ip netns exec kanye ne-DNS: kungani amagama ehluleka ngaphakathi kwendawo yamagama

Umyalo ufinyelela ku-10.8.0.5 ngaphakathi kwendawo yamagama ye-VPN ngaphandle kwesikhalo, futhi lowo myalo uyahluleka ngqo lapho usebenzisa igama lomsingathi. Indawo yamagama inezixhumanisi zayo, imizila yayo namasokhethi ayo; ayinayo ifayela layo lokuxazulula. Uma kungabekwanga lutho lapho, inqubo engaphakathi ifunda i-/etc/resolv.conf yomsingathi futhi ibuza isiphakeli okungenzeka ukuthi asifinyeleleki kusukela kuleso sixhumanisi senethiwekhi.

Lena inkinga yokukhetha ifayela hhayi inkinga yomzila, futhi yikho kanye okwenza indawo yezinombolo isasebenza.

Hlola umbono wokuxazulula otholwa inqubo ngempela

Ungacabangi ukuthi i-shell oyisebenzisile ilingana nenqubo oyilungisa. Uhlelo lokusebenza lwesithombe, iyunithi ye-systemd nesitsha kungenzeka ngakunye kungene kumongo ohlukile wokufakwa noma wenethiwekhi. Qalisa uphenyo ngale ndlela yokuqalisa, futhi uprinte ifayela lokuxazulula ngaphakathi.

Endaweni yamagama eyakhiwe nge-ip netns add, ukuhlola kokufunda kuphela kufushane:

ip netns exec vpn cat /etc/resolv.conf

Qaphela ukuthi umphumela usho ikheli elifinyelelekayo, i-stub ye-loopback, noma isixhumanisi esingokomfanekiso esikhomba endaweni enamandla okufinyelela ahlukile.

Yini umsizi we-exec ayifaka ngempela

Ithuluzi le-ip-netns libhala ukucushwa kwendawo yamagama ngayinye ngaphansi kwe-/etc/netns/NAME/. Lapho liqalisa inqubo, umsizi wenza indawo yamagama yokufaka futhi afake lawo mafayela phezu kwemizila yawo ejwayelekile, ukuze inqubo ibone ikhophi eqondene nendawo yamagama. Lokho kuwuhlelo lokunethezeka lwalesi siqalisi esithile. Ukungena endaweni yamagama yenethiwekhi ngomunye umzila, njenge-unshare noma i-runtime yesitsha, akukukhiqizi lokho ngokuzenzakalela.

Ugibe lapha isixazululi se-loopback: i-127.0.0.53 isho i-loopback yendawo yamagama uqobo, hhayi i-stub yomsingathi. I-stub elalela kuphela endaweni yamagama yomsingathi ayibi yisevisi kwentsha.

Khetha isixazululi indawo yamagama engafinyelela kuso

Noma yisiphi isiphakeli ifayela elisishoyo, sisadinga umzila osuka kuleyo ndawo yamagama. Isixazululi somphakathi singaphendula amagama omphakathi futhi sehluleke endaweni yangaphakathi, ngoba isevisi yangasese ifinyeleleka kuphela ngomhubhe. Hlola umzila ngesikhathi esisodwa nekheli, hhayi ngemva kokuba uphenyo selwehlulekile.

Izinhlelo ezinazo isixazululi sazo, njengalokhu esisebenzisa i-DNS over HTTPS, zingayishaya indiva ngokuphelele ifayela. Uma ithuluzi linezilungiselelo zalo ze-DNS, ukushintsha i-resolv.conf ngeke kube nomthelela kuyo, futhi indawo yamagama yayingeyona inkinga.

Bhala ifayela endaweni efanele

Dala ifayela lendawo yamagama ngaphansi kwe-/etc/netns/NAME/resolv.conf bese uvumela isiqalisi ukuthi sethule. Ligcine lincane: isiphakeli esisodwa noma ezimbili ezifinyelelekayo kanye nezizinda zokusesha ezidingwa umsebenzi. Ungahleli ifayela lokuxazulula elikhiqizwe lomsingathi ukuze ulungise umbono ohloselwe iqembu elilodwa lezinqubo, ngoba lokho kushintsha zonke izinhlelo emshinini. Uma umsingathi esebenzisa umphathi wesixazululi, cusha umzila wendawo yamagama ngalowo mphathi esikhundleni sokulwa naye.

Bhala okuqukethwe kwefayela ku-runbook. Uma kungenjalo umuntu olandelayo uzohlola isixazululi somsithi, abone impendulo esebenzayo bese ephetha ngokuthi indawo yamagama ikahle.

Hlola kabusha yonke indlela

Hlola ngaphakathi kwendawo yamagama ngekheli lezinombolo, igama langaphakathi negama lomphakathi. Lokho kulandelana kuhlukanisa ukufinyeleleka kokuxazulula futhi kuhlukanise izinda zangaphakathi kwezomphakathi. Bese udala indawo yamagama futhi uphindele, ngoba ifayela elikhona kuphela ekhophini esebenzayo liyanyamalala kanye nayo.

Qinisekisa ukuthi inqubo, hhayi i-shell, iyona ethola ifayela. Uphenyo olusebenza kusuka ku-shell esebenzisanayo futhi lwehluleke lusuka kusevisi kuwukutholakala mayelana nomongo wokufaka, futhi kufanele kubhalwe phansi ngaphambi kwesigameko esilandelayo esikhundleni sokuphinda kutholakale kusukela ekuqaleni.