Ubhala umugqa owodwa onekheli lesixazululi nesizinda senkampani, ulindele ukuthi amagama akuleso sizinda kuphela asebenzise isixazululi somhubhe. Kumaklayenti e-Apple, manje wonke amagama aya lapho, futhi namagama amafushane esizindeni ayaxazululwa. Umugqa wenza izinto ezimbili ezihlukene, futhi kunye kuphela kuzo okuphathelene nokuthi yimiphi imibuzo umhubhe oyiphethe. Enye inkululeko yokuthayipha ephakanyiswe yaba inqubomgomo ngukufunda okunethemba.

Umugqa we-DNS uhlukaniselwa ini

Iklayenti lifunda okufakiwe njengohlu futhi lihlukanisa into ngayinye ngokuma kwayo. Noma yini ebukeka njengekheli iba iseva ye-DNS; noma yini ebukeka njengesizinda iba isijobelelo sokusesha. Kokubili kungena kuzilungiselelo zomhubhe, kodwa ezinkambeni ezihlukene. Umugqa oyisibonelo womhubhe ophethe isixazululi sangasese nesizinda sangaphakathi esisodwa ubukeka kanje.

DNS = 10.24.8.53, lab.internal.example

Ikheli linikeza isixazululi. Isizinda sinikeza isijobelelo esivumela iklayenti ukuthi lithayiphe igama elifushane futhi uhlelo lwengeze okusele ngaphambi kokubuza. Akukho kokubili okusho lutho mayelana nokukhawulela isixazululi kuleso sizinda, futhi yingxenye abantu abayilindele abangayitholi. Inkambo eyodwa kuphela kule pulatifomu engaveza lowo mkhawulo, futhi akuyona le nkambo.

Izinkambo ezimbili ze-Apple, imisebenzi emibili ehlukene

I-Apple iveza umehluko entweni yayo yezilungiselelo ze-DNS. Uhlu lwezizinda zokusesha lubhalwe njengohlu olusetshenziselwa ukufaneleka amagama womsingathi anelebula elilodwa: thayipha igama lomsingathi elingenalutho futhi uhlelo lungangeza isijobelelo ngasinye ngokulandelana. Lona umthetho wokuqedela, hhayi umthetho wokuhambisa. Akukho lutho kulolo hlu olunquma ukuthi iyiphi iseva ebuzwayo.

Uhlu lwezizinda ezifanayo luyisici esihlukile. Lunquma ukuthi yiziphi izikhala zamagama ezisebenzisa leli qoqo lezilungiselelo ze-DNS, futhi okufakiwe okungenalutho kusho isizinda esimisiwe hhayi isijobelelo esithile. umakhi wezilungiselelo zomhubhe wamaphakethe kumaklayenti e-Apple kulandela leyo modeli. Ifaka izijobelelo zokusesha ezihlaziyiwe ohlwini lokusesha, futhi uma kuneziseva ibeka uhlu lokufanisa kusichazi esingenalutho. Umphumela uyisixazululi somhubhe esiphendula konke uhlelo olusithumelayo, kanye nesijobelelo esisiza ngamagama amafushane.

Ngakho isizinda kulowo mugqa akusona isikhethi sendawo yamagama. Ukungeza esinye akunciphisi ukuthi yimiphi imibuzo umhubhe oyisebenzisayo, futhi ukusisusa akukwandisi. Into kuphela eshintshayo inani lamagama amafushane aqedelwayo.

Kungani lonke igama lisa fika kusixazululi somhubhe

Ngokufakiwe kokufanisa okungenalutho, umhubhe uyisixazululi esingumgadli samagama ajwayelekile, hhayi esesizinda senkampani kuphela. Ekuhlelweni komhubhe ogcwele lokhu ngokuvamile akusho lutho olukhulu, ngoba konke ukuxhumana sekusele emhubheni. Emhubheni ohlukanisiwe lokhu kubaluleke kakhulu. Amagama omphakathi manje angaxazululwa yisixazululi esiphethe isifunda sangasese kuphela, futhi ukwehluleka kubonakala njenge-VPN ephukile kuyilapho empeleni kuyisixazululi esiphendula ingxenye yendawo yamagama kuphela. Umhubhe ulungile, imibuzo iyaphuma, futhi izimpendulo zibuya zingenalutho.

