Ukuba usebenzisa ifowuni yakho kuyo yonke into, sebenzisa idatha ekwabelwana ngayo kwilaptop yakho, kwaye uqhagamshele kuyo nayiphi na inethiwekhi ye-WiFi onokuyifumana, Lungiselela indawo ekhuselekileyo nge-DNS eyenzelwe wena Yenye yezinto ezibonakala ngathi ziyinto engenamsebenzi, kodwa ibonisa isantya sangaphambili nasemva kobumfihlo, ukhuseleko kwanesantya sokuphequlula.
Iindaba ezimnandi zezokuba akufuneki ube ngumphathi wenkqubo: uneengcinga ezimbalwa ezicacileyo malunga nokuba yintoni i-DNS, ukuba zeziphi iingozi ezibangelwa yindlela yendabuko, kunye nendlela ezisebenza ngayo ezi ndlela, uya kukwazi ukukwenza oko. I-DNS yabucala, i-DoH, i-DoT okanye izisombululo ezifana ne-AdGuard Home, i-Pi-hole kunye ne-VPNUngayilungiselela indawo ekhuselekileyo kwifowuni yakho ephathwayo nakwizixhobo eziqhagamshelwe kwindawo yokufikelela kuyo.
Yintoni i-DNS kwaye kutheni ufanele ukhathalele?
I-DNS, isifinyezo seDomain Name System, ngokusisiseko yi- uluhlu lonxibelelwano lwe-intanethiUchwetheza igama ledomeyini elilula njenge "google.com" okanye "xatakandroid.com," kwaye ngaphantsi, ifowuni yakho ifuna idilesi ye-IP yamanani ukuze ifumane iseva echanekileyo. Iseva ye-DNS inoxanduva lokuguqulela elo gama kwidilesi yayo ye-IP ehambelanayo ukuze uqhagamshelo lukwazi ukusekwa.
Phantse kuzo zonke iinethiwekhi, ezisisigxina neziphathwayo, zihlala zingumqhubi wakho, i-router, okanye i-Wi-Fi hotspot kawonkewonke egqiba ukuba yeyiphi iseva ye-DNS emayisetyenziswe. Oku kuthetha ukuba, ngokuzenzekelayo, Isixhobo sakho sibuza nge-DNS ebonelelwa ngumboneleli wakho. ngaphandle kokuba uchukumise nantoni na. Iyasebenza, ewe, kodwa ineengxaki ezininzi ezibalulekileyo ngokubhekiselele kubumfihlo kunye nolawulo.
Ingxaki esisiseko kukuba le mibuzo, kwimodeli yakudala, Bahamba ngesicatshulwa esicacileyo kwaye ngaphandle kokuqinisekiswa.Ngalo lonke ixesha ifowuni yakho ephathwayo ibuza ukuba "le domain inayo idilesi ye-IP?", eso sicelo siyabonakala nakubani na olawula inethiwekhi: i-ISP yakho, umnini we-WiFi yebha, umhlaseli kwinethiwekhi efanayo, njl.
Ngaphezu koko, i-DNS ibe yindawo ephambili yokuvala okanye yokucoca iiwebhusayithi. Abaqhubi, iinethiwekhi zeenkampani, okanye oorhulumente banokugqiba kwelokuba iidomeyini ezithile "ziyeke ukubakho" kubasebenzisi. ngokungazisombululi amagama abo okanye ukubuyisela ii-IP eziguquliweyoUkusuka apha, okubonayo kukuba iwebhusayithi ayisebenzi, ngokungathi iseva iphazamisekile.
Ngenxa yazo zonke ezi zizathu, ukulawula ukuba yeyiphi iseva ye-DNS oyisebenzisayo, kunye nendlela oyisebenzisa ngayo, Ivula ithuba lokusebenza ngcono, ubumfihlo obuphuculweyo, ukugqitha iibhloko ezithile, kunye nokucoca izoyikiso.Kwaye, njengebhonasi, ikuvumela ukuba uguqule ifowuni yakho ibe yindawo ekhuselekileyo kakhulu kunaleyo iza nayo kwizicwangciso zasefektri.
Iingxaki ze-DNS yendabuko kunye neengozi zokwenyani
Xa sithetha nge-DNS yakudala, sithetha ngenkqubo apho Imibuzo ayibhalwanga ngendlela efihliweyo kwaye ayisayinwanga.Oku kuvumela umlamli ukuba abone ukuba zeziphi iidomeyini ozityelelayo, atshintshe iimpendulo, okanye azivale ngaphandle kokuba isixhobo sakho siqaphele ngokucacileyo.
