Intranet Domain Name Service (IDNS) provides highly available and scalable DNS resolution services along with domain name management. It converts domain names or application resources into IP addresses required for network connection, routing visitors to desired resources. This ensures access to application resources and connections to intranet services. Intranet DNS offers secure, comprehensive, and high-performance domain name resolution within a VPC. It can directly respond to requests for intranet domain resolution and effectively prevent hijacking, mitigating security risks.

Intranet Domain Resolution Process

When a ECS within a VPC requests to access an intranet domain name, Intranet DNS directly resolves the intranet domain name and returns the private IP address corresponding to the ECS being accessed.

When a ECS within a VPC requests to access a public domain name on the Internet, Intranet DNS forwards the resolution request for the public domain name to a public DNS server. Upon receiving the public IP address from the public DNS server, it then returns the public IP address to the ECS.

System Architecture

Intranet Domain Name Service (IDNS) consists of two essential components: the control layer and the resolution layer:

Control layer: the control layer provides services to the outside world through a console and OpenAPI, with the following primary features:

Management of domain resolution data: the control layer handles operations for adding, deleting, modifying, and querying domain resolution data to ensure the accuracy of domain-to-IP address mappings.
Configuration data management: the control layer manages configuration data to ensure the reliability and availability of DNS services.
Log data management: the control layer records and manages log data, supporting user monitoring and troubleshooting.
Storage: the control layer stores domain resolution data, configuration data, and log data to ensure data security and reliability.

Resolution layer: the resolution layer provides services to the outside world by deploying a cluster of resolution servers, with the following main features:

Domain resolution: the resolution layer receives domain resolution record data from the control layer and responds to resolution requests, resolving domain names into their corresponding IP addresses to enable connections between computers.