Me ya sa resolv.conf ke nuna DNS na VPN ɗinka amma bincike ya ƙi shi

Babu wani abu da ya yi kama da kuskure a cikin rajistan ayyukan: hanyar sadarwa tana aiki, mai warwarewa yana bayar da rahoton uwar garken DNS na VPN, kuma fayil ɗin da ke kan faifai yana lissafa shi. Duk da haka har yanzu ana warware sunan na'urar ciki ta hanyar na'urar gyara hanya ta gida. Waɗannan maganganu uku ba sa cin karo da juna, domin fayil ɗin, yanayin kowace hanyar haɗi da hanyar bincike abubuwa ne daban-daban da suka yi karo da suna ɗaya. Abin da ke biyo baya shi ne hanyar da tambaya ke bi da gaske a na'urar da ke da systemd-resolved.

Abubuwa uku da ake kira resolv.conf

A na'urar da ke da resolved, /etc/resolv.conf yawanci alama ce ta hanyar haɗi zuwa /run/systemd/resolve/stub-resolv.conf. Wannan makasudin yana riƙe da adireshin mai sauraron stub na gida, 127.0.0.53, tare da yankunan bincike da resolved ya lissafta. Gani ne na yanayi, ba yanayin kansa ba.

Yanayin yana rayuwa a cikin tsarin resolved na kowace hanyar haɗi, shi ya sa resolvectl status zai iya yin sabani da fayil ɗin kuma har yanzu ya kasance daidai. Kowace hanyar haɗi tana ɗauke da sabar nata da yankunan turawa nata, kuma stub ɗin yana duba waɗannan bayanai idan tambaya ta iso. Littafin jagora na systemd-resolved yana bayanin fayilolin da aka ƙirƙira da tsarin kowace hanyar haɗi; rabuwa tsakanin gani da yanayi ita ce sashin da ya cancanci tunawa. Canza makasudin alamar hanyar haɗi yana canza abin da abokan ciniki na gargajiya ke karantawa, ba abin da mai warwarewa ya sani ba.

Abu na uku, /run/systemd/resolve/resolv.conf, yana daidaita kowace hanyar haɗi zuwa jerin sabar ɗaya. Shirin da aka nufa ga wannan fayil ɗin yana aika tambayoyi kai tsaye zuwa sabar da aka lissafa kuma yana tsallake stub ɗin, don haka manufar kowace hanyar haɗi ba ta shafe shi ba kuma. Saboda haka shirye-shirye biyu a na'ura ɗaya na iya amsa suna ɗaya daban, kuma babu ɗaya da ya lalace.

Bi bincike ɗaya ta hanyar NSS

glibc yana karanta /etc/nsswitch.conf don yanke shawarar wanda zai amsa suna. Layin hosts da ke ɗauke da resolve yana tura tambayar zuwa nss-resolve, wanda ke tambayar resolved ta D-Bus kuma yana samun amsar kowace hanyar haɗi. Layi mai files dns kawai yana aika tambayar zuwa duk adireshin da /etc/resolv.conf ke riƙe.

Wannan layi ɗaya yana bayanin yawancin sabani tsakanin burauza da dig. dig yana karanta resolv.conf kai tsaye kuma bai taɓa NSS ba, don haka yana gwada stub ɗin ko sabar sama maimakon hanyar da aikace-aikacen ke amfani da ita. getent hosts internal.example yana wucewa ta NSS, kuma kwatanta amsarsa da ta dig ita ce ma'auni mai amfani na farko.

Aikace-aikacen da ke ɗauke da nasu mai warwarewa, ko suna magana da DNS a kan HTTPS zuwa ƙayyadadden wuri, suna tsallake hanyoyin biyu. Babu wani abu a cikin resolv.conf ko a cikin yanayin resolved da ke takurawa su.

Duba wanda ya mallaki fayil ɗin da kuma inda yake nuni

Karanta sarkar hanyoyin haɗi kafin ka canza wani abu, domin mallaka ita ce ke yanke shawarar wane fayil ne mai iko. Kowane umarni da ke ƙasa yana karanta yanayi kawai.

stat -c '%N' /etc/resolv.conf
resolvectl status --no-pager
grep '^hosts' /etc/nsswitch.conf
ls -l /run/systemd/resolve/

Layi na farko yana buga hanyar haɗi da makasudinta tare, kuma fayil na yau da kullum mallakar rubutun VPN yana nufin mai warwarewa bai taɓa ɗaukar wannan rubutun a matsayin shigarwa ba. Fitarwar yanayi tana lissafa sabar kowace hanyar haɗi tare da yankunan turawa da ke yanke shawarar inda kowace tambaya za ta je. Layin nsswitch yana faɗin ko ana tuntuɓar stub ɗin kwata-kwata, don haka adireshin stub a cikin fayil ɗin ba tare da resolve a wurin ba yana nufin tambayoyi suna isa mai sauraro na gida alhali babu abin da ke kula da rabuwa. Wannan lissafin na ƙarshe ma yana da muhimmanci, domin na'urar da ba ta da stub-resolv.conf ba ta gudanar da tsarin da aka bayyana a nan ba.

Idan sarkar ta ƙare a fayil ɗin da wani fakiti ke kula da shi, abokin ciniki VPN da wannan fakiti su ne masu biyu da za a sasanta. Maye gurbin hanyar haɗi yana watsar da aikin mai ɗaya kuma yana barin na ɗayan a wurinsa.

Gyara a wurin mai hanyar haɗi

Haɗin VPN ya kamata ya yi rijistar sabarsa da yankunansa a kan hanyar haɗinsa, sannan ya janye su idan an cire haɗin. Haɗin resolved na NetworkManager da mataimaki na abokin ciniki duka suna aiki haka; rubutun da kawai ke sake rubuta resolv.conf ba ya yin haka.

A kan hanyar haɗin da ta riga ta wanzu, saitunan lokacin aiki suna nuna hanyar. resolvectl dns tun0 10.40.0.53 yana haɗa sabar, kuma resolvectl domain tun0 '~corp.example' yana haɗa yankin turawa. Tilde ɗin shine harafin ɗaukar nauyi: yana iyakance tambayoyin wannan ƙari ga wannan hanyar haɗi kuma yana barin komai sauran, yayin da wannan darajar ba tare da shi ba ta zama yankin bincike kuma rabuwar ta ƙafe. Waɗannan adiresoshin misalai ne na dakin gwaji, ba tsari na dindindin ba. Tabbatar da resolvectl query host.corp.example kuma karanta wace hanyar haɗi ta amsa.

Sabar da aka yi rijista har yanzu tana buƙatar hanya. Idan tambaya ta isa hanyar haɗin da ta dace sannan lokaci ya ƙare, laifin yana cikin isa ta hanyar rami maimakon mallakar mai warwarewa.

Yadda yanayin aiki yake kama

Sakamako mai lafiya yana daidaita a duk fuskoki uku: sabar kowace hanyar haɗi sun dace da abin da VPN ya bayar, yankunan turawa suna rufe ƙarin ciki kawai, kuma aikace-aikacen da ke da muhimmanci yana warware sunan ciki yayin da sunan jama'a ke bin hanyar gida har yanzu. Amincewar tambaya ɗaya tana tabbatar da ƙasa da wannan daidaito.

Sannan ka cire haɗin kuma ka maimaita tambayoyin biyu. Abokin ciniki da ya bar yankunansa a rijista bayan rushewar yana haifar da na'urar da ke kasa warware binciken ciki bayan sa'o'i, ba tare da buɗaɗɗen rami ba kuma ba tare da wani dalili bayyananne ba.