Amaseva amabili e-DNS ku-adaptha eyodwa awahlukanisi izikhala zamagama

Ukufaka izixazululi ezimbili ohlwini ku-adaptha eyodwa kubonakala kuyindlela yokuthumela isizinda esisodwa kuseva eyodwa nesinye isizinda kwesinye, futhi akukho lutho ohlwini lwezixazululi olusebenza ngale ndlela. I-Windows ixazulula ngokwegama, futhi isinqumo sokuthi iyiphi iseva okufanele ibuzwe sivela ezinhlakeni zenqubomgomo hhayi ohlwini lwamakheli oluhleliwe. Imodeli yengqondo okufanele ishintshwe umugqa: akukho seva yokuqala yesizinda A neseva yesibili yesizinda B. Kunesethi yemithetho yesikhala ngasinye samagama esho izeva ngokucacile, futhi lapho imithetho leyo ikhona, uhlu lwe-adaptha alusaba mnandi.

Inganekwane: amakheli amabili ahlukanisa izizinda ezimbili

Le nkolelo ihlala ikhona ngoba isebenza ngengozi lapho iseva eyodwa iphendula konke kanti eyesibili iyisip ele nje. Iklayenti libuza iseva yokuqala, leyo seva idlulisela noma yenza ukuphindaphinda, futhi impendulo iyafika; akekho obonayo ukuthi iyiphi isixazululi esasiphethe indawo ngempela. Umbono uyaphuka ngesikhathi lapho izikhala ezimbili zamagama zihlala ezindaweni ezizimele ezihlukene ngaphandle kokudlulisela phakathi kwazo, ngoba ngaleso sikhathi iseva yokuqala iphendula ngegunya ukuthi igama alikho. Impendulo engemihle evela kuseva yokuqala ayiqalisi isipele, ngoba iklayenti lithole impendulo eqinile hhayi ukwehluleka.

Uhlu oluhleliwe alunaso isiqondiso sesizinda, ngakho awukwazi ukuveza inhloso. Lokho uhlu olulawula ngempela ukuthi iyiphi iseva ebuzwa kuqala nokuthi iyiphi izanywa okwesibili, futhi zombili lezi zimpendulo zisebenza ngokulinganayo kulo lonke igama.

Yini i-Windows esetshenzisayo ngempela ukukhetha

Ithebula lenqubomgomo yokuxazululwa kwamagama lihlobanisa igama nezikhalo zamagama ezilungisiwe futhi likhetha amaseva nezinketho zalokho kuhambisana. Imithetho ingalungiswa endaweni, idlelisiwe ngenqubomgomo yeqembu, noma inikezwe iphrofayela ye-VPN, futhi inqubomgomo esebenzayo iyinhlanganisela hhayi uhlu olulodwa. Yingakho ukuxilonga kokuqala kuhlale kuyisimo esisebenzayo: umthetho owakhiwe endaweni ohlulwa inqubomgomo elawulwayo udala ilabhorethri eziphethe ngokuhluke ngokuphelele kulokho okushiwo ukulungiswa kwayo. Imithetho ibuye ihlobaniswe ngokucacile, ngakho ukufakwa okubanzi kwesikhala samagama kungafihla okuncane ngezindlela ezingabonakali ohlwini lwezinto ezilungisiwe. Ukufunda ukulandelana okusebenzayo ukuphela kwendlela yokubona ukuthi yimuphi umthetho onqobayo.

Get-DnsClientNrptRule
Get-DnsClientNrptPolicy -Effective

Umyalo wokuqala ubala lokho okulungisiwe emshinini; owesibili ukhombisa lokho iklayenti elizokwenza ngempela, kuhlanganise nokufakwa okuvela kwenye indawo. Uma umphumela osebenzayo uqukethe izikhala zamagama ezilawulwayo, umnikazi wale nqubomgomo iyindawo efanele yokucela ushintsho, hhayi uhlu lwemithetho yasendaweni. Yomibili imiyalo ifunda isimo kuphela, ngakho ukuyisebenzisa ngaphambi kokuba othile avume ushintsho akubizi lutho.

Umthetho owodwa esikhaleni ngasinye samagama, gcina into

Lapho isimo esisebenzayo sesiqondiwe, yakha umthetho owodwa esikhaleni ngasinye samagama futhi ugcine into elethwa umyalo ngamunye. Amagama okubonisa ayizilabeli zabantu, futhi isihlonzi esiyingqayizivele entweni ebuyisiwe yilona okunikezwayo okuyisisulu esithembekile sokufuthwa emva kwalokho. Bhala zombili izihlonzi embhalweni ofanayo woshintsho obhala izikhala zamagama nezixazululi, ngoba isikhathi esizakhe ngeke kube yisikhathi esihlanzayo.

