Uma wake wazizwa sengathi i-inthanethi iyihlathi eligcwele izikhangiso eziphazamisayo kanye nama-tracker azi konke kusukela kuhlobo lwe-cereal oyithengayo, kungenzeka ukuthi uke wezwa nge-Pi-hole. Lolu hlelo aluyona uhlelo lwakho olujwayelekile lwesiphequluli olufakayo bese ulukhohlwa; kunalokho, lusenhliziyweni yenethiwekhi yakho yasekhaya ukuhlanza ithrafikhi kuwo wonke amadivayisi akho , kusukela ku-smart TV yakho kuya ku-robot vacuum yakho, ngaphandle kokuthi uthinte ngisho nesethingi eyodwa kuwo.
Kodwa qaphela ukuthi ukufaka i-blocker kumane nje kuyiphuzu leqhwa. Kulabo abafuna ubumfihlo bezinga lochwepheshe, isinyathelo sangempela sokuya phambili siza uma sihlanganiswa ne-Unbound. Ngenkathi i-Pi-hole ingumgcini wesango onquma ukuthi ubani ongena nokuthi ubani ongena, i-Unbound ingumhlahlandlela oqeda ukuthembela kuma-giants afana ne-Google noma i-Cloudflare , okuvumela ukuthi uxazulule amakheli ewebhu ngokuzimela nangokuzimela. Ake sihlaziye ukuthi ungayisetha kanjani le bunker yedijithali isinyathelo ngesinyathelo.
Iyini ngempela i-Pi-hole futhi kungani ingcono kune-AdBlock?
Kalula nje, i-Pi-hole isebenza njengeseva ye-DNS. Uma uthayipha ikheli lewebhusayithi, idivayisi yakho iyabuza, "Liyini ikheli le-IP lale sayithi?" Ngokuvamile, lowo mbuzo uya kumhlinzeki wakho wesevisi ye-inthanethi noma kuseva yomphakathi, ebhala phansi umsebenzi wakho. I-Pi-hole iyangenelela; uma isicelo singeseseva yesikhangiso, uhlelo luphendula ngokuthi ikheli alikho , okuvimbela isikhangiso ukuthi singalayishi.
Ngokungafani nezandiso zesiphequluli, i-Pi-hole ifinyeleleka emhlabeni wonke kulo lonke ikhaya lakho. Kungakhathaliseki ukuthi uhlelo lokusebenza lwe-Instagram efonini yakho, idatha ye-telemetry esindayo evela ku-Samsung Smart TV, noma izikhangiso ku-console yegeyimu, konke kuhamba ngesihlungi esifanayo. Ngaphezu kwalokho, ngokuvimbela izinkulungwane zezinto ze-adware ukuthi zingalandwa, uzobona isipiliyoni sokuphequlula esibushelelezi futhi wonge i-bandwidth.
Isixhumanisi esingekho: Ubumfihlo obuphelele nge-Unbound
Abaningi bakholelwa ukuthi i-Pi-hole ukuphela kwendaba, kodwa kukhona okubambekayo: Izihlungi ze-Pi-hole, kodwa "azihumushi." Ukuze uthole ikheli le-IP lewebhusayithi, kusadingeka ukuthi ibuze umuntu wesithathu (i-DNS ephezulu). Yilapho i-Unbound ingena khona njengesixazululi sendawo esiphindaphindayo . Esikhundleni sokuthembela enkampanini yangaphandle, i-Unbound ibuza ngqo amaseva ezimpande e-inthanethi.
Lo mklamo uyingxenye yokugcina yephazili ngoba uhlukanisa ubudlelwano namalogi ezinkampani zangaphandle . Awuseyona nje enye inombolo kumalogi enkampani enkulu; uziqinisekisa ngokwakho izimpendulo ze-DNS. Nakuba okokuqala ungena kwiwebhusayithi kungathatha ama-millisecond ambalwa isikhathi eside, i-Unbound igcina lolo lwazi ku-cache yendawo, okwenza ukuvakasha okulandelayo kube ngokushesha futhi kube yimfihlo ngokuphelele.
Izinketho zehadiwe kanye nokufakwa okudingekayo
Into emangalisayo ngalo msebenzi ukuthi awudingi ikhompyutha enamandla. Njengoba iyisofthiwe elula kakhulu, unezinketho eziningana kuye ngokuthi yini onayo ekhaya:
- Okusajingijolo Pi: Kuyindlela ejwayelekile. Kusukela ku-Pi Zero 2W (eshibhile kakhulu futhi esebenza kahle) kuya ku-Pi 4 noma 5. Udinga ikhadi le-microSD kanye nogesi ozinzile kuphela.
- Iziqukathi ze-Docker: Uma usuvele unayo i-NAS (Synology, QNAP) noma i-PC encane ene-Proxmox, lena inketho engcono kakhulu. Ikuvumela ukuthi usethe i-Pi-hole ku- indawo ehlukanisiwe nehlanzekileukwenza kube lula ukwenza amakhophi agciniwe kanye nezibuyekezo.
- Amaseva e-LXC: Ilungele labo abasebenzisa i-virtualization elula ku-Debian, okuvumela ukulawula okuphelele ohlelweni lokusebenza.
Umhlahlandlela wokufaka wesinyathelo ngesinyathelo
Ukuze iqalise ukusebenza, into yokuqala okufanele uyenze ukuqinisekisa ukuthi idivayisi inekheli le-IP elingaguquki , ukuze wonke amanye amadivayisi asendlini azi ukuthi angayitholaphi iseva ye-DNS.
