CN103618810A - Method and device for identifying IP address of CDN source station - Google Patents

Abstract

The invention provides a method and device for identifying the IP address of a CDN source station, which solves the problem in the prior art that the IP address of the CDN source station cannot be obtained. In this method, for the domain name of the CDN source station, according to each DNS historical database in the historical database list, determine whether there is an IP address corresponding to the domain name in each DNS historical database, and when there is an IP address corresponding to the domain name, set The IP address is determined to be the IP address of the CDN origin site. Since in the embodiment of the present invention, according to the historical data recorded in the DNS historical database, it is determined whether there is an IP address corresponding to the domain name of the CDN source site in each DNS historical database, thereby determining the IP address of the CDN source site, thereby realizing the IP address of the CDN source site. The identification of the address provides convenience for the protection of the CDN source station in the later stage.

Description

A method and device for identifying an IP address of a CDN source station

technical field

The invention relates to the technical field of network security, in particular to an IP address identification method and device deployed with a CDN source station.

Background technique

Content distribution network (CDN) is a new type of network content service system, which is built on the basis of IP network, and provides content distribution and service based on the efficiency and quality requirements of content access and application. CDN represents a high-quality, high-efficiency network application service model built on the basis of the network. An origin site deployed with a CDN may be called a CDN origin site. With the CDN mode, you don’t have to worry about users. Users can quickly open the CDN source station through any network operator at any time and any place.

Figure 1 is a schematic diagram of the relationship among users, CDNs, and CDN origin sites in the prior art. Multiple CDNs can be deployed for CDN origin sites at the same time. For simplicity, only the CDNs that interact with users are identified in Figure 1 . When a user visits the CDN source site, the user's access request is sent to the CDN, and after being processed by the CDN, the access request is sent to the CDN source site, and the CDN source site processes the access request, and after processing, the CDN source site sends the response information to CDN processing, CDN returns the response information to the user after processing. Since the interaction between the user and the CDN source site needs to go through the CDN, the user can only obtain the information processed by the CDN, and the information processed by the CDN contains all the information of the CDN.

Since, when a user visits the CDN source site, the information between the CDN source site and the CDN source site is processed through the CDN, and the information contains all CDN information, and the user cannot obtain the IP address of the CDN source site from this information. When antivirus and protection operations are performed on the CDN origin site, in order to improve the accuracy of the antivirus and protection operations, it is necessary to perform them according to the IP address of the CDN origin station. However, there is no method for obtaining the IP address of the CDN source station in the prior art, thus affecting the protection operation of the CDN source station.

Contents of the invention

Embodiments of the present invention provide a method and device for identifying an IP address of a CDN source station, which solves the problem in the prior art that the IP address of the CDN source station cannot be obtained.

An embodiment of the present invention provides a method for identifying an IP address of a CDN source station, the method comprising:

Obtain the domain name of the origin site where the CDN is deployed;

According to each DNS historical database in the preserved historical database list, determine whether there is an IP address corresponding to the domain name in each DNS historical database;

If there is an IP address corresponding to the domain name in the DNS history database, the IP address is determined as the IP address of the CDN source site.

Preferably, in the embodiment of the present invention, in order to accurately locate the CDN source site and improve the identification efficiency of the IP address of the CDN source site, before obtaining the domain name of the source site where the CDN is deployed, it also includes:

Send request information to the origin site;

Determine whether the header of the response information returned by the source site carries the CDN identification field;

If the message header of the response information carries a CDN identification field, it is determined that the source station is deployed with a CDN.

Preferably, in order to improve the accuracy of the determined IP address of the CDN source station in the embodiment of the present invention, before determining the IP address as the IP address of the CDN source station, it further includes:

Accessing the IP address to obtain the web page content corresponding to the IP address;

Determine whether the content of the web page is the same as the content of the web page corresponding to the source site accessed through the CDN;

If not, it is determined that the IP address is not the IP address of the CDN origin site.

Preferably, in order to improve the accuracy of the determined IP address of the CDN source station in the embodiment of the present invention, before the IP address is determined as the IP address of the CDN source station, the method includes:

Send request information to the IP address;

Determine whether the message header of the response information returned by the IP address carries the CDN identification field;

If the message header of the response information carries the CDN identification field, it is determined that the IP address is not the IP address of the CDN source station.

