- I-DNS yangasese isebenzisa iphrothokholi ye-DoT ukubethela izicelo zokuphequlula nokuvimbela ukuhlolwa kwe-ISP.
- Ikuvumela ukuthi uvimbele izizinda ezinonya kanye nokukhangisa okucasulayo kuye ngomhlinzeki okhethiwe.
- Kuyindlela ehambisanayo ne-VPN, njengoba lokhu kubhala ngemfihlo yonke ithrafikhi hhayi imibuzo ye-DNS kuphela.
- Ukucushwa kungokwendabuko ezinguqulweni ze-Android 9 nangaphezulu ngemenyu yezilungiselelo zenethiwekhi.
Uma sixhuma kwi-inthanethi, sivame ukukhathazeka ngamakhukhi noma ukuthi othile uhlola ikheli lethu le-IP, kodwa kunenqubo engabonakali eyenzeka njalo uma sithayipha ikheli lewebhu: ukubheka i-DNS. Ngokuyisisekelo, yi-directory ehumusha amagama afana ne-google.com abe izinombolo eziqondwa yimishini. Inkinga ukuthi, ngokuzenzakalelayo, lokhu kubheka kuhamba ngombhalo ocacile, okusho ukuthi umhlinzeki wakho we-inthanethi noma noma ubani kunethiwekhi evulekile angazi kahle ukuthi yimaphi amakhasi owavakashelayo.
Uma usebenzisa i-Wi-Fi njalo emakhefini, ezikhumulweni zezindiza, noma ezigcawini zomphakathi, usengozini enkulu. Kulezi zimo, umhlaseli angakuqondisa kuwebhusayithi mbumbulu ukuze antshontshe ulwazi lwakho lwasebhange ngokuntshontsha i-DNS yakho. Ngenhlanhla, i-Android inikeza ikhambi elakhelwe ngaphakathi elibizwa ngokuthi i-Private DNS , elibhala ngemfihlo lezi zicelo ukuze kungabikho muntu ozifundayo noma ozisebenzisayo ngenkathi uphequlula i-inthanethi.
Iyini ngempela i-DNS yangasese futhi isivikela kanjani?

I-DNS yangasese iyisici esisetshenziswa yiphrothokholi ye-DNS-over-TLS (DoT) . Kalula nje, cabanga ukuthi esikhundleni sokuthumela ikhadi leposi elivulekile lapho noma ubani angafunda khona ikheli, manje uthumela ikheli ngaphakathi kwe-vault evikelekile. Lolu hlelo lubhala ngemfihlo izicelo ngaphambi kokuba ziphume efonini yakho, luvimbele i-ISP yakho noma umphathi wenethiwekhi yomphakathi ye-Wi-Fi ukuthi aqaphele umsebenzi wakho.
Kubalulekile ukuqonda ukuthi i-DNS yendabuko ayibethelwe. Lokhu kuvumela izinkampani zokuxhumana ukuthi zidale amaphrofayili okumaketha ngokusekelwe emsebenzini wakho wokuphequlula , njengoba imibuzo ye-DNS ibhekwa njengedatha yokuphequlula iwebhu. Ngokuvumela imodi yokuphequlula eyimfihlo, idivayisi yakho isungula umhubhe ophephile (ngokuvamile nge-port 853) isebenzisa inqubo yokuqinisekisa isitifiketi ebizwa ngokuthi i-TLS handshake, ukuqinisekisa ukuthi impendulo ivela kuseva efanele hhayi kumkhohlisi.
Izinzuzo kanye nokungalungi kokusetshenziswa kwayo

Inzuzo eyinhloko yokuvumela le nketho ubumfihlo. Ngokwenza ukuqapha kube nzima kakhulu, unciphisa ingozi yokwebiwa kobunikazi kanye nokuhlaselwa kwe-phishing . Ngaphezu kwalokho, kuye ngomhlinzeki omkhethayo, ungase uqaphele ukuthi amawebhusayithi alayisha ngokushesha ngenxa yengqalasizinda yomhlaba wonke ethuthukisiwe enezikhathi zokuphendula ezincishisiwe.
Nokho, akuyona into engavamile. Okokuqala, ikheli lakho le-IP lihlala libonakala kuwebhusayithi oyivakashelayo; i-DNS yangasese ifihla kuphela "indlela" yokufika lapho, hhayi ubuwena bakho bokugcina. Kungaba nezinkinga zokuhambisana: amanye amanethiwekhi ezinkampani avimba i-port 853, engashiya idivayisi yakho ingenalo ukufinyelela kwe-inthanethi. Ngaphezu kwalokho, inqubo yokuqala yokubethela ingangeza, ezimweni ezingavamile kakhulu, inani elincane lokubambezeleka.
Umhlahlandlela wesinyathelo ngesinyathelo wokuyibeka ku-Android

