Uma wake waba nomuzwa wokuthi i-inthanethi iyihlathi eligcwele izikhangiso eziphazamisayo kanye nama-tracker azi konke kusukela kuhlobo lwe-cereal oyithengayo, kungenzeka ukuthi uke wezwa nge-Pi-hole. Lolu hlelo aluyona uhlelo lwakho olujwayelekile lwesiphequluli olufakayo bese ulukhohlwa; kunalokho, lufakwe enhliziyweni yenethiwekhi yakho yasekhaya ukuze susa ithrafikhi kuwo wonke amadivayisi akhoKusukela ku-smart TV kuya ku-robot vacuum cleaner, ngaphandle kokuthi uthinte noma yisiphi isethingi kuzo.
Kodwa qaphela ukuthi ukufaka i-blocker kumane nje kuyisiqalo senkinga. Kulabo abafuna ubumfihlo obusezingeni lochwepheshe, isinyathelo sangempela sokuqhubekela phambili siza uma sihlanganiswa ne-Unbound. Ngenkathi i-Pi-hole ingumgcini wesango onquma ukuthi ubani ongena nokuthi ubani ongangeni, i-Unbound ingumqondisi oholayo. Kuqeda ukuthembela ezikhulwini ezinkulu ezifana ne-Google noma i-Cloudflare.okukuvumela ukuthi uxazulule amakheli ewebhu ngokuzimela nangokulawula okuphelele. Ake sihlaziye indlela yokusetha le bunker yedijithali isinyathelo ngesinyathelo.
Iyini ngempela i-Pi-hole futhi kungani ingcono kune-AdBlock?
Para entenderlo fácil, Pi-hole actúa como un servidor DNS. Cuando escribes una web, tu dispositivo pregunta: «¿Cuál es la IP de este sitio?». Normalmente, esa pregunta va a tu operador o a un servidor público, quienes registran tu movimiento. Pi-hole se interpone en medio; si la petición es para un servidor de publicidad, el sistema responde que Lelo kheli alikho., okwenza isikhangiso singalayishi ngisho.
Ngokungafani nezandiso zesiphequluli, i-Pi-hole inokufinyelela komhlaba wonke ngaphakathi kwekhaya lakho. Kungakhathaliseki ukuthi uhlelo lokusebenza lwe-Instagram efonini yakho, idatha ye-telemetry esindayo evela ku-Samsung Smart TV, noma izikhangiso ku-game console, konke kuhamba ngesihlungi esifanayo. Ngaphezu kwalokho, ngokuvimbela izinkulungwane zezinto ze-adware ukuthi zingalandwa, uyaqaphela ukuthi... ukuzulazula kuba lula futhi ulondoloza umkhawulokudonsa.
Isixhumanisi esingekho: Ubumfihlo obuphelele nge-Unbound
Muchos creen que con Pi-hole ya han terminado, pero hay un detalle: Pi-hole filtra, pero no «traduce». Para saber la IP de una web, sigue necesitando preguntar a un tercero (DNS upstream). Aquí es donde Unbound entra en juego como un isisombululo sendawo esiphindaphindayoEsikhundleni sokuthembela enkampanini yangaphandle, i-Unbound ibuza ngqo kumaseva ezimpande e-inthanethi.
Lo mklamo uyingxenye yokugcina yephazili ngoba Unqamula ubudlelwano nokubhaliswa kwezinkampani zangaphandleAwuseyona nje inombolo eyodwa kuma-log enkampani enkulu; uziqinisekisa wena ngokwakho izimpendulo ze-DNS. Nakuba okokuqala ungena kwiwebhusayithi kungathatha ama-millisecond ambalwa isikhathi eside, i-Unbound igcina lolo lwazi ku-cache yendawo, okwenza ukuvakasha okulandelayo kusheshe. izithombe ezimfushane futhi eziyimfihlo ngokuphelele.
Izinketho zehadiwe kanye nokufakwa okudingekayo
Into emangalisayo ngalo msebenzi ukuthi awudingi ikhompyutha enamandla. Njengoba iyisofthiwe elula kakhulu, unezinketho eziningana kuye ngokuthi yini onayo ekhaya:
- Okusajingijolo Pi: Kuyindlela ejwayelekile. Kusukela ku-Pi Zero 2W (eshibhile kakhulu futhi esebenza kahle) kuya ku-Pi 4 noma 5. Udinga ikhadi le-microSD kanye nogesi ozinzile kuphela.
- Iziqukathi ze-Docker: Uma usuvele unayo i-NAS (Synology, QNAP) noma i-PC encane ene-Proxmox, lena inketho engcono kakhulu. Ikuvumela ukuthi usethe i-Pi-hole ku- indawo ehlukanisiwe nehlanzekileukwenza kube lula ukwenza amakhophi agciniwe kanye nezibuyekezo.
- Amaseva e-LXC: Ilungele labo abasebenzisa i-virtualization elula ku-Debian, okuvumela ukulawula okuphelele ohlelweni lokusebenza.
Umhlahlandlela wokufaka wesinyathelo ngesinyathelo
Ukuze uyiqalise, into yokuqala okufanele uyenze ukuqinisekisa ukuthi idivayisi ine- ikheli le-tuli le-tuliukuze wonke amanye amadivayisi asendlini ahlale azi ukuthi angayitholaphi iseva ye-DNS.
