Amarekhodi e-DNS abasebenzisi be-VPN: umnikazi, i-TTL nokuhlanza kwehlukile
Ikheli le-VPN, irekhodi le-DNS kanye nokufakwa ku-cache kunabanikazi abehlukene: nciphisa ukuthi ubani angashicilela igama, yiziphi izixhumanisi ezibhalisayo nokuthi amarekhodi aphelelwa nini.
Amakhompyutha aphathekayo ayaxhuma, athola ikheli le-VPN, futhi igama elixazululwa ezinye izinhlelo lisabhekisa ekhelini lehhovisi langayizolo. Akukho okwehlulekile: ikheli labelwa, irekhodi alizange libuyekezwe, futhi i-cache isaphethe impendulo endala. Lezi yizinto ezintathu ezinabanikazi abathathu, futhi kube kanye kuphela kuzo okungeyakwa-VPN. Ukuhlela ukushicilelwa kusho ukunquma ukuthi ubani obhala igama, yiziphi izixhumanisi ezibamba iqhaza nokuthi idatha endala inyamalala nini.
Uphawu: igama elilandela ikheli elingalungile
Kusukela kudivayisi, umhubhe uvuliwe futhi ikheli le-VPN liyaphendula. Kusukela esiteshini sokusebenza sikazakwethu, igama elifanayo lomsingathi lixazululeka libe yikheli langasese idivayisi engasenalo, ngakho ukuxhumana kuphelelwa yisikhathi kumshini othukile. Irekhodi linegunya futhi alilungile, okubi kakhulu kunokungabi khona kwalo. Wonke umuntu uyethemba futhi akekho ongaxhuma.
Icala eliphambene lithule kakhulu: irekhodi liyanyamalala futhi igama liyeka ukuxazululeka ngokuphelele. Imiphumela yomibili ivela emgodini ofanayo wokuklama, futhi akukho neyodwa elungiswa ngokwehlisa i-TTL. Ukuphila kwe-cache okufushane kushintsha ukuthi impendulo engalungile ihlala isikhathi esingakanani, hhayi ukuthi iyabhalwa yini.
Qala ngokubuza ukuthi iyiphi into endala. Ikheli elinikezwe yi-VPN, irekhodi elisendaweni kanye nempendulo esekucashile kwisixazululi kunokuphila nabanikazi abehlukene.
Izinto ezintathu, abanikazi abathathu
I-VPN inokwabiwa kwamakheli, futhi ingakhipha ikheli kusuka echibini langaphakathi ngaphandle kokuthi noma yikuphi ukushintshana kwe-DHCP kufike kukhompyutha ephathekayo. Isifunda se-DNS sinerekhodi, futhi imodeli yaso yokuphepha inquma ukuthi ubani angalenza noma alishintshe. I-cache yesixazululi inekhophi esetshenziswa umfundi manje, futhi akukho okwenziwa idivayisi okungafinyelela lapho.
Ukucabanga ukuthi ingxenye eyodwa yenza konke lokhu kuthathu yindawo lapho ukuklama kuphuka khona. Ikheli elibonakala livela kububanzi obulawulwayo alifakazeli ukuthi iseva ye-DHCP yenza ukubhalisa, futhi ukubhalisa okuphumelelayo akufakazeli ukuthi abafundi bavuselela i-cache yabo.
| Object | Owner | What it decides |
|---|---|---|
| VPN address | Tunnel gateway pool | Which address the device holds now |
| DNS record | Zone security model | Which name resolves to which address |
| Cached answer | Each resolver | How long a reader keeps the old answer |
Ubani angabuyekeza irekhodi
Esifundeni esihlanganiswe ne-Active Directory futhi esinezibuyekezo eziguqukayo eziphephile, izimvume zihlala kurekhodi ngokwalo. Irekhodi elidalwe i-akhawunti yesevisi ye-DHCP kungenzeka lingakwazi ukubhalwa yi-akhawunti yekhompyutha yephathi, futhi ukushintsha imodeli yobumnikazi kamuva kungukudlula, hhayi iswishi. Yingakho ukushayahazana kobumnikazi kudlula zonke izilungiselelo zohlangothi lwekhasimende.
