Kungani i-resolv.conf ikhombisa i-DNS ye-VPN yakho kodwa ukusesha kuyiyeka

Akukho okubonakala kungalungile kumarekhodi: isixhumi siyasebenza, isixazululi sibika iseva ye-DNS ye-VPN, futhi ifayela elikudiski liyayibala. Noma kunjalo igama lomhambukeli wangaphakathi lisaxazululwa ngomgwaqo wangakini. Lezi zitatimende ezintathu aziphikisani, ngoba ifayela, isimo sokuxhumana ngakunye kanye nomgwaqo wokusesha kuyizinto ezahlukene ezabelana ngegama ngengozi. Okulandelayo umgwaqo umbuzo owuthatha ngempela kumhambukeli one-systemd-resolved.

Izinto ezintathu ezibizwa nge-resolv.conf

Kumhambukeli one-resolved, i-/etc/resolv.conf ivamise ukuba isixhumanisi esingumfanekiso esiya ku-/run/systemd/resolve/stub-resolv.conf. Leyo nhloso iqukethe ikheli lomlaleli we-stub wangakini, i-127.0.0.53, kanye nezizinda zokusesha ezibalwe yi-resolved. Kungumbono wesimo, hhayi isimo ngokwaso.

Isimo sihlala kusimo sokuhlela se-resolved sokuxhumana ngakunye, yingakho i-resolvectl status ingase ingavumelani nefayela futhi ibe ilungile. Ukuxhumana ngakunye kuthwala amaseva akho kanye nezizinda zayo zomgwaqo, futhi i-stub ibheka leyo datha lapho umbuzo ufika. I-incwadi ye-systemd-resolved ichaza amafayela akhiqiziwe kanye nemodeli yokuxhumana ngakunye; ukuhlukanisa umbono nesimo yingxenye efanele ukukhunjulwa. Ukushintsha inhloso yesixhumanisi somfanekiso kushintsha lokho amaklayenti endabuko akufundayo, hhayi lokho isixazululi esikwaziyo.

Into yesithathu, i-/run/systemd/resolve/resolv.conf, yenza ukuxhumana ngakunye kube uhlu olulodwa lwamaseva. Uhlelo olukhomba kulelo fayela luthumela imibuzo ngqo kumaseva abaliwe futhi lweqe i-stub, ngakho inqubomgomo yokuxhumana ngakunye ayisasebenzi kulo. Ngakho izinhlelo ezimbili kumshini oyedwa zingaphendula igama elifanayo ngendlela ehlukile, futhi akukho okwephukile.

Landela ukusesha okukodwa nge-NSS

I-glibc ifunda i-/etc/nsswitch.conf ukuze inqume ukuthi ubani ophendula igama. Umugqa we-hosts oqukethe i-resolve uqondisa umbuzo ku-nss-resolve, owhichazelela i-resolved nge-D-Bus futhi uthole impendulo yokuxhumana ngakunye. Umugqa one-files dns kuphela uthumela umbuzo ekhelini i-/etc/resolv.conf eliphethe.

Wona lowo mugqa owodwa uchaza ukungezwani okuningi phakathi kwesiphequluli ne-dig. I-dig ifunda i-resolv.conf ngqo futhi ayilithinti neze i-NSS, ngakho ihlola i-stub noma iseva ephezulu esikhundleni somgwaqo ohlelo olusebenzisayo. I-getent hosts internal.example idlula ku-NSS, futhi ukuqhathanisa impendulo yayo neka-dig ukukala kokuqala okuwusizo.

Izinhlelo eziletha isixazululi sazo, noma ezikhuluma i-DNS phezu kwe-HTTPS endaweni yokugcina engaguquki, zidlula imigwaqo yomibili. Akukho lutho ku-resolv.conf noma esimweni se-resolved okuzivimbelayo.

