Ukususa irekhodi le-VPN eliphelelwe yisikhathi kusizindalwazi se-resolvconf

Igama langaphakathi lisaxazululwa liye kuseva ye-VPN ngemva kosuku umhubhe uvaliwe, futhi ifayela lesixazululi liqhubeka liphindela emuva naleso sifakiwe. Lapho i-Debian resolvconf iphethe isimo, lelo fayela lihlanganiswa kusukela kumarekhodi abahlinzeki, futhi elilodwa lawo yinsalela. Ukususa irekhodi kuthatha umzuzu owodwa; ukufakazela ukuthi kuphephile ukulisusa umsebenzi wangempela. Lezi zango zisebenza ngokulandelana, futhi ingango ehlulekile iqeda inqubo esikhundleni sokukuthumela esinyathelweni esilandelayo.

Qinisekisa ukuthi i-resolvconf iphethe isimo

Qala ukhombe umnini, ngoba uphawu olufanayo ngaphansi kwe-systemd-resolved ludinga imiyalo ehlukile nokulungiswa okuhlukile. Iphakheji le-resolvconf ligcina isizindalwazi ngaphansi kwe-/run/resolvconf futhi likhomba i-/etc/resolv.conf efayelini eliyakha kuleso sizindalwazi. Ukufunda okubili kuqeda umbuzo: umgomo wesixhumanisi somfanekiso, nokuthi iphakheji lifakiwe futhi liyasebenza yini. Umgomo ongaphansi kwe-/run/systemd/resolve usho omunye umklamo, lapho akukho lutho olungezansi olusebenzayo.

dpkg -l resolvconf | tail -1
ls -l /etc/resolv.conf
systemctl is-active resolvconf.service

Uma isixhumanisi sikhomba kwenye indawo noma iphakheji lingekho, ma lapha. Isembozo sokuhambisana esaboleka igama, futhi esihlinzekwa omunye umphathi wesixazululi, akunaye umnikazi wale sizindalwazi.

Isizindalwazi sigcina okokufaka, hhayi impendulo

Isizindalwazi sigcina okokufaka futhi ifayela liwukuphuma, ngakho ukufaka okokufaka ohlwini kuyindlela kuphela yokubona ukuthi iyiphi ihlelo eyafaka leso sifakiwe ofuna ukususa. Amarekhodi mafushane, futhi okhiye bawo yizibambeli ozozidinga kamuva. Bazifunde ngaphambi kokunquma ukuthi yikuphi okuphelelwe yisikhathi, ngoba igama elibonakala njengesixhumanisi se-VPN lingaba ngelinye iklayenti. Gcina amakheli angasese nezizinda zokucinga zangaphakathi kude nokuxilongwa okwabiwe; ukhiye wedwa uvame ukukhomba irekhodi.

sudo resolvconf --list
sudo resolvconf -i

Umyalo wokuqala uphrinta amarekhodi anikeziwe ngaphandle kuwacubungula, futhi owesibili ufaka ohlwini izixhumanisi ezihlinzeka ngesimo se-DNS njengamanje. Okhiye bavame ukwakhiwa ngegama lesixhumanisi kanye nohlelo oluhlinzekayo. Incwadi ye-resolvconf ichaza isizindalwazi okhiye labo abakhomba kuso.

Kopisha ukhiye kokukhiphayo esikhundleni sokuphinda uwakhe. Isifakiwe asibizwa nge-tun0 ngenxa nje yokuthi umbhalo wangaphambili wasebenzisa lelo gama.

Fakazela ukuthi irekhodi alinamnini

Irekhodi liphephile ukususwa uma kungekho ukuxhumana okukhona okwalifaka. Hlanganisa ukhiye nokuxhumana okwawudala, bese uqinisekisa ukuthi lokho kuxhumana akusekho. Lokho kuhlangana kuyiyo yonke ingango, futhi yiso leso sinyathelo esivame ukweqiwa endleleni eya emyalweni wokususa. Uma ubufakazi bungacaci, thatha irekhodi njengelisekhona futhi ma.