Umhlahlandlela we-Microsoft mayelana nezibuyekezo eziguqukayo uthanda ukubhaliswa ohlangothini lwekhasimende ezindaweni ezihlangene eziyingxubevange ezijoyine isizinda. Ukukwamukela kusho ukudlulisa amarekhodi akhona ngamabomu, hhayi nje ukumaka ibhokisi kusihlanganisi se-VPN bese uthemba ukuthi umnikazi wakudala uzohoxa.
Lapho isevisi ye-DHCP kufanele ibhalisele ezinye izigaba zamadivayisi, yinike imodeli yobufakazi nezimvume esekelwayo yalowomsebenzi. Gcina amarekhodi wokuya phambili nawokubuyela emuva kuhlelo olulodwa, ngoba ngokuvamile agcinwa izingxenye ezahlukene futhi eyodwa yazo ikhohlwa.
ipconfig /all
Resolve-DnsName laptop-042.corp.example -Type A
Get-DnsServerResourceRecord -ZoneName corp.example -Name laptop-042Umyalo wokuqala ukhombisa ukuthi idivayisi icabanga ukuthi inamakheli awaphi nokuthi ukuxhumana kusethwe ukubhalisa wona yini. Owesibili nowesithathu baqhathanisa lokho okuxazululwa yikhasimende nalokho isifunda esikugcinayo ngempela, futhi lokho kwehlukanisa inkinga ye-cache nenkinga yegunya.
Amawashi amathathu, hhayi elilodwa
Ukushicilelwa nokuvuselelwa iwashi lokuqala: lapho isibuyekezi esigunyaziwe simemezela ukuthi ikheli lishintshile. I-TTL ye-cache iwashi lesibili: isixazululi singayigcina isikhathi esingakanani impendulo esiyitholile. Ukuhlanza okunegunya iwashi lesithathu: amarekhodi aphelelwe yisikhathi asuswa kanjani yinqubo yokubhalisa noma ukuguga nokukhuhla.
Lawomawashi azimelene, futhi ukuwaxuba kuveza izilungiso ezingasebenzi. Ushintsho kolunye alubonakali kwamanye amabili. I-TTL emfushane yehlisa impilo yempendulo egciniwe futhi ayinikezi mvume yokubuyekeza. Ukukhuhla kususa amarekhodi angavuselelwanga, futhi akukwazi ukulungisa irekhodi elingakaze libhalwe umnikazi ofanele.
Setha i-TTL ngokusho kokuthi abafundi kufanele babone ushintsho ngokushesha okungakanani, futhi setha ukukhuhla ngokusho kokuthi idivayisi elahliwe kufanele igcine igama isikhathi esingakanani. Akukho neyodwa yalezi zinombolo enquma ukuthi ubani angabhala irekhodi, futhi akukho nani le-TTL eliguqula ukwabiwa kwamakheli kube amalungelo okuphatha i-DNS.
Hlela ukushicilelwa kwedivayisi ehambayo
Nquma ukuthi yiziphi izixhumanisi ezibamba iqhaza ekubhaliseni. Ikheli le-Wi-Fi lasekhaya, ikheli le-VPN kanye nekheli lehhovisi elidala zikhonza izethameli ezahlukene, futhi ukushicilela konke kuveza igama elinezimpendulo ezimbalwa ezinokusizakala okungalingani. Bhalisa izixhumanisi abafundi abahlosiwe abangafinyelela kuzo ngempela.
Gcina igama lekhompyutha elizinzile njengobunikazi futhi ubheke amakheli njengezici zalo. Gcina amarekhodi wokuthola isizinda adingwa yidivayisi, futhi ungacishi ukubhalisa ngokuphelele ukuze uxazulule inkinga yamarekhodi aphindwe kabili ebingalungiswa ukushintshwa kwezimvume.
Bhala umabi, isibuyekezi kanye nomnikazi wokuhlanza kurekhodi elilodwa, namagama abafundi abahlosiwe. Lapho igama liphinde likhombise ikheli elingalungile, lelorekhodi lizokutshela ukuthi ubani kwabathathu okufanele abhekwe kuqala esikhundleni sokuqala uphenyo kabusha.