支持 DNSSEC 和/或实验性新 RR 类型的 DNS 解析器库
DNS 解析器库的最新技术水平如何？我对支持以下任一或全部功能的完整（非存根）解析器特别感兴趣：在一个请求数据包中进行多个查询、完成 DNSSEC 验证、向应用程序返回有关 DNSSEC 验证的详细信息，并且可以在不进行太多黑客攻击的情况下处理实验性新 RR。异步查询很好，但不是必需的。
首选的实现语言是 C、C++、Python 或 Javascript，但我会考虑任何内容（不过，我真的不想知道 INTERCAL 中的 DNS 解析器；-） 可以在支持 WebSockets 的浏览器会更加棒。
What's the state of the art in DNS resolver libraries? I am particularly interested in full (not stub) resolvers that support any or all of: making multiple queries in one request packet, complete DNSSEC validation, returning detailed information about DNSSEC validation to the application, and can handle experimental new RRs without much hacking. Async queries are nice but not required.
Preferred implementation languages would be C, C++, Python, or Javascript, but I'll look at anything (I'd really rather not know about your DNS resolver in INTERCAL, though ;-) A pure-JS implementation that could run in a browser with WebSockets support would be extra awesome.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
我所知道的最好的库（它包括 DNSSEC 验证）是
libunbound，它是 未绑定分发。请注意，DNS 协议本身不支持您的第一个要求（一个数据包中的多个查询）。您能做的最好的事情就是使用 TCP，然后通过一个套接字发出多个连续查询。
The best library I know of (and it includes DNSSEC validation) is
libunboundwhich is part of the Unbound distribution.Note that the DNS protocol itself does not support your first requirement (multiple queries in one packet). The best you can do is use TCP and then issue multiple sequential queries over one socket.
DNSSEC-Tools 项目有一个支持多线程的 libval C 库（以及相应的 perl 绑定） DNSSEC 使用其 API 启用查找。它分布在许多 Linux 平台上，并且也可以在大多数其他平台上运行。
（事实上，我在一个与该库链接的 Firefox 版本中输入此响应，以为 Firefox 提供 DNSSEC 保护）。
不过，您不能在一个数据包中提出两个问题。其他人都说得对...
The DNSSEC-Tools project has a libval C library (and a corresponding perl binding) that supports multi-threaded DNSSEC enabled lookups using their API. It is distributed on many linux platforms and works on most other platforms as well.
(in fact, I'm typing this response in a version of firefox that was linked against the library to provide DNSSEC protection for Firefox).
You can't ask two questions in a single packet though. Everyone else is right about that...