I-DNS eyimfihlo ye-Pritunl iyahluleka? Engeza indlela emincane ye-resolver

Amagama ayimfihlo asonjululwa kuwo wonke umuntu kunethiwekhi yenkampani futhi aphelelwa yisikhathi kuwo wonke umuntu ku-VPN. I-resolver iphendula isango, indlela eya kuyo ikhona, futhi umbuzo awutholi mphendulo. Okushodayo akusiyo enye i-resolver yomphakathi noma indlela ebanzi: ikheli lomthombo i-seva ye-DNS eyimfihlo ekulungele ukuliphendula.

Qinisekisa ukuthi i-resolver iyayenqaba iphuli yakho yeklayenti

Qala ngokufakazela ukuthi ukwehluleka kumayelana nomthombo, hhayi ukufinyeleleka. Kusuka kuklayenti exhunyiwe, buza i-resolver eyimfihlo ngqo futhi ubheke ukuthi isicelo siphelelwa yisikhathi noma sibuya njengokwenqatshwa. dig @10.40.0.53 intranet.example.net +time=2 +tries=1 ephelelwa yisikhathi kuyilapho umbuzo ofanayo usuka esangweni uphumelela kukhombisa inqubomgomo yokufinyelela ku-resolver. Impendulo ye-SERVFAIL ikhomba kwenye indawo ngokuphelele, ngokuvamile isifunda noma isidlulisi esiphezulu.

Bhala ikheli leklayenti ngaphambi kokuhlola. ip -4 addr show tun0 kuklayenti, noma ukuqashwa okuboniswa kukhonsoli, kukutshela ukuthi iyiphi iphuli ebonwa i-resolver.

Bese uqinisekisa ukuthi indlela ikhona ngempela. Indlela ethumela ikheli le-resolver kumhubhe iyisibopho, hhayi isisombululo; uma amaphakethe engafiki, inqubomgomo yomthombo ayinakwa ngayo. Hlola nge-ip route get 10.40.0.53 kuklayenti.

Engeza umzila owodwa womsingathi esikhundleni sokuhumusha konke

Umhlahlandlela we-DNS eyimfihlo we-Pritunl uchaza ikhambi elincane: umzila we-/32 one-NAT wekheli le-resolver, ngalelo kheli elikhethwe njengesiphathimandla se-DNS samaklayenti. Umzila ushintsha umthombo obonwa i-resolver kuphela kuthrafikhi ye-DNS. Ithrafikhi yezinhlelo lokusebenza igcina umklamo ogcina umthombo owukhethele wona.

Yilungiselela ngomnini womzila osekelwa yiseva, ngemva kokubuyekeza imizila ekhona mayelana nokuhlangana. Esibonelweni esingenhla indawo ekuyiwa kuyo i-10.40.0.53/32 ene-NAT, futhi iphuli yeklayenti ihlala iyi-10.90.0.0/24. Ungahumushi lonke ububanzi obuyimfihlo ukuze ulungise isevisi eyodwa, ngoba yonke inqubomgomo engezansi ethembele ekhelini langempela leklayenti izoqala ukubona isango esikhundleni salo. Qinisekisa ikheli i-resolver elilithola ngempela ngokubuka ilogi yemibuzo yayo ngesikhathi sokusesha kokuhlola. Umzila womsingathi wedwa awufakazeli lutho mayelana nokuhumusha noma imvume.

I-resolver kusamele ivumele umthombo ohunyushiwe ku-UDP ne-TCP, futhi izimpendulo zayo kufanele zikwazi ukubuya. Ukushintsha umthombo akukwazi ukwakha isifunda noma irekhodi elingekho.

Nquma ukuthi iseva noma iklayenti elithumela umbuzo

I-Pritunl ibuye ibhale ukuhlelwa kwe-proxy ye-DNS okuxhumene ne-VPN Client DNS Mapping, lapho iseva idlulisela imibuzo ephezulu kubaklayenti. Kulelo modeli umthombo ophezulu ungowomongo wakho wokuxhumana wesiseva ugobo, futhi ukukhishwa ohlangothini lweklayenti kuyisisombululo esingalungile.

Khomba ukuthi iyiphi imodeli esebenzayo ngaphambi kokwengeza noma yini. Izilungiso ezintathu ezihlangene, i-proxy, ukushintshwa kwe-resolver kuklayenti kanye neskripthi se-NAT sesandla ngokuvamile kusho ukuthi akekho oye wasungula: iyiphi ingxenye okufanele ithumele umbuzo. Hlola ne-bootstrap: i-resolver eyimfihlo kuphela ayikwazi ukuba yiyo kuphela indlela yokuthola indawo yokugcina ngaphambi kokuba umhubhe ube khona, futhi ukushintshwa kwe-resolver okungunaphakade akufanele kuphile isikhathi eside kunokuxhumana.

Hlola ukusesha okuyimfihlo, hhayi ikhasi lewebhu lomphakathi

Ngemva kokusebenzisa ushintsho nokuxhuma kabusha, hlola ukulungiselelwa kwe-resolver okusebenzayo kweklayenti, bese uxazulula igama owaziyo ukuthi likhona esifundeni esiyimfihlo kuphela. I-dig intranet.example.net ngaphandle kweseva ecacile ibonisa lokho iklayenti elikwenza ngempela. Landela ngesicelo esiya ekhelini elabuyiswa yilokho kusesha, ngoba ukuxazulula nokufinyelela kusevisi kuyizinyathelo ezihlukene. Isiphequluli esilayisha amasayithi omphakathi nge-DNS-over-HTTPS asifakazeli lutho mayelana nomzila we-resolver oyimfihlo wohlelo lokusebenza. I-resolver yesibili yomphakathi nayo ayisiyo igunya lesifunda sangaphakathi.

Bhala ikheli le-resolver, umzila we-/32 kanye nokulungiselelwa kwe-DNS kweklayenti ndawonye kumanothi eseva. Ingxenye yalokho kulungiselelwa uma ibuyiswa yodwa iphinda ikhiqize ukwehluleka kwasekuqaleni.

Ekugcineni, qinisekisa ukuthi umhubhe usahambisa indawo ekuyiwa kuyo yohlelo lokusebenza ngemva kokuphumelela kwe-DNS. Umzila, ukufinyelela kusevisi kanye nokuqinisekiswa kwesazisi kuhlala kuzimele ekuxazululweni kwamagama, futhi ukusesha okusebenzayo akusho lutho mayelana nokugeleza. Uma ikhasi eliyimfihlo lihamba kancane kodwa lixazululeka, i-resolver yenze umsebenzi wayo futhi inkinga yathuthela emzileni.