$svcRule = Add-DnsClientNrptRule -Namespace ".svc.internal.example" -NameServers "10.60.0.53" -DisplayName "VPN lab services" -PassThru
$resRule = Add-DnsClientNrptRule -Namespace ".research.internal.example" -NameServers "10.61.0.53" -DisplayName "VPN lab research" -PassThru
$svcRule | Select-Object Name, Namespace, NameServers
$resRule | Select-Object Name, Namespace, NameServers

Ichashazi lokuqala likhombisa ukuhambisana kwesijobelelo, ngakho umthetho uhlanganisa app.svc.internal.example nakho konke okungaphansi kwakho. Lamakheli amabili lapha angekho hlelo lwethu lokuhambisa inguquko yalelabhu; umthetho awudali indawo, awufaki umzila futhi awugunyazi uhlelo oluxhuma ekugcineni, futhi incwadi yereferensi ye-Add-DnsClientNrptRule ibhala ngokunembile ukuthi iyiphi ipharamitha eyenza ini.

Qaphela lokho le miyalo engakwenzi: isebenza kumshini wonke, ayikhawulelwe esikhathini se-VPN, futhi ihlala ikhona ngemva kokuvalwa kwewindi. Ilabhorethri elikhohlwa lokhu lishiya inqubomgomo ngemva kokuba umhubhe unyamalele.

Fakazela ukuthi iklayenti likhethe iseva

Ukubuza iseva ethile ukuthi iyazi igama kufakazela ukuthi iseva ingaphendula, lokho akusona isitatimende esifanayo nokuthi iklayenti likhethe leyo seva. Ukuhlola okubalulekile kuxazulula igama langempela ngendlela evamile yeklayenti bese kuqinisekisa ukuthi iyiphi isixazululi esibhekene nakho, ikakhulukazi lapho umhubhe onikeza umzila uvuliwe. Uma umhubhe uvaliwe, umthetho obekwe ngendlela efanele usabonisa iseva engafinyeleleki, futhi lokho kuyinkinga yokuhambisa hhayi inqubomgomo. Hlola zombili izimo ukuze zihlukaniseke kamuva.

Resolve-DnsName app.svc.internal.example
Resolve-DnsName build.research.internal.example
Resolve-DnsName app.svc.internal.example -DnsOnly -NoHostsFile

Qaphela izimpendulo ezigcinwe kusikhashana esikhathini ngaphambi kokuba imithetho ibekhona, futhi qaphela izinhlelo ezedlula ngokuphelele isixazululi sohlelo nge-DNS yazo ebhalwe ngemfihlo. Izijobelelo zokusesha kungenye into ehlukile: umthetho ungakhetha isixazululi segama eligcwele ngaphandle kokufundisa i-Windows ukunweba igama lomgcini elinqunu kuleso sikhala samagama.

Susa ngqo lokho okukwakhile

Ukuhlanza yindawo lapho ilabhorethri liba yindaba eyisixwayiso. Ukufutha wonke umthetho emshinini kuyashesha futhi kususa inqubomgomo othile oyincikele, ngakho sebenzisa izihlonzi ezathathwa ngesikhathi kwakhiwa imithetho, bese ufunda futhi isimo esisebenzayo ukuze uqinisekise ukuthi umshini ubuyele lapho waqala khona. Uma isikhathi esizakhe singasekho, umbhalo woshintsho yiwo kuphela indawo lapho izihlonzi zikhona. Yingakho zibhalwa ngaphambi kokuba umyalo wokuqala usebenze, hhayi ngemva.

Remove-DnsClientNrptRule -Name $svcRule.Name -Force
Remove-DnsClientNrptRule -Name $resRule.Name -Force
Get-DnsClientNrptPolicy -Effective

Ekuhanjisweni hhayi elabhorethri, umbuzo wesikhathi sokuphila ubaluleke njengomthetho. Iphrofayela ye-VPN ingathwala imithetho yezikhala zamagama futhi ikhethe ukuthi leyo mithetho ihlala ngemva kokuxhumana; umthetho ohlala ukhona ngenkathi isixazululi singafinyeleleki ushiya amaklayenti ethanda iseva efile, futhi umthetho okhawulelwe ekuxhumaneni unyamalala lapho umhubhe unyamalala. Nquma ukuthi yikuphi kwalokhu kuziphatha okudingwa yisevisi, khombisa ukuthi umthetho ungubani, futhi ushiye ukwahlukaniswa kwegunya kubhaliwe eduze kwephrofayela hhayi esikhumbuzweni somuntu ngelabhorethri.