Ukubanjwa kwe-Split-DNS: shono ukuthi umbono ngamunye wathathwa kuphi

Abantu ababili bahlola inkinga efanayo ye-Split-DNS futhi bathola amakheli e-resolver ahlukene. Omunye wasebenzisa ithuluzi lokusesha, omunye wabamba amaphakethe ku-adaptha, kanti owesithathu wafunda ukuxilongwa kwekhasimende uqobo. Akekho oqambayo amanga, futhi akekho ochaza isigaba esifanayo. Ukuqamba iphuzu lokubona kuguqula ukungqubuzana kube yimephu.

Ukusesha okukodwa, izindawo eziningi zokubona

Ngebizo langaphakathi elilodwa, kunezindawo okungenani ezinhlanu okufanele zibhekwe: uhlelo lokusebenza kanye ne-API ye-resolver eliyibizayo, inqubomgomo yesizinda esebenzayo kukhasimende, ukubanjwa ku-adaptha noma esihlungini, umngcele wegesi elawulwayo, kanye ne-resolver eyamukela ngempela umbuzo.

Ngayinye iphendula umbuzo ohlukile, futhi akekho noyedwa eyedwa oqinisekisa ukuthi umbuzo waya kuphi.

Ukubanjwa ku-adaptha kukhombisa amaphakethe, hhayi inhloso. Akusho ukuthi ikhasimende likhethe i-resolver iphi, futhi ukubanjwa okungenalutho kungase kusho impendulo egciniwe noma enye i-API ye-resolver esikhundleni sephakethe elahliwe. Thatha umbono ngamunye njengobufakazi besigaba esisodwa. Bese uhlanganisa izigaba zibe indlela.

Isihlungi sekhasimende siphakathi kohlelo nentambo

Ikhasimende le-VPN eline-Split-DNS lisebenzisa ukufanisa isizinda ngaphambi kokuthi iphakethe likhishwe emshinini. Amagama asekujobeleleni kwethange akhishwayo aya ku-resolver yangaphakathi; konke okunye kuye kweyendawo. Isihlungi siyinqubomgomo, futhi inqubomgomo ingahluka ngepulatifomu nangenguqulo yekhasimende.

Umhlahlandlela we-Split-DNS we-Secure Client wakwa-Cisco uhlanganisa ukufanisa isizinda nesihlungi se-Windows, futhi uhlukanisa lokho uhlelo olukubonayo lapho lisebenzisa i-API ye-resolver yendabuko nalokho ithuluzi elifana ne-nslookup elikubonayo. Leyo mehluko iyona ndaba.

Qala ngephrofayela esebenzayo nokusesha okujwayelekile kokukodwa kohlelo. Noma yiluphi uvivinyo olusho iseva ethile luwukuchezuka ngamabomu; luchaze ngokuxilongwa kwekhasimende uqobo, futhi ungavumeli lube umbandela wokwamukela.

I-nslookup ithatha indlela ehlukile kunehlelo

I-nslookup yakha umbuzo wayo we-DNS futhi ingadlula inqubomgomo ye-resolver yesistimu yokusebenza. Lokho kuyenza ibe ithuluzi eliwusizo lokubuza umbuzo othile kuseva ethile, futhi ibe ithuluzi elikhohlisayo lokuhlola lokho uhlelo oluzokuhlangabezana nakho.

Ku-Windows, ithebula lenqubomgomo yokuxazululwa kwamagama linquma ukuthi yikuphi kujobelelo okusebenzisa iyiphi iseva. Ukulifunda kukhombisa inqubomgomo uhlelo oluzoyilandela, futhi ngokuvamile yilowo oyingxenye engekho.

Funda inqubomgomo bese ubuza umbuzo ofanayo nge-resolver evamile:

Get-DnsClientNrptPolicy
Resolve-DnsName intranet.hq.example

Ama-resolver abethelweyo afihla umbuzo, hhayi ukuxhumana

Isiphequluli esine-resolver yaso ye-DNS-over-HTTPS iyisimo esihluke ngokuphelele. Umbuzo uphuma ngaphakathi kwe-TLS, ngakho ukubanjwa kwamaphakethe kukhombisa ukuxhumana nekheli le-resolver kodwa akukhombisi igama elibuzwayo.

Thola kuqala inqubomgomo elawulwayo yesiphequluli, bese uyiqhathanisa nokusesha kwesistimu yokusebenza. Isiphequluli esivunyelwe ukukhetha i-resolver yaso singase singayiboni neze inqubomgomo ye-Split-DNS.

Ukuqapha okufanayo kuyasebenza kunoma yiliphi ikhasimende eliletha i-resolver yalo. Ukubanjwa okubona ukuxhumana kude akubona ubufakazi mayelana negama lombuzo. Uma udinga igama, lithathe emarekhodini e-resolver uqobo noma ekuxilongweni kohlelo, ngemithetho yobumfihlo esebenzayo.

Qhathanisa novivinyo olunilebula

Khetha igama langaphakathi eligunyaziwe lovivinyo, kanye negama lomphakathi elingenalo incazelo ebucayi. Kwelinye ngakunye, rekhoda isikhathi, uhlobo lwerekhodi, impendulo kanye nenqubomgomo obuyilindele.

Lapho kuvunyelwe, qhathanisa ukwamukelwa kwe-resolver nombono owodwa omncane wekhasimende noma wegesi:

nslookup intranet.hq.example 10.55.0.53
Get-DnsClientNrptPolicy | Format-List

Ungalokothi uthumele amagama ayimfihlo kuma-resolver omphakathi angahlobene ukuze nje wakhe ukuqhathanisa, futhi susa konke okwabelanayo. Ekugcineni, hlukanisa impendulo ye-DNS efanele ekuxhumaneni kwensiza okulandelayo: ikheli langasese elixazululiwe lisadinga indlela kanye nemvume yohlelo.