I-VPN yakho ithumela ama-DNS server amathathu: iyiphi ephendulayo?

Vula ikhasi lezilungiselelo ngemuva kokuxhuma futhi kufakwe amakheli amathathu e-DNS; umbuzo wokuhlola ukuthi iyiphi esingathe umbuzo wakho wokugcina. Inombolo yodwa ayiphenduli lutho, ngoba ukusunduza kwekhasimende, isixhumi sezinto ezibonakalayo kanye nenqubomgomo yedomaini ngayinye konke kubhala embonweni ofanayo. Lawa ma-entry anezilinganiso ezahlukene, futhi isilinganiso, hhayi indawo, sinquma ukuthi ubani ophendulayo. Qala ngokuhlukanisa imithombo, bese uhlola lowo onalo igama okukhathazayo.

Kungani uhlu lude kunephrofayili yakho

Ikhasimende le-VPN lithuba amakheli e-resolver oxhumanweni lwethunele, futhi uhlelo lokusebenza luwagcina eceleni kwalokho isixhumi sezinto ezibonakalayo esivele sinakho. I-router, isivumelwano se-DHCP senhlangano, i-VPN yesibili kanye nenqubomgomo yedomaini ngayinye ngakunye kwengeza i-entry yaso. Ngakho amakheli amathathu ekhasini angase asho izilinganiso ezintathu, hhayi abantu abathathu abazongenela umsebenzi owodwa. Ukufunda inombolo njengobufakazi bokuvuza iyiphutha lokuqala kulolu hlolo.

Ngaphakathi kwesixhumi esisodwa ikhasimende lizama amaseva alo ngokulandelana, ngakho uhlu oluhleliwe alungenzi lutho. Okungelona umugqa umbono ohlanganisiwe, lapho ama-entry avela kuphrofayili, kuxhumano lwenyama kanye nemithetho yedomaini ngayinye ehlezi ndawonye ngaphandle kwesigaba esisodwa. Lowo mehluko unquma ukuthi uhlola ini: ukulandelana kuchaza indlela yokuziphatha ngaphakathi kwesilinganiso esisodwa, futhi isilinganiso sichaza konke okunye.

I-DNS ebethelwe yephula isithombe ngaphakathi kohlelo lokusebenza. Isiphequluli noma ikhasimende lengxoxo eline-resolver yalo ye-DNS-over-HTTPS lithumela imibuzo lidlula ngokuphelele uhlu lohlelo lokusebenza, ngakho amakheli ekhasini lezilungiselelo achaza ithrafikhi uhlelo olungakaze luyidale. Hlola isilungiselelo se-resolver sohlelo uqobo ngaphambi kokusola iphrofayili ngegama eliphume kabi.

Ukuhlola kokuthathu kusho ini ngakunye

Umsuka ngamunye ushiya uphawu lwawo endaweni ehlukile, futhi awukho umyalo owodwa okhombisa wonke. Lokhu ukuxhumanisa okufanele kugcinwe eceleni kwekhasi lezilungiselelo:

Kusistimu esebenzisa i-systemd-resolved, i-resolvectl status inegunya, ngoba ibika i-DNS ngoxhumano ngalunye kanye namadomaini omzila. I-macOS iphendula nge-scutil --dns, ebalula ama-resolver anesilinganiso ngokulandelana kokuzanywa. I-Windows ihlukanisa izingxenye ezimbili: i-Get-DnsClientServerAddress yamaseva esixhumi ngasinye kanye ne-Get-DnsClientNrptPolicy yemithetho yesijobelelo. Sebenzisa umyalo ongowom-resolver osetshenziswa ngempela, ngoba umshini onesimo sokusebenza se-container kanye ne-resolver yedeskithophu ungaba nokungaphezu kokukodwa okufakiwe.

I-resolver yesipele engakwazi ukuphendula isifunda sakho

I-entry yesibili ivamise ukuba khona ngenxa yokutholakala, futhi ukutholakala kusebenza kuphela uma isipele sazi amagama. Buza i-resolver yomphakathi ngegama lomsingathi wangaphakathi, izobuyisela i-NXDOMAIN, noma impendulo ye-wildcard evela kudomaini lokusesha elingahlobene nawe. Ukushintsha kwesipele okungahlolwanga muntu kube sekudala ukuphazamiseka ngesikhathi esifanele ngempela.

