protocol (BGP) way.

13. The method according to claim 12 , wherein the BGP way comprises an anycast mode.

14. The method according to claim 8 , further comprising:

at least one recursion DNS modifying the root node address stored in the local to the address pointing to the virtual root node when the DNS resolution failure occurs in the root node; or, sending the local domain name resolution to the virtual root node.

15. A non-transitory computer-readable medium having computer programs stored thereon that, when executed by one or more processors of an electronic device, cause the electronic device to perform a failure processing method, the failure processing method comprising:

obtaining and storing all domain name system (DNS) requests and corresponding authorization information in a designated area, and generating an authorization information database;

determining whether a DNS resolution failure occurs in a root node, wherein the determining whether a DNS resolution failure occurs in a root node further comprises performing a monitoring on a DNS datagram at an outlet of a critical region of the designated area at a backbone network;

initiating a virtual root node and using the virtual root node to invoke corresponding authorization information stored in the authorization information database in response to a determination that the DNS resolution failure occurs in the root node; and

providing a DNS resolution service for a corresponding client.

16. The non-transitory computer-readable medium according to claim 15 , wherein the authorization information comprises DNS resolution record with a stored access amount exceeds a visit threshold, and/or a DNS resolution record of an important domain name.

17. The non-transitory computer-readable medium according to claim 15 , wherein the authorization information database is further configured to form a domain name level space according to the corresponding relation of the authorization information.

18. The non-transitory computer-readable medium according to claim 15 , wherein the virtual root node is further configured to: use a distributed deployment to provide DNS resolution service for the client via a boundary gateway protocol (BGP) way.