- Uhlelo lwe-DNS lusebenza njengomhumushi oyisisekelo we-inthanethi, luguqula amagama esizinda abe amakheli e-IP ukuze luvumele ukuxhumana.
- Ukuhlaziya imibuzo ye-DNS kukuvumela ukuthi uthole konke kusukela ezinkingeni zokusebenza kanye namaphutha okucushwa kuya ekuhlaselweni okuthuthukile njengokufaka i-tunneling.
- Kukhona kokubili amathuluzi ayisisekelo ekhonsoli kanye nesofthiwe yokuhlaziya amaphakethe ethuthukisiwe etholakalayo yokuxilonga impilo yenethiwekhi.
Cishe uke wabhekana nalokhu: uzama ukufinyelela iwebhusayithi bese ikhasi lihlala lingenalutho, kuthatha isikhathi eside ukulayisha, noma umane uphonsa umlayezo wephutha ongawuqondi. Iningi lethu alazi nokuthi i-DNS ikhona, kodwa uma yehluleka, iyona imbangela eyinhloko ngemuva kokonakala kwesipiliyoni se-inthanethi. Akuyona nje indaba yokuthi into ayilayishiwe; amaphutha okuxazulula amagama angaba uphawu lwenkinga yokucushwa noma, esimweni esibi kakhulu, ukuba sengozini yokuphepha.
Kungakhathaliseki ukuthi uqhuba ibhizinisi, unewebhusayithi, noma ungumsebenzisi nje ofuna ukulawula uxhumano lwakhe lwe-inthanethi, ukwazi ukuhlaziya ithrafikhi ye-DNS kubalulekile. Akudingeki ube uchwepheshe wekhompyutha ukuze uqale ukumba nokuthola ukuthi kwenzekani ngemuva kwezigcawu. Ngezansi, sizochaza konke okudingeka ukwazi ukuze uxilonge futhi uthuthukise uxhumano lwakho usebenzisa amathuluzi athile, kusukela emiyalweni elula kuya ekuhlaziyweni kwephakethe okujulile kakhulu.
Iyini ngempela i-DNS futhi kungani kufanele sikhathalele?
Ukuze kugwenywe ukudideka, i-Domain Name System (DNS) empeleni iyincwadi yocingo ye-inthanethi. Amakhompyutha awaqondi amagama anjenge-"google.com," kodwa aqonda izinombolo ezibizwa ngamakheli e-IP. I-DNS ihumusha la magama afundeka kubantu abe ama-IP ezinombolo ukuze isiphequluli sakho sazi ukuthi siyaphi. Kulesi simo semvelo, kunabadlali ababili abaphambili: amaseva anegunya, agcina ulwazi olusemthethweni lwesizinda, kanye nezixazululi eziphindaphindayo, okuyizinto esizisebenzisayo ukubuza izizinda.
Uma lolu hlelo lusebenza kahle, konke kusebenza kahle. Kodwa uma i-DNS ihamba kancane noma ingalungiselelwanga kahle, uzobona ukuthi izinsizakalo ziyeka ukuphendula noma ukuphequlula kuba okungajwayelekile. Ngaphezu kwalokho, kuyiphuzu elibalulekile lokuphepha; izigebengu ze-inthanethi zingasebenzisa ukuntshontsha noma ukukhwabanisa kwe-DNS ukuze zikuqondise kuwebhusayithi mbumbulu futhi zintshontshe idatha yakho ngaphandle kokuthi uqaphele.
Akuwona wonke amaphutha afanayo. Ngezinye izikhathi kumane kuyindaba yesivinini, kodwa ngezinye izikhathi isevisi iyehla ngokuphelele. Phakathi kwezinkinga ezivame kakhulu ukubambezeleka ekuxazululweni , okwenza amawebhusayithi athathe isikhathi eside ukuqala ukulayisha, kanye nokuphela kweseva ye-DNS, okukushiya ungenayo i-inthanethi noma ngabe unesignali ye-Wi-Fi.