Ukufaka i-Pi-hole
Uma usebenzisa indlela yendabuko ku-Raspberry Pi OS, mane usebenzise iskripthi esisemthethweni usebenzisa umyalo curl -sSL https://install.pi-hole.net | bashI-wizard izokucela ukuthi ukhethe iseva ye-DNS ephezulu (uma ungenayo i-Unbound kakade, ungasebenzisa i-Cloudflare noma i-Quad9). Kubalulekile ukuthi Bhala phansi iphasiwedi yephaneli yokuphatha okuvela ekugcineni, njengoba kuyisihluthulelo sokuphatha uhlu lwakho lwamabhulokhi.
Ukulungiselela i-Unbound ukuze uthole ubumfihlo obukhulu
Ukuze uhlanganise i-Unbound, udinga ukufaka iphakheji bese ulungiselela ifayela leseva. Into ebaluleke kakhulu ukwabela i-Unbound echwebeni elihlukile (ngokuvamile i- 5335) para que no choque con Pi-hole. Debes descargar los «root hints» y generar la llave raíz para que la Ukuqinisekiswa kwe-DNSSEC kulungile futhi iphephile.
Uma i-Unbound isisebenza, iya kuphaneli ye-Pi-hole bese, esigabeni se-DNS, susa ukumaka kumaseva omphakathi bese wengeza ikheli lakho le-IP lendawo. 127.0.0.1#5335Kuleli qophelo, inethiwekhi yakho isishintshe ekubeni yincwadi evulekile yaba yi- amandla edatha yomuntu siqu.
Indlela yokwenza inethiwekhi yakho isebenzise uhlelo ngempela
Ukufaka isofthiwe akusizi ngalutho uma amadivayisi akho engazi ukuthi kufanele ayisebenzise. Unezinketho ezintathu:
- Ukucushwa Kwe-Router (Kunconywa): Ushintsha i-DNS kuseva ye-DHCP ye-router. Ngale ndlela, noma iyiphi idivayisi exhuma kwi-Wi-Fi izokwazi ukusebenzisa izilungiselelo ze-DNS ezifanele. izozuza i-lock ngokuzenzakalelayo.
- Ukulungiswa Kwesandla: Uma i-router yakho iyimodeli ye-ISP evaliwe engakuvumeli ukuthi ushintshe i-DNS, kuzodingeka ulungiselele ikheli le-IP le-Pi-hole kudivayisi ngayinye. Kuyisicefe kancane, kodwa kuyasebenza.
- Ushintsho lwezingxenyekazi zekhompuyutha: Ukutshala imali ku-router engathathi hlangothi (njenge-Asus noma i-TP-Link) evumela ukulawula okuphelele kunethiwekhi, ekugcineni, kuyi- ukutshalwa kwezimali okungcono kwingqalasizinda yasekhaya.
Ukuthuthukisa nokulungisa: Uhlu nezinkinga ezivamile
Ingqikithi yokusebenza kahle kwePi-hole ilele ohlwini lwayo lokuvimba (iGravity). Kodwa-ke, ukwengeza amakhulu ezinhlu kungaba yinto engalungile futhi kuphule amawebhusayithi asemthethweni. Okungcono kakhulu, kufanele usebenzise uhlu olugciniwe nolulinganisiwe njenge-OISD noma i-HaGeZi, ezihlunga iningi lomsindo ngaphandle kokubangela imiphumela eminingi engamanga.
Kuvamile ukuthi amanye amakhasi, ikakhulukazi amasayithi asebhange noma okukhokha, abe nezinkinga. Ukuze ulungise lokhu, mane uhlole amalogi emibuzo kuphaneli yokulawula bese añadir el dominio a la «Whitelist»Ngokuphathelene ne-YouTube, kubalulekile ukwazi ukuthi i-Pi-hole ayikwazi ukuvimba izikhangiso zayo ngoba zikhonzwa kusuka kusizinda esifanayo nevidiyo; ngakho-ke, kusadingeka ukwengeza inethiwekhi nge i-uBlock Origin kusiphequluli.
Okuthuthukisiwe: Ukuphepha, i-TLS kanye nokungatholakali kabusha
Para los más entusiastas, se puede implementar HTTPS en el panel de administración usando certificados de Let’s Encrypt, aunque requiere gestionar la cadena completa de certificados para evitar errores de validación. Si tienes varias personas en casa, es muy recomendable configurar un I-DNS yesibili (njenge-1.1.1.1) en el router. De este modo, si el Pi-hole se reinicia o falla, la casa no se queda «sin internet», aunque vuelvan a aparecer los anuncios temporalmente.
Ezindaweni eziyinkimbinkimbi kakhulu ezinamaseva amaningi, amathuluzi afana ne-nebula-sync avumela phinda ukucushwa kanye nohlu olumhlophe phakathi kwezimo ezahlukene, ukugwema ukwenza umsebenzi kabili nokuqinisekisa ukuthi inethiwekhi ihlala inesipele sokusebenza.
Ukusetha le ndlela yokusebenza kuguqula ulwazi lwakho lokuphequlula iwebhu, kukunikeze ukulawula ubumfihlo bakho futhi kususe izikhangiso ezingafuneki emthonjeni wazo. Ngokuhlanganisa ukuhlunga okuhlakaniphile kwe-Pi-hole nokuzimela okuphindaphindiwe kwe-Unbound, udala uhlelo oluqinile olungasheshisi nje kuphela ukulayisha amakhasi kodwa futhi oluvikela ubunikazi bakho bedijithali ekulandelelweni ngobuningi yi-Big Tech.