I-Split DNS ikhona ukuvimbela lokho: izijobelelo zenkampani ziya ku-resolver ephethe isifunda, futhi amagama omphakathi ahlala emzileni ozenzakalelayo. Idizayini iqinile, futhi incike ekutheni uhlu lwezijobelelo luphelele. I-Microsoft ibhala inqubomgomo ye-resolver yesijobelelo ngasinye eqhuba lokhu ku-Windows, futhi umqondo ofanayo uvela njengamadomaini omzila ku-systemd-resolved nanjengama-resolver anesilinganiso ku-macOS.

Qhathanisa izifunda i-resolver yesipele engaziphendula nezijobelelo ezikhona kwinqubomgomo. Lokho kuqhathanisa kuthola igebe ngaphambi kokuba umsebenzisi abike ukuthi isayithi yangaphakathi iyekile ukuxazululeka ngemuva koshintsho lwethunele.

Buza ngokusebenzisa inqubomgomo, hhayi ukuyizungeza

Buza ngokusebenzisa i-resolver yohlelo lokusebenza, ngoba umbuzo oqondile ku-seva udlula inqubomgomo futhi ubika kuphela lokho leyo seva ebingakusho. Igebe phakathi kwezimpendulo ezimbili yiyo yonke into:

resolvectl query intranet.example.com
dig +short intranet.example.com @198.51.100.53

Uma umbuzo wesistimu ubuyisela ikheli langasese kuyilapho umbuzo oqondile ubuyisela i-NXDOMAIN, inqubomgomo iyasebenza futhi indawo ebuthakathaka yisipele. Uma kokubili kubuyisela impendulo yomphakathi efanayo, igama lixazululwa ngaphandle kwesilinganiso obukuhlosile, futhi uhlu lwezijobelelo yindawo okufanele ibhekwe. Gcina kokubili okuphumayo, ngoba ingxoxo ye-resolver iqedwa ngokushesha ngemigqa emibili kunangesithombe sekhasi lezilungiselelo.

Bese uzilolonga indlela yokwehluleka, ngoba isipele esingazange sihlolwe muntu siwumbono nje. Yenza i-resolver ekhethwayo ibe umgodi omnyama wombsho owodwa bese ubuka ukuthi yikuphi ikheli elibuya:

ip route add blackhole 198.51.100.53/32
resolvectl query intranet.example.com
ip route del blackhole 198.51.100.53/32

Susa lowo mzila ngokushesha lapho umbuzo uphela, kungenjalo umuntu olandelayo uzothola indida. Uma amagama angaphakathi esaxazululeka kuleso sikhathi, kukhona okungaphandle kwesilinganiso obekuhloswe okuphendule wona. Uma esikhundleni salokho ephelelwa isikhathi, isipele asikho noma silinganiselwe ngendlela efanele, futhi ilogi ye-resolver uqobo ikutshela ukuthi yikuphi kwalokho okubili.

Nquma: gcina, linganisa noma susa

Gcina i-resolver yesibili uma iphendula isikhala samagama osidingayo futhi ihlala ifinyeleleka ngaphansi kwephrofayili. Yilinganise uma kufanele ibone isijobelelo esisodwa kuphela futhi kungabi lutho olunye, futhi uyisuse uma ingenaso isilinganiso noma inhloso ebhaliwe. I-entry engenawo umsebenzi iwukuvuza kwesikhathi esizayo okungenanzuzo, futhi okuzenzakalelayo komhlinzeki akuyona inhloso.

Bhala umphumela njengezikhonkwane ezine: isijobelelo, i-resolver, isixhumi kanye nomnikazi. Lowo mugqa uphendula umbuzo wokuhlola olandelayo ngokushesha kunanoma yisiphi isithombe, futhi uhlala unqobile ekubuyekezweni kwekhasimende okuhlela kabusha uhlu buthule.