Igama lehosti le-LAN lehluleka ku-VPN: isijobelelo, mDNS noma isifunda?
Igama elifushane lingathembela kwisijobelelo sokusesha, igama le-.local lithembele ku-multicast, kanti igama lebhizinisi lithembele esifundeni esiyimfihlo. Umzila kuphela awunikezi noma yiluphi usizo lwamagama.
Eceleni kwedivayisi, iphrinta iphendula egameni elifushane futhi iseva yamafayela iphendula egameni lesiteketeke. Ngomhubhe, womabili amagama aphelelwa isikhathi ngenkathi amakheli awo esasebenza. Umzila wenza umsebenzi wawo; indlela yokuqamba amagama eyenza lawo magama amafushane asebenze ayizange iwele umhubhe. Izindlela ezintathu zikhiqiza lokho kuziphatha, futhi ngayinye idinga ukulungiswa okuhlukile.
Qala ngokuthola ukuthi igama lincike kuyiphi indlela.
Izinhlobo ezintathu zamagama eziziphatha ngendlela ehlukile
Igama elinelebula elilodwa njenge-fileserver ngokuvamile lincike kwisijobelelo sokusesha se-DNS esengezwa isixazululi. Leso sijobelelo sivame ukufika nokuqashwa kwe-DHCP kwasendaweni, ngakho iklayenti elikude elithola ikheli ku-VPN alinasizathu sokukwazi. Ukwengeza umzila akusilethi isijobelelo. Igama elifushane liyeke ukuba khona njengegama, nakuba ikheli elingemuva kwaso lifinyeleleka.
Igama eliphela nge-.local ngokuvamile lixazululwa yi-DNS ye-multicast kuxhumano lwasendaweni, njengoba i-RFC 6762 ichaza. I-multicast ayiweli umhubhe onomzila ngaphandle uma okuthile kuwuhlanganisa noma kuwumela ngenhloso, ngakho igama liyeka ukuxazululeka ngaso leso sikhathi lapho ushiya isigaba.
Igama lebhizinisi eliqondile ngokuphelele lingelase sifunda sangaphakathi esisekelwa izixazululi zenhlangano. Lelo lisebenza kude lapho i-VPN icindezela lezo zixazululi futhi iklayenti lilungiselelwe ukuzisebenzisa. Futhi i-localhost ingenjongo ekhethekile ngokwe-RFC 6761: ikhomba emshinini ophambi kwakho, ayikaze ikhombe kusevisi ekude.
Funda isixazululi ngaphambi kokushintsha umzila
Buza ukuthi iyiphi iseva yamagama ephendulile nokuthi yisiphi isijobelelo esengeziwe. Umbuzo ofanayo ngabaxazululi abehlukene unikeza izimpendulo ezihlukene, futhi lowo mehluko uwubufakazi obudingayo.
getent hosts fileserver getent hosts fileserver.corp.example.com nslookup fileserver.corp.example.com dig +search fileserver A resolvectl query fileserver.corp.example.com scutil --dns | head -30
Uma umbuzo oqondile ngokuphelele uxazululeka kodwa omfushane ungenzi, iphutha lisezijobelelweni, hhayi kuseva. Uma kokubili kungaxazululeki futhi ikheli lisebenza, iklayenti aliyisebenzisi neze isixazululi sangaphakathi. Qhathanisa uhlu lwezixazululi nalokho i-VPN okufanele ikucindezela, ngoba iklayenti eligcina isixazululi saso sasendaweni kuwo wonke umbuzo ngeke liloke libone isifunda sangaphakathi.
Letha igama elifanele kuklayenti
Cela umphathi igama lokufinyelela kude elibhaliwe, ngokuphelele, futhi ulisebenzise kuphrofayela esikhundleni sokuqagela izijobelelo. Uma ukusetshenziswa kusekela i-split DNS, lungiselela isizinda sangaphakathi ukuba sixazululwe amaseva angaphakathi ngenkathi konke okunye kugcina isixazululi sasendaweni. Cindezela isizinda sokusesha ngokulungiselelwa kwe-VPN lapho iklayenti likusekela khona.
Qinisekisa umphumela kuklayenti hhayi kusango. Ukulungiselelwa okusetshenziswe kuseva okungafiki neze kuklayenti akushintshi lutho.
Gcina ubunikazi besitifiketi buphelele
Ukuhlolwa okusekelwe ekhelini okungayinaki iphutha lesitifiketi kufakazela kuphela ukuthi isokhethi yavulwa. Isitifiketi sesevisi sikhishwa segama, futhi iklayenti lizoqhubeka lenqaba ukungafani ngesizathu esifanele. Uma isitifiketi sibala igama langaphakathi kuphela, sebenzisa lelo gama futhi ulungise ukuxazulula, noma thola isitifiketi esihlanganisa ikheli okuhloswe ukulisebenzisa.
Rekhoda igama, isixazululi nesijobelelo okuholele ekuxhumaneni okuphumelelayo. Lowo mbhalo usindisa umuntu olandelayo ekuphindeni ikhambi lesikhashana elisekelwe ekhelini elifihla inkinga yangempela.