An embodiment of the present invention provides a device for identifying an IP address of a CDN source station, the device comprising:

Obtaining module, used to obtain the domain name of the source station deployed with CDN;

A judging module, configured to determine whether there is an IP address corresponding to the domain name in each DNS historical database according to each DNS historical database in the saved historical database list;

The identifying module is configured to determine the IP address as the IP address of the CDN source station when the judging module determines that the IP address corresponding to the domain name exists in the DNS history database.

Preferably, in order to improve the accuracy of the determined IP address of the CDN source station in the embodiment of the present invention, the device further includes:

A sending module, configured to send request information to the source station;

The judging module is used to judge whether the message header of the response information returned by the source station carries a CDN identification field;

The obtaining module is specifically configured to determine that the source station has deployed a CDN when the judging module judges that the message header of the response information carries a CDN identification field.

Preferably, in the embodiment of the present invention, in order to improve the accuracy of the determined IP address of the CDN source site, the access acquisition module is used to access the IP address and acquire the webpage content corresponding to the IP address;

The judging module is also used to judge whether the content of the web page is the same as the content of the web page corresponding to the source site accessed through the CDN;

The identification module is also used to notify the judgment module to perform subsequent judgment steps when the judging module judges that the content of the webpage accessed by the IP address is the same as the content of the webpage corresponding to the source site through the CDN, otherwise, determine that the IP address is not a CDN source The IP address of the station.

Preferably, in order to improve the accuracy of the determined IP address of the CDN source station in the embodiment of the present invention, the device further includes:

A sending module, configured to send request information to the source station;

The judging module is also used to judge whether the message header of the response information returned by the IP address carries a CDN identification field;

The identification module is also used to determine that the IP address is not the IP address of the CDN source station when the judging module judges that the message header of the response information carries a CDN identification field, otherwise, notify the judging module to perform subsequent judging steps.

Embodiments of the present invention provide a method and device for identifying an IP address of a CDN source site. In the method, for the domain name of the CDN source site, according to each DNS historical database in the historical database list, it is determined whether there is an IP address corresponding to the domain name in each DNS historical database. The IP address corresponding to the above domain name, if there is an IP address corresponding to the domain name, determine the IP address as the IP address of the CDN source station. Since in the embodiment of the present invention, according to the historical data recorded in the DNS historical database, it is determined whether there is an IP address corresponding to the domain name of the CDN source site in each DNS historical database, thereby determining the IP address of the CDN source site, thereby realizing the IP address of the CDN source site. The identification of the address provides convenience for the protection of the CDN source station in the later stage.

Description of drawings

FIG. 1 is a schematic diagram of the relationship among users, CDNs and CDN origin stations in the prior art;

FIG. 2 is a schematic diagram of an IP address identification process of a CDN source station provided by an embodiment of the present invention;

FIG. 3 is a schematic diagram of a detailed process of identifying an IP address of a CDN source station provided by Embodiment 1 of the present invention;

FIG. 4 is a schematic diagram of an IP address identification process of a CDN origin site provided by Embodiment 2 of the present invention;

FIG. 5 is a schematic diagram of an IP address identification process of a CDN origin site provided by Embodiment 3 of the present invention;

FIG. 6 is a schematic structural diagram of an IP address identification device for a CDN origin site provided by an embodiment of the present invention.

Detailed ways

In order to identify the IP address of the CDN source site and facilitate later protection of the CDN source site, the embodiments of the present invention provide a method and device for identifying the IP address of the CDN source site.

Embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings.

Fig. 2 is a schematic diagram of an IP address identification process of a CDN source station provided by an embodiment of the present invention, and the process includes the following steps:

S201: Obtain the domain name of the origin site where the CDN is deployed.

For the CDN source site, you can use a search engine to determine the domain name of the CDN source site.

S202: According to each DNS historical database in the saved historical database list, determine whether there is an IP address corresponding to the domain name in each DNS historical database, and when there is an IP address corresponding to the domain name in the DNS historical database, proceed to step S203, Otherwise, go to step S204.

