I-fallback ye-DNS ye-VPN yakho: umbuzo uya ngempela kuphi

Isilungiselelo sesixazululi sishintsha sisuka ekhelini langasese siye kwelinye elivamile, futhi isiphetho sifika ngokushesha: umhubhe uyavuza. Kwesinye isikhathi kunjalo. Kaningi umbuzo wokulinda wawusahamba ngaphakathi komhubhe uya kwisixazululi umqondisi akhetha sona, okwenza kube yisinqumo senqubomgomo hhayi iphutha. Ukuhlukanisa lezo zimo kudinga amaqiniso amathathu hhayi elilodwa, futhi elokuqala ngubani ophendulile. Thola ukuthi ubani wamukela umbuzo, yimuphi umzila owawuthwele, futhi yimaphi amagama abuzwa.

I-fallback iyinqubomgomo, hhayi ukuziphatha okukodwa

Iklayenti ngalinye kufanele linqume ukuthi lenzeni lapho isixazululi esithandwayo siyeka ukuphendula. Singavimba ukuxazulula, sizame futhi, sisebenzise okunye okulungiselelwe noma sikuyeke kuhlelo lokusebenza, futhi ngokombono wobumfihlo lezo zinto ezine ezihlukene. Ukufunda isikrini sezilungiselelo kukutshela ukuziphatha okulungiselelwe; akukutsheli ukuthi kwenzeke okukuphi. Isikrini esinokushintsha okukodwa asichazi amathuba amane.

Izisemukuli zengeza isendlalelo sazo. Isiphequluli esivule i-DNS evikekile singaxazulula igama ngomsizi esiwukhethile ngokwaso ngisho noma uhlelo lokusebenza lukhomba kwenye indawo, okusho ukuthi inqubomgomo yeklayenti yomhubhe ingase ingalokothi ibuzwe ngezicelo onakekela ngazo ngempela. Hlola uhlelo lokusebenza olwenza isicelo, hhayi isilungiselelo sohlelo kuphela.

Ubunikazi besixazululi esisemva kwesikhala siyiqiniso lokuqala okufanele lisungulwe. Isixazululi esivamile esingesomsizi osewuthemba kakade yisimo esihlukile kunekheli elinikezwa inethiwekhi okungenzeka ukuthi ukulo. Ikheli ngokwalo akuvamisile ukutshela ukuthi ngukuphi kwalaba ababili obhekene nakho.

Ubani owamukela umbuzo ngemva kokushintsha

Umamukeli nomzila bazimele, futhi kuphela inhlanganisela yabo echaza ukuchayeka. Isixazululi esivamile esifinyelelwa ngomhubhe asilokothi sibone ikheli lenethiwekhi yakho yokungena, kuyilapho isixazululi esifanayo esifinyelelwa ngqo sisibona. Zombili izimo zikhiqiza impendulo, futhi ukuhlolwa kokuvuza okubika kuphela ikheli lesixazululi kuzozichaza ngokufanayo. Cela isixhumanisi kanye nekheli lapho ufunda umphumela.

Amagama angaphakathi enza umehluko ube ngokoqobo. Isixazululi esivamile ngokuvamile asikwazi ukuphendula igama le-split-horizon, ngakho umbuzo uyehluleka kuyilapho igama seliveziwe enzalweni eyayingenalutho eyayizokwenza ukulibona. Ngakho ukutholakala nobumfihlo kuhamba ndawonye lapha esikhundleni sokushintshana.

Umhubhe ungase futhi uthwale umbuzo uye kwisixazululi esingasetshenziswa umhlinzeki we-VPN, ngoba umhubhe udlulisela hhayi ukuxazulula. Umninikhaya odluliselayo ubona umbuzo ngombhalo ocacile bese evula ukuxhumana kwakhe uqhubeke, okukhusela isinyathelo esilandelayo ngaphandle kokukhusela esokuqala.

Hlola umzila nomamukeli ndawonye

Qaphela amaphakethe hhayi ukulungiselelwa. Buza uhlelo ukuthi yisiphi isixazululi esizosetshenziswa, bese uqinisekisa ukuthi umbuzo ngempela uphume esixhumanisini esilindelekile waya ekhelini elilindelekile.

resolvectl status | grep -E "Current DNS Server|DNS Servers|DNSOverTLS"
dig +short example.com
tcpdump -ni any udp port 53 or tcp port 853

Uma ukuthwebula kubonisa umbuzo uphuma esixhumanisini esibonakalayo ngesikhathi umhubhe uvuliwe, i-fallback yeqe umhubhe kungakhathaliseki ukuthi uhlu lwezixazululi luthini. Uma uvela esixhumanisini somhubhe, umbuzo uba ngukuthi ubani ophethe ikhala elikude nokuthi ugcina ini.

Phinda ukuhlolwa ngegama elilodwa langaphakathi negama elilodwa elivamile. Umbuzo wangaphakathi yilapho ukulungiselelwa kwe-fallback kuvame ukuziveza khona, ngoba isixazululi esingakwazi ukuphendula sisamukela umbuzo.

Nquma ukuthi i-fallback kufanele ivunyelwe yini

Uma imfuneko iwukuthi ukuxazulula kume lapho isixazululi esithandwayo singekho, lungiselela inqubomgomo yokuphoqelela ehluleka ivaliwe futhi wamukele umphumela: amagama ngeke axazululwe ngesikhathi sokuphazamiseka. Lokho kuwukuhwebelana ngokutholakala ngamabomu hhayi ukungasebenzi kahle, futhi umklamo kufanele usho lokho ngaphambi kokuba ukuphazamiseka kwenzeke.

Uma imfuneko imane iwukuthi izicelo akufanele zihambe ngaphandle komhubhe, isixazululi esivamile esifinyelelwa ngomhubhe singamukeleka inqobo nje uma umqhubi nenqubomgomo yakhe yokugcina kuqondwa. Ukwamukela okunjalo kuyisinqumo mayelana nomuntu wesithathu hhayi isitatimende mayelana ne-cryptography, futhi kungokomuntu ophethe isimangalo sobumfihlo. Uma amagama angaphakathi kufanele aqhubeke esebenza, i-fallback kufanele kube isixazululi esiphethe izindawo zangaphakathi, okusho ngokuvamile ukuthi umgomo we-fallback iyiseva ehlukile hhayi umndeni wekheli ohlukile.

Bhala umphumela njengomusho mayelana nokuziphatha: yisiphi isixazululi esamukela izicelo ekusebenzeni okujwayelekile, yisiphi esizamukela ngemva kokuhluleka, nokuthi amagama angaphakathi ayaxazululwa yini esimweni sesibili. Ukuhlolwa kokuvuza okugcina kulayishe ikhasi akufakazi okuningi kunalowo musho, ngoba ikhasi lingalayishwa ngesixazululi okwakungafanele kudingwe sona neze.