Kungani umugqa wakho ku-/etc/hosts ungafinyeleli ku-DNS ye-VPN

Wengeze igama ku-/etc/hosts, waxhuma ku-VPN futhi wawulindele ukuthi irekhodi livele kubo bonke. Lokho akwenzeki, futhi isimangaliso sivame ukuza nomphumela wesibili: igama liyaxazululeka emshinini wakho kodwa lihluleka kowakho osebenza naye, okubonakala njengensizakalo ye-DNS ye-VPN ephukile futhi empeleni ifayela le-hosts lenza lokho elenzelwe kona. Ifayela le-hosts liwukuhlelwa kwasekhaya kokuxazululwa kwamagama, hhayi ukubuyekezwa kwesifunda, futhi akukho lutho ekuxhumaneni okuvamile kwe-VPN okukulayishayo.

I-hosts iwukushintsha kwasekhaya, hhayi ukubuyekezwa kwesifunda

Ifayela liwuhlu lwamamephu alandelwa yimithombo yolwazi yensizakalo yamagama ngaphambi, noma esikhundleni, sokubuza iseva ye-DNS. Umugqa ofana no-10.40.0.20 build.corp.example ushintsha lokho okutholwa yizinhlelo zokusebenza kulo mshini munye. Awudali irekhodi, awuhambi ngophiko, futhi iseva ye-DNS okukhonjwa kuyo uphiko ayikwazi ukuthi ikhona.

Yingakho ukuhluleka kungalingani. Iklayenti lakho lithola impendulo efayelini. Elinye iklayenti libuza iseva ye-DNS ye-VPN, engabuyiseli lutho, futhi uhlelo lusibika ukuthi igama alikho. Womabili amashini enza kahle; lilodwa kuphela elinokushintsha okungakaze kubonwe kwelinye.

Imiyalo emibili, izingxenye ezimbili ezahlukene

Indlela eshesha kunazo zonke yokuqeda ingxabano iwukwenza umehluko ubonakale emiyalweni emibili, yomibili isetshenziswa kuklayenti elinomugqa we-hosts:

getent ahosts build.corp.example
dig @10.40.0.53 build.corp.example A

Eyokuqala ibuza indlela yokusesha yesistimu ngokwayo, okuthi kusistimu evamile ye-glibc ifunde amafayela asekhaya ngaphambi kwe-DNS. Eyesibili ithumela umbuzo we-DNS ngqo kuseva ekulelo kheli futhi ayibheki amafayela asekhaya nhlobo. Lapho eyokuqala ibuyisela umugqa wakho futhi eyesibili ibuyisela i-NXDOMAIN, uye wafakazela ukuthi irekhodi alikho ku-DNS nokuthi umshini wakho uphendula kusukela ekushintsheni kwasekhaya.

Ukulandelana kuyakwazi ukuhlelwa, futhi kufanelekile ukukuhlola ngaphambi kokuphetha noma yini ngokusabalalisa okuthile. Bheka umugqa we-hosts: ku-/etc/nsswitch.conf; i-hosts: files dns ibheka amafayela kuqala. Ungakopishi leso sibonelo phezu kokuhlelwa okusebenzayo ukuze ushintshe ukulandelana kuphela, ngoba izistimu zangempela zivame ukubala imithombo eyengeziwe nemibhalo yensizakalo enemibandela okungeyona esibonelweni.

I-systemd-resolved ifiphalaza ukuhlolwa

Kusistimu esebenzisa i-systemd-resolved, i-stub yasekhaya ibuye ihlinzeke amagama asuka kusizindalwazi se-hosts. Ngakho ukubuza i-127.0.0.53 akulona ukuhlolwa okuzimelayo kweseva ekude, nakuba kubonakala njengombuzo we-DNS futhi kuziphatha kanjalo. Ungaqinisekisa lokho isixazululi esikwaziyo nokuthi yimaphi amaseva engabuzayo ngalokhu:

resolvectl query build.corp.example
resolvectl status

Umphumela we-status ubalula amaseva e-DNS ngokuxhumana ngakunye, futhi yileyo ndlela owazi ngayo ukuthi ukuxhumana kwe-VPN kuthole isixazululi noma cha. Lowo mbuzo uhlukile kumugqa we-hosts futhi yiwona ofanele ukubuzwa lapho igama langasese lihluleka kuwo wonke umsebenzisi hhayi kumunye.