Amagama ezinqubo awubufakazi obuqinile. I-OpenConnect ibiza i-vpnc-script, ngakho ukuhlola inqubo ye-vpnc akusho lutho ngokuthi iyiphi irekhodi yamanje. Ukuxhumana okusha kungaphinda kusebenzise igama lesixhumanisi elashiywa okudala, okwenza ukhiye ubonakale umdala kuneminyaka yawo yangempela. Qhathanisa ikheli leseva elingaphakathi kwerekhodi namakheli emihubhe esasebenza, futhi ma uma ifana.

Ukunqamuka okuvamile ngomphathi ongumnikazi wokuxhumana kuyikhambi lokuqala. Kuhoxisa lokho okwafakwa yilokho kuxhumana futhi kushiya abanye abahlinzeki bengathintwanga.

Hlola ukususwa nokubhalwa kabusha

Uma irekhodi seliqinisekisiwe ukuthi liphelelwe, lisuse ngokhiye oqondile bese ufunda umphumela esikhundleni sokucabanga. Lo myalo ushintsha isimo sesixazululi kuyo yonke inhlelo kusibungu, ngakho uwusebenzise efasiteleni olilawulayo. Faka ukhiye kuzingcaphuno, ngoba uqukethe izinhlamvu obekuzozandisa i-shell. Isibambi sikhala esikublokhi simelela ukhiye okuwukopishe kusukela ohlwini, hhayi umucu wangempela.

sudo resolvconf -d "RECORD_KEY_FROM_THE_LIST"
sudo resolvconf --list
resolvectl query host.corp.example || getent hosts host.corp.example

Ukususa kusebenzisa imibhalo yokubuyekeza uma ukubuyekeza kunikwe amandla; uma ukubuyekeza kuvaliwe kubambezela ukubuyekeza, ngakho irekhodi elisusiwe kanye nefayela elibhalwe kabusha yizigameko ezimbili ezihlukene. Funda ohlwini futhi uqinisekise ukuthi ukhiye awusekho ngaphambi kokubheka ifayela. Bese ubuza igama elilodwa okufanele lisaxazululwa ngabahlinzeki abasele negama lomphakathi, futhi uqhathanise kokubili nalokho okwabona ngaphambi koshintsho. Uma igama langasese liyeka ngokuphelele ukuxazululwa, lelo rekhodi lalisagcina lona.

I-resolvconf -u isebenzisa kuphela leyo mibhalo yokubuyekeza. Ayikaze ikhombe noma isuse irekhodi eliphelelwe, futhi ukwakha kabusha kusukela kokokufaka okuphelelwe kuphinda kukhiqize ifayela elifanayo elingafuneki.

Ikhokho lokunqamuka elibulewe lishiya irekhodi

Ukuhlanza kwesikhathi esisodwa kubuyisela isimo sanamuhla, futhi ukuvalwa okuphazamisekile okulandelayo kubuyisela irekhodi. Hamba indlela yokuhlakaza: ikhokho lokunqamuka leklayenti, umsizi okubiza leyo khokho, nokuthi kwenzekani uma komunye wabo ebulawa. Ukuvalwa okuphazamisekile kuwumsuka ojwayelekile, ngoba ikhokho alizange lisebenze nhlobo. Bhala isimo sokuphuma sekhokho kanye futhi uzokwazi ukuthi lihluleka ngokuthula yini.

Gcina ukusetha nokuhlanza ngaphansi komnikazi oyedwa. Umbhalo wesibili oqagela amagama ezixhumanisi ekugcineni uzosusa irekhodi lokunye ukuxhumana, okubi kunelekhodi eliphelelwe owaqala ngalo. Umnikazi kufanele futhi anqume ukuthi irekhodi liphelelwe nini, ngoba uyazi ukuthi yikuphi ukuxhumana okwalifaka.

Bese ujwayeza umjikelezo wokuphila: xhuma, nqamula, faka futhi ohlwini amarekhodi. Ukunyamalala kwesifakiwe ngokwaso uwubufakazi kuphela bokuthi ukulungiswa kuyaqhubeka.