Application research of HTTPS service architecture based on pan DNS in IPv6 transition stages

摘要

In the IPv6 transition environment, in order to be able to provide fast support for IPv4 / IPv6 HTTPS service for the the entire network without changing the existing network and WEB applications, this paper designed a HTTPS service scheme with double stack reverse proxy in IPv6 transition stage. Through the deployment of reverse proxy service in the dual stack environment, while the HTTPS service port monitoring IPv4 and IPv6, combined with the DNS settings to support dual stack IPv4/IPv6 HTTPS service deployment, reverse proxy service makes the pure IPv4 and IPv6 users can access the HTTPS service. Based on open source software Bind and Nginx, this paper realizes the double stack access of HTTPS service without changing the existing network and WEB application, thus reducing the cost and difficulty of implementation. Using reverse proxy technology, the heavy SSL encryption, decryption and computing work is unloaded on the reverse proxy service, and the centralized optimization is processed. The practice shows that the caching mechanism of reverse proxy service not only does not increase the load of WEB application, but also effectively reduces the load of back-end WEB services and improves the access speed of HTTPS services. This paper implements the pan domain name processing of the two level domain name in Nginx reverse proxy service. When the back-end WEB service needs to be published or switched, only the DNS settings need to be changed while no reverse agents need to be configured, it is really easy to be managed and maintained.