Ukwabelana ngoxhumano lwekhonteyina ye-VPN: kwenzekani ku-DNS
Isikhala samagama esabiwe sinikeza uhlelo lwakho izixhumanisi zomhubhe, hhayi isixazululi esihlanganisiwe. Hlola ngaphakathi kohlelo futhi usebenzise ukuhlelwa kwe-DNS okusekelwa yi-runtime.
Ukwabelana ngesikhala samagama oxhumano lwekhonteyina ye-VPN kunikeza uhlelo lwakho izixhumanisi nemizila yomhubhe. Asisinikezi isixazululi somhubhe, futhi asisinikezi ikhophi ehlanganisiwe yanoma yini enye kusiphathi. Leli gebe likhiqiza ukwehluleka okucacile kakhulu: amagama omphakathi ayaxazululwa, awangaphakathi awaxazululwa, futhi uhlelo olwehlulayo lubonakala sengathi lusebenzisa iseva ye-DNS engalungile, ngoba kunjalo ngempela. Ukulungisa ngokuvamile kuncane kunalokho okushiwo ukuxilongwa.
Isinyathelo 1: Hlola kusuka ohlelweni, hhayi kusiphathi
Gxuma ukusesha ngaphakathi kwekhonteyina enenkinga, hhayi kusiphathi futhi hhayi kusiphequluli. docker exec app-container getent hosts db.internal kuphendula umbuzo owodwa obalulekile: yini isixazululi sale nqubo esiyibuyisayo.
Uma isiphathi sixazulula igama futhi ikhonteyina ingalixazululi, utholile iphutha. Konke okulandela lokhu ukukhetha indlela esekelwayo yokulilungisa.
Isinyathelo 2: Funda imodeli esekelwa yi-runtime
Imibhalo yoxhumano ye-Docker ibhala imikhawulo kumafulegi e-DNS yamakhonteyina abelana ngemodi yoxhumano yekhonteyina enye. Ku-Compose network_mode: service:vpn kubopha uhlelo esikhaleni samagama sekhonteyina ye-VPN, futhi ngensizakalo ngayinye dns izilungiselelo aziziphathi njengensizakalo evamile. Isixazululo ositholayo yileso isikhala samagama esabiwe esinaso.
Amaxhumano ebhuloho achazwe umsebenzisi nawo asebenzisa i-DNS efakwe ku-Docker ngendlela ehlukile kunebhuloho elizenzakalelayo. Yingakho dns isigaba esikopishwe kusibonelo sebhuloho elisebenzayo singase singenzi lutho ngokuphelele kusitaki esabiwe. Hlola ukuhlelwa ngaphambi kokukopisha isigaba.
Ikheli le-loopback lihlala likhomba kumongo woxhumano ofanele. Ngaphakathi kwesikhala samagama esabiwe, 127.0.0.1 akusona isixazululi sesiphathi.
Isinyathelo 3: Landela umbuzo kuze kufike kumamukeli wawo
Funda ukulungiselelwa kwesixazululi sohlelo, bese ufunda noma iyiphi i-DNS ebethelwe eqondene nohlelo elethwa luhlelo, ngoba uhlelo olusebenzisa isixazululi salo siqu alinaki ifayela olihlolile. Bese uhlola ukuthi isixazululi esikhethiwe siyafinyeleleka yini ngaphansi kwemizila nenqubomgomo ye-firewall ye-VPN. Ikheli lesixazululi ngaphesheya komhubhe aliwusizo uma isikhala samagama singenayo imizila eya lapho. Qinisekisa umamukeli ngaphambi kokuhlela noma yiliphi ifayela.
Ikhasi lokuhlola i-IP kusiphequluli alikwazi ukukutshela ukuthi imibuzo yamagama iye kuphi. Likutshela ukuthi uxhumano olulodwa lwe-HTTP luye kuphi.
Isinyathelo 4: Lungisa izigaba ezimbili zokwehluleka ngendlela ehlukile
Uma amagama ensizakalo ehluleka kuyilapho amagama omphakathi esebenza, inkinga ukutholakala kwensizakalo ngaphakathi koxhumano lwamakhonteyina, hhayi uhlu lwezixazululi zomphakathi. Ukushintsha yonke ikheli le-DNS lomphakathi ngeke kudale amarekhodi okungazange kucelwe umshini wokuthola uxhumano ukuwadala.
Uma izigaba zombili zehluleka, qala ngokufinyeleleka kwesixazululi. Uma eyodwa kuphela yehluleka, qala ngomshini wokuthola. Zombili zinebanikazi abahlukene, yingakho ukulungisa okukodwa kungazange kuhlanganise zombili.
Isinyathelo 5: Hlola futhi ngemva kokudala kabusha
Shintsha ukulungiselelwa ngomshini osekelwa yi-runtime, bese udala amakhonteyina kabusha esikhundleni sokuhlela amafayela ngaphakathi kwekhonteyina esebenzayo. Hlola igama langasese elisha, igama lomphakathi elisha nesicelo sohlelo esilandelayo ngemva kokusesha. /etc/resolv.conf ngaphakathi kwekhonteyina kuyanyamalala ekudaleni kabusha futhi kuzokukholisa ukuthi ukulungisa kusebenzile ngesikhathi kungasebenzanga.
Bhala umnikazi wesixazululi nesikhala samagama esilindelekile eceleni kwencazelo yoxhumano olwabiwe. Umuntu olandelayo uzodinga kokubili.