I-hotspot ye-Pi ne-Pi-hole ne-VPN: nika umsebenzi ngamunye umsebenzi wawo

Ifoni ijoyina i-hotspot ye-Pi, ithola ikheli, kodwa ikhasi alivuli. I-Pi isebenzisa umsizi we-hotspot, i-Pi-hole kanye neklayenti le-VPN, futhi ngayinye icabanga ukuthi ingumnikazi wengxenye yendlela. Iningi lalezi zakhiwo lihluleka hhayi ngenxa yokuthi ingxenye iphukile, kodwa ngenxa yokuthi izingxenye ezimbili zenza umsebenzi ofanayo. Nikeza umnikazi oyedwa ngomsebenzi ngamunye ngaphambi kokulungisa noma yimuphi wabo.

Nikeza umnikazi oyedwa ngomsebenzi ngamunye

Lapha imisebenzi emine ibalulekile, futhi ngayinye idinga umnikazi oyedwa ngqo. Ithebula elingezansi lisho umsebenzi, umnikazi ongasebenza kanye nokonakalayo lapho izinsizakalo ezimbili zifuna wona.

Ukuhlangana ngokuvamile kuza ngephakethe elilodwa ngesikhathi. Umsizi we-hotspot ufaka i-dnsmasq yakhe, i-Pi-hole ifuna iphothi 53, futhi iklayenti le-VPN lengeza imizila. Isinyathelo ngasinye sibonakala sinengqondo sisodwa, futhi ngokuhlanganyela bakha umshini lapho insizakalo yesibili eqalayo ishintsha buthule ukuziphatha kweyokuqala.

Bhala abanikazi ngaphambi kokuvula enye into. Ithebula elifushane kumanothi okwakha livimbela ukufakwa kwakamuva ukuthatha umsebenzi owawunomnikazi kakade.

Khetha ibanga elilodwa futhi uligcine kude nomhubhe

Khetha ibanga le-hotspot, ikheli le-Pi kulo, ichibi le-DHCP kanye ne-resolver etholwa amaklayenti. Gcina lelo banga lihlukile kwi-LAN ephezulu nakubanga lomhubhe we-VPN, ngoba ama-subnet ahlanganayo ashintsha inkinga yokuhambisa isimo ibe iphrojekthi yokuhumusha ikheli. Ibanga elihlangana nomhubhe lenza i-Pi ibe umhambisi ongahlosiwe phakathi kwamaphrifixi amabili afanayo. Bhala ibanga nechibi kusimo se-hotspot esikhundleni sokushiya kunketho ezenzakalelayo.

Uma imodi yokwabelana ye-NetworkManager ingumnikazi we-hotspot, hlola ukuxhumana okusebenzayo ngaphambi kokwengeza iseva ye-DHCP. Imodi yokwabelana iqala abasizi bayo futhi ivule ukudluliswa, ngakho isivele ingumnikazi wohlelo lwamakheli lwaleyo interface. Ukwengeza iseva yesibili ngenxa yokuthi iyatholakala kudala iziphakamiso zokuncintisana hhayi ukungafuneki.

Nquma nge-IPv6 ngamabomu. Izimemezelo zomhambisi kanye ne-DHCPv6 ezimisweni eziningi zivela kumsizi ohlukile kune-DHCPv4, futhi ukushiya i-IPv6 ivuliwe ngenkathi inqubomgomo ye-VPN ihlanganisa i-IPv4 kuphela kunikeza amaklayenti indlela edlula umhubhe. Hlela uhlangothi lwe-IPv6 noma ukucisha ku-interface ye-hotspot ngesizathu esibhaliwe.

Ubani ophendula ngempela kuphothi 53

Bhala yonke inqubo elalela iphothi 53 ngaphambi kokushintsha isimo. Ku-Pi esebenzisa i-stub ye-resolver yasendaweni, i-Pi-hole kanye nomsizi wokwabelana, uhlu lwabalaleli iwona kuphela imephu ethembekile yokuthi ubani ophendula imibuzo:

sudo ss -lunpt '( sport = :53 )'
ip -4 addr show
ip route

Umhlahlandlela we-interface we-Pi-hole uchaza ukuthi imodi yokwamukela encike ku-interface eyodwa isengasebenzisa isokhethi ye-wildcard futhi ilahle okufika kwenye indawo. Lokho akufani nokubopha ama-interface akhethiwe kuphela, okuwukuhlela okuhloswe ngenkathi enye insizakalo ye-DNS kufanele yabelane ngomshini.