Kunezixazululo ezimbili futhi ziyizinqumo ezihlukene. Yenza isixazululi somhubhe sibe isixazululi esigcwele esidlulisela amagama omphakathi ngomzila ogunyaziwe, noma yeka ukuthumela amagama omphakathi lapho ngokushintsha ukuhlelwa kweklayenti esikhundleni sohlu lwezizinda. Esokuqala sigcina yonke imibuzo emhubheni futhi sithemba umfudlana ophezulu. Esesibili sigcina eminye imibuzo endaweni futhi samukele ukuthi amagama angasese angayeka ukuxazululwa ngenkathi umhubhe uvaliwe.

Yini i-DNS ehlukanisiwe eyayizodinga ngempela

Inqubomgomo yesixazululi ebekelwe indawo yamagama idinga iklayenti elikuvumela ukuyiveza: fanisa izizinda ezinkundleni ze-Apple, noma isilungiselelo esilinganayo kumkhiqizo oyisebenzisayo. Inkambo yokuhlela eyamukela iziseva nezijobelelo kuphela ayikwazi ukuyiveza, noma ngabe isetshenziswe kanjani izimpawu zokubhala. Iphrofayili ingathwala inqubomgomo ngoba ichaza ukuhlelwa okuphethwe hhayi inkomba ngesikhathi sokuxhuma. Ingasho isizinda, iziseva nokuthi kufanele kwenzeke ini uma leso sizinda singafinyeleleki. Lowo umehluko phakathi kwesilungiselelo nesivumelwano.

Kumadivayisi e-Apple aphethwe lokhu kuvame ukuhanjiswa ngephrofayili yokuhlelwa ethwala izilungiselelo ze-DNS eziqondene nesizinda. Lena indlela ehlukile kufayela lokuhlelwa le-WireGuard, futhi kokubili kungaba khona ndawonye kuphela uma iklayenti lihlonipha iphrofayili. Hlola ukuthi iklayenti lakho libiza ini leyo nkambo ngempela ngaphambi kokucabanga ukuthi imikhiqizo emibili iziphatha ngendlela efanayo. Umbhalo ono wg-quick ku-Mac nohlelo lwe-WireGuard ku-iPhone kufunda imigqa efanayo futhi kuyifaka ngezingqimba ezihlukene.

Funda izilungiselelo ezifakiwe, hhayi ukuhlelwa

Ku-Mac ungahlola ukuthi uhlelo lwagcina ngini, okunikeza ulwazi oluningi kunokufunda kabusha ifayela owabhala. Uhlu lwezixazululi lubonisa ukuthi yiziphi iziseva ezihlelwe zeziphi izizinda, futhi imibuzo ebekelwe umkhawulo ibonisa ukuthi iyiphi ephumelele. Iklayenti elonakalisa umugqa likubonisa lapha hhayi efayeleni owabhala. Ku-iOS akukho umugqa womyalo olinganayo, ngakho ubufakazi lapho umphumela: igama langasese elixazululwa ngomhubhe, negama lomphakathi impendulo yalo eveza ukuthi isiphi isixazululi esiphendulile.

scutil --dns | grep -A3 resolver
networksetup -getdnsservers Wi-Fi

Le miyalo emibili iphrinta ukuhlelwa kwesixazululi samanje neziseva ze-DNS zesevisi esebenzayo. Uma isixazululi somhubhe sibonakala njengesixazululi esimisiwe ngaphandle komkhawulo wesizinda, ukuhlelwa kwenza ngqo lokho iklayenti elikucelile. Lungisa lokho ngokushintsha indlela, hhayi ngokungeza isijobelelo sesibili nokuthemba ukuthi ukuziphatha kuzoshintsha.

Izihloko ezihlobene