{"created":"2025-02-19T10:31:36.520093+00:00","updated":"2025-07-07T04:05:44.100787+00:00","metadata":{"_oai":{"id":"oai:ipsj.ixsq.nii.ac.jp:02000716","sets":["1164:4088:11911:1739958296301"]},"path":["1739958296301"],"owner":"80578","recid":"2000716","title":["マルチテナント権威DNSサーバにおけるDo53/DoTの処理手法の検討と実用性評価"],"pubdate":{"attribute_name":"PubDate","attribute_value":"2025-02-24"},"_buckets":{"deposit":"de8525e8-996a-4cf7-9a33-233272778c68"},"_deposit":{"id":"2000716","pid":{"type":"depid","value":"2000716","revision_id":0},"owners":[80578],"status":"published","created_by":80578},"item_title":"マルチテナント権威DNSサーバにおけるDo53/DoTの処理手法の検討と実用性評価","author_link":[],"item_titles":{"attribute_name":"タイトル","attribute_value_mlt":[{"subitem_title":"マルチテナント権威DNSサーバにおけるDo53/DoTの処理手法の検討と実用性評価","subitem_title_language":"ja"},{"subitem_title":"A Study on Processing Methods for Do53/DoT in Multi-Tenant Authoritative DNS Servers and Their Practical Evaluation","subitem_title_language":"en"}]},"item_keyword":{"attribute_name":"キーワード","attribute_value_mlt":[{"subitem_subject":"IOT","subitem_subject_scheme":"Other"}]},"item_type_id":"4","publish_date":"2025-02-24","item_4_text_3":{"attribute_name":"著者所属","attribute_value_mlt":[{"subitem_text_value":"学習院大学／東京農工大学"},{"subitem_text_value":"東京農工大学"},{"subitem_text_value":"東京農工大学"},{"subitem_text_value":"東京科学大学"},{"subitem_text_value":"東京農工大学"}]},"item_4_text_4":{"attribute_name":"著者所属(英)","attribute_value_mlt":[{"subitem_text_value":"Gakushuin University / Tokyo University of Agriculture and Technology","subitem_text_language":"en"},{"subitem_text_value":"Tokyo University of Agriculture and Technology","subitem_text_language":"en"},{"subitem_text_value":"Tokyo University of Agriculture and Technology","subitem_text_language":"en"},{"subitem_text_value":"Institute of Science Tokyo","subitem_text_language":"en"},{"subitem_text_value":"Tokyo University of Agriculture and Technology","subitem_text_language":"en"}]},"item_language":{"attribute_name":"言語","attribute_value_mlt":[{"subitem_language":"jpn"}]},"item_publisher":{"attribute_name":"出版者","attribute_value_mlt":[{"subitem_publisher":"情報処理学会","subitem_publisher_language":"ja"}]},"publish_status":"0","weko_shared_id":-1,"item_file_price":{"attribute_name":"Billing file","attribute_type":"file","attribute_value_mlt":[{"url":{"url":"https://ipsj.ixsq.nii.ac.jp/record/2000716/files/IPSJ-IOT25068030.pdf","label":"IPSJ-IOT25068030.pdf"},"date":[{"dateType":"Available","dateValue":"2027-02-24"}],"format":"application/pdf","billing":["billing_file"],"filename":"IPSJ-IOT25068030.pdf","filesize":[{"value":"1.0 MB"}],"mimetype":"application/pdf","priceinfo":[{"tax":["include_tax"],"price":"660","billingrole":"5"},{"tax":["include_tax"],"price":"330","billingrole":"6"},{"tax":["include_tax"],"price":"0","billingrole":"43"},{"tax":["include_tax"],"price":"0","billingrole":"44"}],"accessrole":"open_date","version_id":"0a5aca1b-ac0f-4d33-8bb1-04e40194986b","displaytype":"detail","licensetype":"license_note","license_note":"Copyright (c) 2025 by the Information Processing Society of Japan"}]},"item_4_creator_5":{"attribute_name":"著者名","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"村上,登志男"}]},{"creatorNames":[{"creatorName":"根木,湧人"}]},{"creatorNames":[{"creatorName":"山井,成良"}]},{"creatorNames":[{"creatorName":"金,勇"}]},{"creatorNames":[{"creatorName":"中川,令"}]}]},"item_4_creator_6":{"attribute_name":"著者名(英)","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"Toshio