I-DNS yomphakathi esebenzayo akusho ukuthi i-Active Directory iyatholakala

I-VPN iyaxhuma, isiphequluli sivula isayithi yomphakathi, futhi ikhompyutha ephathekayo ayikwazi ukungena esizindeni. Isiphetho esivamile ukuthi i-DNS ilungile ngoba amagama ayaxazululwa. Akulungile, futhi isizathu ukuthi ukuhlolwa kwesiphequluli kuzama ukusesha okukodwa kuphela ochungechungeni oludingwa yiklayenti elihlangene nesizinda. Ukutholakala kwesizinda kucela kuqala amarekhodi wesevisi, bese kuba amakheli ezilawuli eziqanjwe yilawo marekhodi, bese kuba umzila oya emasangweni ezilawuli ezilalela kuwo. Impendulo yomphakathi ayifezi neyodwa yalezi zinyathelo.

Inganekwane: amagama ayaxazululwa, ngakho i-DNS isiphelile

Isayithi yomphakathi ukuxazululeka kwayo kusho kuphela ukuthi isixazululi esithile saphendula umbuzo owodwa we-A noma we-AAAA wamagama asesizindeni somphakathi. I-Active Directory isebenzisa iphrothokholi efanayo kumbuzo ohlukile: zikuphi izinsizakalo zesizinda, futhi iyiphi ilawuli okufanele isetshenziswe yile klayenti. Umbuzo uvezwa njengamarekhodi e-SRV ngaphansi kwesizinda esiqanjwe ngesizinda, futhi isixazululi somphakathi esiphindayo asinaso isizathu sokuwagcina.

Uma irekhodi lingekho, isixazululi sibuyisela impendulo engemihle, okuyimpendulo ye-DNS evumelekile hhayi ukuphazamiseka. Iklayenti libese libuyela eminininingwaneni yezilawuli egcinwe kukhashi uma ikhona, futhi yikho kanye lokho okwenza ikhompyutha yetafula ibonakale ilungile amahora amaningi bese ihluleka ngemuva kokuqalisa kabusha noma ukushintsha iphasiwedi.

Iklayenti lesizinda licela ini ngempela, ngokulandelana

Esizindeni esifana ne-corp.example, umbuzo ojwayelekile wendawo ngu-_ldap._tcp.dc._msdcs.corp.example. Izimpendulo ze-SRV ziqamba izilawuli ezingaba khona kanye namasango azo, bese iklayenti lidinga amarekhodi amakheli alawo magama omsingathi ngaphambi kokuvula uxhumano. Ukutholakala okuqaphela isayithi kunezela imibuzo ngaphansi kwesizinda esincane sesayithi, futhi izimpendulo zinquma ukuthi yiziphi izilawuli ezithandwayo, hhayi ukuthi iyiphi ephoqelekile.

nltest /dsgetdc:corp.example
Resolve-DnsName -Type SRV _ldap._tcp.dc._msdcs.corp.example

Landela uchungechunge ngalolo kulandelana, kusukela kunethiwekhi lapho inkinga yenzeka khona. Igama lomsingathi elixazululeka libe yikheli elingafinyeleleki iwukuhluleka kokuhamba kwendlela, hhayi ukuhluleka kwe-DNS. Ilawuli efinyelelekayo kodwa engenazo izirekhodi zendawo iwukuhluleka kwe-DNS, hhayi ukuhluleka kokuhamba kwendlela. Kokubili kuveza izikhalo zabasebenzisi ezifanayo kanye nokulungiswa okwehluke ngokuphelele.

Kungani isixazululi somphakathi siphendula futhi ukungena kusephuka

Uma i-adaptha inikeza iklayenti isixazululi somphakathi, amagama omphakathi ayasebenza futhi indawo yamagama yangaphakathi ayisebenzi. Ukwengeza isixazululi somphakathi sesibili akusizi, ngoba akukho noyedwa wabo ogcina isizinda. Futhi uhlu olujwayelekile oluthi “kungaphakathi kuqala, umphakathi kamuva” aluziphathi njengomthetho wesizinda ngasinye: impendulo engemihle evela kuseva yokuqala iyimpendulo esemthethweni, futhi iklayenti alizami futhi iseva yesibili ngoba nje impendulo ibingenalutho.

