I-DNS ebethelwe ngaphandle kwe-VPN ifihla umbuzo, hhayi ikheli lakho
I-DNS ebethelwe ivikela ukushintshana okukodwa nesisombuluzi esisodwa. Ayifihli ikheli lakho futhi ayimhlikihli isisombuluzi, ngakho setha umgomo ngaphambi kokufunda ukuhlolwa kokuvuza.
Ukuhlolwa kokuvuza kwe-DNS okubonisa inethiwekhi yasekhaya akuyona ubufakazi bokuthi i-DNS ebethelwe yehlulekile, futhi akuyona ubufakazi bokuthi kukhona okusebenzile. Ukuhlolwa kuphendula umbuzo owodwa: yisiphi isisombuluzi umbuzo lo ofike kuso usuka kule nethiwekhi. Ukuthi lokho kuyinkinga noma cha kuncike ekutheni wawuvikela ini futhi kubani.
Bhala umgomo ngaphambi kokwenza noma yikuphi ukuhlolwa.
Isinyathelo 1: shono ukuvikelwa okufunayo ngempela
Imigomo emithathu iyahlangana. Kungenzeka ufuna ukuthi umqaphi osendleleni ayeke ukufunda imibuzo. Kungenzeka ufuna ukuthi isisombuluzi esithile siyeke ukuyithola. Kungenzeka ufuna ukuthi amasayithi owayakhasayo ayeke ukubona ikheli lakho lasekhaya. I-DNS ebethelwe isebenzela owokuqala, ishintsha ukuthi ubani ogcwalisa owesibili, futhi ayenzi lutho ngowesithathu.
I-VPN isebenzela owesithathu futhi, kuye ngomhlinzeki, owokuqala. Awekho amathuluzi angaphezulu komunye.
Isinyathelo 2: khetha isisombuluzi futhi uqinisekise ubunikazi baso
I-DNS over TLS isonga umbuzo kuseshini ye-TLS nesisombuluzi, kanti i-DNS over HTTPS iwusonga esicelweni se-HTTP; i-RFC 7858 ne-RFC 8484 zichaza kokubili, futhi akukho okudinga umhubhe. Okubalulekile ekusebenzeni ukuthi isitifiketi siqinisekiswa ngokumelene negama olilungisile, ngoba iseshini ebethelwe neqembu elingalungile imbi kunombhalo ocacile neqembu elifanele. Lokho kusho imodi eqinile lapho ipulatifomu ikunikeza khona, hhayi imodi yamathuba ehlehla lapho ukuqinisekisa kwehluleka. Hlola iseshini ngokuqondile ngaphambi kokuthemba isilungiselelo: openssl s_client -connect 9.9.9.9:853 -servername dns.quad9.net -brief.
Ukuxhawulana kufanele kusho isisombuluzi osilungisile futhi kubuyisele uchungechunge ongaluqinisekisa.
Isinyathelo 3: ncika ngokuziphatha lapho kwehluleka
Konke ukuqaliswa kunenqubomgomo yesisombuluzi esibethelwe esingafinyeleleki, futhi leyo nqubomgomo isinqumo sobumfihlo. Imodi eqinile yenza ukusesha kwehluleke, okubonakalayo futhi okucasulayo. Imodi yamathuba izama futhi ngombhalo ocacile, okungabonakali futhi okubhidliza injongo ngosuku olubalulekile. Khetha ngamabomu, bese ubhala ukukhetha eduze kwemfuneko.
Ku-systemd-resolved lokho kusho ukuthi DNSOverTLS=yes esikhundleni opportunistic; ku-Android kusho imodi yegama lomsingathi ye-Private DNS esikhundleni sokuzenzakalela.
Hlola ukuthi yini esebenza ngempela ngalokhu: resolvectl status | grep -i -A1 "dns over tls", ngoba ifayela le-drop-in elingakaze lilayishwe kabusha alishintshi lutho.
Isinyathelo 4: hlola ukuthi izinhlelo zilandela isisombuluzi sohlelo
Isiphequluli esinesilungiselelo saso se-DNS ephephile sidlula ngokuphelele ukulungiselelwa kohlelo, kanjalo ne-runtime yekhontheyna enesisombuluzi esifakiwe noma i-runtime yolimi efunda uhlu olubhalwe ngqo. Noma wenze zilandele uhlelo noma zilungiselele ngokucacile futhi ubhale lokho. Bese ubheka ukuziphatha kokuhlehla kwakho ngakunye, ngoba akuzona zonke ezehlulekayo ngokuvaliwe. Uhlu empeleni lufushane: isiphequluli, i-runtime yekhontheyna, nanoma iyiphi iklayenti le-VPN oyisebenzisayo futhi.
Amagama ayimfihlo enhlangano ahlala kusisombuluzi sangaphakathi esigunyaziwe. Ukuwathumela enkonzweni yomphakathi ukuze ukuhlolwa kubukeke kuhle kwenza ngamabomu enye inkinga.
Isinyathelo 5: funda ukuhlolwa kokuvuza ngokumelene nemfuneko
Ukuhlolwa okubika isisombuluzi esingalindelekile kuwumkhondo, hhayi isinqumo. Kungenzeka kubone isisombuluzi sakho esibethelwe obekuhlosiwe, isilungiselelo esithile sohlelo, noma ukuhlehla emuva kombhalo ocacile obewungakwazi. Qhathanisa isisombuluzi esibikiwe nalokho okwalungiselelwa isinyathelo 2, futhi uqhathanise umphumela nomgomo wesinyathelo 1.
Uma umgomo wawukugcina imibuzo kude nenethiwekhi yasendaweni, ukuhlolwa okubonisa isisombuluzi sakho esivamile kuyinto etholakele yangempela. Uma umgomo wawukugcina ungaziwa ngenkathi uphequlula, asikho isilungiselelo se-DNS esasizokunikeza lokho.
Bhala umugqa wokwamukela ngolimi lomgomo: lezi zinto zokusesha zisebenzisa lesi sisisombuluzi esiqinisekisiwe ngaphansi kwale mibandela. Noma yini ebanzi kunalokho iwumusho ongakwazi ukuwuhlola.