ICANN 在新加坡安装根服务器集群
我很高兴地通知社群,我们现已在新加坡安装了一个 ICANN 管理的根服务器 (ICANN Managed Root Server, IMRS) 集群。这个新集群将帮助改善亚太地区的根服务器容量,增强整个根服务器系统的适应力。
什么是 IMRS 集群?
全球共有 13 个根服务器标识。ICANN 组织负责管理其中之一,即 IMRS,此前也被称为 L 根。IMRS 由遍布全球的近 170 台大型和小型站点中的独立机器组建而成。IMRS 集群则代指一个大型站点,由数十台服务器和强大互联网连接技术构成。集群拥有回应域名系统 (Domain Name System, DNS) 查询的强大容量。
尽管 IMRS 集群的容量可以应付查询负载量正常的时期,但当查询超载时,这种容量则更为关键。例如,当分布式拒绝服务 (DDoS) 攻击发生时,IMRS 的流量就会超载,此时上述容量就尤为重要了。
为什么要安装在亚洲?为什么选择新加坡?
我们认为决定在新加坡增添一个 IMRS 集群具有一定战略意义,并能充分运用 ICANN 组织的资源。目前的三个 IMRS 集群有两个位于北美洲,一个位于欧洲。这个在新加坡安装的第四个集群将满足亚太地区对根服务的当前和日益增长的需求。
目前在亚太地区,我们的现有 IMRS 站点所收到的查询总量已经达到了第二繁忙地区欧洲地区查询总量的两倍。不论其他地区的网络或服务器的运行状态如何,新加坡的 IMRS 集群将使得源于亚太地区的查询能够得到回复,从而大大提高 IMRS 的整体适应力。此外,面对 2019 冠状病毒病 (COVID-19) 的全球疫情,这次部署更显及时,因为 DNS 流量在全球封城期间增加了近 30%。
若因攻击而导致流量陡增,则新加坡集群所提供的额外容量就能派上用场,吸收这部分容量,帮助缓和攻击带来的影响。有了充足的容量,亚太地区的查询即可继续得到回复,从而把根服务无法访问所导致的停机时间降至最低或甚至消除。
我们的亚太地区办公室也位于新加坡,这里的互联网基础设施尤为先进和强健,适于支持一个 IMRS 集群。此外,该国还与各种海底光缆紧密连接。我们还要衷心感谢新加坡政府大力支持在这里设立 IMRS 集群。
还有哪些后续工作?
我的团队正在深入探究具体在网络拓扑内如何安置新的 IMRS 节点,从而为用户带来最大福利。我们将继续监控并按需增添更多集群。如果您希望了解更多信息,我鼓励您阅读 5 月发布的根服务器系统概述 (OCTO-010) 的各种语言版本。
Domain Name System
Internationalized Domain Name ,IDN,"IDNs are domain names that include characters used in the local representation of languages that are not written with the twenty-six letters of the basic Latin alphabet ""a-z"". An IDN can contain Latin letters with diacritical marks, as required by many European languages, or may consist of characters from non-Latin scripts such as Arabic or Chinese. Many languages also use other types of digits than the European ""0-9"". The basic Latin alphabet together with the European-Arabic digits are, for the purpose of domain names, termed ""ASCII characters"" (ASCII = American Standard Code for Information Interchange). These are also included in the broader range of ""Unicode characters"" that provides the basis for IDNs. The ""hostname rule"" requires that all domain names of the type under consideration here are stored in the DNS using only the ASCII characters listed above, with the one further addition of the hyphen ""-"". The Unicode form of an IDN therefore requires special encoding before it is entered into the DNS. The following terminology is used when distinguishing between these forms: A domain name consists of a series of ""labels"" (separated by ""dots""). The ASCII form of an IDN label is termed an ""A-label"". All operations defined in the DNS protocol use A-labels exclusively. The Unicode form, which a user expects to be displayed, is termed a ""U-label"". The difference may be illustrated with the Hindi word for ""test"" — परीका — appearing here as a U-label would (in the Devanagari script). A special form of ""ASCII compatible encoding"" (abbreviated ACE) is applied to this to produce the corresponding A-label: xn--11b5bs1di. A domain name that only includes ASCII letters, digits, and hyphens is termed an ""LDH label"". Although the definitions of A-labels and LDH-labels overlap, a name consisting exclusively of LDH labels, such as""icann.org"" is not an IDN."
Comments