Zombili izixazululi zangaphakathi, uma usebenzisa ezimbili, kufanele zigcine indawo yamagama ye-AD futhi zifinyeleleke kusukela kunethiwekhi yamanje yeklayenti. Yikho lokhu okwephulwa yimiklamo yomhubhe ohlukanisiwe: i-VPN ingase ithwale inethiwekhi encane yomhubhe kuyilapho isixazululi sangaphakathi sikwisimaphambili umhubhe ongayihambiyo, ngakho umbuzo uphuma uya kwisixazululi esingakwazi ukuwuphendula.

I-Windows futhi isebenzisa inqubomgomo yokuxazulula amagama engaqondisa izindawo zamagama ezithile kumaseva athile, futhi amakheli e-DNS akhombiswa yi-adaptha akuyona yonke indaba. Ukushintsha uhlu lwe-adaptha ngaphandle kokushintsha leyo nqubomgomo kungase kushiye ukucushwa okusebenzayo kungathintwanga, futhi yikho lokho okwenza ukulungiswa okubonakala kusetshenzisiwe kungabi nawo umphumela.

Gcina i-DNS yomhubhe kanye nemizila yawo kuhambisana

Iphrofayela ye-VPN ephusha isixazululi kodwa hhayi isimaphambili esisiquketheyo idala isixazululi iklayenti elingakwazi ukusifinyelela; leyo ephusha isimaphambili ngaphandle kwesixazululi ishiya iklayenti likhuluma nesokhaya. Thatha lezi zimbili njengento eyodwa yokucushwa futhi uhlole zombili ngemuva kwakho konke ukushintsha kwephrofayela, ngoba ukushunyekwa okuhlelwe kabusha noma inqubomgomo entsha yomhubhe ohlukanisiwe kungazihlukanisa.

Hlola futhi ukuthi iklayenti lenza ini ngesethingi esishunyiwe. Amanye amaklayenti asebenzisa iseva ye-DNS kuphela kusixhumi somhubhe futhi ashiye isixazululi se-adaptha yomzimba endaweni yaso, ngakho ukuthi iyiphi ezonqoba kuncike kumethrikhi yesixhumi kanye negama elibuzwayo. Uma impendulo yangaphakathi ifika kuphela lapho i-adaptha yomzimba ikhutshaziwe, yiyo leyo indlela okufanele ilungiswe, hhayi amarekhodi esizinda.

Yamukela ngocingo lokutholakala kanye nokusebenza okukodwa okuphilayo

Ukuhlolwa kokwamukela okusizayo kusebenzisa umbuzo wendawo bese kwenza ukusebenza okukodwa okuqinisekisiwe kwangempela, njengokuvula ukwabelana okusekelwa yincwadi noma ukucela ithikithi. Kwenze ngaphambi kokushintsha kwe-VPN futhi wengeze ngemuva, kumshini ofanayo, ngaphandle kokuqalisa kabusha phakathi. Imininingwane yokungena egcinwe kukhashi kanye nezikhathi ezivele zivuliwe zizokwenza umzila ophukile ubonakale uphilile, ngakho ukungena ngempumelelo kudeskithophu akulona ukuhlolwa.

I-zincomo zika-Microsoft zesixazululi se-DNS zidweba umugqa ofanayo phakathi kokuxazulula indawo yamagama yangaphakathi nokudlulisela imibuzo yomphakathi phezulu, futhi yilokho kulungiselelwa okufanele kugcinwe lapho i-VPN yethulwa.

Uma ukuhluleka kungcono nje ukunensa hhayi ukuhluleka, gcina ukubambezeleka kuhlukile ekuxilongweni. Ukuphela kwesikhathi ngesikhathi sokutholakala kungavela kulawuli engafinyeleleki, isango elivimbiwe noma isixazululi esiphendula sekwedlule isikhathi, futhi akukho nalokho okuqinisekiswa ukulinda kuphela. Rekhoda umbuzo wangempela, impendulo yawo kanye nomzamo woxhumano ngaphambi kokushintsha isethingi yesixazululi.