Ubani ophethe i-1.1.1.1? Ukuhlola ikheli le-DNS ngaphambi kokulithemba

Unamathisele u-1.1.1.1 emkhakheni we-DNS we-VPN, ikhasi lalayisha, futhi isifundo manje sibonakala siqinisekisiwe. Lokho kuqaphela kuncane kunalokho okuzwakalayo: uhlelo lusebenze ngendlela ehlukile, futhi ushintsho alukasho lutho mayelana nokuthi ubani ophendule umbuzo noma ukuthi kungani ukuhlelwa kwakudala kwehlulekile. Isifundo esikopishiwe sivame ukubiza ikheli lomphakathi elijwayelekile ngokuthi “i-DNS ye-VPN”, futhi lokho kuyisimangalo mayelana nobunikazi, hhayi mayelana nokufinyeleleka. Ukuhlola ukuthi ikheli limele ini kuthatha imizuzu emihlanu futhi kuvimbela ushintsho oluhlala njalo olwenziwe ngesizathu esingalungile.

Isilungiselelo esisebenzayo akusona isazisi

Ikheli elisemkhakheni wesilungiselelo liyindawo yokugcina, futhi indawo yokugcina inomphathi. Lawa maqiniso amabili ahlukene, futhi elesibili yiwona abantu abawugxumayo. Kubhangqa elivame ukukopishwa, impendulo isobala: i-Cloudflare ishicilela 1.1.1.1 futhi 1.0.0.1 njengamakheli esixazululi sayo futhi iwabalisa ku-mhlahlandlela wamakheli osemthethweni wayo. Yingakho igama lomphathi lihlala eceleni kwekheli, hhayi esifundweni esihlukile.

Ukufaka lelo bhangqa ngenkathi umhubhe uvuliwe akwenzi inkampani ye-VPN ibe umphathi walo futhi akwenzi ukuhamba kwedatha kube okungaziwa. Umbuzo ushiya umshini wakho uya enkampanini eshicilela ibanga lamakheli, futhi leyo nkampani ingaba nedumela futhi ingabi uhlangothi olwashiwo yisifundo. Ilebula kumiyalelo kanye nomphathi emhlabeni ngempela kuyizimangalo ezimbili ezihlukene. Akukho kuzo okusho ukuthi ubani ophethe indlela yenethiwekhi phakathi.

Sebenzisa umhlahlandlela oshicilelwe wesixazululi uqobo ukuqinisekisa ibhangqa lamakheli noma indawo yokugcina ebethelwe. Isiphakamiso esivela komunye umhlinzeki singaba semthethweni, futhi “isinconywe ngu”, “kufinyelelwe ngokusebenzisa” kanye “nokulawulwa ngu” kusachaza ubudlelwano obuthathu obuhlukene.

Qhathanisa izinto ezintathu irekhodi elizidingayo

Irekhodi elilungele ukubuyekezwa lihlukanisa imibuzo emithathu: ubani okufanele amukele umbuzo, ukuthi ukushintshana kucacile noma kubethelwe, futhi iyiphi indlela okufanele uyithwale. Igama lomhlinzeki alikwazi ukugcwalisa elesibili noma elesithathu, futhi ilebula yezwe alikwazi ukugcwalisa nelilodwa lawo. Bhala amagama amathathu ngaphambi koshintsho bese uwakhathanisa ngemuva. Lawa magama awakwazi ukushintshana, futhi ukuwathatha njengelilodwa yiyo indlela umcabango ophenduka ngayo idokhumenti.

Ukuqhathanisa yikho okushintsha isilungiselelo esisebenzayo sibe yisinqumo esibhaliwe. Ngaphandle kwakho, umuntu olandelayo uthola ikheli elingenasizathu esinanyathiselwe. Funda kuqala ikholamu yesithathu yethebula elingezansi, ngoba yilapho iningi lezincazelo eziqinile zigcina khona ngempela.

Ithebula lifushane ngamabomu. Iphuzu laso ukuthi isilinganiso ngasinye siphendula umbuzo ohlukile, futhi akukho nkambu eyodwa egcwalisa zontathu.

