Ukuhlolwa kokuvuza kwe-DNS: igama lesixazululi akulona indlela

Igama lesixazululi alikwazi ukukutshela ukuthi i-DNS yadlula umhubhe yini. Nquma inqubomgomo oyifunayo, bese uqhathanisa umamukeli, indlela kanye nezihluzo.

Izinhlelo ezintathu zithathwa njenge-DNS efanele umsebenzisi we-VPN: imibuzo eya kusixazululi somqhubi, imibuzo eya kusixazululi esifihliwe osikhethile, kanye ne-split DNS ethumela amagama omsebenzi enhlangano. Ukuhlolwa kokuvuza kubika isixazululi esisodwa, futhi leyo lebuli eyodwa ayikwazi ukukutshela ukuthi yiluphi uhlelo onalo ngempela. Nquma kuqala inqubomgomo okuhloswe ngayo, bese uhlola ngokuyihambisa. Uma kungenjalo uqhathanisa inombolo nomuzwa.

Nquma ukuthi ubufunani ngaphambi kokufunda umphumela

Shono inqubomgomo ngomusho owodwa: wonke amagama aya kusixazululi se-VPN, wonke amagama aya kusixazululi esifihliwe esikhethiwe, noma i-split DNS enamagama angaphakathi aya enhlanganweni. Ngayinye iyavikeleka kumsebenzisi ohlukile, futhi ngayinye ikhiqiza impendulo ehlukile elindelekile. Ngaphandle kwalowo musho, noma yimuphi umphumela ohlukile kusithombe-skrini esikuthunyelwe kufeksi kubonakala kuyethusa. Bhala inqubomgomo ngaphambi kokuhlolwa kokuqala.

Ukuhlolwa okwenziwe ngaphambi kokuchazwa kwenqubomgomo akukali lutho. Kunikeza igama lesixazululi ngaphandle kwanoma yiphuzu lesethenjwa.

Igama lesixazululi alifakazi indlela noma umamukeli

Imibuzo emibili ibalulekile: ubani owamukele umbuzo, futhi iyiphi indlela eyawuthwala. Isixazululi senhlangano yesithathu singafinyeleleka ngomhubhe ngenkathi isikrini sezilungiselelo sikhombisa ikheli lomhlinzeki. Ilebuli ekhasini lokuhlolwa kokuvuza ichaza umbono womqaphi, hhayi ithebula lakho lomzila.

Isiphequluli singasebenzisa i-DNS yaso efihliwe ngenkathi ithrafikhi yesayithi idlula emhubheni, futhi izimpendulo ezigcinwe kukheshi zingavumela ikhasi ukuthi lilayishe ngaphandle kokusesha okusha. Yingakho umphumela we-IP yomphakathi ungasitsheli lutho nge-DNS. I-DoH ne-DoT zivikela umbuzo endleleni eya kusixazululi, futhi leso sixazululi sisabona amagama.

resolvectl status
resolvectl query example.com
dig +short example.com

I-split DNS yenza izixazululi eziningi zibe nemba

Inhlangano ingathumela amagama angaphakathi ku-DNS yayo futhi konke okunye kwenye indawo. Ngakho-ke ukuhlolwa okubala izixazululi eziningi kungase kuchaze inqubomgomo ehlosiwe hhayi iphutha. Qhathanisa isethi ebonakele nemithetho ye-split DNS ebhaliwe ngaphambi kokunqamula noma yini. Ukucisha isixazululi sangaphakathi ukuze ikhasi lokuhlolwa libonakale lihlanzekile kuphula amagama ayimfihlo.

I-split tunneling ne-split DNS izinqumo ezihlukile: enye ihambisa amaphakethe, enye ihambisa imibuzo. Ukushintsha umzila womhubhe akuhambisi ukusesha kwegama, futhi ukushintsha isixazululi akulungisi indlela yewebhusayithi. I-IPv6 umbuzo wesithathu, ngoba ukuxhumana kwe-IPv6 okungahlosiwe akulona ukuvuza kwe-DNS ngokuzenzakalela.

Guqula umphumela ube uphenyo

Bhala inqubomgomo ehlosiwe kanye nesilungiselelo se-DNS esiphephile sesiphequluli ngaphambi kokuhlola. Sebenzisa ukuhlolwa ngomhubhe usebenza, qaphela yonke isixazululi esiyishoyo, futhi uqhathanise isethi nenqubomgomo hhayi nekheli elilodwa elilindelekile.

Phinda ngemva kokuxhuma kabusha uma isibonakaliso sivelapho ngaleso sikhathi, ngoba inqubomgomo esetshenziswe ngesikhathi sokuxhuma ingalahleka kamuva. Sebenzisa imibhalo yeklayenti yezihluzo ze-DNS zangaphakathi esikhundleni sokuqagela izilungiselelo.

Lungisa ukungafani okutholile: ukukhetha kwesiphequluli, isilungiselelo se-DNS se-VPN noma umthetho we-split DNS. Uma imibuzo kufanele ime lapho umhubhe uhluleka, i-kill switch iyisilungiselelo esihlukile, futhi ukucushwa kwe-DNS kuphela ngeke kukunikeze. Uma udinga ukuchaza ukuthi isixazululi esifihliwe sifihla ini futhi asifihli ini, incazelo ye-RFC 8484 iwusizo.

Izihloko ezihlobene