I-DNS yesivakashi se-VirtualBox iyaphuka ngemva kokuba usokhaya ejoyine i-VPN

Uhlelo lwangaphakathi luyaxazululeka kusokhaya we-Windows ngesikhathi i-VPN ixhuma, kanti isivakashi se-Ubuntu ngemuva kwe-NAT ye-VirtualBox asikakutholi. Isivakashi sinesixazululi saso, futhi iadaptha ye-NAT ingaphatha i-DNS ngezindlela ezingaphezu kweyodwa. Ukushintsha isixazululi sesivakashi ngiseva yomphakathi kwenza amasayithi ajwayelekile asebenze futhi amagama angasese ehluleke, okuhambisa inkinga kwenye indawo esikhundleni sokuyixazulula. Yenza izihlolwa ezine ngokulandelana futhi ume kwesokuqala esingahambisani.

Qinisekisa ukuthi iyiphi imodi yeadaptha oyilungisayo

Iadaptha ekumodi evamile ye-NAT kuphela eziphatha ngendlela echazwe yilesi sihloko. Iadaptha yebhuloho ihlezi kunethiwekhi ebonakalayo ngobuwena bayo, inethiwekhi ye-NAT iyiswishi esingamanga enegama elinezilungiselelo zayo ze-DHCP ne-DNS, futhi iklayenti le-VPN ngaphakathi kwesivakashi lenezela esinye isixazululi ngokuphelele. Qinisekisa imodi ngaphambi kokuqhubeka nokufunda, ngoba ukulungisa kuyahluka kulezo zimo.

I-VM eyodwa ingathwala amadaptha amabili kumamodi ahlukene, futhi okuthintekile akuyona njalo eyokuqala.

Qinisekisa futhi ukuthi usokhaya uyalixazulula noma cha igama. Vula uhlelo olufanayo kusokhaya ngokuthi ithuneli liphezulu, usebenzisa igama eliphelele elifanayo isivakashi esizolisebenzisa. Uma usokhaya nehluleka, icala alisilo elesivakashi futhi akukho kushintsha konethiwekhi engamanga okuzokulungisa.

Landela igama elilodwa ngokusebenzisa isixazululi sesivakashi

Khetha igama langaphakathi elilodwa negama lokulawula lomphakathi elilodwa, bese uhlola womabili kuzo zombili izindawo. Igama lomphakathi elixazululekayo kanti elangasese alixazululeki likhomba iphutha endleleni yangasese hhayi ekuxazululweni kwamagama jikelele. Ukuhlola igama langasese kuphela akukuvumeli ukwehlukanisa isixazululi esiphukile nendlela ephukile.

Ngaphakathi kwesivakashi, bheka ukuthi isixazululi silungiselelwe ini ngempela. Kusivakashi se-Ubuntu esigijima i-systemd-resolved, isimo sesixhumanisi ngasinye sikhombisa amaseva afikile, futhi ifayela le-resolv.conf lingaqukatha ikheli le-stub kuphela, okulungile hhayi okusolisayo. Ifayela elihlelwe ngesandla noma iklayenti le-DNS elibethelwe elihlukile kungathumela imibuzo kwenye indawo ngokuphelele. Bhala phansi okutholile ngaphambi kokukushintsha.

resolvectl status
resolvectl query app.internal.example

Hlukanisa ukuxazulula nokufinyeleleka lapha. Ikheli elifikayo ngesikhathi isevisi ihlala ingafinyeleleki ingumbuzo womzila noma wenqubomgomo, hhayi we-DNS.

Zama imodi yesixazululi sasokhaya kuleyo adaptha

Izinketho ze-NAT DNS ze-VirtualBox zichaza izindlela ezahlukene, futhi umehluko ubaluleka lapho isixazululi sasokhaya uqobo sishintsha nethuneli. I-proxy ye-DNS idlulisela izicelo zesivakashi kumaseva ewanikiwe. Imodi yesixazululi sasokhaya ibamba izicelo futhi ishayele i-DNS API kasokhaya, futhi yiyo leyo modi elandela isixazululi se-Windows esilungiswe kabusha yiklayenti le-VPN.

Vula indlela engalungile futhi umyalo uzophumelela nakho kanti ukuziphatha akushintshi, okuyindlela edidayo yokulahlekelwa yintambama.

VBoxManage modifyvm "work-ubuntu" --natdnshostresolver1 on

Bhala izilungiselelo zamanje ze-VM, yicishe, bese uqondise iadaptha oyiqinisekisile ngaphambili. Idijithi yokugcina kukho ukhetho iyinombolo yeadaptha hhayi ingaguquki, ngakho ukuyisebenzisa ku-VM okuthintekile kuyo iadaptha yesibili kuwumsebenzi othule ongenamphumela. Qala isivakashi futhi uhlole ukulungiselelwa kwesixazululi esikutholile ngempela, ngoba isilungiselelo sesandla kusivakashi sidlula konke okunikezwa uhlaka lwe-NAT. Khumbula ukuthi imodi yesixazululi sasokhaya icabanga nokuthi indlela ye-DNS kasokhaya uqobo yiyo obufuna ukuyabelana ngayo.

Phinda izivivinyo ezifanayo phakathi kokuxhuma kabusha kwe-VPN

Phinda yomibili imibuzo kusivakashi, bese uvula uhlelo lwangempela futhi uyeke luqinisekise isitifiketi ngokwalo. Ukuhlolwa kwekheli kuphela kuwusizo ekuhlukaniseni ukuxazululwa kwamagama futhi akulingani nesesheni ye-TLS esebenzayo, ngakho ungami ku-ping. Bese, esikhathini esigunyaziwe, nqamula futhi uxhume kabusha ithuneli kasokhaya bese uphinda futhi. Ukuziphatha okuhlala kuphela ekuxhumaneni kokuqala ngemuva kokuvula kuyinkinga yomjikelezo wokuphila okufanele ibikwe, hhayi imfihlakalo ye-DNS okufanele ilandelwe ngesinye isixazululi.

Ukusebenza kokuxazululwa komphakathi akufakazeli ukuthi imibuzo yangasese yahlala endleleni edingwa inqubomgomo yakho.

Lapho imodi yesixazululi sasokhaya ingashintshi lutho, buyisela ukulungiselelwa okubhaliwe futhi ugcine ukubona okune: okwabuyiswa usokhaya, okwabuyiswa isivakashi, imodi yeadaptha kanye nesimo sesixazululi. Iseva yangaphakathi engafinyeleleki, isihlungi esikhipha ithrafikhi ye-hypervisor kanye nokushintshwa ohlangothini lwesivakashi ngakunye kudinga ukulungiswa okuhlukile. Ukuguqula iadaptha ibe yibhuloho kushintsha umklamo wenethiwekhi futhi akusikho ukusetha kabusha i-DNS.