I-OpenVPN ithumela i-DNS, kodwa isixazululi sakho singase singayiboni

Ilogi yeklayenti ibonisa iseva ye-DNS ethunyelwe, umhubhe uxhumekile, futhi igama langaphakathi alikaxazululeki nganoma yini. Akukho okugqekile ekuthumeleni ngokwako. Inketho ifikile futhi isixazululi sohlelo lokusebenza asikaze siyisebenzise, ngoba kumaklayenti amaningi e-Unix i-OpenVPN inikeza inani bese ishiya uhlelo lokusebenza kunkundla.

Uphawu: ilogi ibonisa i-DNS futhi amagama asehluleka

OpenVPN dhcp-option ithwala ulwazi lwe-DNS nesizinda, futhi iklayenti lirekhoda elikutholile. Kokunye ukusebenza iklayenti lisebenzisa lezo zilungiselelo ngaphakathi; kokunye likukhiphela ngaphandle ukuze kusetshenziswe iskripthi sokuhlanganisa noma isevisi yenethiwekhi. Umugqa welogi uchaza ingxenye yokuqala yendaba kuphela. Ingxenya yesibili yenzeka endaweni iklayenti elingayilawuli. Yilapho ukwehluleka kuvame ukuhlala khona.

Yingakho umhubhe oxhumekile negama langaphakathi elihlulekayo kuvame ukuba ndawonye. Inani likhona, umsebenzisi ungekho noma ukucushwa kungalungile, futhi isixazululi siqhubeka buthule sisebenzisa iseva yomphakathi esasiyisebenzisa ngaphambi kokuxhumeka.

Ukuthola akukhona ukusebenzisa

Iklayenti lingarekhoda inani le-DNS elithunyelwe ngenkathi isixazululi sohlelo kusengokunye isevisi. Isiphequluli singase sibe nenqubomgomo yaso ye-DNS ebethelwe edlula ngokuphelele isixazululi sohlelo, okudala isimo esikhumbulekayo lapho uhlelo olulodwa luxazulula amagama angaphakathi kanti olunye alwenzi.

Hlola ukuhlanganisa okusekelwayo kokusebenza esikhundleni sokucabanga ukuthi wonke amaklayenti e-Unix abhala kabusha ifayela elifanayo. Yilowo mqondo oyisizathu sokuthi abantu bahlele ukucushwa kwesixazululi okungafundwa yilutho.

Thola umnikazi wesixazululi ngenkundla ngayinye

Kwi-Windows, ithebula lenqubomgomo yokuxazulula amagama lingaqondisa izijobelelo ezithile kumaseva athile, futhi iklayenti le-VPN lingafaka imithetho lapho. Hlola inqubomgomo, hhayi uhlu lwe-DNS lwe-adaptha kuphela. Ku-Linux, i-NetworkManager noma i-systemd-resolved kungase kube ngumnikazi wokucushwa, futhi ukuthi yikuphi okungumnikazi kungquma ukuthi ukuxhuma kabusha kuzogcina ini.

Funda isimo sangempela ngethuluzi eliphendula ngempela imibuzo: resolvectl query internal.example.net kusihambisi se-systemd-resolved, noma okulingana nakho kwenkundla. Bese uqhathanisa leyo mpendulo neseva ye-DNS ilogi yeklayenti ethi yayithumele.

Gwema ukusebenzisa amasevisi amaningi abhala phezu kwezilungiselelo zesixazululi ngaphandle kokuxhumanisa. Abanikazi ababili bakhiqiza umphumela obonakala uhlukana, futhi ukuxhuma kabusha ngakunye kubonakala kukulungisa noma kukwephula ngokungahleliwe.

Iziskripthi ne-foreign_option

I-OpenVPN ikhiphela ngaphandle izinketho ezithunyelwe kumaskripthi ngokusebenzisa iziguquguquko ezibizwa nge-foreign_option_N, futhi iskripthi singazihumusha zibe imiyalo yesixazululi. Lokho kuhlelo ukuhlanganisa okusekelwayo, hhayi ukuziphatha okuzenzakalelayo, futhi kufanele kufakwe futhi kubizwe kuklayenti.

Uma uthembele kuskripthi, rekhoda ukusebenza kwaso nesimo sokuphuma. Iskripthi esisebenza kodwa sehluleka buthule sishiya uphawu olufanayo njengokungabi naso iskripthi, futhi kunzima ukukuqaphela ngoba ukucushwa kubonakala kuphelele. Hlola okuphumayo kuskripthi, hhayi ifayela leskripthi. Ifayela elikhona akulona iskripthi esisebenzile.

Hlola igama, hhayi ilogi

Ngemva kokuxhuma, buza iklayenti igama lesihambisi langaphakathi kuphela, bese ubuza igama lomphakathi, bese uhlola ukuthi iyiphi iseva ephendule. Ekucushweni okusebenzayo izimpendulo ezimbili zivela ezingxenyeni ezihlukene, futhi zombili kufanele zihambisane nomklamo.

Uma igama lixazululeka kodwa isevisi yehluleka, qhubeka ku-umzila nokufinyelela kohlelo esikhundleni sokushintsha i-DNS futhi. I-incwadi ye-OpenVPN ibhala nge-dhcp-option nendawo yeskripthi; yisebenzise ukuqinisekisa ukuthi iklayenti lakho kufanele lisebenzise ini ngaphambi kokuhlela elinye ifayela lesixazululi.