VPN ɗinka yana tura sabar DNS uku: wanne ne ke amsawa?

Buɗe shafin saituna bayan haɗi kuma ana lissafa adiresoshin DNS uku; tambayar binciken ita ce wanne ya kula da tambayarka ta ƙarshe. Adadin shi kaɗai ba ya amsa kome, domin turawar abokin ciniki, mu’amalar zahiri da manufar kowane yanki duk suna rubutu cikin ra’ayi ɗaya. Waɗannan shigarwar suna ɗauke da iyakoki daban-daban, kuma iyaka ne, ba matsayi ba, ke ƙayyade wanda zai amsa. Fara da raba tushen, sannan ka gwada wanda ya mallaki sunan da kake damuwa da shi.

Me ya sa jerin ya fi bayananka tsawo

Abokin ciniki na VPN yana tura adiresoshin mai warwarewa don hanyar haɗin rami, kuma tsarin aiki yana riƙe da su tare da abin da mu’amalar zahiri ta riga ta mallaka. Na’urar sadarwa, hayar DHCP ta kamfani, VPN ta biyu da manufar kowane yanki kowanne yana ba da nasa shigarwar. Saboda haka adireshi uku a shafin na iya nufin iyakoki uku maimakon ’yan takara uku don aiki ɗaya. Karanta adadin a matsayin hujjar ɓarna shine kuskure na farko a wannan binciken.

A cikin mu’amala ɗaya abokin ciniki yana gwada sabar sa bisa tsari, don haka jerin da aka tsara ba shi da ma’ana a banza. Abin da ba layi ba shine haɗaɗɗen ra’ayi, inda shigarwar bayanan martaba, hanyar sadarwa ta zahiri da dokokin kowane yanki suke zaune gefe da gefe ba tare da wani matsayi ɗaya ba. Wannan bambanci ne ke ƙayyade abin da za ka gwada: tsari yana bayanin ɗabi’a a cikin iyaka ɗaya, kuma iyaka tana bayanin komai.

DNS da aka rufaffen yana karya hoton daga cikin manhaja. Mai bincike ko abokin ciniki na hira da ke da nasa mai warwarewar DNS-over-HTTPS yana aika tambayoyi gaba ɗaya gefen jerin tsarin aiki, don haka adiresoshin da ke shafin saituna suna bayanin zirga-zirgar da manhajar ba ta taɓa samarwa ba. Duba saitin mai warwarewa na manhajar kanta kafin ka zargi bayanan martaba da sunan da ya fito ba daidai ba.

Abin da kowace daga cikin gwaje-gwaje uku ke faɗi

Kowane tushe yana barin alamarsa a wuri daban, kuma babu wani umarni ɗaya da ke nuna duka. Wannan shine taswirar da ta cancanci a riƙe gefen shafin saituna:

A tsarin da ke amfani da systemd-resolved, resolvectl status ita ce mai iko, domin tana bayar da rahoton DNS kowace hanyar haɗi tare da yankunan turawa. macOS yana amsawa ta scutil --dns, wanda ke lissafa masu warwarewa masu iyaka bisa tsarin gwada su. Windows yana raba rabi biyu: Get-DnsClientServerAddress don sabar kowace mu’amala da Get-DnsClientNrptPolicy don dokokin ƙari. Gudanar da umarnin da ya dace da mai warwarewar da ake amfani da shi a zahiri, domin na’ura mai yanayin gudanar da kwantena da mai warwarewa na tebur na iya samun fiye da ɗaya da aka saka.

Mai warwarewar madadin da ba zai iya amsa yankinka ba

Shigarwa ta biyu yawanci tana nan don samuwa, kuma samuwa tana aiki ne kawai idan madadin ya san sunayen. Tambayi mai warwarewa na jama’a sunan masauki na ciki sai ya mayar da NXDOMAIN, ko amsar wildcard daga yankin bincike wanda ba shi da alaƙa da kai. Sa’an nan maye gurbin da babu wanda ya duba yana haifar da katsewa a daidai lokacin da ake buƙatarsa.

Split DNS yana nan don hana haka: ƙarin kamfani suna zuwa ga mai warwarewa da ke riƙe da yankin, kuma sunayen jama’a suna kan hanyar da aka saba. Zanen yana da kyau, kuma ya dogara da cikakken jerin ƙari. Microsoft yana rubuta manufar mai warwarewa ta kowace ƙari da ke tafiyar da wannan a Windows, kuma irin wannan tunani yana bayyana a matsayin yankunan turawa a systemd-resolved da masu warwarewa masu iyaka a macOS.

Kwatanta yankunan da madadin zai iya amsawa da ƙarin da ke cikin manufar. Wannan kwatancen yana gano gibin kafin mai amfani ya ba da rahoton cewa wani shafi na ciki ya daina warwarewa bayan canjin rami.

Tambaya ta cikin manufar, ba ta gefenta ba

Tambaya ta mai warwarewar tsarin aiki, domin tambaya kai tsaye ga sabar tana ƙetare manufar kuma tana bayar da rahoton abin da wannan sabar za ta faɗa kawai. Gibin da ke tsakanin amsoshi biyu shine dukkan maganar:

resolvectl query intranet.example.com
dig +short intranet.example.com @198.51.100.53

Idan tambayar tsarin ta mayar da adireshi na sirri yayin da tambayar kai tsaye ta mayar da NXDOMAIN, manufar tana aiki kuma madadin shine rauni. Idan duka biyu sun mayar da amsar jama’a ɗaya, ana warware sunan a wajen iyakar da kake nufi, kuma jerin ƙari shine wurin dubawa. Ajiye dukkan fitarwa biyu, domin muhawara kan mai warwarewa tana ƙarewa da sauri da layi biyu fiye da hoton shafin saituna.

Sannan ka gwada hanyar gazawa, domin madadin da babu wanda ya gwada zato ne. Mai warwarewar da aka fi so ya zama rami baki don tambaya ɗaya kuma ka lura wane adireshi zai dawo:

ip route add blackhole 198.51.100.53/32
resolvectl query intranet.example.com
ip route del blackhole 198.51.100.53/32

Share wannan hanyar da zarar tambayar ta ƙare, in ba haka ba mutum na gaba zai gaji wani asiri. Idan sunayen ciki har yanzu suna warwarewa a wannan taga, wani abu a wajen iyakar da aka nufa ya amsa su. Idan a maimakon haka sun ƙare lokaci, madadin ya ɓace ko an iyakance shi daidai, kuma log ɗin mai warwarewar kansa yana gaya maka wanne daga cikin biyun ya kasance.

Yanke shawara: riƙe, iyakance ko cire

Riƙe mai warwarewa na biyu idan yana amsa sararin suna da kake buƙata kuma yana kasancewa mai isa a ƙarƙashin bayanan martaba. Iyakance shi idan ya kamata ya ga ƙari ɗaya kawai ba wani abu ba, kuma cire shi idan ba shi da iyaka ko manufa da aka rubuta. Shigarwa marar aiki ɓarnar gaba ce marar amfani, kuma tsohuwar ƙimar mai samarwa ba manufa ba ce.

Yi rikodin sakamakon a matsayin ginshiƙai huɗu: ƙari, mai warwarewa, mu’amala da mai shi. Wannan layin yana amsa tambayar bincike ta gaba da sauri fiye da kowane hoton shafi, kuma yana tsira daga sabuntawar abokin ciniki da ke sake tsara jerin a hankali.