Kukhona futhi amaphutha okulungiselela, angabangela ukuthi ukusesha okuthile kuhluleke ngendlela ehlelekile. Inkinga eyingozi kakhulu i -DNS tunneling , inqubo lapho abahlaseli befihla idatha eyebiwe noma imiyalo enonya ngaphakathi kwemibuzo ebonakala ijwayelekile. Lokhu kuyimfihlo ikakhulukazi ngoba ithrafikhi ye-DNS ivame ukungatholakali ezinhlelweni eziningi eziyisisekelo ze-antivirus.
Amathuluzi nemiyalo yokuhlaziya inethiwekhi yakho
Uma ufuna ukuqala ukuphenya, awudingi ukuthenga isofthiwe ebizayo. Uhlelo lokusebenza ngokwalo luqukethe amathuluzi okuhle kakhulu okuxilonga. Okokuqala, umyalo we-ping uyindlela eyisisekelo yokubona ukuthi i-host iyaphendula yini nokuthi kuthatha isikhathi esingakanani, okwenza kube kubalulekile ukuqonda ukubaluleka kwe-ping kanye nokubambezeleka ekuxhumaneni kwakho . Uma ufuna ukuya phambili futhi ubone indlela eqondile ulwazi oluyithathayo, i-tracert (ku-Windows) noma i-traceroute (ku-Linux/Mac) izokukhombisa i-hop ngayinye kanye ne-router ngayinye iphakethe elidlula kuyo.
Ngezinkinga ezithile ze-DNS, umyalo we -nslookup ubalulekile, njengoba ukuvumela ukuthi ubuze amarekhodi futhi ubone ukuthi yiliphi ikheli le-IP isizinda esikhomba kulo. Eminye imiyalo ewusizo ifaka phakathi i-ipconfig (Windows) noma i-ifconfig (Linux) ukuze ubukeze ukucushwa kwe-TCP/IP yakho, kanye ne-netstat ukuze uhlaziye ukuxhumana okusebenzayo kukhompyutha yakho. Uma ufuna okuthile okuchwepheshile, i-Wireshark iyindinganiso yegolide; ikuvumela ukuthi uthwebule ithrafikhi ngesikhathi sangempela futhi uhlunge izicelo ze-DNS kuphela ukuze ubheke amaphethini asolisayo noma izizinda ezingavamile.
Indlela yokuthola ukuthi uyalandelwa noma uyahlolwa
Ochwepheshe bezokuphepha basebenzisa icebo elilula: bahlaziya imibuzo ye-DNS ephumayo. Uma, uma usebenzisa i-Wireshark, ubona ukuthi ikhompyutha yakho yenza izicelo ezizindeni ezinde kakhulu , ezigcwele izinhlamvu nezinombolo ezingahleliwe, kungenzeka kakhulu ukuthi i-malware ithumela idatha ngokusebenzisa i-tunneling. Futhi kuyisibonakaliso esibomvu uma kunethrafikhi enkulu ngezinye izikhathi lapho kungekho muntu okufanele asebenzise i-PC yakhe, njengo-3:00 AM.
Ukuze uhlole ukuthi ukucushwa kwakho kuphazanyisiwe yini, ungasebenzisa amawebhusayithi afana ne-DNSLeakTest. Uma ubona ukuthi imibuzo yakho ixazululwa amaseva ongawazi noma angahambisani namaseva e-ISP yakho, ungase ube yisisulu sokuhlaselwa okuqondiswa kabusha . Kulezi zimo, inkambo engcono kakhulu yesenzo ukushintsha izilungiselelo zakho ze-DNS zibe ezethembekile njenge-Google's (8.8.8.8) noma i-Cloudflare's (1.1.1.1).
