Tunnel da aka raba na cire burauza, ba tambayoyin DNS ɗinta ba

An cire burauza daga tunnel, shafin IP na jama’a ya tabbatar cewa zirga-zirgarta na fita ta hanyar haɗin gida, amma wiki na ciki har yanzu ba ya buɗewa. Warware sunaye ya tafi wani wuri, kuma wannan wurin yawanci shine resolver ɗin da VPN ya saita. Hanyar bayanai da hanyar resolver dabam-dabam ne a yawancin tsarin tunnel da aka raba. Duba wanda burauzar ta yi amfani da shi da gaske kafin ka kira cirewar da ta lalace.

Hanyar bayanai da hanyar resolver sun rabu

Cirewa na fitar da fakitin manhaja daga tunnel, wanda hukunci ne kan hanya da katangar wuta a hanyar bayanai. Warware sunaye wata bincike ce daban: wani tsari na tambayar resolver ɗin tsarin, kuma wancan resolver ɗin ne ke yanke shawarar wane uwar garke zai karɓi tambayar.

Dukansu na iya kasancewa da gangan kuma daban. Aikin turawa na iya ajiye wuraren suna na ciki a resolver ɗin kamfani yayin da yake aika zaɓaɓɓen bincike na jama’a zuwa wajen tunnel, domin kuwa sunayen ciki ba sa warwarewa a wani wuri. Abin da ke da ruɗani shine akasin haka: shafin jama’a ya kasa saboda burauzar ba ta taɓa tambayar resolver ɗin da turawar ta yi tsammani ba. Rubuta hanya da resolver daban, kuma rabin muhawara zai ɓace.

Nemo wane tsari ne ke yin tambayar

Burauza na iya amfani da resolver ɗin tsarin, sabis ɗin DNS ɗinta na sirri, ko resolver ɗin da tsarin aiki ke bayarwa ga kowace cibiyar sadarwa. Na farko na bin manufar dandali, na biyu na ƙetare wannan manufar gaba ɗaya, kuma na uku ya dogara da wace hanyar da aka tura tambayar.

resolvectl status
resolvectl query intranet.example.net
dig +short +time=2 intranet.example.net @10.52.0.2
scutil --dns | head -n 40

Karanta tsarin da ke aiki kafin gwaji: waɗanne hanyoyi ne ke ɗauke da uwar garken DNS, waɗanne wuraren suna suke da’awa, kuma ko manufar kowane suna na wuce tsoho. A Linux, DNS da aka raba na amfani da yankunan turawa; a Windows, teburin manufar warware suna na yin wannan aiki ga wuraren suna. Babu ɗaya da ake gani daga shafin gwajin zubar bayanai.

Yanke shawara wane resolver zai ga wane suna

Rubuta taswirar da aka nufa kafin ka canza wani abu: sunayen ciki zuwa resolver ɗin kamfani, sunayen jama’a zuwa sabis ɗin da manufar ta yarda, da keɓancewa tare da mai shi. Ba tare da wannan jeri ba, kowane alamar gwajin zubar bayanai ya zama muhawarar manufa da babu wanda zai iya warwarewa.

Sannan duba saitin burauzar kanta, domin DNS ɗin sirri a cikin burauza ana amfani da shi kafin tsarin aiki ya karɓi tambayar. Mai amfani da ya kunna shi don ƙetare tashar kama shi ya wuce resolver ɗin da turawar ta zaɓa cikin nutsuwa. Wannan hukuncin tsari ne ba zubewa ba, kuma ya cancanci hukunci maimakon jerin toshewa.

Kada ka sake rubuta kowane filin DNS don alamar gwaji ɗaya ta zama kore. Alamar tana bayanin tambaya ɗaya daga tsari ɗaya a lokaci ɗaya.

Tabbatar da tambaya da haɗi daban

Gwada hanyoyin biyu daban. Gwajin haɗi na nuna hanyar bayanai, kuma gwajin resolver na nuna wanda ya karɓi sunan.

curl -sS --max-time 8 https://api.ipify.org
resolvectl query example.net
dig +short example.net

Tambayi resolver ɗin kai tsaye kuma, domin a iya danganta gazawa ga uwar garke maimakon hanya. Sannan sake kunna burauzar kuma maimaita, domin manhajoji na ajiye amsoshi marasa kyau a ajiya kuma gazawar da ta tsufa tana kama da mai ci gaba.

Bayan canji da aka amince, rubuta hanyar bayanai da mai karɓar resolver a matsayin layi biyu daban tare da kwanan wata. Idan ɗabi’ar ta dawo a haɗi na gaba, bayanan martabar da ke ba da ita ne ya kamata a gyara, ba burauza ba.