I-VPN ixhunyiwe kodwa amagama ahluleka: i-DNS igqashuka kuphi ngempela

I-tunnel iphakeme, isithonjana siluhlaza, futhi yonke ithebhu yesiphequluli ibika ukwehluleka kokuxazululwa kwamagama. Izindlela ezintathu ezihlukene zakha leso sithombe: i-resolver ingase ingafinyeleleki, iklayenti lingase libuze i-resolver obungayilindele, noma kungase kuhluleke kuphela amagama ayimfihlo. Hlukanisa lezi ngaphambi kokushintsha noma yini kuphrothokholi ye-tunnel, ngoba ngayinye ilungiswa endaweni ehlukile. Ukulandelana ngezansi kuqala ngemibono ehlukanisa lezi zintathu.

Ukusesha kudinga ini ngempela

Ukusesha kudinga izinto ezintathu: ikheli le-resolver, umzila oya kulelo kheli, kanye nempendulo ehambisana nombuzo. Ngakunye kungahluleka kukodwa, futhi uphawu olubonakalayo ikhasi elifanayo elingalayishi. Yingakho ikhasi lephutha lingakutshela cishe lutho uze wazi ukuthi yikuphi kwezintathu okugqashukile.

Iklayenti lifunda i-resolver yalo kuphrofayela ye-VPN, ku-DHCP ku-tunnel, noma kukho ukucushwa kwalo, futhi ukuthi yimuphi umthombo ozonqoba kuncike endaweni yokusebenza. Ku-Windows, ipconfig /all kubala amaseva e-DNS nge-adaptha ngayinye, ngakho ungabona ukuthi inani elithunyelwe lafika ngempela yini. Inani elithunyelwe elingakaze lifike kusistimu yokusebenza liwukwehluleka okuthule nokuvamile. Funda inani elilungisiwe ngaphambi kokuthinta iphrofayela.

I-Linux ne-macOS ziphendula umbuzo ofanayo ngemiyalo ehlukene, futhi impendulo ifanele ukufundwa ngendlela efanayo: resolvectl status kanye scutil --dns zombili zibala amaseva ngokwesixhumanisi. Qhathanisa lolo hlu lwekheli elithi iphrofayela iyalithumela. Ukungafani lapha kuchaza konke okulandelayo, ngakho kuxazulule ngaphambi kokuhlola amagama.

Hlola igama elilodwa lomphakathi nelilodwa eliyimfihlo

Buza igama lomsingathi lomphakathi elijwayelekile kanye negama lomsingathi eliyimfihlo elibhalwe phansi kusuka kumshini ofanayo, futhi bhala ukuthi iyiphi iseva ephendule okukodwa. Uma kokubili kuhluleka, i-resolver noma umzila wayo ugqashukile. Uma kuhluleka kuphela igama eliyimfihlo, i-resolver iphendule futhi umbuzo uba yisifunda noma umzila. Gijimisa imibuzo yomibili kungakapheli iminithi munye komunye, ukuze ukushintsha komzila kungakwazi ukuchaza umehluko.

Gcina amagama angaphakathi kude nezithombe zesikrini zomphakathi nasezixazululini zomphakathi. Ukuphela kwesikhathi kanye nempendulo ngesizinda esingekho kuyimibono ehlukene: eyokuqala ithi akukho okwabuyayo, eyesibili ithi isiphathimandla siphendule ukuthi igama alikho. Ukuziphatha njengephutha elilodwa kukuholela esigabeni esingalungile, futhi isexwayiso sesitifiketi siyinto yesithathu futhi, hhayi ukwehluleka kwe-DNS.

nslookup ishicilela kokubili iseva elibuziwe nempendulo etholiwe, futhi yilowo khona umbhangqwana owudingayo. Yigijimise kabili ku-shell efanayo futhi bhala ikheli eliphendule eceleni kwempendulo ngayinye.

nslookup example.com
nslookup host.corp.example 10.20.30.53

Qinisekisa ukuthi iklayenti lingafinyelela ngempela kuleyo seva

I-resolver eyimfihlo ethunyelwa iphrofayela iwusizo kuphela uma iklayenti lingayifinyelela ngenkathi i-tunnel iphakeme. Ikheli elibonakala lilungile ngaphandle komzila lidala ukuphela kwesikhathi, futhi isimo esixhunyiwe se-tunnel asisho lutho ngalowo mzila. Ukuhlola ukusesha komzila okubhekiswe ku-resolver uqobo, hhayi endaweni yokugcina ye-VPN.