Inqubo yokusabalala kanye nendlela yokuyiqapha
Uma ushintsha amarekhodi e-DNS ewebhusayithi yakho noma uhambisa iseva yakho, ukusabalala kwe-DNS kwenzeka. Lesi yisikhathi esithatha wonke amaseva emhlabeni wonke ukuthi afunde ukuthi ikheli lakho lishintshile. Le nqubo ingathatha amahora afinyelela kwangu-48 , futhi phakathi naleso sikhathi, abanye abasebenzisi bazobona iwebhusayithi endala kanti abanye bazobona entsha.
Ukuze ugweme ukukhungatheka kokulinda, amathuluzi aku-inthanethi afana ne-WhatsMyDNS noma i-DNSMap akuvumela ukuthi ubone isimo sokusabalala esivela emazweni ahlukene ngesikhathi sangempela. Ungaphoqa futhi ukuhlola usebenzisa umugqa womyalo onomyalo othi `dig` , othuthuke kakhulu kune-`nslookup` futhi ohlinzeka ngemininingwane enembile kakhulu ngamalogi.
Amasu okuthuthukisa ukuphepha nokusebenza
Uma usuhlaziyile uxhumano lwakho futhi wabona izinkinga, sekuyisikhathi sokwenza ngcono. Ukuze uvimbele ukuguqulwa kwedatha, kungcono ukusebenzisa i-DNSSEC , enezela ungqimba lokuqinisekiswa kwedijithali ezimpendulweni. Ngaphezu kwalokho, ukumisa ukukhawulelwa kwesilinganiso kumaseva kungasiza ekunciphiseni ukuhlaselwa kwe-distributed denial-of-service (DDoS).
Ngokusebenza kahle, ukuphathwa kwethrafikhi ngokusebenzisa i-geo-routing kanye nokusetshenziswa kokucushwa okungafuneki kuqinisekisa ukuthi uma iseva eyodwa ingasebenzi, i-backup izothatha izintambo ngokushesha. Khumbula ukugcina i-firmware ye-router yakho ibuyekeziwe njalo, futhi uma kungenzeka, uthuthukise uxhumano lwakho ngokushintsha ama-router , njengoba imishini eyisisekelo enikezwa abahlinzeki bezinsizakalo ze-inthanethi ivame ukuba nezinketho zokucushwa ezilinganiselwe kakhulu.
Izinyathelo ezinhle zokuxazulula noma iyiphi inkinga yenethiwekhi
Uma ubhekene nenkinga, kungcono ukulandela indlela ehlelekile. Okokuqala, thola ububanzi: Ingabe lokhu kwenzeka kudivayisi eyodwa noma ehhovisi lonke? Okulandelayo, bika inkinga bese uphenya imbangela ngokuzama nokwenza amaphutha endaweni elawulwayo. Uma usuthole ikhambi, sebenzisa izinguquko kancane kancane ukuze ugweme ukuphula noma yini enye.
Isinyathelo esisodwa abantu abaningi abasikhohlwayo ukubhala amadokhumenti. Ukuqaphela ukuthi yini engahambanga kahle nokuthi yalungiswa kanjani kukusindisa isikhathi ngesikhathi esifanayo esizayo. Kuyasiza futhi ukusebenzisa izindlela ezisekelwe kumodeli we-OSI , ukuhlaziya uxhumano oluvela kungqimba olungokoqobo (amakhebula) kuya kungqimba yohlelo lokusebenza, ukuze kunqunywe izinkinga zemishini ngaphambi kokusola isofthiwe.
Ukugcina uxhumano olunempilo kuhilela inhlanganisela yokuqapha okuqhubekayo ngamathuluzi ekhonsoli, ukusebenzisa amaseva e-DNS aphephile, kanye nendlela yokubhekana nobunzima bokuthola ukungalingani kuthrafikhi yedatha. Ngokwazi ukuhlaziya umbuzo nokuqonda ukuthi izinguquko zisakazeka kanjani, awuthuthukisi nje kuphela isivinini sokuphequlula kodwa futhi uvikela ubumfihlo bakho ezindleleni zokulandelela ezingabonakali.
