- Ukuqaliswa kweseva ye-DNS ehlanganisiwe ukuvimba ukukhangisa kanye nama-tracker kuyo yonke inethiwekhi yasekhaya.
- Ukuthuthukiswa kobumfihlo ngokusebenzisa amaphrothokholi e-DNS abethelwe njenge-DoH ne-DoT.
- Ukuhlanganiswa okuthuthukisiwe ne-Unbound ukuze udale isixazululo sakho esiphindaphindayo futhi uthole ukuzimela.
- Ukuphathwa kwamakhasimende okuningiliziwe kanye nezilawuli zabazali ukuvikela izingane kokuqukethwe okungafanele.
Uma ukhathele izikhangiso ezihlasela isikrini sakho nezinkampani ezilandelela yonke into oyenzayo ku-inthanethi, ukusetha iseva yakho ye-DNS kuyisisombululo esiphezulu. I-AdGuard Home inikezwa njengethuluzi elinamandla elisebenza njengesithiyo ekukhangiseni kanye ne-malware, ihlunga ithrafikhi ngaphambi kokuba ifinyelele ngisho nakumadivayisi akho, okwenza ukuphequlula ekhaya kube lula kakhulu.
Ingxenye engcono kakhulu ukuthi, ngokuyisebenzisa ngokusebenzisa izitsha ze-Docker , singakhohlwa ngezinkinga zobuchwepheshe ezikhathazayo bese sizisebenzisa cishe kunoma iyiphi ihadiwe, kusukela ku-Synology NAS noma ku-router ye-ASUS ethuthukisiwe kuya ku- Raspberry Pi ene-AdGuard Home noma i-Orange Pi ene-Arch Linux. Asikho isidingo sokufaka izandiso kusiphequluli ngasinye; uma sesilungisiwe, yonke inethiwekhi ivikelwe ngokuzenzakalelayo, kufaka phakathi lawo ma-Smart TV noma amadivayisi e-IoT angenakwenzeka ukuwashintsha.
Ukulungiselela indawo: Izidingo kanye nohlelo
Ukuze konke kusebenze kahle, udinga ukufaka i-Docker kanye ne-Docker Compose . Iphuzu elilodwa elibalulekile elivame ukubangela amakhanda yi-port 53, esetshenziswa yi-DNS. Ekusabalalisweni okufana ne-Ubuntu noma i-Debian, isevisi exazululwe nge-systemd ivame ukuthatha le port ngokuzenzakalelayo, ngakho-ke kubalulekile ukuyikhubaza ukuze i-AdGuard Home ikwazi ukulawula ngokugcwele imibuzo.
Kubalulekile ukuthi iseva ephethe isitsha ibe nekheli le-IP elingaguquki . Uma ikheli le-IP leseva lishintsha, wonke amadivayisi akho azolahlekelwa ukufinyelela kwe-inthanethi ngoba ngeke azi ukuthi afuna kuphi amakheli ewebhu. Uma usebenzisa i-Synology NAS, ungaphatha konke kusuka ku- Container Manager , udale amafolda athile okucushwa kanye nedatha eqhubekayo, uqinisekise ukuthi awulahlekelwa yilutho lapho ubuyekeza isithombe.
Ukufakwa kusetshenziswa i-Docker Compose
Indlela ehlanzekile kakhulu yokuqala isevisi ukusebenzisa ifayela le-docker-compose.yml . Kuleli fayela, kufanele udwebe ama-port abalulekile: 53 e-DNS (TCP kanye ne-UDP), 80 e-interface yokuphatha, 3000 e-wizard yokusetha kokuqala, futhi, uma ufuna izici ezithuthukisiwe, ama-port 67 kanye no-68 e- service ye-DHCP . Ukuqinisekisa ukuthi isevisi ayimi, kunconywa ukusebenzisa isiqondiso esithi `restart: unless-stopped`.
Uma isitsha sesisebenza, vele ufake ikheli le-IP leseva elilandelwa yi-port 3000. I-wizard inembile kakhulu futhi izokucela ukuthi uchaze igama lomsebenzisi nephasiwedi kusuka kumphathi. Icebo lalabo abafuna ubumfihlo obuphezulu ukumisa I-DNS ephezulu okubethelwe, kuqhathaniswe izinketho ezifana I-Google DNS vs Digi noma i-Quad9, kusetshenziswa i-syntax efana tls://dns.googleLokhu kuvimbela umhlinzeki wakho we-inthanethi ukuthi angakwazi ukuhlola izicelo zakho.
