Ilu liphi ixhumanisi eliphendulayo: izizinda zomzila ze-DNS ye-VPN enomhubhe ohlukanisiwe

Gcina ukuphequluka okuvamile kuxhumanisi lwasendaweni ngenkathi amagama enkampani exazululwa ngesiphakeli se-DNS esinikezwa umhubhe. Ukucisha umzila ozenzakalelayo we-VPN kukunikeza ingxenye yokuqala futhi kushiye eyesibili ingakhiwanga. Okulandelayo isilungiselelo esingekho, uphawu lokubhala olushintsha incazelo yaso, kanye nomyalo oyedwa obonisa ukuthi ilu liphi ixhumanisi eliphendule ngempela. Kulo lonke umbhalo kucatshangwa i-NetworkManager ne-systemd-resolved, ngoba yilolo bhangqa lapho ukudideka kuvame ukuqala khona.

Isinyathelo sokuqala: hlukanisa umzila nesixazululi

i-ipv4.never-default iphendula umbuzo womzila futhi ivimbela i-NetworkManager ekufakeni lolu xhumano njengendlela yayo yonke ithrafikhi ye-IPv4. Isizinda somzila we-DNS siphendula omunye umbuzo: yiziphi iziphakeli zamagama zaluphi uxhumanisi ezithola umbuzo wesijobelelo esifanayo. Akukho kokubili okusho okunye, futhi iphrofayili ingathwala okukodwa iminyaka ngenkathi okunye kungekho. Umzila kuphela kusho ukuthi umhubhe uthwala izixhumi zomkhakha zenkampani futhi isixazululi sawo siphendula amagama enkampani, kuyilapho konke okunye kushiywa kungathintekile.

Setha kuphela impahla yomzila futhi amagama angaphakathi ahluleka, ngokuvamile ngesikhathi sokuphela esizwakala njengomhubhe ophukile. Setha kuphela isizinda futhi ungeze ngokuthula isijobelelo sokusesha kulo lonke igama elifushane emshinini. Womabili amaphutha athumela ithikithi kusiphakeli se-VPN, okuyinto engavamile ukuba yingxenye enephutha.

Isinyathelo sesibili: engeza isizinda somzila kuphela kuphrofayili

Ake sithi uxhumano lubizwa nge-corp-vpn, isijobelelo senkampani ngu-internal.example, futhi isixazululi somhubhe sesifinyeleleka. Qala ngokufunda amanani akhona, ngoba imiyalo engezansi ishintsha izakhiwo ezingase zibe nokufakiwe kakade.

nmcli connection show corp-vpn | grep -E 'dns-search|never-default'
nmcli connection modify corp-vpn +ipv4.dns-search '~internal.example'
nmcli connection modify corp-vpn ipv4.never-default yes

Faka esikhundleni igama lakho loxhumano nesijobelelo sakho, ngoba amanani angenhla ayizibonelo. Uphawu lokuhlanganisa lubaluleke kakhulu kunalokho olubonakala, ngoba ngalo inani lengezwa ohlwini olukhona, kanti ngaphandle kwalo impahla iyashintshwa futhi izizinda ezingahlobene zinyamalala kuphrofayili eyayisebenza izolo. I-tilde ishintsha ukuziphatha hhayi isitayela, futhi isigaba esingezansi sichaza okukhethwayo. Gcina ukufunda ngaphambi kokubhala, ukuze indlela yokufaka esikhundleni ingakumangazi neze.

I-tilde yasekuqaleni ikhomba isizinda somzila kuphela, ngakho imibuzo efanayo iya kuziphakeli zalo xhumanisi futhi isijobelelo asifakwa emagameni amafushane. Susa i-tilde futhi lowo mbhalo ufana nawo uba yisijobelelo sokusesha, umphumela ohlukile abantu abavamile ukuwuhlosha. Zombili izilungiselelo ezingenhla ziyi-IPv4, ngakho iphrofayili enezingqimba ezimbili idinga i-ipv6.never-default nesizinda somzila esifanayo ku-ipv6.dns-search, uma kungenjalo uhlangothi lwe-IPv6 luyaqhubeka nokusebenzisa umzila ozenzakalelayo futhi amagama angaphakathi ahluleka lapho.

