Ports Distribution Management for Privacy Protection inside Local Domain Name System

摘要: Domain Name System (DNS) had been recognized as an indispensable and fundamental infrastructure of current Internet. However, due to the original design philosophy easy access principle, one can conveniently wiretap DNS requests responses. Such phenomenon is a serious threat for user privacy protection especially when inside hacking takes place. Motivated by such circumstances, we proposed ports distribution management solution relieve potential information leakage local DNS. Users will be able utilize pre-assigned port numbers instead default 53. Selection method at server side interactive process with corresponding end host are investigated. The necessary implementation steps, including modifications destination field, extension option usage, etc., also discussed. A mathematical model presented further evaluate performance. Both possible blocking probability utilization illustrated. We expect that this beneficial not only users in security enhancement, but servers resources optimization.