I-DNS ehlukanisiwe ku-OpenVPN: isizinda somzila kufanele senze ini kusistimu ngayinye

Sicelo ngasinye se-DNS ehlukanisiwe siqala ngumusho ofanayo: amagama enkampani aya ku-DNS yenkampani, konke okunye kuqhubeka kusebenza. Ukuguqula lowo mushwana kube ukuhlelwa kusho ukuphendula imibuzo emithathu kusistimu ngayinye yokusebenza, futhi izimpendulo zisebenzisa izindlela ezahlukene kuyo ngayinye. Amaphrofayili asebenza kukhompyutha ephathekayo ye-Linux ayevamile ukwehluleka ku-Windows ngezizathu ezingenasiyo indaba nomhubhe. Igebe livamise ukuba isilungiselelo sesixazululi esithathwe njengomzila.

Qala uqambe inqubomgomo, bese ukhetha into eyisisekelo yeplatifomu eyivezayo.

Izilungiselelo ezintathu okulula ukuzidida

Isijobelelo sokusesha sandisa igama elifushane: uma uthayipha files kuba files.corp.example lapho isixazululi sizama izijobelelo ngokulandelana. Isizinda somzila sikhetha ukuthi iyiphi isixazululi ephendula imibuzo ngaphakathi kwendawo yamagama. Umzila we-IP wenza kuphela ukuthi isixazululi esikhethiwe sifinyeleleke. Lezi zinto ezintathu zihlala ezigabeni ezahlukene, futhi ukushintsha esinye ngesinye kukhiqiza ukuhlelwa okubonakala kulungile kodwa okungaxazululi lutho.

Ukudideka kunenani: ukwengeza isijobelelo sokusesha kuthumela wonke amagama amafushane kusixazululi somsebenzi, kuhlanganise namagama angekwenye indawo. Ukukhetha isizinda somzila kugcina imibuzo engahlobene kusixazululi sendawo kuyilapho kusathumela *.corp.example ngomhubhe.

Linux: isizinda somzila kuphela, hhayi isijobelelo sokusesha

Ku-systemd-resolved, isizinda esiqala nophawu lwe-tilde siyisizinda somzila kuphela, okusho ukuthi imibuzo yaleyo ndawo yamagama iya kusixazululi esixhunyiwe ngaphandle kokuba futhi ibe isijobelelo sokusesha. resolvectl domain tun0 '~corp.example' kusetha lokho, futhi resolvectl dns tun0 10.8.0.1 kuqamba iseva. Zombili izilungiselelo zingezejwayezi, ngakho ziyanyamalala nayo. I-tilde iyingxenye abantu abayishiyayo, futhi ngaphandle kwayo amagama amafushane aqala ukuxazululwa ngesixazululi somsebenzi.

Ungafaki leso sizinda esifanayo njengesijobelelo sokusesha sasemhlabeni jikelele. Lezi zilungiselelo ezimbili azigcwele ngokweqile; esisodwa siqondisa umzila kanti esinye sibhala kabusha lokho okuthayiphile.

I-Windows idinga inqubomgomo yendawo yamagama, hhayi isijobelelo

I-Windows igcina inqubomgomo ye-DNS ehlukanisiwe kuthebula lenqubomgomo yokuxazulula amagama, hhayi kusijobelelo se-DNS sesijulisi. Umthetho uhlobanisa indawo yamagama namaseva athile: Add-DnsClientNrptRule -Namespace .corp.example -NameServers 10.8.0.1. Ukusetha isijobelelo kuphela kushintsha ukubukeka kwamagama amafushane; akusiqondisi isicelo kwenye iseva.

Hlola inqubomgomo esebenzayo nge-Get-DnsClientNrptPolicy ngemva kokuxhumana, ngoba umthetho ovela ekuxhumaneni kwangaphambili ungaphila isikhathi eside kunomhubhe. Susa imithetho ngamagama lapho umhubhe wehla, futhi gcina igama lokuboniswa lizinzile ukuze ukuhlanza kuqonde enkosini efanele.

Gcina umnikazi oyedwa wesixazululi ngeplatifomu ngayinye

Isiphathi sedesikithophu, iskripthi se-up se-OpenVPN kanye nedemoni yesixazululi sendawo konke kungazama ukubhala ukuhlelwa okufanayo. Uma zingavumelani, obhale ekugcineni uyawina futhi umphumela uncike ekulandeleni kokuhlakaza. Khetha ingxenye eyodwa ukuba ibe ngumnikazi wesimo sesixazululi, vumela ezinye ukuba zibike esikhundleni sokubhala, futhi uhlole ukuxhumana kabusha: inqubomgomo kufanele yeqe lokho ngaphandle kokuphinda imithetho. Hlola nokunqanyulwa koxhumano, ngoba isimo esisele yisona esenza ukuxhumana okulandelayo kuziphathe ngendlela ehlukile.

Izinhlelo eziletha isixazululi sazo esibethelwe ziyinaka ngokuphelele inqubomgomo yohlelo lokusebenza. Lokho kuyisici sohlelo, hhayi isici esingalungile somhubhe.

Fakazela umphumela, hhayi umbhalo wephrofayili

Xazulula igama elilodwa okufanele lidlule emhubheni nelinye okungafanele, kuplatifomu ngayinye, bese uqinisekisa ukuthi iyiphi iseva ephendule. resolvectl query host.corp.example futhi Resolve-DnsName host.corp.example kokubili kubika iseva esiphendule. Phinda ngemva kokuxhumana kabusha. Bese uqinisekisa ukuthi isixazululi somhubhe siyafinyeleleka ekhelini elithunyelwa iphrofayili, ngoba inqubomgomo elungile ekhomba iseva engafinyeleleki ihluleka ngendlela efanayo nokungabi nayo inqubomgomo.

Bhala indlela yokuziphatha ehlosiwe kumanothi ephrofayili: isiphi isijobelelo esiqondisa umzila, iyiphi iseva eyiphendulayo, nokuthi kwenzekani kukho konke okunye. Iplatifomu elandelayo ozoyisekela izodinga lowo mushwana kunokudinga ifayela lokuhlelwa.