At the beginning of the establishment of the origin site, the CDN may not have been deployed for the origin site, and users can directly access the origin site. At this time, the IP address of the origin site and the domain name of the origin site are saved in the database as an Address (A) record. . After the CDN is deployed for the origin site, users can only access the CDN origin site through the CDN, and the user's access data is recorded in the corresponding CDN. However, although the previous historical data of the CDN source site has expired, these historical data will be deleted. It will be transferred from the previous database of the source site to each DNS historical database. Therefore, the IP address of the CDN source site can be determined by searching the information recorded in the historical databases of each Domain Name System (DNS).

S203: Determine the IP address as the IP address of the CDN source site.

S204: The method for determining the IP address of the CDN source site through this method ends.

Since some expired data are stored in each DNS historical database, although the data has expired, it will still be stored in the DNS historical database. Therefore, by searching the data stored in each DNS historical database, the IP address of the CDN source site can be determined. The DNS historical database can use some existing historical databases that provide open interfaces, such as the ISC historical database, or during implementation, the corresponding DNS historical database can be configured as needed to record expired historical data. Choose flexibly.

In the embodiment of the present invention, according to the historical data recorded in the DNS historical database, it is determined whether there is an IP address corresponding to the domain name of the CDN source site in each DNS historical database, thereby determining the IP address of the CDN source site, thereby realizing the CDN source site IP address identification, which facilitates the protection of the CDN source station in the later stage.

In order to accurately locate the CDN source site, improve the identification efficiency of the CDN source site, and then improve the identification efficiency of the IP address of the CDN source site, in the embodiment of the present invention, it is necessary to determine whether the source site is a CDN source for each source site Site, that is, to determine whether a CDN is deployed for the origin site. Before obtaining the domain name of the origin site with CDN deployed, it also includes:

Send request information to the origin site;

Determine whether the header of the response information returned by the source site carries the CDN identification field;

If the message header of the response information carries a CDN identification field, it is determined that the source station is deployed with a CDN.

When the source site is a CDN source site, the sent request information is sent to the CDN source site via the CDN, and when the CDN source site returns the response information, it also sends the response information to the CDN, and the CDN receives the response information, in the response The CDN identification field is added to the message header of the information, so that the message header of the response information carries the CDN identification field. Therefore, when receiving the response information returned by the CDN origin station, it is judged whether the message header of the response information carries the CDN identification field, and whether the origin station is a CDN origin station can be judged. When it is judged that the source site is a CDN source site, the IP address of the CDN source site is identified by using the method for identifying the IP address of the CDN source site provided by the embodiment of the present invention.

FIG. 3 is a schematic diagram of a detailed process of identifying the IP address of a CDN source station provided by Embodiment 1 of the present invention. The process includes the following steps:

S301: Send request information to the source station.

Wherein, the request information may be any request information, as long as the source station can return response information according to the request information.

S302: Judging whether the message header of the response information returned by the origin station carries a CDN identification field, and if the judging result is yes, go to step S303; otherwise, go to step S307.

S303: Determine that the origin site is a CDN origin site, and obtain the domain name of the CDN origin site.

S304: According to each DNS historical database in the saved historical database list, determine whether there is an IP address corresponding to the domain name in each DNS historical database, and when there is an IP address corresponding to the domain name in the DNS historical database, proceed to step S305, Otherwise, go to step S306.

S305: Determine the IP address as the IP address of the CDN source site.

S306: The method for determining the IP address of the CDN source site through this method ends.

S307: The origin station is not a CDN origin station, and the IP address returned by the origin station is its own IP address.

For an origin station that has been determined as a CDN origin station, using the method for identifying the IP address of the CDN origin station provided by the embodiment of the present invention can effectively improve the efficiency of identifying the IP address of the CDN origin station.

In the embodiment of the present invention, after searching and determining that there is an IP address corresponding to the domain name of the CDN source site in the DNS historical database according to the A records in each DNS historical database, in order to prevent the subsequent CDN source site from changing the IP address, the determined CDN The accuracy of the IP address of the source site, before the IP address is determined as the IP address of the CDN source site, it also includes:

Accessing the IP address to obtain the web page content corresponding to the IP address;

Determine whether the content of the web page is the same as the content of the web page corresponding to the source site accessed through the CDN;

If not, it is determined that the IP address is not the IP address of the CDN origin site.