Hlola ukuthi ifayela lingubani nokuthi likhomba kuphi

Funda uchungechunge lwezixhumanisi ngaphambi kokushintsha noma yini, ngoba ubunikazi bunquma ukuthi yiliphi ifayela eligunyaziwe. Wonke umyalo ongezansi ufunda isimo kuphela.

stat -c '%N' /etc/resolv.conf
resolvectl status --no-pager
grep '^hosts' /etc/nsswitch.conf
ls -l /run/systemd/resolve/

Umugqa wokuqala uphrinta isixhumanisi kanye nenhloso yaso ndawonye, futhi ifayela elivamile eliphethwe iskripthi se-VPN lisho ukuthi isixazululi asikaze sithathe lokho kubhala njengokokufaka. Umphumela wesimo ubala amaseva okuxhumana ngakunye kanye nezizinda zomgwaqo ezinquma ukuthi umbuzo ngamunye uya kuphi. Umugqa we-nsswitch usho ukuthi i-stub iyabuzwa nhlobo yini, ngakho ikheli le-stub efayelini ngaphandle kwe-resolve lapho lisho ukuthi imibuzo ifinyelela kumlaleli wangakini kuyilapho kungekho okulawula ukuhlukanisa. Nalo lowo hlu lokugcina lubalulekile, ngoba umhambukeli ongenawo i-stub-resolv.conf awusebenzi ukuhlelwa okuchazwe lapha.

Uma uchungechunge luphelela efayelini elilawulwa elinye iphakethe, iklayenti le-VPN kanye nalelo phakethe yibo abanikazi ababili okufanele bavumelane. Ukushintsha isixhumanisi kulahla umsebenzi womunye umnikazi futhi kushiye owomunye endaweni yawo.

Lungisa kumnikazi wesixhumanisi

Ukuxhumana kwe-VPN kufanele kubhalise amaseva akho kanye nezizinda zaso kusixhumanisi saso, bese kuzihoxisa lapho kunqanyulwa. Ukuhlanganiswa kwe-resolved kwe-NetworkManager kanye nomsizi wakho weklayenti kokubili kusebenza kanjalo; iskripthi esibhala kabusha i-resolv.conf kuphela asisebenzi kanjalo.

Kusixhumanisi esivele sikhona, izilungiselelo zesikhathi sokusebenza zibonisa indlela. I-resolvectl dns tun0 10.40.0.53 ihlanganisa iseva, futhi i-resolvectl domain tun0 '~corp.example' ihlanganisa isizinda somgwaqo. I-tilde (~) uhlamvu oluthwala umthwalo: lucutshunguza imibuzo yaleyo sihlomelo kulesi sixhumanisi futhi lushiya konke okunye buthule, kuyilapho inani elifanayo ngaphandle kwalo liba isizinda sokusesha futhi ukuhlukanisa kunyamalale. Leyo mikheli iyizibonelo zaselabhu, hhayi ukuhlelwa okuhlala njalo. Qinisekisa nge-resolvectl query host.corp.example futhi ufunde ukuthi yisiphi isixhumanisi esiphendule.

Iseva ebhalisiwe isadinga umgwaqo. Lapho umbuzo ufinyelela isixhumanisi esifanele bese uphelelwa yisikhathi, iphutha lisekufinyelelekeni ngomhubhe, hhayi ebunikazini besixazululi.

Isimo esisebenzayo sibukeka kanjani

Umphumela onempilo uyahambisana kuyo yomithathu imibono: amaseva okuxhumana ngakunye ahambisana nalokho okwabiwa i-VPN, izizinda zomgwaqo zihlanganisa izihlomelo zangaphakathi kuphela, futhi uhlelo olubalulekile luxazulula igama langaphakathi kuyilapho igama lomphakathi lisalandela umgwaqo wangakini. Umbuzo owodwa ophumelelayo ufakazela okuncane kunalokho kuvumelana.

Bese unqamula futhi uphinde yomibili imibuzo. Iklayenti elishiya izizinda zaso zibhalisiwe ngemva kokuhlakazwa likhiqiza umshini ohluleka ekusesheni kwangaphakathi ngemva kwamahora, ngaphandle komhubhe ovulekile nangaphandle kwesizathu esicacile.