支持DNSSEC和/或实验性新型RR类型的DNS解析器库 [英] DNS resolver libraries with support for DNSSEC and/or experimental new RR types

问题描述

DNS解析器库中的最新技术是什么？我特别感兴趣的是完整的（不是stub）解析器，支持以下任何一项或全部操作：在一个请求数据包中进行多个查询，完成DNSSEC验证，将关于DNSSEC验证的详细信息返回给应用程序，并且可以处理实验性新的RR，而不会受到黑客攻击。异步查询是好的但不是必需的。

首选的实现语言是C，C ++，Python或Javascript，但我会看看什么（我真的很想不知道INTERCAL中的DNS解析器，尽管如此;-)可以在具有WebSockets支持的浏览器中运行的纯JS实现将是非常棒的。

解决方案

我知道的最好的图书馆（包括DNSSEC验证）是 libunbound ，它是 Unbound 发行。

请注意，DNS协议本身不支持您的第一个要求（一个数据包中的多个查询）。最好的方法是使用TCP，然后通过一个套接字发出多个顺序查询。

What's the state of the art in DNS resolver libraries? I am particularly interested in full (not stub) resolvers that support any or all of: making multiple queries in one request packet, complete DNSSEC validation, returning detailed information about DNSSEC validation to the application, and can handle experimental new RRs without much hacking. Async queries are nice but not required.

Preferred implementation languages would be C, C++, Python, or Javascript, but I'll look at anything (I'd really rather not know about your DNS resolver in INTERCAL, though ;-) A pure-JS implementation that could run in a browser with WebSockets support would be extra awesome.

解决方案

The best library I know of (and it includes DNSSEC validation) is libunbound which is part of the Unbound distribution.

Note that the DNS protocol itself does not support your first requirement (multiple queries in one packet). The best you can do is use TCP and then issue multiple sequential queries over one socket.

这篇关于支持DNSSEC和/或实验性新型RR类型的DNS解析器库的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！