Isinyathelo sesithathu: buza i-resolvectl ukuthi ilu liphi ixhumanisi eliphendule

Gijima i-resolvectl status futhi ufunde iziphakeli ze-DNS nezizinda zalo lonke uxhumanisi, bese ugijima i-resolvectl query host.internal.example kubizo langempela langaphakathi olimukele ukulibuza. Umyalo wesibili uwubufakazi obuqondile kuphela bokuthi isizinda somzila senza umsebenzi waso, ngoba sisho ixhumanisi eliphendule. Uhlu lwesimo lodwa lufakazela ukumiswa; umbuzo ufakazela ukuxazululwa.

I-systemd-resolved ikhetha isizinda somzila esihambisana kakhulu, ngakho isizinda esithile kakhulu kwelinye ixhumanisi singasawina umncintiswano. Uma umbuzo ubuya kuxhumanisi obungakulindelanga, funda izinhlu zezizinda ngaphambi kokuthinta isiphakeli se-DNS se-VPN. Isizinda sempande esingu-~. sihambisana nakho konke, futhi uma sesivele sikhona isizinda sakho esithile sisawina ngamagama aso ngenkathi uxhumanisi luphendula okuningi kakhulu kunalokho okukucelile. Susa noma unciphise lokho kufakiwe kwempande uma inhloso kwakungamagama enkampani kuphela.

Uma uxhumanisi lwe-VPN lungabali nanoma isiphi isiphakeli se-DNS, iklayenti alikaze libhalise eyodwa. Isizinda somzila esingenawo isiphakeli ngemuva kwalo sihluleka ngendlela ehlukile kunesizinda esingekho, ngakho qala ngokulungisa ukubhaliswa.

Isinyathelo sesine: uma igama lixazululeka kodwa insiza ingaxazululeki

Impendulo efanele ifakazela kuphela ukuthi ukuxazulula kwasebenza, futhi uhlelo lusadinga umzila oya ekhelini elilitholile. Lowo mzila kufanele weqe umzila ozenzakalelayo ohlukanisiwe osanda kuwumisa, ngakho uwuhlole ngaphambi kokusola i-DNS futhi. Bese uhlola ukufinyeleleka kwembobo yensiza, ngoba ukwabelana ngamafayela noma insiza yohlu lwamafayela ihluleka ekuxazululeni, emzileni noma ekuqinisekiseni futhi inikeza imilayezo efanayo kakhulu kuyo yonke imibandela. Gcina lezo zingqimba ezintathu zihlukene uma ubika umphumela, kungenjalo umuntu olandelayo uphinda ahlole i-DNS eyayivele ilungile.

Ushintsho lwe-Samba oluzungeza eceleni kwalo mbuzo lukhuluma ngengqimba yokufinyelela, hhayi ukukhethwa kwe-DNS. Ukulisebenzisa ehlulekeni lokuxazululwa kwamagama yiyo indlela inkinga encane ethola enye ngayo.

Isinyathelo sesihlanu: ungashintshi isixazululi ukulungisa isizinda esingekho

Iseluleko esibhala phezu kwefayela lesixazululi noma esifaka omunye umphathi wesixazululi sixazulula enye inkinga. Lokho kuwushintsho lokuhlanganisa uhlelo olunezindlela zalo zokwehluleka, futhi akukho okukodwa okwengeza isizinda somzila esingakaze simiswe. Thola ukuthi iyiphi ingxenye ephethe ukuxazululwa kwamagama emshinini ngaphambi kokuyishintsha, ngoba kudeskithophu ye-NetworkManager ene-systemd-resolved lobo bumnikazi buvele buchaziwe. Ukulwa nako yiyo indlela ukumiswa okusebenzayo okuba yinto okungekho muntu ongayiphindisela khona.

Ukulandelana komsebenzi: qinisekisa ukuthi umhubhe unikeza isixazululi, engeza isizinda somzila kuphela, xhuma futhi ngezilawuli zephrofayili, qinisekisa uxhumanisi oluphendulayo, bese uhlola insiza embotsheni yayo. Lokho kulandelana kushiya umphumela ongawedlulisela kumuntu olandelayo ngaphandle kwengxoxo yesibili.