Alibaba Cloud DNS Engineer Guo Chuan Presents at ICANN64: Practices, Security Challenges, and Future Directions

DNS (Domain Name System) is a foundational infrastructure for the Internet and the digital economy. Alibaba DNS senior engineer Guo Chuan was selected as the sole Chinese participant for the 64th ICANN Talent Program and attended the public ICANN64 meeting held from March 9–14, 2019 in Kobe, Japan.

During the conference's TechDay, Guo presented a talk titled "Alibaba Cloud DNS Practice" to the global DNS community, describing Alibaba's efforts to build stable, secure, and fast global access links for enterprises.

He explained that the DNS system, as the backbone of the global network, faces increasing stability and security challenges due to its layered delegation model and the growing openness of internet applications, requiring joint participation and shared governance from all stakeholders.

Guo highlighted that Alibaba Cloud DNS, as the largest DNS service provider in the Asia‑Pacific region managing tens of millions of domains, has become a critical component of the DNS ecosystem because it directly serves end‑users.

In discussions with speakers from NLnetlabs, ICANN‑SSAC, JPRS, Mozilla, and Microsoft, he identified core technical competencies of cloud DNS providers: automated management of large service clusters, seamless data distribution, large‑scale attack mitigation, and privacy protection of user data.

At the ICANN ALAC forum, technical expert Paul Hoffman presented the future of DoH and DoT. Guo noted that while DoH/DoT can create secure links between clients and recursive servers and, together with DNSSEC, form end‑to‑end security, DoH alone does not guarantee security, making it a key research focus for DNS security.

Guo also discussed emerging trends such as IoT, which introduces new challenges and opportunities for DNS services and security policies. Alibaba DNS has been collaborating with domestic authorities to develop an IoT identifier system.

In the RSSAC forum, he exchanged with root server operators about Alibaba's work on DNSSEC and the deployment of root server mirrors in China.

Looking ahead, Guo affirmed that as technology evolves, the scope of DNS services will expand, and Alibaba DNS will continue working with the international community to provide a stable, secure, and efficient global networking foundation.