Murakami","creatorNameLang":"en"}]},{"creatorNames":[{"creatorName":"Motogi Yuto","creatorNameLang":"en"}]},{"creatorNames":[{"creatorName":"Nariyoshi Yamai","creatorNameLang":"en"}]},{"creatorNames":[{"creatorName":"Yong Jin","creatorNameLang":"en"}]},{"creatorNames":[{"creatorName":"Rei Nakagawa","creatorNameLang":"en"}]}]},"item_4_source_id_9":{"attribute_name":"書誌レコードID","attribute_value_mlt":[{"subitem_source_identifier":"AA12326962","subitem_source_identifier_type":"NCID"}]},"item_4_textarea_12":{"attribute_name":"Notice","attribute_value_mlt":[{"subitem_textarea_value":"SIG Technical Reports are nonrefereed and hence may later appear in any journals, conferences, symposia, etc."}]},"item_resource_type":{"attribute_name":"資源タイプ","attribute_value_mlt":[{"resourceuri":"http://purl.org/coar/resource_type/c_18gh","resourcetype":"technical report"}]},"item_4_source_id_11":{"attribute_name":"ISSN","attribute_value_mlt":[{"subitem_source_identifier":"2188-8787","subitem_source_identifier_type":"ISSN"}]},"item_4_description_7":{"attribute_name":"論文抄録","attribute_value_mlt":[{"subitem_description":"本研究では，マルチテナント環境における権威DNSサーバに対するDo53（通常のDNS）およびDoT（DNS over TLS）の効率的な処理手法とその実用性について検討した．具体的には，HAProxyを用いてSNI （Server Name Indication）に基づくDoTの振り分けを行い，各ドメインに適したTLS証明書を提供する実装を行った．さらに，通常のDNSリクエスト（Do53）に対しては，HAProxyを配置したサーバ上でBINDを動作させ，ゾーン情報に応じたクエリ応答を返した．検証の結果，DoTにおけるHAProxyのSNI振り分け処理はシングルテナントの権威DNSサーバと比較し十分に高速であり，遅延を最小限に抑えることが可能であった．これにより，Do53とDoTを効率的に処理し，セキュリティと運用効率を両立させるマルチテナント権威DNSサーバの構築手法を示すことができた．本手法は大規模DNS環境への適用が期待できる．","subitem_description_type":"Other"}]},"item_4_description_8":{"attribute_name":"論文抄録(英)","attribute_value_mlt":[{"subitem_description":"In this study, we investigated an efficient processing method for Do53 (standard DNS) and DoT (DNS over TLS) on an authoritative DNS server in a multi-tenant environment and examined its practicality. Specifically, we utilized HAProxy to distribute DoT requests based on SNI (Server Name Indication), implementing a mechanism that provides TLS certificates tailored to each domain. Furthermore, for conventional DNS requests (Do53), we ran BIND on the same server as HAProxy to respond to queries according to zone information. Our evaluation results showed that HAProxy's SNI-based routing for DoT was sufficiently fast compared to a single-tenant authoritative DNS server and minimized latency. Consequently, we demonstrated a method to construct a multi-tenant authoritative DNS server capable of efficiently handling both Do53 and DoT, achieving a balance between security and operational efficiency. This approach is expected to be applicable to large-scale DNS environments.","subitem_description_type":"Other","subitem_description_language":"en"}]},"item_4_biblio_info_10":{"attribute_name":"書誌情報","attribute_value_mlt":[{"bibliographicPageEnd":"6","bibliographic_titles":[{"bibliographic_title":"研究報告インターネットと運用技術（IOT）"}],"bibliographicPageStart":"1","bibliographicIssueDates":{"bibliographicIssueDate":"2025-02-24","bibliographicIssueDateType":"Issued"},"bibliographicIssueNumber":"30","bibliographicVolumeNumber":"2025-IOT-68"}]},"relation_version_is_last":true,"weko_creator_id":"80578"},"id":2000716,"links":{}}