Ukufaka i-Pi-hole
Uma usebenzisa indlela yendabuko ku-Raspberry Pi OS, mane usebenzise iskripthi esisemthethweni usebenzisa umyalo curl -sSL https://install.pi-hole.net | bashI-wizard izokucela ukuthi ukhethe iseva ye-DNS ephezulu (uma ungenayo i-Unbound kakade, ungasebenzisa i-Cloudflare noma i-Quad9). Kubalulekile ukuthi Bhala phansi iphasiwedi yephaneli yokuphatha okuvela ekugcineni, njengoba kuyisihluthulelo sokuphatha uhlu lwakho lwamabhulokhi.
Ukulungiselela i-Unbound ukuze uthole ubumfihlo obukhulu
Ukuze uhlanganise i-Unbound, kufanele ufake iphakheji bese ulungiselela ifayela lokucushwa kweseva. Into ebaluleke kakhulu ukwabela i-Unbound echwebeni elihlukile (ngokuvamile i -5335 ) ukuze ugweme ukungqubuzana ne-Pi-hole. Kufanele ulande amacebo ezimpande bese ukhiqiza ukhiye wezimpande ukuze uqinisekise i-DNSSEC ngendlela efanele nephephile.
Uma i-Unbound isisebenza, iya kuphaneli ye-Pi-hole bese, esigabeni se-DNS, susa ukumaka kumaseva omphakathi bese wengeza ikheli lakho le-IP lendawo. 127.0.0.1#5335Kuleli qophelo, inethiwekhi yakho isishintshe ekubeni yincwadi evulekile yaba yi- amandla edatha yomuntu siqu.
Indlela yokwenza inethiwekhi yakho isebenzise uhlelo ngempela
Ukufaka isofthiwe akusizi ngalutho uma amadivayisi akho engazi ukuthi kufanele ayisebenzise. Unezinketho ezintathu:
- Ukucushwa Kwe-Router (Kunconywa): Ushintsha i-DNS kuseva ye-DHCP ye-router. Ngale ndlela, noma iyiphi idivayisi exhuma kwi-Wi-Fi izokwazi ukusebenzisa izilungiselelo ze-DNS ezifanele. izozuza i-lock ngokuzenzakalelayo.
- Ukulungiswa Kwesandla: Uma i-router yakho iyimodeli ye-ISP evaliwe engakuvumeli ukuthi ushintshe i-DNS, kuzodingeka ulungiselele ikheli le-IP le-Pi-hole kudivayisi ngayinye. Kuyisicefe kancane, kodwa kuyasebenza.
- Ushintsho lwezingxenyekazi zekhompuyutha: Ukutshala imali ku-router engathathi hlangothi (njenge-Asus noma i-TP-Link) evumela ukulawula okuphelele kunethiwekhi, ekugcineni, kuyi- ukutshalwa kwezimali okungcono kwingqalasizinda yasekhaya.
Ukuthuthukisa nokulungisa: Uhlu nezinkinga ezivamile
Ingqikithi yokusebenza kahle kwe-Pi-hole ilele ohlwini lwayo lokuvimba (i-Gravity). Kodwa-ke, ukwengeza amakhulu ezinhlu kungaba yinto engalungile futhi kuphule amawebhusayithi asemthethweni. Okungcono kakhulu, kufanele usebenzise izinhlu ezigcinwe kahle nezilinganiselayo njenge-OISD noma i-HaGeZi, ezihlunga iningi lomsindo ngaphandle kokubangela imiphumela eminingi engamanga.
Kuvamile ukuthi amanye amawebhusayithi, ikakhulukazi amabhange noma amasayithi okukhokha, abe nezinkinga. Ukuze ulungise lokhu, mane uhlole izingodo zemibuzo kuphaneli yakho yokulawula bese ufaka isizinda ku-"Whitelist" . Ngokuphathelene ne-YouTube, kubalulekile ukwazi ukuthi i-Pi-hole ayikwazi ukuvimba izikhangiso zayo ngoba zikhonzwa kusuka kusizinda esifanayo nevidiyo; ngalokho, usadinga ukwengeza inethiwekhi nge -uBlock Origin kusiphequluli sakho.
Okuthuthukisiwe: Ukuphepha, i-TLS kanye nokungatholakali kabusha
Kubasebenzisi abathuthukile, i-HTTPS ingasetshenziswa kuphaneli yokuphatha kusetshenziswa izitifiketi ze-Let's Encrypt, yize lokhu kudinga ukuphatha lonke uchungechunge lwezitifiketi ukuze kugwenywe amaphutha okuqinisekisa. Uma unabantu abaningi ekhaya, kunconywa kakhulu ukuthi ulungiselele i -DNS yesibili (njenge-1.1.1.1) ku-router yakho. Ngale ndlela, uma i-Pi-hole iqala kabusha noma yehluleka, indlu ngeke ishiywe ingenalo ukufinyelela kwe-inthanethi, noma ngabe izikhangiso ziphinde zivele okwesikhashana.
Ezindaweni eziyinkimbinkimbi kakhulu ezinamaseva amaningi, amathuluzi afana ne-nebula-sync akuvumela ukuthi uphinde ukopishe ukucushwa kanye nohlu olumhlophe phakathi kwezimo ezahlukene, ugweme ukwenza umsebenzi kabili futhi uqinisekise ukuthi inethiwekhi ihlala inesipele sokusebenza.
Ukusetha le ndlela yokusebenza kuguqula ulwazi lwakho lokuphequlula iwebhu, kukunikeze ukulawula ubumfihlo bakho futhi kususe izikhangiso ezingafuneki emthonjeni wazo. Ngokuhlanganisa ukuhlunga okuhlakaniphile kwe-Pi-hole nokuzimela okuphindaphindiwe kwe-Unbound, udala uhlelo oluqinile olungasheshisi nje kuphela ukulayisha amakhasi kodwa futhi oluvikela ubunikazi bakho bedijithali ekulandelelweni ngobuningi yi-Big Tech.