DNS-BC: Fast, Reliable and Secure Domain Name System Caching System Based on a Consortium Blockchain.

Area of Science:

• Computer Science
• Network Security
• Distributed Systems

Background:

• The Domain Name System (DNS) is crucial for internet navigation, translating domain names into IP addresses.
• Current DNS caching systems suffer from poor real-time performance, accuracy issues, and security vulnerabilities.
• Recursive resolvers, a key part of DNS, face challenges with caching limitations and potential Denial-of-Service (DoS) attacks.

Purpose of the Study:

• To propose an innovative caching system for DNS leveraging consortium blockchain technology.
• To enhance the security, accuracy, and real-time performance of DNS resolution.
• To introduce a novel encrypted DNS protocol, DNS over KCP (DoK), for faster and more reliable data transmission.

Main Methods:

• Developed DNS-BC, a caching system utilizing a consortium blockchain's synchronization and immutability.
• Implemented a credibility management system to ensure up to 100% accuracy in DNS records.
• Designed the DNS over KCP (DoK) protocol, based on the KCP protocol, for accelerated and secure data transmission.
• Integrated encrypted transmission protocols to address common security and privacy concerns.

Main Results:

• DNS-BC demonstrated high real-time performance and achieved up to 100% accuracy through its blockchain and credibility mechanisms.
• The proposed system significantly reduces traffic load on name servers, mitigating DoS attack risks.
• Experimental results show DoK transmission times are approximately one-quarter of those for DNS over TLS (DoT) and DNS over HTTPS (DoH).
• DoK's latency can be as low as one-third of TCP in poor network conditions.

Conclusions:

• The consortium blockchain-based DNS caching system (DNS-BC) effectively addresses the limitations of traditional caching methods.
• DNS-BC offers substantial improvements in performance, accuracy, and security for DNS resolution.
• The novel DoK protocol provides a significant speed advantage over existing encrypted DNS protocols, enhancing user experience and network efficiency.