数据与计算发展前沿 ›› 2025, Vol. 7 ›› Issue (3): 202-212.

CSTR: 32002.14.jfdc.CN10-1649/TP.2025.03.017

doi: 10.11871/jfdc.issn.2096-742X.2025.03.017

• 技术与应用 • 上一篇    

ccTLD域名服务器运行状况深度剖析

何峥(),谢杰灵,李汉明,赵琦,冷峰*()   

  1. 中国互联网络信息中心，北京 100071
  • 收稿日期:2025-01-20 出版日期:2025-06-20 发布日期:2025-06-25
  • 通讯作者: *冷峰（E-mail: lengfeng@cnnic.cn）
  • 作者简介:何峥，中国科学院大学，硕士研究生，CCF会员，主要研究方向为域名系统的运行与安全、互联网基础资源管理等系统的关键技术攻关和平台建设工作。
    本文主要负责域名系统的测量方法以及探测指标的制定。
    HE Zheng is a master’s student at the Chinese Academy of Sciences. His main research interests include the key technology research and platform construction of domain name system, Internet basic resource management and other systems.
    In this paper, he is mainly responsible for the measurement methodology of the Domain Name System and the development of the detection metrics.
    E-mail: hezheng@cnnic.cn|冷峰，中国科学院大学，博士，CCF会员，主要研究方向为域名系统的运行与安全、互联网基础资源管理等系统的关键技术攻关和平台建设工作。
    本文承担工作为指导测量方法和设计与优化。
    LENG Feng, Ph.D., is a member of the CCF. He is affiliated with the University of Chinese Academy of Sciences. His research interests include the key technology research and platform construction of domain name system, Internet basic resource management and other systems.
    In this paper, he is mainly responsible for guiding measurement methods and designing and optimizing
    E-mail: lengfeng@cnnic.cn
  • 基金资助:
    国家重点研发计划(2022YFB3103000)

In-Depth Analysis of the Operation Status of ccTLD Domain Name Servers

HE Zheng(),XIE Jieling,LI Hanming,ZHAO Qi,LENG Feng*()   

  1. China Internet Network Information Center, Beijing 100071, China
  • Received:2025-01-20 Online:2025-06-20 Published:2025-06-25

RichHTML

1

PDF

5

摘要：

【背景】本研究聚焦于国家和地区顶级域名服务器。【目的】本研究旨在为优化ccTLD部署实践与运行维护提供数据与理论支撑，助力提升其安全性与稳定性。【方法】通过主动探测方式，深入探究其在起始授权机构（SOA）配置、查询设置、域名系统安全扩展应用等方面存在的不规范与隐患。【结果】研究发现，ccTLD在多方面存在问题，包括SOA字段配置、服务地址配置、查询配置以及DNSSEC部署实施等。

关键词: ccTLD, 域名服务器, DNSSEC, 运行情况

Abstract:

[Background] This study focuses on the domain name servers of Country Code Top-level Domains (ccTLDs). [Objective] The aim of this study is to provide data and theoretical support for optimizing the deployment practices, operation, and maintenance of ccTLDs, thereby enhancing their security and stability. [Methods] Using active detection methods, this study investigates irregularities and potential risks existing in aspects such as the Start of Authority (SOA) configuration, query settings, and the application of Domain Name System Security Extensions (DNSSEC). [Conclusions] The research finds that ccTLDs have problems in multiple aspects, including the configuration of SOA fields, service address configuration, query configuration, and the deployment and implementation of DNSSEC.

Key words: ccTLD, domain name server, DNSSEC, operating status