Indawo ngayinye yokusebenza iphendula lokho ngomugqa owodwa, futhi isixhumanisi esishiwo kokukhiphayo siyimpendulo yonke. Uma sikhomba ku-adaptha yomzimba ngenkathi i-resolver ingemuva kwe-tunnel, iphrofayela ayithumeli isiqalo esiyimbozayo.

ip route get 10.20.30.53                      # Linux
route -n get 10.20.30.53                     # macOS
Find-NetRoute -RemoteIPAddress 10.20.30.53   # Windows PowerShell

Kuphrofayela ye-tunnel ehlukanisiwe, i-resolver ingaba ngaphandle kwemizila ethunyelwe, okuyinkinga yephrofayela hhayi yeseva. Qhathanisa ikheli le-resolver neziqalo ezithunyelwe futhi qinisekisa ukuthi esinye sazo siyimboza. Ukungafani okufanayo kuchaza ukuthi kungani i-DNS isebenza kunethiwekhi eyodwa yehluleke kwelinye elinephrofayela efanayo.

Khumbula ukuthi iziphequluli zingadlula i-resolver yesistimu

Isiphequluli esine-DNS evikekile evuliwe singathumela imibuzo nge-HTTPS kumnikezeli esiwukhethile futhi sizibe ngokuphelele i-resolver yesistimu yokusebenza. Ngaleso sikhathi isistimu ibonakala ilungile ngenkathi isiphequluli sihluleka, noma okuphambene. Lokho kuwumbuzo wenqubomgomo wesiphequluli, hhayi we-tunnel.

Hlola isilungiselelo se-DNS evikekile yesiphequluli nanoma iyiphi inqubomgomo ephethwe eyilawulayo, bese uzama uhlelo lokusebenza noma isiphequluli sesibili nge-tunnel engashintshile. Uma kuhluleka uhlelo olulodwa kuphela, ukulungiswa kungokwalolo hlelo. Iwindi langasese alisiwona isiqhathaniso esihlanzekile, ngoba lingase livala izandiso ngokuzenzakalela kwesiphequluli esisodwa hhayi kwesinye, futhi alikaze lidlule inqubomgomo ephethwe. Sebenzisa iphrofayela yesiphequluli sesibili noma olunye uhlelo esikhundleni salokho.

Sula inqolobane bese uhlola umsebenzi wangempela futhi

Ngemva kokulungisa isilungiselelo, sula inqolobane ye-resolver yasendaweni ukuze impendulo endala ingaphili isikhathi eside kunokulungiswa. Ukululama okufushane okulandelwa ukwehluleka okusha kusho ukuthi imbangela isekhona, hhayi ukuthi ukusula kuhlulekile. Khetha umugqa ohambisana nomshini okulo, ngoba izinqolobane ezintathu zihlukene.

ipconfig /flushdns                 # Windows
resolvectl flush-caches            # Linux
sudo killall -HUP mDNSResponder    # macOS

Bese uphinda umsebenzi wokuqala esikhundleni sokusesha okwenziwe, ngoba umsebenzi yiwona obalulekile kumsebenzisi. Xhuma futhi kanye, ukuze ukuhlola kabusha kuhlanganise isimo umsebenzisi azoba kuso ngempela. Isethenjwa nslookup se-Microsoft ikhasi okufanele uligcine lezimpikiswano zombuzo.

Uma amagama ehluleka kuphela ngemva kokunqamuka, iklayenti alibuyisanga ukucushwa kwangaphambili, okuyiphutha lomjikelezo wokuphila okufanele libikwe, hhayi iseva ye-DNS okufanele ishintshwe. Ukusesha okusebenzayo nakho akulona ukuhlolwa kokuvuza, ngoba izwe lokuphuma alikutsheli ukuthi iyiphi i-resolver ephendule.