I-OpenVPN ithumele isiphakeli se-DNS, kodwa i-Linux iyasiziba

Isiphakeli se-DNS esithunyelwe sisekubhalweni, umhubhe uyasebenza, futhi amagama angaphakathi asahluleka. Akukho okugqekile ekuthumeleni uqobo; isilungiselelo safika sachopha lapho. Inketho ye-DNS ethunyelwe ingumyalezo kuklayenti, hhayi umyalo kusixazululi sohlelo lokusebenza, futhi ukudluliswa phakathi kwabo yikhona lapho izimo eziningi zalo mhlobo ziphela khona. Izivivinyo ezinhlanu, ngokulandelana, zithola ukudluliswa okungazange kwenzeke.

Isivivinyo sokuqala: uxhumo luqala kanjani

Umnikazi woxhumo unquma ukuthi ubani angasebenzisa izilungiselelo zesixazululi. Umyalo we-openvpn oqondile ovela ku-shell awunakho okunye ngaphandle kwenqubo yawo siqu, kuyilapho iyunithi ye-systemd, i-NetworkManager noma iklayenti lomthengisi ngakunye kunendlela yalo yokushicilela i-DNS. Funda uhlu lwezinqubo negama leyunithi ngaphambi kokucabanga noma yikuphi kwalokho.

Inqubo yomugqa womyalo ayiwona ngokuzenzakalela uxhumo lwe-NetworkManager, futhi uxhumo lwe-NetworkManager aluwona ngokuzenzakalela into eyabhala i-resolv.conf. Lezi zinto ezimbili ezicatshangelwayo zichaza iningi lamahora achithiwe kulolu phenyo. Buza ukuthi iyiphi ingxenye engashicilela i-DNS kusixhumanisi osibona ngempela.

Bhala umnikazi ngaphambi kokuqhubeka. Kuncike kuye konke ukuhlolwa okulandelayo.

Isivivinyo sesibili: yini isixhumanisi sesixazululi esiyigcinile ngempela

Kusiphakeli se-systemd-resolved, resolvectl status sibala isixhumanisi ngasinye kanye namaseva ayo e-DNS nezizinda zayo. Thola isixhumanisi somhubhe bese ufunda okufakiwe kuso, futhi ungacabangi ukuthi isixhumanisi sibizwa nge-tun0, ngoba izinombolo zilandelwa ukulandelana kokudalwa. Uma ikheli elithunyelwe lingekho kusixhumanisi, ukudluliswa kwehlulekile, hhayi umbuzo.

Uma ikheli likhona, umbuzo olandelayo ukuthi yiziphi izizinda isixhumanisi esizifunayo. Isixhumanisi esingenalo uhlu lwezizinda siphendula kuphela amagama abuzwa kuwo ngqo, futhi lokho akuvamisile ukuba yilokho okufunwa ukusetshenziswa kwe-split-DNS. Ikheli lodwa liyadingeka kodwa alanele.

Qhathanisa igama lesixhumanisi kokuphuma kwesixazululi negama lesixhumanisi kumbhalo we-VPN ngaphambi kokufinyelela esiphethweni. Ukungafani lapho ngokuvamile kusho ukuthi umugqa wombhalo wavela kwenye inqubo.

Isivivinyo sesithathu: ingabe isikhala samagama sikhetha leso sixhumanisi

Isixazululi singaba neseva efanele kodwa singabuzwa. Isizinda sesixhumanisi ngasinye sinquma ukuthi imiphi imibuzo iya kusiphi isixhumanisi, futhi ngaphandle kwesizinda somzila isikhala samagama esiyimfihlo sibuyela kulokho okushiwo isixhumanisi esimisiwe. Yingakho i-resolvectl query ingaphumelela egameni langaphakathi kuyilapho uhlelo lokusebenza lusahluleka. Kungenzeka uhlelo lokusebenza lusebenzisa indlela yesixazululi ehluke ngokuphelele.

Hlola ukwabiwa kwesizinda, hhayi ikheli leseva kuphela. Isizinda esibhalwe njenge-~corp.example siyisizinda somzila, futhi uphawu lwe-tilde lushintsha indlela igama eliqondaniswa ngayo.

Uma uhlelo lokusebenza lunesixazululi salo, hlola ngendlela efanayo elusebenzisayo hhayi ngethuluzi lohlelo. Ithuluzi lemibuzo eledlula isixazululi sohlelo lizophumelela kungakhathalekile isimo sesixhumanisi.

Isivivinyo sesine: umnikazi oyedwa, hhayi ababili

Uma i-NetworkManager isivele ilawula i-VPN nesimo sesixazululi, ukwengeza umbhalo we-hook ongahlobene kudala ababhali abancintisanayo. I-hook enikezwa iphakethe ye-systemd-resolved iwukuhlanganiswa okusekelwayo, futhi ilindele umjikelezo wokuphila othile: script-security 2, indlela ye-up, up-restart, indlela ye-down ne-down-pre. Lezo zinketho zenza ukubhaliswa nokususwa kwenzeke ngezikhathi ezifanele hhayi ekuxhumaneni kokuqala kuphela.

Sebenzisa indlela efakiwe evela kuphakethe, hhayi eyisibonelo ekopishwe emhlolweni. Izimvume nazo zibalulekile, ngoba i-hook isebenza ngemva kokwehla kwamalungelo.

Ukuhlela umbhalo wesixazululi sokusabalalisa ukuze kushintshwe umgomo wokuphuma kwaso kubhala indlela yokugwema yesiphakeli esisodwa. Akulona ukulungisa okuvamile.

Isivivinyo sesihlanu: umphumela ofanayo ngemva kokuxhuma kabusha

Xhuma kabusha bese ufunda isixhumanisi futhi. Ukubhaliswa okuvela kanye bese kunyamalala ekushintsheni okulandelayo yikho ukwehluleka okwadalwa yilolu hlu lokuhlola lonke. Hlola ngemva kokumiswa, ngemva kokuxhuma kabusha okuphoqelelwe nangemva kokuqalisa kabusha insizakalo yesixazululi. Ukushintsha ngakunye kuhlola ukucabanga okuhlukile ngokulandelana.

Kuphela lapho izivivinyo ezinhlanu ziphumelela ekuxhumaneni kabusha ungasho ukuthi izilungiselelo ezithunyelwe ziyasetshenziswa. Noma yini eyandulela lokho iyisithombe somzuzu wenhlanhla.