Ɗaukar Split-DNS: faɗi inda aka ɗauki kowane lura

Mutum biyu suna magance matsalar Split-DNS ɗaya kuma suna samun adiresoshin resolver daban-daban. Ɗaya ya yi amfani da kayan aikin bincike, wani ya ɗauki fakiti a kan adafta, na uku kuma ya karanta binciken abokin ciniki da kansa. Babu wanda yake ƙarya, kuma babu wanda yake bayanin mataki ɗaya. Faɗin wurin lura yana mai da saɓani taswira.

Bincike ɗaya, wuraren lura da yawa

Don suna na ciki ɗaya, akwai aƙalla wurare biyar da za a duba: aikace-aikacen da API na resolver da yake kira, manufar yanki mai aiki a kan abokin ciniki, rikodin a adafta ko tacewa, iyakar ƙofar da aka sarrafa, da resolver da ke karɓar tambayar a zahiri.

Kowanne yana amsa tambaya daban, kuma babu wanda shi kaɗai ke tabbatar da inda tambayar ta tafi.

Rikodin a adafta yana nuna fakiti, ba manufa ba. Ba ya faɗin wane resolver abokin ciniki ya zaɓa, kuma rikodin fanko na iya nufin amsa da aka adana a cache ko wata API ta resolver maimakon fakiti da aka jefa. Ɗauki kowace lura a matsayin shaida kan mataki ɗaya. Sannan haɗa matakan cikin hanya.

Tacewar abokin ciniki tana tsakanin aikace-aikace da waya

Abokin ciniki na VPN mai Split-DNS yana amfani da daidaiton yanki kafin fakitin ya bar na'urar. Sunaye a cikin ƙarin bayan tunnel suna zuwa resolver na ciki; duk sauran suna zuwa na gida. Tacewa manufa ce, kuma manufa na iya bambanta bisa dandali da sigar abokin ciniki.

Jagorar Split-DNS ta Secure Client ta Cisco ta ƙunshi daidaiton yanki da tacewar Windows, kuma tana raba abin da aikace-aikace ke gani lokacin da yake amfani da API na resolver na asali daga abin da kayan aiki kamar nslookup ke gani. Waɗannan bambance-bambance ne batun.

Fara daga ingantaccen bayanin martaba da binciken aikace-aikace ɗaya na yau da kullum. Duk gwajin da ya faɗi takamaiman uwar garke karkatacciyar hanya ce da gangan; yi amfani da binciken abokin ciniki da kansa don bayanin sa, kuma kada ka bar shi ya zama ma'aunin karɓa.

nslookup yana bin hanya daban da aikace-aikacen

nslookup yana gina tambayarsa ta DNS kuma yana iya ƙetare manufar resolver na tsarin aiki. Wannan yana sa ya zama kayan aiki mai amfani don tambayar takamaiman uwar garke takamaiman tambaya, kuma kayan aiki mai ɓatarwa don gwada abin da aikace-aikace zai fuskanta.

A Windows, teburin manufar warware suna yana yanke shawara wace ƙari ke amfani da wace uwar garke. Karanta shi yana nuna manufar da aikace-aikacen zai bi, kuma sau da yawa wannan shine ɓangaren da ya ɓace.

Karanta manufar sannan ka yi tambaya ɗaya ta hanyar resolver na yau da kullum:

Get-DnsClientNrptPolicy
Resolve-DnsName intranet.hq.example

Resolvers masu ɓoyewa suna ɓoye tambayar, ba haɗin ba

Burawuza mai nasa resolver na DNS-over-HTTPS wani lamari ne daban. Tambayar tana fita cikin TLS, don haka rikodin fakiti yana nuna haɗi zuwa adireshin resolver amma ba sunan da ake tambaya ba.

Fara gano manufar da aka sarrafa ta burawuza, sannan ka kwatanta ta da bincike na tsarin aiki. Burawuza da aka ba da izinin zaɓar nata resolver na iya rashin ganin manufar Split-DNS kwata-kwata.

Irin wannan taka tsantsan ya shafi duk abokin ciniki da ke kawo nasa resolver. Rikodin da ya gano haɗin nesa ba shaida ba ne kan sunan tambayar. Idan kana buƙatar sunan, same shi daga rajistan resolver ɗin kansa ko daga binciken aikace-aikacen, tare da ƙa'idodin sirri da suka dace.

Kwatanta da gwaji mai lakabi

Zaɓi sunan ciki da aka amince da shi don gwaji, tare da sunan jama'a wanda ba shi da ma'ana mai mahimmanci. Ga kowane, rubuta lokaci, nau'in rikodi, amsa da manufar da kake tsammani.

Inda aka yarda, kwatanta karɓar resolver da lura ɗaya mai kunkuntar abokin ciniki ko ƙofa:

nslookup intranet.hq.example 10.55.0.53
Get-DnsClientNrptPolicy | Format-List

Kada ka taɓa aika sunaye masu sirri zuwa resolvers na jama'a marasa alaƙa don kawai ƙirƙirar kwatance, kuma ka gyara duk abin da ka raba. A ƙarshe, raba amsar DNS daidai daga haɗin sabis da ke biyo baya: adireshin sirri da aka warware har yanzu yana buƙatar hanya da izinin aikace-aikace.