STI: Implementation of a Handle/DNS Server

近年来，对 DNS 协议扩展的需求不断增长，特别是来自英语不是母语的国家。传统的 DNS 协议基于 7 位字符编码，因此无法使用非 ASCII 字符来命名网络资源。这种情况使得非英语国家的用户很难充分利用互联网。它还促使许多独立的 DNSroot 实现无法与全球 DNS 互操作。 DNS解析还缺乏访问控制和服务安全性。这限制了某些尝试使用或依赖 DNS 命名空间（例如 ENUM）的应用程序。人们已经努力扩展 DNS 以提高安全性和可管理性，但这些都受到向后兼容性要求的影响，这可能会带来部署障碍。由 CNRI 在美国政府支持下开发的 Handle System 不存在此类向后兼容性限制。它可以完全支持现有的DNS以及当前DNS中没有方便的方式提供的扩展。CNRI建议开发并演示集成的Handle System/DNS功能，以支持当前的DNS功能。拟议的集成将允许将传统 DNS 请求映射到传统 DNS 服务器，并将非传统请求发送到高级应用程序的处理服务器。将开发和部署 Handle Server API，该 API 将支持向 Handle Server 添加模块，而不会影响或不需要更改基本 Handle Server 软件。将提供高级查询和管理功能以实现安全句柄解析。此外，目前在互联网上广泛使用的Handle System参考实现将进行更新，以包括各种新功能，例如通配符查询、高级服务站点选择、缓存机制和名称授权注册委派。性能数据将在CNRI的测试台环境中收集，并将进行一项或多项协调工作，以在国际合作的实际部署中展示Handle/DNS服务器的功能。使用这种服务器的潜在协作的一个例子是与出版社区的各个元素现在使用数字对象标识符，这些标识符是以数字“10”开头的句柄。具体来说，CNRI 建议与国际 DOI 基金会在这方面进行合作。第二个例子涉及中国互联网络信息中心（CNNIC）。 CNNIC 是负责顶级域名“.CN”下的域名注册和管理以及中国信息产业部 (MII) 发布的互联网相关政策和法规的非营利组织。 CNNIC 相信，作为一种安全的全球命名服务，Handle 系统已经解决了他们在当今 DNS 中面临的许多问题，因此，CNNIC 已请求与 CNRI 合作在中国部署 Handle/DNS 系统。 CNRI 建议与 CNNIC 合作实现这一目标。规模较小的项目是系统设计和系统关键要素的实现，以将 DNS 功能与 Handle 系统无缝集成。通过内部实验，CNRI 将确定其用于 Ipv4 和 Ipv6 的可行性。这项工作将产生一些概念和软件组件，这些概念和软件组件将实现与 DNS 相关的重要进展，以增强依赖于 DNS 使用和需要句柄解析的互联网应用程序。

The demand for DNS protocol extensions has grown in recent years, especially from countries where English is not the native language. The traditional DNS protocol is based on 7-bit character encoding and thus prevents non-ASCII characters from being used to name network resources. The situation has made it very difficult for users in non-English speaking countries to take full advantage of the Internet. It has also prompted many independent DNSroot implementations that are not interoperable with the global DNS. DNS resolution also lacks access control and service security. This has restricted certain applications that aretrying to use or otherwise relying on the DNS namespace (e.g. ENUM). Efforts to extend the DNS for better security and manageability have been undertaken, but these are all subject to backward compatibility requirements, which can introduce deployment obstacles. The Handle System, developed by CNRI with U.S. Government support, has no such backward compatibility limitations. It can fully support the existing DNS and also extensions that have no convenient way to be made available in the current DNS.CNRI proposes to develop and demonstrate an integrated Handle System/DNS capability that will support the current DNS functions. The proposed integration would allow traditional DNS requests to be mapped to traditional DNS servers and non-traditional requests to be sent to handle servers for advanced applications. A Handle Server API will be developed and deployed that will support addition of modules to a Handle Server without affecting or requiring changes to the basic Handle Server software. Advanced query and administrative functions will be provided for secure handle resolution. In addition, the Handle Systemreference implementation, now in widespread use on the Internet, will be updated to include a variety of new features such as wildcard queries, advanced service site selection, caching mechanisms and delegation of name authority registration.Performance data will be collected in a testbed environment at CNRI and one or more coordination efforts will be undertaken to demonstrate the functionality of the Handle/DNS Server in real deployments with international collaboration. One example of potential collaboration in the use of such a server is with various elements of the publishing community now using digital object identifiers, which are handles that begin with the number "10". Specifically, CNRI proposes to collaborate with the International DOI Foundation in this regard. A second example involves the China Internet Network Information Center (CNNIC). CNNIC is a non-profit organization responsible for domain name registration and administration for top level domain names under the TLD ".CN" and for Internet related policies and regulations issued from Chinese Ministry of Information Industry (MII). CNNIC believes that, as a secured global naming service, the Handle System has resolved many of the issues they face in today's DNS and, as a result, CNNIC has asked to work with CNRI ondeploying a Handle/DNS system in China. CNRI proposes to collaborate with CNNIC toward this objective.The smaller scope project is the system design and implementing of key elements of the system to integrate DNS features seamlessly with the Handle System. With in-house experimentation, CNRI will determine its feasibility for use with both Ipv4 and Ipv6. This effort will produce concepts and software components that will enable important DNS related strides to enhance Internet applications that depend on the use of DNS and those that require handle resolution.