Izinqubo ezimbili ngokuvamile azikwazi ukubopha ikheli nekhombandlela elifanayo, nakuba i-SO_REUSEPORT ingenza ukubopha okwabiwe kuphumelele; noma kunjalo, isilaleli se-wildcard singathatha okufika okuhloselwe insizakalo encane kakhulu. Khetha imodi ebhaliwe yendima oyifunayo futhi uqale kabusha izinsizakalo ngokulandelana okuhloswe.

Gcina ikhasi lokuphatha le-Pi-hole ngaphandle kwenethiwekhi ye-hotspot. Amaklayenti adinga i-resolver, hhayi i-interface yewebhu noma i-API engashintsha isimo se-resolver.

Imilenze emibili ye-DNS, inqubomgomo eyodwa kumunye

Umbuzo weklayenti uhamba usuka efonini uya ku-Pi, futhi umbuzo ohlukile uhamba usuka ku-Pi uya ku-resolver yayo ephezulu. Umthetho wokuhambisa ohambisana nethrafikhi ye-hotspot edlulisiwe awusebenzi ngokuzenzakalela emlenzeni wesibili, ngoba i-Pi ikhiqiza leyo thrafikhi endaweni. Uma i-VPN kufanele ithwale i-DNS, indlela yasendaweni idinga inqubomgomo yayo.

Qaphela iluphu. Ukuqondisa i-resolver ephezulu ye-Pi-hole ekhelini elinikezwa yi-Pi uqobo, ngqo noma ngokudlulisa iphothi, kudala imibuzo ejikelezayo ize iphele isikhathi. Yinikeze i-resolver ephezulu yangempela noma isidlulisi esinemibandela kumadomeni engakwazi ukuwaphendula.

Nquma ukuthi kwenzeka ngani lapho umhubhe uwela. Ukubuyela ku-resolver yasendaweni kugcina ukuphequlula kuphila kodwa kungase kuputse amagama ngaphandle kwe-VPN; ukuvimbela kugcina inqubomgomo injalo futhi kuguqula ukuphazamiseka kube iphutha elibonakalayo. Zombili izinqumo ziyavikeleka, kodwa kufanele zikhethwe hhayi ukuthathwa njengefa kunqubo ezenzakalelayo.

Fakazela indlela nokuziphatha ngesikhathi sokuphazamiseka

Hlola ngezingqimba: iklayenti lithola ikheli, iklayenti lixazulula igama nge-Pi, i-Pi ixazulula nge-resolver ephezulu ehlosiwe, futhi uhlelo lokusebenza luqedela isicelo. I-ping ephumelelayo ayisho lutho nge-DNS, futhi ukusesha okuphumelelayo akusho lutho ngokudluliswa.

dig @192.168.70.1 example.com
curl -sS -o /dev/null -w '%{http_code}\n' https://example.com/
ip -4 route get 1.1.1.1

Bese umisa umhubhe futhi uphinde. Ukuziphatha okuhlosiwe kufanele kuvele phakathi namasekhondi ambalwa, hhayi ngemva kokuqala kabusha i-Pi-hole noma insizakalo ye-hotspot ngesandla. Hlola isethingi ye-resolver yeklayenti ngesikhathi sokuphazamiseka, ngoba i-resolver yomphakathi yesibili izoqhubeka iphendula ngisho lapho inqubomgomo ilindele ukwehluleka.

Gcina umnikazi oyedwa wokudluliswa ne-NAT futhi uqinisekise kuklayenti, hhayi ku-Pi uqobo. Isicelo esiphuma ku-Pi ngempumelelo sisengase silahliwe endleleni yokubuya, futhi iklayenti iyona kuphela indawo lapho indlela yonke ibonakala.