- Ukuqaliswa kweseva ye-DNS ehlanganisiwe ukuvimba ukukhangisa kanye nama-tracker kuyo yonke inethiwekhi yasekhaya.
- Ukuthuthukiswa kobumfihlo ngokusebenzisa amaphrothokholi e-DNS abethelwe njenge-DoH ne-DoT.
- Ukuhlanganiswa okuthuthukisiwe ne-Unbound ukuze udale isixazululo sakho esiphindaphindayo futhi uthole ukuzimela.
- Ukuphathwa kwamakhasimende okuningiliziwe kanye nezilawuli zabazali ukuvikela izingane kokuqukethwe okungafanele.
Uma ukhathele izikhangiso ezihlasela isikrini sakho nezinkampani ezilandelela yonke into oyenzayo ku-inthanethi, ukusetha iseva yakho ye-DNS yisisombululo esiphezulu. Ikhaya le-AdGuard Ivezwa njengethuluzi elinamandla elisebenza njengodonga oluvikela ukukhangisa kanye ne-malware, lihlunga ithrafikhi ngaphambi kokuba ifinyelele ngisho nakumadivayisi akho, okuyinto ewusizo kakhulu ekuphequluleni ekhaya.
Ingxenye engcono kakhulu ukuthi, ngokuyiqhuba yonke Iziqukathi ze-DockerSiyakhohlwa ngezinkinga zobuchwepheshe ezikhathazayo futhi singayisebenzisa cishe kunoma iyiphi ihadiwe, kusukela ku-Synology NAS noma ku-router ye-ASUS ethuthukisiwe, kuya ku- I-Raspberry Pi ene-AdGuard Home noma i-Orange Pi ene-Arch Linux. Asikho isidingo sokufaka izandiso kusiphequluli ngasinye; uma sesilungisiwe, Inethiwekhi yonke ivikelwe ngokuzenzakalelayo, kufaka phakathi lawo ma-Smart TV noma amadivayisi e-IoT angenakwenzeka ukuwashintsha.
Ukulungiselela indawo: Izidingo kanye nohlelo
Ukuze konke kuhambe kahle, udinga ukuyifaka Ukubhala i-Docker kanye ne-DockerIphuzu elilodwa elibalulekile elivame ukubangela amakhanda yi-port 53, esetshenziswa yi-DNS. Ekusabalalisweni okufana ne-Ubuntu noma i-Debian, isevisi ixazululwe ngohlelo Ngokuvamile ithatha leyo port ngokuzenzakalelayo, ngakho-ke kubalulekile ukuyikhubaza ukuze i-AdGuard Home ikwazi ukulawula ngokugcwele imibuzo.
Kubalulekile ukuthi iseva lapho ubamba khona isitsha ibe ne- Fixed IPUma ikheli le-IP leseva lishintsha, wonke amadivayisi akho azolahlekelwa ukufinyelela kwe-inthanethi ngoba ngeke azi ukuthi afuna kuphi amakheli ewebhu. Uma usebenzisa i-Synology NAS, ungaphatha konke kusukela... Umphathi Weziqukathiukudala amafolda athile wezilungiselelo kanye nedatha eqhubekayo, ukuqinisekisa ukuthi awulahlekelwa yilutho uma ubuyekeza isithombe.
Ukufakwa kusetshenziswa i-Docker Compose
Indlela ehlanzekile yokuqala isevisi iwukusebenzisa ifayela docker-compose.ymlKuleli fayela kumele sidwebe amachweba abalulekile: 53 e-DNS (TCP kanye ne-UDP), 80 yesikhombimsebenzisi sokuphatha, 3000 yewizard yokuqala futhi, uma sifuna imisebenzi ethuthukisiwe, amachweba 67 kanye no-68 e- Isevisi ye-DHCPUkuqinisekisa ukuthi isevisi ayiphazamiseki, kutuswa ukusebenzisa isiqondiso qala kabusha: ngaphandle uma kumisiwe.
Uma isitsha sesisebenza, vele ufake ikheli le-IP leseva elilandelwa yi-port 3000. I-wizard inembile kakhulu futhi izokucela ukuthi uchaze igama lomsebenzisi nephasiwedi kusuka kumphathi. Icebo lalabo abafuna ubumfihlo obuphezulu ukumisa I-DNS ephezulu okubethelwe, kuqhathaniswe izinketho ezifana I-Google DNS vs Digi noma i-Quad9, kusetshenziswa i-syntax efana tls://dns.googleLokhu kuvimbela umhlinzeki wakho we-inthanethi ukuthi angakwazi ukuhlola izicelo zakho.
