I-NXDOMAIN ku-VPN ayisho ukuthi umhubhe uphukile

Kuyalingeka ukufunda ukusesha okukodwa okwehlulekile njengobufakazi bokuthi umhubhe uwile, ikakhulukazi lapho igama lalisebenza khona emizuzwini eyishumi edlule. Impendulo isho okunye. NXDOMAIN iwukuthengiselana kwe-DNS okuqediwe lapho umxazululi ushilo khona ukuthi igama elibuziwe alikho; umhubhe ophukile uvamise ukukhiqiza ukuthula, isikhathi sokuphela noma umzamo wokuxazulula kubhekiswe kuseva engalungile. Ingxenye yempikiswano engena-wireshark iwumbuzo owodwa, ophendulayo oyedwa kanye nekhodi yempendulo eyodwa, futhi lokho kuthathu kufanele kurekhodwe ngaphambi kwanoma yiluphi ushintsho lokucwangcisa.

Impendulo ifakazelani ngempela

I-DNS ihlukanisa imiphumela amakhasimende avame ukuyihlanganisa ibe ukwehluleka okukodwa. Igama elingekho linikeza impendulo eyisisekelo enekhodi ye-NXDOMAIN, kuyilapho igama elikhona kodwa elingenayo irekhodi yohlobo oluceliwe linikeza impendulo ephumelelayo enengxenye yempendulo engenalutho. Kokubili kubonakala kungelusizo kuhlelo lokusebenza, futhi kukhona okukodwa kuphela okusho ukuthi igama alilungile.

Lowo mehluko unquma ukuthi ukulungiswa kufanele kube kuphi. Irekhodi le-AAAA elingekho kusibungu esinerekhodi le-A akusona isibungu esingekho, futhi ukukhipha isitifiketi kabusha noma ukwakha umhubhe kabusha ukuze ulandele lokho kudla ubufakazi obukodwa obekukhona. Umehluko futhi unquma ukuma kokuqhubeka: inkinga yokuqamba amagama ilungiswa endaweni, futhi inkinga yohlobo ilungiswa ngokucela irekhodi elifanele noma ngokwamukela ukuthi umndeni wamakheli awukho nje.

Inganekwane: igama eliyimfihlo elingekho lisho ukuthi umhubhe wehlulekile

Inganekwane iphila ngoba lezi zigameko ezimbili zivame ukuza ndawonye. Ikhasi lixhuma ku-VPN, uhlelo lokusebenza lugcina umxazululi ebeliwethemba kakade, futhi igama langaphakathi elilidingayo manje libuzwa kuseva engakaze izwe ngendawo eyimfihlo. Leyo seva iphendula ngobuqotho nangendlela eyisisekelo. Umhubhe uthwala iphakethe; impendulo imayelana nendawo yamagama okungeyona esetshenziswa ophendulayo.

Amalungiselelo e-split-horizon enza lokhu kube umkhuba: igama lendawo elifanayo likhona esidlangalaleni nangaphakathi nangokuqukethwe okuhlukile, futhi umxazululi wangaphakathi kuphela owazi amarekhodi ayimfihlo. Ngakho ukuthola impendulo eyisisekelo ebonakala inegunya kuwubufakazi bokuthi imuphi umxazululi ophendulile, hhayi ubufakazi besimo sesixhumanisi.

Imininingwane emibili yokucwangcisa inquma umphumela. Umhubhe kufanele ududule noma ukhethe umxazululi wangaphakathi, futhi ikhasi kufanele lisebenzise lokho kukhetha egameni eliseshwayo. Umthetho wedomeyini ngayinye oqamba isijobelelo esihluke kancane kurekhodi olibhalile uzothumela umbuzo endleleni yomphakathi, futhi impendulo izolunga kodwa ingabi lusizo.

Buza umxazululi ofanele ngegama elifanele

Rekhoda ophendulayo ngaphambi kokurekhoda isinqumo. Ukusesha okungabonisi ukuthi iyiphi iseva ephendulile akukwazi ukwehlukanisa inkinga yenqubomgomo enkingeni yendawo yamagama, futhi ukulungiswa kwakho kokubili akuhlobene.

resolvectl query vpn.internal.example
resolvectl status | grep -A3 'DNS Servers'
dig +search app.intranet.example A
dig @10.8.0.1 app.intranet.example A

Imigqa emibili yokuqala ibonisa ukuthi umxazululi wasendaweni wanquma ini futhi uzobuza kubani. Ukusesha kwe-+search kuphinda okwenziwa uhlelo lokusebenza lapho lufaka isijobelelo sokusesha, okuvame ukuba umbuzo wangempela hhayi lowo obhalwe kuthuluzi lokuxilonga. Umugqa wokugcina ubuza iseva yangaphakathi ngqo, udlula inqubomgomo yekhasi; uma lokho kuphumelela kuyilapho ukusesha okuvamile kwehluleka, indawo ilungile futhi ukuhamba kwemibuzo akulungile.

Ukugcina okubalayo kuchaza ukubambezeleka ngemva kokulungiswa

Izipendulo eziyisisekelo zigcinwa ngokomklamo, futhi RFC 2308 ichaza ukuthi impilo yesikhathi sokugcina esibalayo itholakala kanjani kurekhodi legunya lendawo. Ngakho ukulungisa irekhodi noma umthetho womxazululi akuqinisekisi ushintsho olusheshayo kukhasi, futhi ukuphinda ukusesha okuqhubeka kubuyisela impendulo egciniwe akufakazeli lutho olusha. Kuphela ophendulayo ohlukile, igama elihlukile noma isikhashana esikhutshiwe okunikeza ubufakazi obusha.

Sula isikhashana sasendaweni, bese uphinda umbuzo ofanayo kumuntu ophendulayo ofanayo. Kuzinhlelo ezisebenzisa insizakalo yomxazululi wasendaweni lowo umyalo owodwa; kwezinye kungukuqala kabusha kwensizakalo noma ithuluzi leplatifomu, futhi ithuluzi elithile libalulekile kancane kunokuphinda ukuhlolwa okufanayo ngemva kwalokho.

Hlukanisa igama emkhondweni

Lapho igama selixazululwe laya ekhelini eliyimfihlo elilindelekile, i-DNS iphelile njengesihloko futhi umbuzo olandelayo uba umkhondo wohlelo lokusebenza. Isibungu esiphendula ukusesha kodwa senqaba ukuxhumana sinenkinga ehlukile, futhi ukuqhubeka nokulungisa abaxazululi ngemva kwempendulo elungile kuyindlela umcimbi othola ngayo izinguquko ezintathu ezingahlobene. Qhathanisa ikheli elixazululiwe nalelo insizakalo elalela kulo ngempela ngaphambi kokucabanga ukuthi womabili ayafana.

Gcina umbhalo: umbuzo, ophendulayo, ikhodi kanye nekheli elixazululiwe. Lelo rekhodi futhi liyinto eyenza umbiko wakamuva uqinisekiseke, futhi iwumehluko phakathi kokuxilonga nendaba yomhubhe owabonakala unensayo.