Ukuthatha ubumfihlo kufinyelele ezingeni elilandelayo nge-Unbound
Uma ufuna ukuyeka ukuthembela kubantu besithathu, ungahlanganisa i-AdGuard Home ne -Unbound . Le software isebenza njengesixazululi esiphindaphindayo, okusho ukuthi i-AdGuard ngeke isabuza i-Google noma i-Cloudflare; esikhundleni salokho, i-Unbound izoya ngqo kumaseva e-DNS ayisisekelo . Lokhu kususa umlamuleli futhi kwandisa ukulawula kwakho idatha yakho.
Ukuze wenze ngcono i-Unbound ku-Docker, kunconywa ukuthi ulungise ukwamukela nokuthumela ama-buffer ku-host usebenzisa sysctl.confngaleyo ndlela kugwenywe izexwayiso zokusebenza. Ngaphezu kwalokho, kubalulekile ukuqinisekisa ukuthi DNSSEC iyasebenza, iqinisekisa ukuthi izimpendulo ze-DNS aziphazanyiswanga endleleni, into engahlolwa kalula ngamathuluzi anjengomyalo dig.
Izilungiselelo zenethiwekhi kanye nezilawuli zabazali
Ukuze lokhu kusebenze, udinga ukuya kuzilungiselelo ze-router yakho bese ushintsha i-DNS eyinhloko ibe yikheli le-IP leseva yakho ye-AdGuard. Imininingwane ebalulekile ukulungisa ngesandla iseva yegama le-DHCP; uma uvumela i-router ukuthi iphathe uxhumano, iphaneli ye-AdGuard izobonisa ikheli le-IP elilodwa kuphela (le-router) futhi ngeke ukwazi ukuhlonza idivayisi eqondile eyenza isicelo ngasinye.
Uma amakhasimende esevele eyedwa, ungadlala nge ukulawula kwabazaliI-AdGuard ikuvumela ukuthi udale amaphrofayili athile elungu ngalinye lomndeni, uvimbele izinsizakalo zokugembula, okuqukethwe kwabantu abadala, noma ngisho nezinkundla zokuxhumana ngezikhathi ezithile. Ungasebenzisa futhi i- Ukubhala kabusha kwe-DNS ukudala izizinda zasendaweni, okukuvumela ukuthi ufinyelele uhlelo lwakho lwe-NAS noma lwe-home automation ngokuthayipha into efana nale mi-casa.local esikhundleni sokukhumbula ikheli le-IP elinezinombolo.
Uhlu lokuhlunga nokulungisa
Inhliziyo yesistimu ilele ohlwini lwayo lokuvimba. Nakuba i-AdGuard inikeza isisekelo esiqinile, ukwengeza izihlungi ezifana ne -OISD noma i-Steven Black kuthuthukisa kakhulu ukuvikelwa kwe-adware kanye ne-telemetry. Uma ubona iwebhusayithi esemthethweni yehluleka ukulayisha, ungakhathazeki: ungangeza umthetho wokungafani esigabeni sokuhlunga ngokwezifiso usebenzisa uphawu oluphindwe kabili lwe-@.
Ngokuphathelene nokugcinwa, kubalulekile ukwenza amakhophi wokulondoloza amafolda config y workUngakwazi ukwenza lokhu ngokuzenzakalelayo ngeskripthi se-Bash esilula kanye nomsebenzi ohleliwe ku cron okucindezela idatha ibe ifayela le-tar.gz nsuku zonke, ngaleyo ndlela kugwenywe ukumisa yonke into kusukela ekuqaleni uma idiski yeseva yehluleka.
Ukuba ne-ecosystem esekelwe ku-AdGuard Home kanye ne-Docker kukuvumela ukuthi uguqule inethiwekhi yasekhaya evamile ibe yindawo ephephile nephumelelayo. Kusukela ekhonweni lokuhlunga izizinda ezinonya emhlabeni wonke kuya ekhonweni lokuphatha inethiwekhi ngokuningiliziwe ngedivayisi ngayinye, umphathi unokulawula okuphelele. Ngokuhlanganisa amathuluzi afana ne-Unbound kanye ne-encryption protocols, kufinyelelwa ibhalansi ephelele phakathi kwesivinini sokuphequlula kanye nobumfihlo obuphelele, kuqedwe ukuthembela kumaseva e-DNS omphakathi kanye nokuvikela ubuqotho bayo yonke imibuzo eyenziwe ngaphakathi kwekhaya.
