| Název: | DNSSEC in the networks with a NAT64/DNS64 |
| Autoři: | Hunek, Martin Plíva, Zdeněk |
| Citace zdrojového dokumentu: | 2018 International Conference on Applied Electronics: Pilsen, 11th – 12th September 2018, Czech Republic, 52-54. |
| Datum vydání: | 2018 |
| Nakladatel: | Západočeská univerzita v Plzni |
| Typ dokumentu: | konferenční příspěvek conferenceObject |
| URI: | http://hdl.handle.net/11025/35469 |
| ISBN: | 978–80–261–0721–7 |
| ISSN: | 1803–7232 |
| Klíčová slova: | IPv6;NAT64;DNS64;DNSSEC |
| Klíčová slova v dalším jazyce: | IPv6;NAT64;DNS64;DNSSEC |
| Abstrakt v dalším jazyce: | This paper describes the problems with using both Domain Name System Security (DNSSEC) (security extension to domain name system) validating Domain Name System (DNS) resolvers and NAT64/DNS64 transition mechanism. In this paper we also propose a solution how to solve the problem of such combination. The foreign (synthesized) AAAA record as well as the broken trust chain in such records in secure way which doesn't breach DNSSEC. A current widely used solution comes from RFC 7050 [1] with conjunction with RFC 6146 [2] and RFC 6147 [3]. In such case the end node will detect Domain Name System 6-to-4 (DNS64) by asking for well-known Internet Protocol version 4 (IPv4) only domain, if detected end node would disable DNSSEC validation. This solves previously mentioned problem of foreign AAAA record and such domain would be reachable. However this also brakes DNSSEC validation and it does not allow operator to control over the prefix preference. Our proposed solution supplies the end node with secondary DNSSEC chain to validate DNS64 synthesized records from information already presented to the node by Neighbor Discovery or Dynamic Host Configuration Protocol version 6 (DHCPv6), in the way that network operator can have a control over the prefixes and DNS resolvers used by the end node for NAT64/DNS64 transition mechanism. |
| Práva: | © Západočeská univerzita v Plzni |
| Vyskytuje se v kolekcích: | Applied Electronics 2018 Applied Electronics 2018 |
Soubory připojené k záznamu:
| Soubor | Popis | Velikost | Formát | |
|---|---|---|---|---|
| Hunek.pdf | Plný text | 476,64 kB | Adobe PDF | Zobrazit/otevřít |
Použijte tento identifikátor k citaci nebo jako odkaz na tento záznam:
http://hdl.handle.net/11025/35469Všechny záznamy v DSpace jsou chráněny autorskými právy, všechna práva vyhrazena.