Obtain the web page content corresponding to the IP address by accessing the IP address, and judge whether the IP address is the IP address of the CDN source site according to whether the web page content is the same as the web page content corresponding to the source site accessed through the CDN. If the IP address of the CDN source station is changed later, the content of the webpage corresponding to the IP address cannot be the same as the content of the webpage corresponding to the origin station accessed through the CDN. On the contrary, if the IP address of the CDN source station is not changed later, the IP address The corresponding web page content should be the same as that corresponding to accessing the origin site through CDN.

FIG. 4 is a schematic diagram of an IP address identification process of a CDN source station provided by Embodiment 2 of the present invention, and the process includes the following steps:

S401: Obtain the domain name of the origin site where the CDN is deployed.

S402: According to each DNS historical database in the saved historical database list, determine whether there is an IP address corresponding to the domain name in each DNS historical database, and when there is an IP address corresponding to the domain name in the DNS historical database, proceed to step S403, Otherwise, go to step S407.

S403: Access the IP address, and acquire webpage content corresponding to the IP address.

S404: Determine whether the content of the web page is the same as the content of the web page corresponding to the source site accessed through the CDN, and if the determination result is yes, proceed to step S405; otherwise, proceed to step S406.

S405: Determine the IP address as the IP address of the CDN source site.

S406: The IP address is not the IP address of the CDN origin site.

S407: The method for determining the IP address of the CDN origin site through this method ends.

When the IP address corresponding to the domain name of the CDN source site exists in the DNS historical database, it is judged whether the IP address is the IP of the CDN source site by comparing the webpage content of the IP address with the content of the webpage corresponding to the source site accessed through the CDN address, further improving the accuracy of IP address identification of the CDN origin site.

Or, in the embodiment of the present invention, when it is determined that there is an IP address corresponding to the domain name of the CDN source site in a certain DNS historical database according to the historical data stored in each DNS historical database, in order to further improve the identified CDN source site The accuracy of the IP address. Before the IP address is determined as the IP address of the CDN source station, the method includes:

Send request information to the IP address;

Determine whether the message header of the response information returned by the IP address carries the CDN identification field;

If the message header of the response information carries the CDN identification field, it is determined that the IP address is not the IP address of the CDN source station.

Using the above method can avoid that the acquired IP address is the IP address of the CDN source station returned by the CDN, thereby further improving the accuracy of identifying the CDN source station IP address.

By accessing the IP address above, the content of the web page corresponding to the IP address is obtained, and according to whether the content of the web page is the same as the content of the web page corresponding to the source site accessed through the CDN, it is judged whether the IP address is the IP address of the CDN source site, and the above The method of determining whether the IP address is the IP address of the CDN source site by sending a request to the CDN source site to determine whether the response information carries the CDN identification field can be used separately or in combination. The combination of the above two implementation manners can effectively ensure the accuracy of the identified IP address of the CDN source site.

FIG. 5 is a schematic diagram of an IP address identification process of a CDN source station provided by Embodiment 3 of the present invention, and the process includes the following steps:

S501: Send request information to the source station.

S502: Determine whether the message header of the response information returned by the origin station carries a CDN identification field, and if the determination result is yes, proceed to step S503; otherwise, proceed to step S511.

S503: Determine that the origin site is a CDN origin site, and obtain the domain name of the CDN origin site.

S504: According to each DNS historical database in the saved historical database list, determine whether there is an IP address corresponding to the domain name in each DNS historical database, and when there is an IP address corresponding to the domain name in the DNS historical database, proceed to step S505, Otherwise, go to step S510.

S505: Access the IP address, and acquire webpage content corresponding to the IP address.

S506: Determine whether the content of the web page is the same as the content of the web page corresponding to the source site accessed through the CDN, and if the determination result is yes, proceed to step S507; otherwise, proceed to step S509.

