I-DNS yesibani se-Nebula: ubani angabuza imiphi imibhalo?
Isilaleli esingakhethiwe siphendula ngokusuka kudatha yamahostu esibani esinayo. Imibuzo yemibhalo ye-A ne-TXT yehluka ngokufinyeleleka nangababukeli, ngakho yibopha ngenhloso.
Indima yesibani ku-Nebula yenza umsebenzi omningi abantu abacabanga ukuthi uzenzekela, futhi ukuphendula i-DNS akusona esinye sawo. Isevisi yamagama isilaleli esingakhethiwe esiqala sicishiwe, yingakho ihostu exazulula kahle ngaphakathi kwe-overlay ingase ingabi nakho nhlobo okuyoxazulula ngalo ikhompyutha ephathekayo yozakwenu. Ngaphambi kokuyivula, ncika ukuthi ubani okufanele ayifinyelele nokuthi yiziphi izinhlobo zemibhalo ozimisele ukuziphendula, ngoba lezi zimpendulo ezimbili ziyehluka.
Isilaleli singesokuzikhethela futhi sicishiwe ngokuzenzakalela
Ukutholwa ne-DNS kuyizinsizakalo ezihlukene. Isibani sisiza ontanga ukuthi batholane futhi ngaphezu kwalokho singaphendula imibuzo yamagama mayelana namahostu esiwaziyo, kodwa leyo ngxenye yesibili kufanele ivulwe ngokusobala ekumisweni.
Ngaphambi kokuvula noma yini, ncika ukuthi yiziphi izixhumi ezibonakalayo namanethiwekhi okufanele afinyelele isilaleli. Isevisi ye-DNS ephendula kusixhumi obungasihlosile iba ukuvuza kolwazi okuncane ngaphandle kokungena kwelogi eyodwa umuntu ayifundayo. Isinqumo simanzi kakhulu manje kunokunciphisa kamuva, lapho into isincike empendulweni engalungile. Imigqa emibili yokumisa incazelo kulula ukuyithethelela kunenothi lesigameko ngemva kwezinyanga eziyisithupha.
Imibhalo ye-A ne-TXT ayihlanganyeli ababukeli
Lezi zinhlobo ezimbili zemibhalo ziphendulwa ngaphansi kwezimo ezihlukene, futhi ukuziphatha njengesevisi eyodwa yiphutha leli athikili elikhona ukuze likuvimbele.
| Query | What it returns | Who can reach it |
|---|---|---|
| A record for a host name | That host Nebula IP | Any host that can reach the listener, overlay or not |
| TXT for a host IP | Certificate information | Only over the Nebula network |
Lokho kungalingani kwenziwe ngamabomu hhayi ukunganaki. Ukuhlela igama ngekheli kunenani eliphansi kumuntu wangaphandle, kuyilapho imethadatha yesitifiketi ichaza ubunikazi obuku-overlay yakho. Ungadlulisi umcabango usuka kumugqa uye komunye ngenxa nje yokuthi inqubo efanayo iphendula kokubili.
Iphendula kuphela mayelana namahostu esibani ngokwaso
Lona akusona isixazululi esijwayelekile sehhovisi lakho, i-VPC yamafu noma i-inthanethi yomphakathi. Isibani siphendula ngolwazi lwamahostu esilunikiwe, yingakho lesi sici sihlala kumanodi esibani hhayi kuyo yonke intanga.
Uma igama lihluleka futhi i-overlay ingahlangene nakho, thola indawo nesixazululi esiyiphethe ngempela. Ukuhlanganisa isixazululi se-overlay ekumisweni kwe-DNS ejwayelekile kwehostu kukhiqiza ukwehluleka okubonakala kungahleliwe, ngoba amanye amagama ayaxazululeka kanti amanye akukho okuphendulayo.
Bheka futhi iphuzu lokungena le-bootstrap. Igama lehostu elisetshenziselwa ukufinyelela isibani sokuqala kufanele lixazululeke ngomzila ojwayelekile ngaphambi kokuthi ukutholwa kuncike kulo, ngakho inkinga yenkukhu neqanda lapha ibonakala ifana ncamashi ne-overlay ephukile. Ize ibike ngendlela efanayo: intanga engakaze iphakame futhi akukho sizathu esicacile. Hlola ukuxazululwa kwamagama ngaphambi kokuthinta izitifiketi, ngoba lokhu kulandelana kubamba abaqale ngengxenye enzima.
Hlola ikheli lokubopha, bese uhlola ngaphandle
lighthouse.dns.host ne-lighthouse.dns.port kunquma ukuthi isevisi engakhethiwe ilalela kuphi. Buyekeza lawo manani kanye ne-firewall yehostu nomgomo wenethiwekhi, ngoba ikheli lokubopha liyisitatimende senhloso hhayi ukulawula kwezokuphepha ngokwako.
dig @10.42.0.1 -p 53 workstation.nebula A +short
dig @10.42.0.1 -p 53 10.42.0.7 TXT +shortBuza kumanethiwekhi ohlose ukuwavumela, hhayi esibanini ngokwaso. Ukusesha okuphumelelayo esibanini kufakazela ukuthi inqubo iyasebenza futhi akukutsheli lutho mayelana nalokho ihostu yangaphandle engakubuza, futhi umbuzo obaluleke ngempela yilowo.
Yembula ngamabomu
Amagama nemethadatha yesitifiketi kuwulwazi lwemisebenzi olusizayo, futhi usizo lusika nhlangothi zombili. Ncika ukuthi isilaleli kufanele sibe se-overlay kuphela, yiziphi izinhlobo zemibhalo ezivunyelwe nokuthi ubani obuyekeza ukumisa lapho kushintsha.
Bese ukubhala eduze kwezilungiselelo zesibani. Umuntu olandelayo ozolungisa ukwehluleka kokuxazulula uzocabanga uma kungenjalo ukuthi isevisi yayihlala ikhona. Uzocabanga futhi ukuthi yayihlala ifinyeleleka kunoma yikuphi lapho ehlola khona. Isigaba esisodwa esibhala ikheli lokubopha, amanethiwekhi avunyelwe nezinhlobo zemibhalo sindisa lowo muntu intambama eyodwa futhi kusindise wena umlayezo obuza ukuthi kungani into ishintshile.