Isidlulisi sasendaweni sifihla umthombo wangempela

Idivayisi elilungiselelwe ukusebenzisa i-router yalo njenge-DNS likhomba isidlulisi. Lelo kheli likhomba umamukeli olandelayo wombuzo, hhayi isixazululi esiphendula ekugcineni. Isixazululi se-stub sasendaweni sengeza isinyathelo esifanayo esengeziwe, futhi kulula ukusididanisa nento yangempela ngoba sivela kukho konke okukhiphayo kwesimo.

I-stub idlulisela emithonjeni okukhiphayo okufanayo eyibalisa nayo, ngokuvamile ezansi. Funda wonke umucu ngaphambi kokuphetha noma yini ngomphathi, ngoba umugqa wokuqala akuwona wonke impendulo. Uma kungenjalo ubiza indawo yokwamukela njengenkampani.

resolvectl status | grep -A4 'Current DNS Server'
dig +short CH TXT whoami.cloudflare @1.1.1.1
dig example.com | grep -E '^;; SERVER'

Umyalo wesibili usebenzisa igama lomsindo wesixazululi, lapho umphathi eshicilela khona elinye, ukubika ikheli lomthombo alibonayo. Owesithathu usho iseva ephendulile, futhi lokho ngokuvamile akulona ikheli olilungiselele. Qhathanisa konke okukhiphayo okuthathu ngaphambi kokubhala umphathi.

I-DNS ebethelwe ishintsha okubonakalayo, hhayi ukuthi ubani ukubonayo

I-DNS over HTTPS ne-DNS over TLS zivikela ukushintshana phakathi kwekliyenti nesixazululi. Isixazululi sisafunda wonke igama elibuzwayo, ngoba ukuphendula kuwumsebenzi waso. Okushintshayo ukuthi ubani ongabuka ukushintshana: inethiwekhi yasendaweni ibona ukuxhumana nendawo eyodwa yokugcina esikhundleni sokugeleza kwemibuzo yombhalo ocacile.

Okungashintshi ubudlelwano bokwethemba, obusakhomba enhlanganweni ephethe leyo ndawo yokugcina. Isiphequluli esinesilungiselelo saso se-DNS esiphephile singadlula ngokuphelele isixazululi sohlelo lokusebenza. Zithathe njengezilungiselelo ezimbili ezingavumelani, hhayi njengesilungiselelo esisodwa esisetshenziswe kabili.

Amagama angasese adinga isinqumo sawo futhi. Umhubhe womsebenzi ungahambisa izizinda ezikhethiwe kuzixazululi zenhlangano, futhi ukushintsha lokho ngensizakalo yomphakathi kungaphula ukusesha kwangaphakathi noma kudalule amagama angaphakathi ohlangothini olungalungile. Hlola inqubomgomo yezizinda ngaphambi kokushintsha izilungiselelo zeadaptha yonke.

Gcina ukuqaphela kuncane

Uma uqhathanisa, gcina ukuhlelwa kwakudala futhi ushintshe isilungiselelo esisodwa ngesikhathi. Bhala uhlelo, umsebenzi, inqubomgomo yesixazululi, nokuthi amagama omphakathi nawangasese avunyelwe asaxazululwa yini ngemuva kokuxhuma kabusha. Ukuqhathanisa okunezinguquko ezimbili akufakazi nelilodwa lazo. Bhala umphumela lapho umuntu olandelayo eyothola khona, eceleni kwesilungiselelo uqobo.

resolvectl query intranet.corp.example
resolvectl domain
dig +short @1.1.1.1 example.com

Uma uhlelo luqala ukusebenza, gcina isimangalo sincane ngokwokuvunyelwa ubufakazi. Lolo shintsho lwasiza isivivinyo esisodwa, futhi alusho lutho mayelana nokuthi isixazululi sangaphambilini sasebenza ngomoya omubi, ukuthi umhubhe wawuphukile, noma ukuthi enye idivayisi idinga ukushintshwa okufanayo. Umphumela ohlala njalo ukuhlelwa ongakwazi ukuchaza umphathi nokuhloso kwayo.