STI: Implementation of a Handle/DNS Server

STI：Handle/DNS 服务器的实现

• 批准号: 0334140
• 负责人: Robert Kahn
• 金额: $ 49.96万
• 依托单位: Corporation for National Research Initiatives (NRI)
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2003
• 资助国家: 美国
• 起止时间: 2003-09-01 至 2005-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0334140&HistoricalAwards=false
• 关键词: STI; Implementation; Handle; DNS; Server

The demand for DNS protocol extensions has grown in recent years, especially from countries where English is not the native language. The traditional DNS protocol is based on 7-bit character encoding and thus prevents non-ASCII characters from being used to name network resources. The situation has made it very difficult for users in non-English speaking countries to take full advantage of the Internet. It has also prompted many independent DNSroot implementations that are not interoperable with the global DNS. DNS resolution also lacks access control and service security. This has restricted certain applications that aretrying to use or otherwise relying on the DNS namespace (e.g. ENUM). Efforts to extend the DNS for better security and manageability have been undertaken, but these are all subject to backward compatibility requirements, which can introduce deployment obstacles. The Handle System, developed by CNRI with U.S. Government support, has no such backward compatibility limitations. It can fully support the existing DNS and also extensions that have no convenient way to be made available in the current DNS.CNRI proposes to develop and demonstrate an integrated Handle System/DNS capability that will support the current DNS functions. The proposed integration would allow traditional DNS requests to be mapped to traditional DNS servers and non-traditional requests to be sent to handle servers for advanced applications. A Handle Server API will be developed and deployed that will support addition of modules to a Handle Server without affecting or requiring changes to the basic Handle Server software. Advanced query and administrative functions will be provided for secure handle resolution. In addition, the Handle Systemreference implementation, now in widespread use on the Internet, will be updated to include a variety of new features such as wildcard queries, advanced service site selection, caching mechanisms and delegation of name authority registration.Performance data will be collected in a testbed environment at CNRI and one or more coordination efforts will be undertaken to demonstrate the functionality of the Handle/DNS Server in real deployments with international collaboration. One example of potential collaboration in the use of such a server is with various elements of the publishing community now using digital object identifiers, which are handles that begin with the number "10". Specifically, CNRI proposes to collaborate with the International DOI Foundation in this regard. A second example involves the China Internet Network Information Center (CNNIC). CNNIC is a non-profit organization responsible for domain name registration and administration for top level domain names under the TLD ".CN" and for Internet related policies and regulations issued from Chinese Ministry of Information Industry (MII). CNNIC believes that, as a secured global naming service, the Handle System has resolved many of the issues they face in today's DNS and, as a result, CNNIC has asked to work with CNRI ondeploying a Handle/DNS system in China. CNRI proposes to collaborate with CNNIC toward this objective.The smaller scope project is the system design and implementing of key elements of the system to integrate DNS features seamlessly with the Handle System. With in-house experimentation, CNRI will determine its feasibility for use with both Ipv4 and Ipv6. This effort will produce concepts and software components that will enable important DNS related strides to enhance Internet applications that depend on the use of DNS and those that require handle resolution.

近年来，对DNS协议扩展的需求不断增长，特别是来自英语不是母语的国家。传统的DNS协议基于7位字符编码，因此防止使用非ASCII字符来命名网络资源。这种情况使非英语国家的用户很难充分利用互联网。它还促使许多独立的DNSroot实现与全球DNS不互操作。DNS解析也缺乏访问控制和服务安全性。这限制了某些试图使用或依赖DNS命名空间（例如ENUM）的应用程序。为了更好的安全性和可扩展性，已经进行了扩展DNS的努力，但是这些都受到向后兼容性要求的限制，这可能会引入部署障碍。由CNRI在美国政府支持下开发的Handle System没有这种向后兼容性限制。它可以完全支持现有的DNS以及在当前DNS中无法方便使用的扩展。CNRI建议开发和演示集成的Handle System/DNS功能，以支持当前的DNS功能。拟议的集成将允许传统DNS请求映射到传统DNS服务器，并将非传统请求发送到高级应用程序的处理服务器。将开发和部署Handle Server API，以支持向Handle Server添加模块，而不会影响或要求更改基本Handle Server软件。高级查询和管理功能将提供安全处理决议。此外，现在在互联网上广泛使用的Handle Systemreference实现将被更新，以包括各种新功能，如搜索引擎查询，高级服务站点选择，缓存机制和名称授权注册的委托。性能数据将在CNRI的测试平台环境中收集，并将进行一次或多次协调工作，以演示Handle/通过国际合作，在真实的部署中使用DNS服务器。在使用这种服务器方面的潜在合作的一个例子是与现在使用数字对象标识符的出版界的各种元素进行合作，数字对象标识符是以数字“10”开始的句柄。具体而言，国家创新研究所建议在这方面与国际数字机会基金会合作。第二个例子涉及中国互联网络信息中心（CNNIC）。CNNIC是一家非营利组织，负责中国信息产业部（MII）发布的互联网相关政策和法规，负责中国.CN顶级域名的域名注册和管理。CNNIC认为，作为一种安全的全球命名服务，Handle系统解决了当前DNS面临的许多问题，因此，CNNIC要求与CNRI合作，在中国部署Handle/DNS系统。CNRI建议与CNNIC合作实现这一目标。较小范围的项目是系统设计和系统关键要素的实施，以将DNS功能与Handle系统无缝集成。通过内部实验，CNRI将确定其与IPv4和IPv6一起使用的可行性。这项工作将产生概念和软件组件，使重要的DNS相关的进步，以加强互联网应用程序，依赖于使用DNS和那些需要处理解决。