S507: Send request information to the IP address, and determine whether the message header of the response information returned by the IP address carries a CDN identification field. If the determination result is no, proceed to step S508; otherwise, proceed to step S509.

S508: Determine the IP address as the IP address of the CDN source site.

S509: Determine that the IP address is not the IP address of the CDN origin site.

S510: The method for determining the IP address of the CDN source site through this method ends.

S511: The origin station is not a CDN origin station, and the IP address returned by the origin station is its own IP address.

Since in the embodiment of the present invention, according to the historical data recorded in the DNS historical database, it is determined whether there is an IP address corresponding to the domain name of the CDN source site in each DNS historical database, thereby determining the IP address of the CDN source site, thereby realizing the IP address of the CDN source site. The identification of the address provides convenience for the protection of the CDN source station in the later stage.

FIG. 6 is a schematic structural diagram of an IP address identification device for a CDN source station provided by an embodiment of the present invention, and the device includes:

Obtaining module 61, configured to obtain the domain name of the origin site deployed with CDN;

Judging module 62, for determining whether there is an IP address corresponding to the domain name in each DNS historical database according to each DNS historical database in the saved historical database list;

The identifying module 63 is configured to determine the IP address as the IP address of the CDN source station when the judging module determines that there is an IP address corresponding to the domain name in the DNS history database.

Preferably, in order to improve the accuracy of the determined IP address of the CDN source station in the embodiment of the present invention, the device further includes:

A sending module 64, configured to send request information to the source station;

The judging module 62 is used to judge whether the message header of the response information returned by the source station carries a CDN identification field;

The obtaining module 61 is specifically configured to determine that the source station has deployed a CDN when the judging module judges that the message header of the response information carries a CDN identification field.

Preferably, in order to improve the accuracy of the determined IP address of the CDN source site in the embodiment of the present invention, the device further includes: an access obtaining module 65, configured to access the IP address and obtain the web page corresponding to the IP address content;

The judging module 62 is also used to judge whether the content of the web page is the same as the content of the web page corresponding to the source site accessed through the CDN;

The identification module 63 is also used to notify the judgment module to perform subsequent judgment steps when the judging module judges that the content of the webpage accessed by the IP address is the same as the content of the webpage corresponding to the source site accessed through the CDN, otherwise, determine that the IP address is not a CDN The IP address of the origin server.

Preferably, in order to improve the accuracy of the determined IP address of the CDN source station in the embodiment of the present invention, the device further includes:

A sending module 64, configured to send request information to the source station;

The judging module 62 is also used to judge whether the header of the response information returned by the IP address carries a CDN identification field;

The identification module 63 is also used to determine that the IP address is not the IP address of the CDN source station when the judging module judges that the message header of the response information carries a CDN identification field, otherwise, notify the judging module 62 to perform subsequent judging steps.

Embodiments of the present invention provide a method and device for identifying an IP address of a CDN source site. In the method, for the domain name of the CDN source site, according to each DNS historical database in the historical database list, it is determined whether there is an IP address corresponding to the domain name in each DNS historical database. The IP address corresponding to the above domain name, if there is an IP address corresponding to the domain name, determine the IP address as the IP address of the CDN source station. Since in the embodiment of the present invention, according to the historical data recorded in the DNS historical database, it is determined whether there is an IP address corresponding to the domain name of the CDN source site in each DNS historical database, thereby determining the IP address of the CDN source site, thereby realizing the IP address of the CDN source site. The identification of the address provides convenience for the protection of the CDN source station in the later stage.

Those skilled in the art should understand that the embodiments of the present application may be provided as methods, systems, or computer program products. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

The present application is described with reference to flowcharts and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the present application. It should be understood that each procedure and/or block in the flowchart and/or block diagram, and combinations of procedures and/or blocks in the flowchart and/or block diagram can be realized by computer program instructions. These computer program instructions may be provided to a general purpose computer, special purpose computer, embedded processor, or processor of other programmable data processing equipment to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing equipment produce a Means for realizing the functions specified in one or more steps of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to operate in a specific manner, such that the instructions stored in the computer-readable memory produce an article of manufacture comprising instruction means, the instructions The device realizes the function specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions can also be loaded onto a computer or other programmable data processing device, causing a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process, thereby The instructions provide steps for implementing the functions specified in the flow chart flow or flows and/or block diagram block or blocks.