Ukuthatha ubumfihlo kufinyelele ezingeni elilandelayo nge-Unbound
Uma ufuna ukuyeka ukuthembela kubantu besithathu, ungahlanganisa i-AdGuard Home ne- itho olukhululekileLe software isebenza njengesixazululi esiphindaphindayo, okusho ukuthi i-AdGuard ngeke isabuza nge-Google noma i-Cloudflare, kodwa i-Unbound izoya ngqo ku- Amaseva ezimpande ze-DNSLokhu kususa umlamuleli futhi kwandisa ubukhosi phezu kwedatha yakho.
Ukuze wenze ngcono i-Unbound ku-Docker, kunconywa ukuthi ulungise ukwamukela nokuthumela ama-buffer ku-host usebenzisa sysctl.confngaleyo ndlela kugwenywe izexwayiso zokusebenza. Ngaphezu kwalokho, kubalulekile ukuqinisekisa ukuthi DNSSEC iyasebenza, iqinisekisa ukuthi izimpendulo ze-DNS aziphazanyiswanga endleleni, into engahlolwa kalula ngamathuluzi anjengomyalo dig.
Izilungiselelo zenethiwekhi kanye nezilawuli zabazali
Ukuze kwenzeke umlingo, udinga ukuya kuzilungiselelo ze-router yakho bese ushintsha I-DNS eyisisekelo ngekheli le-IP leseva yakho ye-AdGuard. Imininingwane ebalulekile ukulungisa ngesandla iseva yegama le-DHCP; uma uvumela i-router ukuthi isebenze njengebhuloho, uzobona ikheli le-IP elilodwa kuphela (le-router) kuphaneli ye-AdGuard futhi ngeke ukwazi ukubona amanye amakheli e-IP. iyiphi idivayisi ngqo wenza isicelo ngasinye.
Uma amakhasimende esevele eyedwa, ungadlala nge ukulawula kwabazaliI-AdGuard ikuvumela ukuthi udale amaphrofayili athile elungu ngalinye lomndeni, uvimbele izinsizakalo zokugembula, okuqukethwe kwabantu abadala, noma ngisho nezinkundla zokuxhumana ngezikhathi ezithile. Ungasebenzisa futhi i- Ukubhala kabusha kwe-DNS ukudala izizinda zasendaweni, okukuvumela ukuthi ufinyelele uhlelo lwakho lwe-NAS noma lwe-home automation ngokuthayipha into efana nale mi-casa.local esikhundleni sokukhumbula ikheli le-IP elinezinombolo.
Uhlu lokuhlunga nokulungisa
Inhliziyo yesistimu yizinhlu zokuvimba. Ngenkathi i-AdGuard inikeza isisekelo esiqinile, ingeza izihlungi ezifana I-OISD noma uSteven Black Kuthuthukisa kakhulu ukuvikelwa kwe-adware kanye ne-telemetry. Uma ubona noma yimaphi amawebhusayithi asemthethweni eyeka ukulayisha, ungakhathazeki: ungangeza eyodwa. umthetho wokukhetha esigabeni sokuhlunga ngokwezifiso kusetshenziswa i-syntax yesimboli se-double at.
Ngokuphathelene nokugcinwa, kubalulekile ukwenza amakhophi wokulondoloza amafolda config y workUngakwazi ukwenza lokhu ngokuzenzakalelayo ngeskripthi se-Bash esilula kanye nomsebenzi ohleliwe ku cron okucindezela idatha ibe ifayela le-tar.gz nsuku zonke, ngaleyo ndlela kugwenywe ukumisa yonke into kusukela ekuqaleni uma idiski yeseva yehluleka.
Ukuba ne-ecosystem esekelwe ku-AdGuard Home and Docker kukuvumela ukuthi uguqule inethiwekhi yasekhaya evamile ibe yindawo ephephile nephumelelayo. Kusukela ekhonweni lokuya hlunga izizinda ezinonya Kusukela ezingeni lomhlaba wonke kuya ekhonweni lokuphatha inethiwekhi ngokuyindilinga ngedivayisi ngayinye, ukulawula okuphelele kuphethwe umlawuli. Ngokuhlanganisa amathuluzi afana ne-Unbound kanye ne-encryption protocols, kufinyelelwa ibhalansi ephelele phakathi isivinini sokuphequlula kanye nobumfihlo ngokuphelele, kususa ukuncika kumaseva e-DNS omphakathi nokuvikela ubuqotho bayo yonke imibuzo eyenziwe ekhaya.
