 |
Considering the possible issues in the two approaches, in this paper, we propose a new
method by using two cache DNS server in parallel. In the proposed system, we assume
that DNSSEC validation feature is enabled on each end client by installing the client
based DNSSEC validation system. In the proposed system, the first try of name resolution
for a domain name will be validated on each end client and the same request will also be
sent to an external cache DNS server with DNSSEC enabled in parallel. Since the DNSSEC
validation on the cache DNS server will take time thus the results of the end client will be
used while the result of the cache DNS server will be cached on its own. From the second
time, the response from the external cache DNS server will be fast since the successfully
validated DNS resource records have been cached. Consequently, the results from the
external cache DNS server will be used. |
IEEE/ICACT20220132 Slide.12
[Big Slide]
[YouTube]