While preferred embodiments of the present application have been described, additional changes and modifications to these embodiments can be made by those skilled in the art once the basic inventive concept is appreciated. Therefore, the appended claims are intended to be construed to cover the preferred embodiment and all changes and modifications which fall within the scope of the application.

Obviously, those skilled in the art can make various changes and modifications to the application without departing from the spirit and scope of the application. In this way, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalent technologies, the present application is also intended to include these modifications and variations.

Claims (10)

1. an IP Address Recognition method for CDN source station, is characterized in that, the method comprises:

Obtain the domain name of the source station that is deployed with CDN;

According to each DNS historical data base in the historical data base list of preserving, determine in each DNS historical data base, whether there be the IP address corresponding with domain name;

If there is the IP address corresponding with this domain name in DNS historical data base, this IP address is defined as to the IP address of described CDN source station.

2. the method for claim 1, is characterized in that, described in obtain the domain name of the source station that is deployed with CDN before, also comprise:

To source station, send request information;

Judge in the message header of the response message that source station is returned and whether carry CDN identification field;

If carry CDN identification field in the message header of described response message, determine that described source station is deployed with CDN.

3. the method for claim 1, is characterized in that, before the described IP address that this IP address is defined as to described CDN source station, also comprises:

Access described IP address, obtain web page contents corresponding to this IP address;

Judge this web page contents and whether by CDN, access web page contents corresponding to this source station identical;

If not identical, determine the IP address of non-CDN source station, this IP address.

4. the method as described in claim 1 or 3, is characterized in that, before the described IP address that this IP address is defined as to described CDN source station, described method comprises:

To described IP address, send request information;

Judge in the message header of the response message that this IP address is returned and whether carry CDN identification field;

If carry CDN identification field in the message header of this response message, determine the IP address of non-CDN source station, this IP address.

5. whether the method for claim 1, is characterized in that, in described definite each DNS historical data base, exist the IP address corresponding with domain name to comprise:

Search the address A record in each DNS historical data base;

Judge in the A record of each DNS historical data base and whether preserve the IP address corresponding with this domain name.

6. an IP address recognition unit for CDN source station, is characterized in that, described device comprises:

Acquisition module, for obtaining the domain name of the source station that is deployed with CDN;

Judge module, for according to each DNS historical data base of the historical data base list of preserving, determines in each DNS historical data base, whether there be the IP address corresponding with domain name;

Identification module, for when judge module is when determining that DNS historical data base exists the IP address corresponding with this domain name, is defined as this IP address the IP address of CDN source station.

7. device as claimed in claim 6, is characterized in that, described device also comprises:

Sending module, for sending request information to source station;

Described judge module, for judging whether the message header of the response message that source station is returned carries CDN identification field;

Described acquisition module, while carrying CDN identification field specifically for judging when judge module in the message header of this response message, is defined as described source station and is deployed with CDN.

8. device as claimed in claim 6, is characterized in that, described device also comprises:

Access acquisition module, for accessing described IP address, obtains web page contents corresponding to this IP address;

Described judge module, also for judging this web page contents and whether access web page contents corresponding to this source station by CDN identical;

Described identification module, also for the web page contents when this IP address of judge module judgement access with by CDN, access web page contents corresponding to this source station when identical, notice judge module carries out follow-up determining step, otherwise, determine the IP address of non-CDN source station, this IP address.

9. the device as described in claim 6 or 8, is characterized in that, described device also comprises:

Sending module, for sending request information to source station;

Described judge module, also for judging whether the message header of the response message that this IP address is returned carries CDN identification field;

Described identification module, also when judging that when judge module the message header of this response message carries CDN identification field, determines the IP address of non-CDN source station, this IP address, otherwise notice judge module carries out follow-up determining step.

10. device as claimed in claim 6, is characterized in that, described in search module, specifically for searching the address A record in each DNS historical data base;

Described judge module, specifically for judging whether the A of each DNS historical data base preserves the IP address corresponding with this domain name in recording.

Images