【摘要】 随着互联网商业模式的演变，最初基于分布式设计的域名基础设施呈现集中化趋势，可能造成大范围网络中断。聚焦于我国域名基础设施集中化，构建基于网页广告分发的递归解析器收集系统，结合大型被动域名解析日志主动测量中国国家和教育域名的权威服务器。测量结果表明，我国域名基础设施存在严重的集中化现象，但主要依赖于国内运营商和企业，与国外集中化节点存在显著差异。网络安全部门应加强对国内域名系统集中化节点的监测和风险预警。更多还原

【Abstract】 The Domain Name System(DNS) was initially designed with a distributed architecture to ensure availability.However, with the development of the Internet, the trend of centrality in the DNS has led to a series of potential single points of failure. Focusing on the centrality of China’s DNS infrastructure, a passive recursive resolver data collection system based on Internet advertisement distribution was prompted. Combining passive DNS data with active domain authoritative resource record scanning, the authoritative servers for domain names of China and Chinese education were analyzed. The result indicates a high level of centrality, which primarily relies on Internet Service Providers(ISP) and local Internet companies, showing significant differences from the results abroad. Network authorities should strengthen the monitoring and warning mechanisms for centralized nodes in China’s DNS infrastructure.更多还原