Uma unedivayisi ene- Android 9 Pie noma kamuva , awudingi ukufaka noma yiziphi izinhlelo zokusebenza ezingavamile noma ukususa ifoni yakho. Inqubo ilula kakhulu futhi yenziwa ngqo kusuka ohlelweni:
- Faka imenyu Izilungiselelo bese ubheka isigaba esithi Ukuxhumana noma Inethiwekhi kanye ne-inthanethi.
- Finyelela inketho Izilungiselelo eziningi zokuxhuma noma Okuthuthukisiwe.
- Chofoza lapho kusho khona I-DNS yangasese.
- Lapha unezinketho ezimbili: khetha imodi ezenzakalelayo (lapho ifoni inquma khona ukuthi inethiwekhi iyayisekela yini i-encryption) noma khetha Igama lomethuli womhlinzeki.
Uma ukhetha igama lomethuleli, kuzodingeka ufake ikheli leseva olithandayo. Qaphela ukuthi i-Android ayiwamukeli amakheli ezinombolo (njengo-8.8.8.8) kule nsimu; idinga igama lesizinda lesevisi.
Amaseva e-DNS amahle kakhulu efoni yakho ephathekayo

Akubona bonke abaxazululi abafanayo; ngamunye unefilosofi ehlukile kuye ngokuthi ufunani:
- I-Cloudflare (1dot1dot1dot1.cloudflare-dns.com): Kuyindlela efanelekile uma ufuna isivinini esiphezulu kanye nokusebenzaBagxila ekungaqophini idatha yomuntu siqu futhi banenethiwekhi enkulu yomhlaba wonke.
- I-Quad9 (dns.quad9.net): Kunconywa kakhulu kulabo ababeka ukuphepha phambili. Yinhlangano engenzi nzuzo yaseSwitzerland enikeza kuvimbela izizinda ezinonya kwaziwa ngesikhathi sangempela ukuze kukuvimbele ukungena kumawebhusayithi ane-malware.
- I-DNS Yomphakathi ye-Google (dns.google): Ivelele ngokuthembeka kwayo kanye nokuqina kwayo okuphelele, yize inqubomgomo yayo yobumfihlo ivumela kancane ngokugcinwa kwamalogi esikhashana.
- I-AdGuard (dns.adguard-dns.com): Kuyindlela engcono kakhulu uma uzonda ukukhangisa, ngoba izihlungi zezikhangiso kanye nezilandeleli ngqo kusuka ku-DNS, ukususa ukuphequlula kusiphequluli nakwezinye izinhlelo zokusebenza.
- I-OpenDNS (resolver1.opendns.com): Iphethwe yiCisco, ilungele labo abadinga izilawuli zabazali kanye nokuvikelwa kokulwa nobugebengu bokweba imininingwane ebucayi okwenziwe ngezifiso.
I-DNS yangasese vs. i-VPN: Uyini umehluko?
Abantu abaningi badidanisa lobu buchwepheshe obubili, kodwa buyahambisana. I-Private DNS ibhala ngemfihlo umbuzo mayelana nendawo yewebhusayithi. Ngokuphambene nalokho, i- VPN ibhala ngemfihlo yonke idatha, ifihla ikheli lakho langempela le-IP futhi iqondise uxhumano lwakho ngeseva ekude.
Indlela engcono kakhulu ukusebenzisa kokubili. Uma usebenzisa i-VPN, ivame ukuphatha i-DNS yayo ukuvimbela ukuvuza, kodwa ukumisa i-DNS yangasese efana ne-Quad9 kukunikeza ungqimba olwengeziwe lokulawula nokuphepha, okuqinisekisa ukuthi noma i-VPN yehluleka noma ungayisebenzisi, imibuzo yakho ngeke ihambe ngombhalo ocacile. Ngenkathi i-VPN ivikela umhubhe, i-DNS yangasese ivikela ukulungiswa kwegama.
Ukuxazulula inkinga okuvamile
Uma ukuvula i-DNS yangasese kubangela ukuthi ulahlekelwe ukufinyelela kwe-inthanethi kunethiwekhi ethile ye-Wi-Fi, kodwa konke kusebenza kahle ngedatha yeselula, kungenzeka ukuthi i -router noma i-firewall yenethiwekhi ivimba ithrafikhi ye-DoT. Lokhu kuvamile emabhizinisini noma kumanethiwekhi omphakathi anqunyelwe kakhulu avumela i-DNS ejwayelekile kuphela. Kulezi zimo, ikhambi kuphela ukubuyela kwimodi ezenzakalelayo noma ukukhubaza i-DNS yangasese ngenkathi ukuleyo nethiwekhi.
Ukuze uqinisekise ukuthi empeleni usebenzisa isevisi ekhethiwe, ungathembeli kuphela ekuhlolweni kokuvuza kwe-DNS okujwayelekile, njengoba lokhu ngezinye izikhathi kubonisa ingqalasizinda yomhlinzeki (njenge-i3D noma i-PacketHub) esikhundleni segama lesevisi. Indlela ethembeke kakhulu ukusebenzisa amakhasi okuqinisekisa omhlinzeki , njenge-on.quad9.net, azoqinisekisa ngo-"Yebo" uma ukucushwa kulungile.
Ukusebenzisa i-DNS ebethelwe kungenye yezindlela zokuphepha ezilula nezisebenza kahle kakhulu kunoma yimuphi umsebenzisi we-Android. Ngokushintsha kusuka kumaseva enkampani kuya ezinkethweni ezifana ne-Cloudflare noma i-Quad9, sithola ukuzimela, sivimbele ukuvakasha kwethu ukuthi kulandelelwe, futhi sizivikele ekuhlaselweni okuvamile kumanethiwekhi avulekile, okwenza umkhondo wethu wedijithali ube mncane kakhulu futhi kube nzima ukuwulandela.