STI: Implementation of a Handle/DNS Server

近年来，对DNS协议扩展的需求不断增长，特别是来自英语不是母语的国家。传统的DNS协议基于7位字符编码，因此不能使用非ascii字符来命名网络资源。这种情况使得非英语国家的用户很难充分利用互联网。它还促使许多独立的DNS根实现不能与全局DNS互操作。DNS解析也缺乏访问控制和业务安全性。这限制了某些试图使用或以其他方式依赖DNS命名空间的应用程序（例如ENUM）。人们一直在努力扩展DNS以获得更好的安全性和可管理性，但这些都受到向后兼容性需求的限制，这可能会带来部署障碍。由CNRI在美国政府支持下开发的手柄系统没有这种向后兼容性限制。它可以完全支持现有的DNS，也可以支持在当前DNS中无法方便地提供的扩展。CNRI建议开发并演示一个集成的处理系统/DNS能力，以支持当前的DNS功能。提议的集成将允许将传统DNS请求映射到传统DNS服务器，并将非传统请求发送到处理高级应用程序的服务器。我们将开发和部署一个Handle Server API，它将支持向Handle Server添加模块，而不会影响或需要更改基本的Handle Server软件。将为安全句柄解析提供高级查询和管理功能。此外，目前在Internet上广泛使用的Handle system参考实现将进行更新，以包括各种新功能，如通配符查询、高级服务站点选择、缓存机制和名称授权注册委托。性能数据将在CNRI的测试平台环境中收集，并将进行一项或多项协调工作，以在国际合作的实际部署中演示Handle/DNS服务器的功能。使用这种服务器的潜在协作的一个例子是与出版社区中使用数字对象标识符的各种元素进行协作，这些标识符是以数字“10”开头的句柄。具体而言，CNRI建议在这方面与国际DOI基金会合作。第二个例子是中国互联网络信息中心（CNNIC）。CNNIC是负责域名注册和顶级域名管理的非营利性机构。中国信息产业部（MII）发布的互联网相关政策法规。CNNIC认为，作为一个安全的全球命名服务，句柄系统已经解决了他们在今天的DNS中面临的许多问题，因此，CNNIC已要求与CNRI合作，在中国部署句柄/DNS系统。CNRI建议与CNNIC合作实现这一目标。较小范围的项目是系统设计和实现系统的关键元素，以无缝集成DNS功能与处理系统。通过内部实验，CNRI将确定其与Ipv4和Ipv6同时使用的可行性。这项工作将产生一些概念和软件组件，这些概念和软件组件将使与DNS相关的重要进展能够增强依赖于DNS使用的互联网应用程序和那些需要处理解析的应用程序。

The demand for DNS protocol extensions has grown in recent years, especially from countries where English is not the native language. The traditional DNS protocol is based on 7-bit character encoding and thus prevents non-ASCII characters from being used to name network resources. The situation has made it very difficult for users in non-English speaking countries to take full advantage of the Internet. It has also prompted many independent DNSroot implementations that are not interoperable with the global DNS. DNS resolution also lacks access control and service security. This has restricted certain applications that aretrying to use or otherwise relying on the DNS namespace (e.g. ENUM). Efforts to extend the DNS for better security and manageability have been undertaken, but these are all subject to backward compatibility requirements, which can introduce deployment obstacles. The Handle System, developed by CNRI with U.S. Government support, has no such backward compatibility limitations. It can fully support the existing DNS and also extensions that have no convenient way to be made available in the current DNS.CNRI proposes to develop and demonstrate an integrated Handle System/DNS capability that will support the current DNS functions. The proposed integration would allow traditional DNS requests to be mapped to traditional DNS servers and non-traditional requests to be sent to handle servers for advanced applications. A Handle Server API will be developed and deployed that will support addition of modules to a Handle Server without affecting or requiring changes to the basic Handle Server software. Advanced query and administrative functions will be provided for secure handle resolution. In addition, the Handle Systemreference implementation, now in widespread use on the Internet, will be updated to include a variety of new features such as wildcard queries, advanced service site selection, caching mechanisms and delegation of name authority registration.Performance data will be collected in a testbed environment at CNRI and one or more coordination efforts will be undertaken to demonstrate the functionality of the Handle/DNS Server in real deployments with international collaboration. One example of potential collaboration in the use of such a server is with various elements of the publishing community now using digital object identifiers, which are handles that begin with the number "10". Specifically, CNRI proposes to collaborate with the International DOI Foundation in this regard. A second example involves the China Internet Network Information Center (CNNIC). CNNIC is a non-profit organization responsible for domain name registration and administration for top level domain names under the TLD ".CN" and for Internet related policies and regulations issued from Chinese Ministry of Information Industry (MII). CNNIC believes that, as a secured global naming service, the Handle System has resolved many of the issues they face in today's DNS and, as a result, CNNIC has asked to work with CNRI ondeploying a Handle/DNS system in China. CNRI proposes to collaborate with CNNIC toward this objective.The smaller scope project is the system design and implementing of key elements of the system to integrate DNS features seamlessly with the Handle System. With in-house experimentation, CNRI will determine its feasibility for use with both Ipv4 and Ipv6. This effort will produce concepts and software components that will enable important DNS related strides to enhance Internet applications that depend on the use of DNS and those that require handle resolution.