Bayanan mai warware DNS da bayanan haɗin VPN: abin da kowanne ke riƙe
Mai warware yana rubuta sunayen da aka ce ya amsa su; VPN na rubuta abubuwan da suka faru a rami daga aiwatar da kansa. Manufar kiyayya ɗaya ba ta rufe ɗayan.
Bayanin mai warware DNS da bayanan haɗin VPN dukansu bayanan cibiyar sadarwa ne, dukansu da amfani, kuma ba za a iya musanya su ba. Mai warware yana karɓar sunayen da aka ce ya amsa su. Ƙarshen VPN yana kula da haɗin rami kuma yana rubuta duk abin da aiwatar da shi ya zaɓa ya rubuta game da su. Suna iya kasancewa a gini ɗaya, ƙungiya ɗaya tana tafiyar da su, kuma sanarwar sirri ɗaya ta rufe su, kuma har yanzu suna bayyana abubuwan da suka faru daban-daban da masu gano daban-daban da kiyayya daban. Karanta ɗaya kamar shi ne ɗayan shine yadda bincike ke karkata.
Bayanan biyu, abubuwan da suka faru biyu
Shigarwar mai warware tana amsa tambaya game da suna: wannan abokin ciniki ya nemi wannan sunan a wannan lokacin, kuma amsar ita ce wannan. Shigarwar VPN tana amsa tambaya game da haɗi: wannan ƙwararren ya kafa ko ya rasa rami, an ba shi wannan adireshin, kuma ya aika kusan wannan adadin bayanai kafin ya tafi. Babu ɗayansu da yake bayanin abin da mai amfani ya yi a cikin zaman HTTPS, kuma babu ɗaya da yake maye gurbin ɗayan.
Bambancin yana da sakamako mai amfani ga alkawura. Maganar cewa mai ba da VPN ba ya rubuta ayyukan rami ba ta ce komai ba game da mai warware da yake bayarwa, kuma manufar kiyayya ta mai warware ba ta ce komai ba game da wanda ya haɗa da ramin. Kowane iƙirari nasa mai gudanarwa ne da nasa tsarin.
Bi tambayar kafin ka karanta kowane ɗayan bayanan
Tambaya tana isa ga mai warware ne kawai idan hanyar ta tambaye shi da gaske. Aikace-aikace na iya amfani da mai warware na tsarin aiki, tada nasa abokin ciniki na DNS mai ɓoyewa, ko karanta amsa da aka ajiye kuma bai taɓa aika komai ba. Don haka bayanan mai warware da ba ya nuna komai ba hujja ba ce cewa ba a taɓa amfani da suna ba; hujja ce cewa ba a tambayi wannan mai warware ba.
resolvectl status
dig @127.0.0.53 build.corp.example +qr
journalctl -u systemd-resolved -n 20 --no-pagerWannan umarni na ƙarshe yana karanta littafin ajiye na mai warware na gida da kansa, wanda ba ɗaya ba ne da bayanan uwar garken da ke sama. Idan tambayoyinka suna fita ta DNS over HTTPS zuwa wani mai bayarwa, stub na gida na iya nuna komai yayin da mai bayarwa ke da cikakken bayanin, kuma mai bayarwa wani mai gudanarwa ne da wata manufa dabam.
Abin da kowane bayani zai iya nunawa da abin da ba zai iya ba
| Record | Typically shows | Does not show |
|---|---|---|
| Resolver log | Queried name, client address, time, response | Which page was fetched, or what the tunnel did |
| VPN connection log | Peer identity, assigned address, connect and disconnect times, volume | Which name the application asked for |
| Application or proxy log | Requests, status codes, sometimes full URLs | Resolved addresses for every dependency |
Haɗa su shine ainihin aikin, kuma haɗa su ba koyaushe ba ne mai yiwuwa. Mai warware da ke rubuta adiresoshin abokan ciniki ana iya kwatanta shi da VPN da ke ba da adireshi daga wani tafki sananne, kuma wannan kwatancen yana haifar da tabbataccen alaƙa tsakanin sunan da aka tambaya da rami, wanda ya kasance alaƙa tsakanin bayanai biyu maimakon bayanin mutum.
DNS mai ɓoyewa yana canza hanyar jigila, ba ganuwa a ƙarshen ba. Mai warware har yanzu yana karɓar tambayar da yake amsawa, kamar yadda RFC 8484 ya bayyana a fili, kuma kiyayya a wannan mai warware shawara ce ta manufa ba sifa ce ta yarjejeniya ba.
Inda DNS da aka raba da ajiya suke rikitar da labarin
Masu warware da yawa al'ada ne. Tsarin DNS da aka raba yana aika sunayen ciki zuwa uwar garke na ciki sauran kuma zuwa na jama'a, don haka bincike ɗaya yana iya haɗa da bayanai biyu da ba a taɓa nufin a haɗa su ba da kuma saituna biyu na kiyayya da ba a taɓa nufin a kwatanta su ba. Ganin tambayoyi a duka biyu hujja ce cewa tsarin yana aiki, ba hujja ce ta yoyo ba.
Ajiya tana yanke wata hanya. Ana iya amsa sunan da ya shahara daga ajiya na sa'o'i, don haka bayanin mai warware yana nuna tambaya ta farko sannan komai, yayin da aikace-aikacen mai amfani ke ci gaba da warware sunan ɗaya cikin jin daɗi. Rashin shigarwar bayan wani lokaci ba ya nufin babu wanda ya yi amfani da sunan bayan wannan lokacin.
Zurfafan zirga-zirga shine karkata ta uku. Wayar da ke warware sunan awo a lokacin tashi, burauza da ke warware yankin shawara ta bincike, da mai sabuntawa da ke tuntuɓar kowace awa duk suna bayyana a bayanan mai warware tare da sunan da kake da gaske. Girman cikin wannan bayanin ba hankali ba ne, kuma kirga tambayoyi ba kirga ziyara ba ne. Bayanan mai warware bayanin tambayoyi ne, kuma tambayoyi suna da arha a ƙirƙira.
Tambayi tambayoyin kiyayya daban
Ga kowane tsari, tambayi tambayoyi uku: wa ke tattarawa, me ake tattarawa, da tsawon lokacin da ake ajiye shi. Sannan ka tambayi wa zai iya karanta shi kuma a wace hanya. Tattaunawar RFC 8484 akan DNS over HTTPS kyakkyawar tunatarwa ce cewa hanyar jigila mai ɓoyewa ba ta kawar da ƙarshen ba, kuma takardun mai gudanarwa da kansa shine kawai tabbataccen magana game da abin da wannan ƙarshen ke ajiyewa.
Lokacin da ake yin iƙirari game da sirri akan “VPN”, raba shi cikin sassan kafin ka karɓa: mai gudanar da ramin, mai warware da ramin ke bayarwa, duk wani mai warware na sama da waɗannan tambayoyin suke isa gare shi, da aikace-aikacen da ke cikin na'urar. Kowanne yana da nasa amsar, kuma iƙirarin da ya yi daidai ga ɗaya ana maimaita shi akai-akai kamar yana rufe duka huɗu.
Don magance matsala, yi amfani da wannan rabo ɗaya. Tambayi wace aikace-aikace ta yi tambayar kuma wane mai warware ya amsa ta, sannan duba bayanin da ya mallaki wannan abin da ya faru da gaske. Yin tsammani daga wancan bayanin yana ceton minti ɗaya kuma yana kashe la'asar.