I-openfortivpn igcina ibhala phezu kwe-DNS? Thola umnikazi wangempela

Landela ukuxhumana kusukela ngesikhathi kukhuphuka: iklayenti liqinisekisa ubuwena, i-pppd iyaxoxisana, bese kuba khona okuthile okubhala izilungiselelo ze-DNS kuhlelo lokusebenza. Uma wazi kuphela ukuthi i-VPN ishintshe isixazululi sakho, awukazi ngokuqinisekile ukuthi yisiphi salezi zigaba esikwenzile lokho. Ezimbili zazo zingakwenza, futhi kuklayenti elisebenzisa ukuhlanganiswa kwe-pppd okubhaliwe zisebenza eduze ngokwanele ukuba zibonakale njengomdlali oyedwa. Ukusho igama lombhali yisinyathelo sokuqala; ukukhetha esimisela esikhundleni sakhe kungesibili, futhi leso yisinqumo esihlukile esinezinga laso lokwehluleka.

Ukulandelana ngezansi kulandela iklayenti ngaphandle: yini eshintshwe ukuxhumana, yisiphi isinkinobho esithulisa umuphi umbhali, ubani okufanele athathe izintambo, nokuthi ungaqinisekisa kanjani ukuthi umphumela uyasinda ekuphindeni ukuxhumana. Isigaba ngasinye sishiya umkhondo ohlukile, futhi umkhondo yiwona okutshela ukuthi ukudluliswa kwenzeke ngempela yini.

Qala ngalokho ukuxhumana okushintshe ngempela

Xhumana kanye ngomyalo wakho ojwayelekile bese uqhathanisa ukuxazululwa ngaphambi nangemva. Kusibungu se-Linux esisebenzisa i-systemd-resolved, resolvectl status iphrinta amaseva e-DNS namadomeni okusesha kwisixhumanisi ngasinye, futhi isixhumanisi esisha se-tun noma se-ppp esithwala amaseva aso siwuphawu lweminwe yokubuyekezwa okuvela ohlangothini lweklayenti. Ku-macOS, scutil --dns ikhombisa ukulungiselelwa kwesixazululi ngokulandelana okuxhumana ngakho izinhlelo zokusebenza.

Qhathanisa lokho nefayela obukulindele ukuthi lishintshe. Umngenelo obophelele ekuxhumaneni embonini yesixhumanisi ngasinye kanye ne-/etc/resolv.conf ebhalwe kabusha kuyimiphumela emibili ehlukile, futhi eyesibili ingaba isixhumanisi somfanekiso esilawulwa ngokuphelele okunye. Bhala ikheli lesixazululi, amadomeni okusesha negama lesikhombisi ngesikhathi esifanayo; ushintsho kunoma yikuphi kuzo lukhomba komunye umbhali. Ngaphandle kwalowo msebenzi wesisekelo, ukulungiswa ngakunye kwakamuva kuwukucabanga kokuthi yikuphi kwezinto ezintathu ezinyakazile.

Izinkinobho ezimbili kanye nombhali okuthuliswa yisinkinobho ngasinye

I-openfortivpn ibhala ingxenye yezinketho evala bobabili ababhali engabalawula, futhi isinkinobho ngasinye sinokulingana okubhalwe ngokugcwele okuthathwa incwadi yokuqondisa njengokulungiselelwa okufanayo.

openfortivpn gw.example.com:443 --no-dns --pppd-no-peerdns
# written out in long form
openfortivpn gw.example.com:443 --set-dns=0 --pppd-use-peerdns=0

--no-dns ivimbela iklayenti ekusebenziseni amaseva e-DNS eliwafunde esangweni, kuyilapho --pppd-no-peerdns ivimbela i-pppd ekugxumeleni i-DNS yomlingani ohlelweni. Incwadi yokuqondisa ye-upstream ixwayisa ngokuthi izibuyekezo ze-DNS nge-PPP zingancintisana nezibuyekezo ze-DNS zeklayenti uqobo, yingakho zombili izinkinobho zifanele zibe kule ngxenye, kunokuba enye yazo ithathwe njengeyanele.

