I-dnsmasq ilahla impendulo ye-DNS eyimfihlo: ingabe ukuvikelwa kwe-rebinding?

Iseva ye-DNS yenkampani ibuyisela ikheli eliyimfihlo elilindelekile, kodwa umbuzo odlula kusixazululi sokudlulisa sendawo usahluleka. Impendulo ikhona, okushiya ngaphandle isifunda esingaphezulu kanye nerekhodi ngokwalo. Okusele yisinyathelo lapho isixazululi sinquma khona ukuthi sizobuyisela leyo mpendulo kuklayenti. Uma leso sixazululi kuyi-dnsmasq, ukunqatshwa kungenzeka sekukulo log.

Ukuthola impendulo nokukhetha ukuyibuyisela kuyizinyathelo ezimbili ezihlukene.

Qhathanisa igama elifanayo kuzo zombili izixazululi

Bhala ukuthi iyiphi isixazululi esetshenziswa ngohlelo ngempela kanye negama lomsingathi eliqondile elilikhulumayo. Bese uqhathanisa umphumela wangaphezulu nomcimbi wesixazululi sokudlulisa walelo gama. Impendulo engekho evela phezulu, impendulo engeyona egciniwe kanye nokunqatshwa okubhaliwe kudinga izilungiso ezintathu ezihlukene.

Ikheli elibonakala embuzweni wokuxilonga oqondile alifakazeli ukuthi uhlelo luthole lelo kheli ngendlela yalo evamile. Imibuzo emibili ingaphuma kuzixazululi ezihlukene, noma kusixazululi esisodwa ngaphansi kwezinqubomgomo ezihlukene. Bhala imiphumela yomibili ngaphambi kokucabanga, ngoba kulesi sinyathelo lapho kushintshwa khona enye ngenye. Ukuqhathanisa kuwukuxilonga konke.

Funda ukunqatshwa hhayi uphawu

Ukukhetha stop-dns-rebind ku-dnsmasq kunqaba izimpendulo zekheli eliyimfihlo ezifanelekile ezivela phezulu, futhi kuzibhala kulo log uma kwenzeka lokho. Lokhu kuvikelwa kukhona ngesizathu esihle: igama lomphakathi eliphenduka ngokuzumayo libe yikheli eliyimfihlo wukuhlaselwa kwe-rebinding okujwayelekile. Kodwa futhi kuhlangana nensiza eyenziwe ngamabomu ukuba ibe yimfihlo, futhi leso yisimo sakho.

Sesha ukunqatshwa kulo log ngaphambi kokushintsha noma yini, ngoba umlayezo usho umshini.

Uma kungekho kunqatshwa futhi kungekho mpendulo evela phezulu, ukuvikelwa kwe-rebinding akulona inkinga yakho, futhi ukukuvala kungaba ushintsho olungalungisi lutho futhi lukhulisa ukuchayeka. Lokho kubi kunokuhluleka kwasekuqaleni, ngoba kususa ukulawula kushiye iphutha. Qinisekisa kuqala umugqa othile we-log. Bese unquma.

Khawulela ukuhlukile esizindeni esisodwa

Esizindeni esiqinisekisiwe, incwadi ye-dnsmasq inikeza ukuhlukile okukhawulelwe esizindeni esikhundleni sesishintshi somhlaba wonke.

rebind-domain-ok=corp.example

Isizinda esingenhla siyisibonelo nje. Sebenzisa isizinda sokuphatha osisebenzisa ngempela, futhi uqonde ubukhulu bokufanisa bokukhetha ngaphambi kokukusebenzisa, ngoba umthetho wesijobelelo uhlanganisa okungaphezu komsingathi oyedwa owuzamile. Umakhi wokucushwa kwerutha angase akhombise isethingi efanayo ngokulawula kwayo esikhundleni somyalelo oluhlaza. Zombili izindlela zilungile inqobo nje uma ubukhulu obumphumela buyilokho obukuhlosile.

Ukuhlukile ekutholweni kwe-rebinding kwenza into eyodwa ngqo: kuvumela izimpendulo zaleso sizinda ukuba zidlule.

Aku kumisi isidlulisi se-split-DNS, akwenzi umthombo wangaphezulu ongafinyeleleki ufinyeleleke, futhi akudali umzila oya ekhelini elibuyisiwe. Ngakunye kwalokhu kuyisidingo esihlukene esinophawu lwakho lokuhluleka, futhi ngakunye kuhluleka ngendlela ehlukile kuklayenti.

Qinisekisa ngaphandle kokususa umngcele

Buza igama lomsingathi futhi ngomzila wokudlulisa, bese uxhuma kule nsiza ngezindlela zayo ezijwayelekile zokuqinisekisa ubunikazi. Ukuhlukile kwe-DNS akusona isizathu sokwamukela isitifiketi esingalindelekile, futhi kokubili ukuhluleka kulula ukukudidanisa lapho kokubili kuvela njengephutha lesiphequluli. Hlola igama nensiza ngokwehlukana. Eyodwa kuphela yazo eyake yaba inkinga ye-DNS.

Gcina isizathu sokuhlukile eduze kokucushwa, kanye nosuku nomuntu onesibopho.

Phinda uyihlole lapho insiza eyimfihlo ishintsha indawo noma isizinda sishintsha. Ukuvala ukuvikelwa emhlabeni wonke kungashintsha indlela izimpendulo ezingahlobene eziphathwa ngayo, futhi kungasashiya iphutha lomzila noma lensiza likhona uma i-rebinding yayingeyona imbangela.