Vumela i-DNS ukuthi idlule kuphela ngesixazululi sakho se-VPN: umhlahlandlela wesinyathelo ngesinyathelo
Landelela ukusesha okukodwa kwegama kusuka kusiphequluli kuya empendulweni. Bona lapho isixazululi sikhethwa khona, lapho udonga lomlilo lukusebenzisa khona nokuthi yini umthetho wephothi 53 ongalokothi uyihlanganise.
Landelela ukusesha okukodwa kwegama kusukela esikhathini osibhalayo. Isiphequluli sibuza uhlelo lokusebenza, uhlelo lokusebenza lubuza isixazululi esikhethwe inqubomgomo yaso, futhi umbuzo uphuma kudivayisi ngesixhumi esithile ngokuthutha okuthile. Idizayini yakho ye-VPN ithi impendulo kufanele ivele kwisixazululi esithile ngendlela ethile. Igebe phakathi kwalezi zitatimende ezimbili yilokho okusethayo bese ukuphoqelela.
Isinyathelo 1: qamba isixazululi nendlela
Bhala izinto ezintathu ngaphambi kokuthinta udonga lomlilo: ikheli lesixazululi, iphrothokholi nephothi oyilindele, kanye nesixhumi okufanele umbuzo uphume kuso. Ngaphandle kwalolo hlu, umthetho uwukucabanga ngokuthutha hhayi ukuphoqelela isinqumo. I-VPN ingathwala idatha yezinhlelo ngesikhathi i-DNS ilandela ukuhleleka okuhlukile, futhi lokho ngokwako akulona iphutha. Yilokho okwenzekayo lapho kungekho otshele iklayenti okunye.
Ukuqamba indlela ngokucacile yimehluko phakathi kwedizayini nengozi. Kukunika futhi into yokuhlola kamuva, ngoba konke ukubona kungaqhathaniswa nokulindelwe okubhaliwe. Gcina lolo hlu kutikithi yoshintsho hhayi ekhanda lomuntu.
Isinyathelo 2: beka inqubomgomo lapho ihlala khona ngempela
Ukukhethwa kwesixazululi kungokweklayenti: ukucushwa kwenethiwekhi kohlelo lokusebenza, izilungiselelo zeklayenti le-VPN ngokwalo, noma inqubomgomo yesiphequluli ephethwe. Beka khona kuqala, ngendlela esekelwa yiplathifomu, ngoba udonga lomlilo alunakuphoqelela iklayenti ukuthi likhethe isixazululi esingakaze sikwezwe ngaso. Kuklayenti elinethunjini elihlukanisiwe, shono ngokucacile ukuthi yiziphi izizinda eziya kusixazululi sangaphakathi. Eqenjini eliphethwe, inqubomgomo yesiphequluli ivamise ukuba yisigxobo kuphela se-DoH, ngoba isiphequluli singakhetha isixazululi saso esifihliwe ngokuzimela kusilungiselelo sohlelo.
Yeqa lokhu bese uya ngqo odongeni lomlilo, futhi uzothola umthetho ovumela isixazululi esifanele kanye neklayenti elingasoze lisisebenzise. Umthetho ubonakala ulungile futhi amarekhodi esixazululi ahlala engenalutho, okuyimbhangqwana edidayo lapho uhlola inkinga. Setha ukukhetha kuqala, bese ukupoqelela.
Isinyathelo 3: phoqelela indlela ngokuncane
Manje engeza imvume yenethiwekhi yendlela evunyelwe: ikheli lesixazululi, iphrothokholi nephothi, kanye nesixhumi okufanele siphum e kuso. Gcina umthetho ukhawulelwe kuleso sixazululi esikhundleni sokuvumela yonke i-DNS ephumayo. Izindlela ezintathu ezingezansi yizo iklayenti lesimanjemanje elingazithatha, futhi eyokuqala kuphela embozwe umthetho wephothi 53.
| Path | Port | Who controls it |
|---|---|---|
| Classic DNS | UDP and TCP 53 | System resolver settings |
| DNS over TLS | TCP 853 | Resolver or stub configuration |
| DNS over HTTPS | TCP 443 | Browser or application policy |
Ukuvimba i-DoH ne-DoT kusemthethweni; ukucabanga ukuthi umthetho wephothi 53 usuvele uzivimbile akusona isemthethweni. Isiphequluli esisebenzisa i-DoH sixazulula amagama ngendlela umthetho wakho ongakaze uyichaze, futhi uhlelo oluletha isixazululi saso silenza okufanayo. Bhala yonke indlela ohlose ukuyivumela nayo yonke ohlose ukuyinqaba. Umthetho ongayiqambi indlela awukathathi isinqumo ngayo.
Isinyathelo 4: landelela amagama ayimfihlo nawomphakathi
I-DNS ehlukanisiwe ithumela ngamabomu kuphela izikhala zamagama ayimfihlo kusixazululi sangaphakathi ngesikhathi amagama omphakathi eya kwenye indawo, ngakho ukuba nesixazululi esingaphezu kwesodwa kudizayini akulona ukuvuza. Ukuvuza umbuzo okwakufanele uye kusixazululi sakho kodwa waqhamuka kwenye indawo, noma indlela ehlosiwe engafinyeleleki eyenza iklayenti libuyele emuva buthule. Lezo zimo ezimbili yizo okufanele uzifune. Landelela igama langaphakathi nelinye elomphakathi ngaphansi kwenqubomgomo ehlosiwe futhi ubhale ukuthi isiphi isixazululi esiphendule kokunye.
Isizindalwazi sokuhlola esibika ngesixazululi sakho siyinkomba hhayi ubufakazi, ngoba sibona kuphela imibuzo efinyelele kuso. Bamba umbuzo ohlangothini lweklayenti lapho udinga ukwazi ukuthi yiphi indlela eyathathwa ngempela, bese uqhathanisa ukubona kokubili. Lapho kungavumelani, uthole ukubuyela emuva okungekho muntu okubhalile.
Uma ikheli lesixazululi lilungile kodwa lingafinyeleleki, inkinga ise kuqondisa indlela noma ukuhlunga hhayi enqubomgomeni. Landelela umbuzo kuze kufike kulelo kheli futhi uqinisekise ukuthi impendulo ibuyela esixhumini esilindelekile ngaphambi kokushintsha noma yisiphi isilungiselelo sesixazululi.
Isinyathelo 5: gcina indlela yokubuyela emuva
Ngaphambi kokuqinisa ukufinyelela kwe-DNS esangweni, qinisekisa indlela yokubuyisela engancikile ekuxazululeni amagama. Isixazululi esiphukile senza zonke izinsiza zokulungisa zibe nzima ukuzifinyelela, kuhlanganise lezo obuzozisebenzisa ukubuyisa ushintsho. Gcina ikhonsoli yasendaweni noma indlela engaphandle kwebhande ivuliwe kuze kufakazelwe inqubomgomo entsha. Yisuse kuphela ngemva kokuba inqubomgomo isibekezelele ukuxhumana kabusha.
Ngemva kokuxhumana kabusha noma ngemva kokubuyekezwa kwenqubomgomo yesiphequluli, hlola futhi isimo esisebenzayo, ngoba kokubili kungashintsha isixazululi ngaphandle kokushintsha umthetho wakho. Isidingo umamukeli owaziwayo kanye nendlela evikelekile yemibuzo, hhayi ilebula yesixazululi eliqabulelayo kusithombe-skrini esisodwa. Incazelo ye-RFC 8484 ye-DNS over HTTPS iyireferensi yendlela efihliwe umthetho wakho wephothi ongayiboni.