Yaa dhab ahaan ku dabaqa DNS-galka OpenConnect ee Windows?
Windows wuxuu dhaqan-geliyaha ku hayaa saddex meelood. Raadi caawiyaha leh xiriirka ka hor intaadan gacan ku tafatirin DNS-ka adapter-ka ama ku darin qaanuun magac-bannaan.
Tunnel-ka kor u qaadistu ma aha isku mid la rakibidda qiimayaasha DNS-kiisa. OpenConnect wuu wada-hadlaa, caawiye ku yaal dhinaca Windows-na wuu dabaqaa. Farqiga u dhexeeya labadaas tallaabo wuxuu sharraxayaa inta badan guuldarrooyinka magacyada gaarka ah ee macmiilkan, caawiyuhuna badanaa ma aha bogga dejinta VPN ee Windows.
Kala sooc waxa albaabku soo bandhigay iyo waxa Windows rakibay
Macmiilku wuxuu xogta xiriirka siiyaa interface-ka script-ka, noocyada Unix iyo Windows-na waa barnaamijyo gaar ah. Windows-ka hirgelinta badanaa waa caawiye JavaScript oo akhriya doorsoomayaal sida server-ka DNS-ka gudaha iyo domain-ka gudaha ka hor inta uusan taaban adapter kasta. Waxba tunnel-ka dhexdiisa kuma qoro xaaladda dhaqan-geliyaha.
Kala-soociddaas waa muhiim maxaa yeelay qiime ayaa ku jiri kara wada-hadalka oo aan waligiis gaarin adapter-ka. Caawiyaha maqan, badhka jidka ku guuldarraysta, ama nuqul duug ah oo ku xidhan galka GUI wuxuu Windows uga tagaa sidii uu ahaa. Kulanku wuxuu u muuqdaa mid xiran, magaca gaarku wali wuxuu ku xallimaa bixiyaha maxalliga ah, waxbana kama muujiyo kala duwanaanshaha daaqadda macmiilka. Akhrinta soo-saarka caawiyaha laftiisa ayaa ah dariiqa keliya ee lagu kalsoonaan karo ee lagu ogaado tallaabada jabtay.
| Stage | What exists there | Where you see it |
|---|---|---|
| Negotiated | Internal DNS address and domain pushed by the gateway | Client log or helper input |
| Installed | Adapter DNS entry, connection suffix, or namespace rule | Adapter and policy queries |
| Selected | Resolver Windows uses for one specific query | The failing application |
Galka GUI wuxuu keeni karaa nuqulkiisa macmiilka iyo caawiyaha, sidaas darteed openconnect.exe labaad oo disk-ka meel kale yaalla waxba ma caddeeyo. Raadi faylka la fulin karo ee bilaabay kulanka ka hor intaadan qiimeyn habayntiisa.
Akhri xaaladda dhaqan-geliyaha adigoon beddelin
Saddex weydiin akhris-keliya ayaa daboolaya jahwareerka caadiga ah, mid kastaana wuxuu ka jawaabaa su'aal kale:
Get-DnsClientServerAddress -AddressFamily IPv4
Get-DnsClient | Select-Object InterfaceAlias, ConnectionSpecificSuffix
Get-DnsClientNrptPolicy -EffectiveServer-ka heerka adapter-ka waa waxa dadka badankoodu ula jeedaan VPN DNS. Lifaaqa xiriirka-gaar ah ayaa go'aamiya haddii magac gaaban isku laabo. Liiska siyaasadda magac-bannaan wuxuu khuseeyaa magacyada iswaafaqsan iyadoon loo eegayn nidaamka adapter-yada, natiijada madhanna halkaas ma aha cillad marka caawiyuhu uusan waligiis qorsheyn inuu mid abuuro. Akhrinta saddexda ka hor tafatirka ayaa ka hortagta hagaajin kaliya u rarta calaamadda meel kale.
Ku bilow magaca si buuxda u qalma. Haddii FQDN-ka la xalliyo magaca gaabanna aan la xallin, farqigu waa lifaaqa ama liiska raadinta, ma aha cinwaanka server-ka.
Tallaabada labaad si toos ah u weydii server-ka loogu talagalay, adigoo isticmaalaya qalab kasta oo dhaqan-geliye ah oo horey loo rakibay. Jawaab toos ah ayaa caddeyneysa in server-ku la gaari karo oo uu awood u leeyahay aagga. Waxna kama caddeyneyso server-ka ay barnaamijku caadi ahaan weydiiyo.
Magacow qaybta leh xiriirka
Laba hab ayaa caadi ah. Macmiil ka bilaabmay terminal-ka ayaa si cad u gudbiya dariiqa script-kiisa, sidaas darteed milkiilaha waa lagu arkaa amarka la fuliyay. Barnaamij baakadaysan ayaa adiga kuu bilaaba macmiilka oo caawiyaha ku hayaa galkiisa, taasoo la macno ah in iibiyuhu go'aamiyo goorta uu is beddelo.
Isbarbar dhig noocyada caawiyaha ee rakibaadaha dhexdooda ka hor intaadan wax beddelin. Ku fulinta caawiye laga keenay muraayad awood sare leh sababtoo ah magaca faylku wuu u eg yahay mid la yaqaan ayaa farqiga DNS u beddela dhacdo ammaan.
Marka milkiilaha la ogaado, bartilmaameedka hagaajintu wuu cad yahay: dariiqa script la taageeray oo ku yaal bilaabaha, cusboonaysiin baakad, ama borofayl la saxay oo ku yaal albaabka. Midkoodna uma baahna in gacanta lagu tafatirto sifooyinka adapter-ka.
Hagaaji milkiilaha, ma aha adapter-ka
DNS-ka gacanta lagu dhigay adapter-ka ayaa inta badan ka badbaada go'itaanka, taasina waa sababta uu u muuqdo mid shaqeeya kadibna dhib u keena shabakadda xigta. Dhaqan-geliye dadweyne oo interface kasta lagu xidhay ayaa qariya dhibaatada magac-bannaan ee gaarka ah halkii uu xallin lahaa. Marka caawiyuhu uusan waligiis helin qiime DNS, borofaylka albaabka ayaa ah meesha la eego. Marka uu helay mid, adapter-kuna wali muujinayo server-kii hore, caawiyuhu wuu guuldarraystay inta lagu jiray xiritaanka, log-ga macmiilkuna badanaa wuxuu taas diiwaan geliyaa meel u dhow khadadka dejinta tunnel-ka.
Dib u dhis xaaladda iyada oo loo marayo dariiqa la taageeray, kadibna xaqiiji meerto buuxda: xiriir, xalli FQDN-ka gaarka ah, fur adeegga, gooy xiriirka, oo xaqiiji in adapter-ku ku soo noqday server-yadii hore.
Hubi barnaamijka dhab ahaan guuldarraysta
Browser leh dejintiisa DNS sir ah wuxuu iska indhatiraa wax kasta oo kor ku xusan oo wuxuu sii wataa ka jawaabista dhaqan-geliye dadweyne. Barnaamij haysta jawaab diidmo ah oo kaydsan oo ka hor timid kor u kaca tunnel-ka ayaa isku si u dhaqma. Isbarbar dhig weydiin nidaam oo fudud oo isla mishiinka ah ka hor intaadan mar kale beddelin cinwaannada dhaqan-geliyaha.
Haddii weydiinta nidaamku sax tahay oo barnaamijku qaldan yahay, cilladda hadhay waxay ku jirtaa habaynta DNS ee barnaamijkaas, ma aha dariiqa VPN.