Izinhlelo zokusebenza zingangeza esinye isendlalelo. Isiphequluli esinesilungiselelo salo se-DNS-over-HTTPS, isiqukathi esinokuhlelwa kwaso kwesixazululi, noma indawo yokusebenza egcina ukusesha kukho konke ukuphila kwenqubo kungaphendula ngokuhlukile kusistimu. Hlola uhlelo olubalulekile kuwe esikhundleni sokucabanga ukuthi umyalo owodwa uchaza yonke inhlelo emshinini.

Yini ngempela eyabelana igama kuyo yonke i-VPN

Uma igama langasese kufanele lisebenze kubo bonke, lidinga umnikazi isixazululi sawo wonke umuntu esingafinyelela kuso. Impendulo ehlanzekile iwukushicilela irekhodi esifundeni esilawulwayo nokwenza leso sifunda sixazululeke ngendlela ye-DNS ehlosiwe ye-VPN. Ngaleso sikhathi irekhodi linomthombo owodwa weqiniso, umkhondo wokucwaninga nomjikelezo wokuphila, futhi akekho okufanele akhumbule ukuthi iyiphi i-laptop ephethe ukushintsha kwasekhaya.

Ukusabalalisa amafayela e-hosts kungenye indlela esemthethweni, futhi lokho wukuphathwa kwamaphoyinti okugcina hhayi insizakalo yamagama. Uma ukhetha lokho, ifayela kufanele lisetshenziswe, libe nenguqulo futhi lisuswe yilokho okuphatha iqembu, futhi kufanele kuchazwe kanjalo ekwakhiweni. “I-VPN iyikhonza lokho” akusona incazelo yaleyo nqubo.

Ukubhaliswa kwe-DNS okuguquguqukayo kuyindlela yesithathu, enezimvume zayo, ukuqinisekiswa kokubuyekezwa kanye nokuphila kwerekhodi. Akusuki kumugqa we-hosts, futhi akusuki ekuxhumaneni nje kweklayenti, ngaphandle uma iseva neklayenti kokubili kuhlelwe ukwenza lokho. Irekhodi eliziveza lodwa liwuphawu lokuthi othile unike amandla ukubuyekezwa okuphephile kanye neklayenti elizibhalisayo, futhi lokho kuhlelwa kungokwerekhodi lokwakha hhayi kumucu wokuxazulula izinkinga. Uma kungekho othi ngumnikazi walokho kulungiselela, thatha irekhodi elizenzakalelayo njengelingaqinisekisiwe futhi gcina isifunda esilawulwayo njengomthombo weqiniso.

Igama elixazululiwe akulona umzila

Ukuxazululwa kwamagama nokufinyeleleka kuyizinto ezihlukene, futhi imephu yasekhaya ephelelwe yisikhathi iyindlela yakudala yokuzihlanganisa. Umugqa we-hosts okhomba ekhelini elithuthukile uzoqhubeka ukhetha umphathi ophelelwe yisikhathi isikhathi eside ngemva kokuba i-DNS ilungisiwe, futhi uphawu lubonakala njengokuhluleka komzila egameni elixazululeka kahle.

Ngakho lapho umbiko uthi “igama liyaxazululeka kodwa insizakalo ayifinyeleleki”, qhathanisa ukusesha kwesistimu nombuzo ocacile oya kuseva ye-DNS ye-VPN, bese uhlola ikheli olitholile nelelo uhlelo olulisebenzisa ngempela. Isithenjwa se-systemd-resolved sibhala imithombo yasekhaya esiyibhekayo, futhi yilowo mephu owudingayo kulokho kuqhathanisa.

Bese ulungisa ukushintsha ngomnikazi wakho. Ukususa umugqa efayeleni lakho le-hosts akwenzi lutho kumalaptop ayishumi nambili athola umugqa ofanayo embhalweni wokusabalalisa, futhi yilokho okunguqobo lwale nkinga abantu abanalo ngempela.