Reconciling internet DNS zone file changes with origin change requests

Patent metadata

Field	Value
Publication number	US-9531603-B2
Application number	US-201414209783-A
Country	US
Kind code	B2
Filing date	Mar 13, 2014
Priority date	Mar 14, 2013
Publication date	Dec 27, 2016
Grant date	Dec 27, 2016

Abstract

Techniques for monitoring zone file changes are presented. The techniques may include obtaining at least one zone change request and parsing the at least one zone change request to obtain at least one change request unit. The techniques may include obtaining a last published zone file, obtaining a new zone file, and comparing the last published zone file to the new zone file to obtain at least one difference object. The techniques may include matching the at least one difference object to the at least one change request unit to identify at least one unmatched difference object. The techniques may include providing a human readable report comprising an indication of the at least one unmatched difference object.

First claim

What is claimed is:

1. A method for monitoring Domain Name System (DNS) zone file changes, the method comprising:
obtaining at least one zone change request;
parsing the at least one zone change request to obtain at least one change request unit, wherein each change request unit constitutes a single executable instruction;
obtaining a last published zone file;
obtaining an unpublished new zone file;
comparing the last published zone file to the new zone file to obtain at least one difference object, wherein the at least one difference object identifies a DNS record type, a DNS record, and a difference type;
matching the at least one difference object to the at least one change request unit to identify at least one unmatched difference object;
providing a human readable report comprising an indication of the at least one unmatched difference object.

2. The method of claim 1 , wherein each change request unit is a smallest possible unit that can be executed on a domain or a host.

3. The method of claim 1 , wherein each change request unit is of the form of one of: DomainCreateHostAdd, DomainCreateDSAdd, DomainDelete, DomainUpdateHostAdd, DomainUpdateHostRemove, DomainUpdateDSAdd, DomainUpdateDSRemove, DomainUpdateDSChange, HostUpdatelPAdd, HostUpdatelPRemove, and HostUpdateHostNameChange.

4. The method of claim 1 , wherein each difference object comprises a DNSJAVA object.

5. The method of claim 4 , wherein each difference object comprises an org.xbill.DNS.record object.

6. The method of claim 1 , wherein each difference object is of the form of one of: AddNameServer, DeleteNameServer, AddA/AAAA, DeleteA/AAAA, AddDelegationSigner, and DeleteDelegationSigner.

7. The method of claim 1 , wherein the matching comprises, for each difference object, searching for a corresponding change request unit.

8. The method of claim 1 , further comprising filtering the at least one difference object to remove DNSSEC records.

9. The method of claim 1 , further comprising:
altering the new zone file to account for the at least one unmatched difference object, whereby a corrected new zone file is produced; and
providing the corrected new zone file for publishing.

10. The method of claim 1 , wherein:
the at least one zone change request comprises at least one root zone change request;
the last published zone file comprises a last published root zone file; and
the new zone file comprises a new root zone file.

11. A system for monitoring zone file changes, the system comprising:
at least one processor configured to obtain at least one zone change request;
at least one processor configured to parse the at least one zone change request to obtain at least one change request unit, wherein each change request unit constitutes a single executable instruction;
at least one processor configured to obtain a last published zone file;
at least one processor configured to obtain an unpublished new zone file;
at least one processor configured to compare the last published zone file to the new zone file to obtain at least one difference object, wherein the at least one difference object identifies a domain name system (DNS) record type, a DNS record, and a difference type;
at least one processor configured to match the at least one difference object to the at least one change request unit to identify at least one unmatched difference object;
at least one processor configured to generate a human readable report comprising an indication of the at least one unmatched difference object.

12. The system of claim 11 , wherein each change request unit is a smallest possible unit that can be executed on a domain or a host.

13. The system of claim 11 , wherein each change request unit is of the form of one of: DomainCreateHostAdd, DomainCreateDSAdd, DomainDelete, DomainUpdateHostAdd, DomainUpdateHostRemove, DomainUpdateDSAdd, DomainUpdateDSRemove, DomainUpdateDSChange, HostUpdatelPAdd, HostUpdatelPRemove, and HostUpdateHostNameChange.

14. The system of claim 11 , wherein each difference object comprises a DNSJAVA object.

15. The system of claim 11 , wherein each difference object comprises an org.xbill.DNS.record object.

16. The system of claim 11 , wherein each difference object is of the form of one of: AddNameServer, DeleteNameServer, AddA/AAAA, DeleteA/AAAA, AddDelegationSigner, and DeleteDelegationSigner.

17. The system of claim 11 , wherein the at least one processor configured to match is further configured to, for each difference object, search for a corresponding change request unit.

18. The system of claim 11 , further comprising at least one processor configured to filter the at least one difference object to remove DNSSEC records.

19. The system of claim 11 , further comprising:
at least one processor configured to alter the new zone file to account for the at least one unmatched item, whereby a corrected new zone file is produced; and
at least one processor configured to provide the corrected new zone file for publishing.

20. The system of claim 11 , wherein:
the at least one zone change request comprises at least one root zone change request;
the last published zone file comprises a last published root zone file; and
the new zone file comprises a new root zone file.

Assignees

• Verisign Inc

Inventors

• Balasubramanian Ramesh
• Coppola Brian
• Rathore Punit
• Sudha Surabhi

Classifications

• H04L61/1511

  Electricity · mapped topic

• H04L43/04 Primary

  Processing captured monitoring data, e.g. for logfile generation · CPC title

• H04L61/4511 Primary

  using domain name system [DNS] · CPC title

• H04L43/06

  Generation of reports · CPC title

• H04L61/457 Primary

  containing identifiers of data entities on a computer, e.g. file names · CPC title