Asikho isinkinobho esisho isixazululi esimiselwe esikhundleni, futhi akukho okuvimbela umphathi wenethiwekhi, iklayenti le-DHCP noma ukuhlanganiswa kwe-VPN okuhlukile ekubhaleni ukuxazululwa ngemuva kwalokho. Ukuthulisa ababhali ababili kushiya insimu ivulekile hhayi iphethwe. Uma ingxenye yesithathu isivele ilawula i-DNS, ingxenye ayishintshi lutho ongakubona; uma kungekho okulawulayo, usanda kususa umthombo okuwukuphela kwawo wokuxazululwa kwamagama ayimfihlo. Lokho kuwuhlelo oluvumelekile kuphela lapho umnikazi wesikhundla ekhethwa kuqala futhi ehlolwa eyedwa.

Khetha umnikazi ngaphambi kokukhubaza noma yini

Qala ngokunquma ukuthi ubani ophendula imibuzo yamagama omsebenzi, ngoba lokho kukhetha kubeka imingcele kukho konke okulandela. Ukugcina isixazululi esikhona kusho ukuthi isifunda esiyimfihlo kufanele isivele sifinyeleleke lapho iklayenti likhona, futhi isixazululi esiyimfihlo ngaphakathi kwehhovisi sidinga umzila ophila lapho umhubhe ukhuphuka. Ukuthumela umbuzo ngamunye enkonzweni eyodwa yangaphakathi kuwumgomo wesithathu onesimo sokwehluleka esibukhali: lapho leyo nkonzo ingafinyeleleki, amagama omphakathi ehluleka kanye namagama ayimfihlo.

Umnini womzila uhlala ehlukile ngamabomu. Izinketho zomzila azidingeki ngoba ushintshe i-DNS, futhi ukucisha ukufakwa komzila ngaphandle kokufaka okunye esikhundleni kungenza isixazululi osanda kusikhetha singafinyeleleki. Hlola ithebula lokuhamba ngomzila ikakhulukazi ngekheli lesixazululi, hhayi kuphela ngesixhumanisi esincane sohlelo oluthe waluhlola ngengozi.

Hlola ukuxazululwa kwisixhumanisi ngasinye, hhayi ifayela ngalinye

I-/etc/resolv.conf eyodwa ayilona uhlu lwalokho izinhlelo zokusebenza ezikisebenzisa ngempela kusibungu esinokuxazululwa okulinganiselwe noma okwamadomena, ngakho funda isimo sesixazululi ngendlela inkundla esidalula ngayo.

resolvectl status
resolvectl query vpn.internal.example.com
resolvectl query example.com
ip route get 10.20.0.53

Buza igama elilodwa eliyimfihlo negama elilodwa lomphakathi uma ukuxhumana sekukhuphukile, futhi bhala ukuthi yisiphi isixhumanisi esiphendule kulo ngakunye. Lapho isixhumanisi se-VPN sithwala uhlu lokusesha lwedomena ngalinye, igama eliyimfihlo lingaxazululwa kahle kuyilapho igama lomphakathi lisaya kusixazululi sendawo, futhi lokho kwehlukanisa kuwukuklama okusebenzayo hhayi iphutha. Uma umbuzo oyimfihlo wehluleka, hlola umzila oya kusixazululi ngaphambi kokuphinda uthinte i-DNS; uma uphumelela kuyilapho uhlelo lokusebenza lusahluleka, kungenzeka uhlelo lufunda isixazululi saso esigciniwe noma esilungiselelwe ngokuhlukile.

Xhuma futhi uqinisekise isimo sokunqanyulwa

Yehlisa ukuxhumana bese uphinda imibuzo yomibili. Noma yini efakwe umnikazi okhethiwe kufanele isuswe noma ibuyiselwe yilowo mnikazi, hhayi ishiywe iklayenti olithulisile. Umngenelo wakudala wesixhumanisi ngasinye ophila isikhathi eside kunomhubhe uqhubeka uthumela imibuzo eyimfihlo ekhelini elingasafinyeleleki.

Bese uxhuma futhi ufunda lawo manani amathathu afanayo: ikheli lesixazululi, amadomeni okusesha, isikhombisi.

Uma ehambisana nomgomo owubhalile, ukudluliswa kuphelile futhi iklayenti le-VPN alisenawo umbhali oyedwa. Uma inani lihlehlela emuva imizuzwana embalwa ngemuva kokukhuphuka kwesixhumanisi, kukhona okunye okusasebenzisa ukulungiselelwa, futhi isinyathelo esilandelayo ukukhomba leyo ngxenye hhayi ukwengeza enye ifulegi. Isimo sokugcina osifunayo asinazo izehlakalo: umnikazi oyedwa, umgomo owodwa obhaliwe, kanye nesibungu esinqanyuliwe esixazulula ngokufana ncamashi nangaphambi kokuba umhubhe ube khona.