Ndiqinisekile ukuba oku kuye kwenzeka kuwe kwi-WiFi yasimahla: uzama ukuvula nayiphi na iwebhusayithi, endaweni yokuya ngqo kwindawo oya kuyo, Iphepha lokungena okanye lentengiso livela kuqala.Oku kwenziwa ngokuthumela izicelo zakho kwi-DNS, ukubuyisela idilesi ye-IP eyahlukileyo kunaleyo uyicelileyo kunye nokukuthumela kwi-portal ebanjwe.
Le ndlela ifanayo, ezandleni zomntu oneenjongo ezimbi, ivumela ukudalwa kweemeko eziyingozi kakhulu. Umhlaseli olawula inethiwekhi unokwenza, umzekelo, ikuthumele kwiphepha le-phishing elifana nokungena kwebhanki yakho. okanye kwiwebhusayithi esasaza i-malware, ngokutshintsha nje i-IP yempendulo kumbuzo we-DNS.
Ulawulo lwe-DNS lukwasetyenziselwa ukunyanzelisa imigaqo-nkqubo yokuhlolwa okanye yokucoca. Kwiimeko-bume zenkampani, kwiinethiwekhi zemfundo, okanye kwinqanaba lesizwe, ukusonjululwa kweendawo ezithile akuvunyelwanga ukuze Kusenokubonakala ngathi iwebhusayithi ayisebenzi okanye ayikho.Akukho miyalezo icacileyo yokuvimba: umsebenzisi ubona kuphela iimpazamo zokusombulula ingxaki.
Ngaxeshanye, umboneleli wakho we-intanethi angasebenzisa imbali yakho yokusombulula idomeyini ukuze ukwenza iiprofayili ezineenkcukacha ezininzi zeendlela zakho zokukhangelaOlu lwazi lusetyenziselwa ukwahlulwahlulwa kweentengiso, iimveliso ezenzelwe wena, okanye, kwimeko embi kakhulu, ukuthengisa idatha edityanisiweyo.
Zithini iingenelo zokutshintsha iiseva ze-DNS nokukhetha ababoneleli abalungileyo?
Ukutshintsha useto lwe-DNS kwifowuni yakho ephathwayo, kwi-PC, okanye kwi-router akupheleli nje ekubekeni imo yobugcisa: Ingaphucula isantya, ubumfihlo, ukhuseleko, kunye nokufikelela kumxholo.Konke ngaxeshanye. Awuyi kuphinda kabini i-bandwidth yakho, kodwa ungayinciphisa kakhulu i-latency kwaye uphucule ulawulo.
Ngokuphathelele ukusebenza, uninzi lwezisombululo zikawonke-wonke lunenethiwekhi yeeseva ezisasazwe kwihlabathi liphela ezinee-cache ezilungiselelwe kakuhle. Oku kuthetha ukuba xa ikhompyutha yakho ibuza idilesi ye-IP yewebhusayithi, impendulo ifika ngokukhawuleza kwaye iphepha liqala ukulayisha ngokukhawulezaIsisombululo ngasinye sithatha ii-milliseconds kuphela, kodwa senza umahluko ekuhambeni kosuku.
Ngokuphathelele ubumfihlo, ababoneleli abanjengoCloudflare okanye iQuad9 bavakalisa imigaqo-nkqubo engqongqo kakhulu kunabasebenzi abaninzi. Umzekelo, I-Cloudflare ithi isusa iilog ngokukhawuleza kwaye ayithengisi idatha yokusetyenziswaKwelinye icala, iQuad9 iyazingca ngokuqokelela ulwazi oluncinci nokugxila kukhuseleko.
Ngokuphathelele ukhuseleko, ezinye iinkonzo ziquka uluhlu olumnyama lweedomeyini ezinobungozi. Imizekelo ibandakanya iiseva ezifana neQuad9, iiprofayili ezithile ze-OpenDNS, kunye nezisombululo ezifana neNextDNS. Zivala ukufikelela kwiwebhusayithi ezine-malware, i-phishing, ii-botnets, okanye intengiso ephazamisayo kakhulu.Ukuba uzama ukufikelela (nokuba ngengozi) kwiphepha eliyingozi, i-DNS ngokwayo iyangenelela kwaye ikuthintele ekulayisheni umxholo onobungozi.
Ngokuphathelele ukuvimba, uninzi lwezihluzo zomsebenzisi kunye norhulumente zisetyenziswa ngokuchanekileyo kwinqanaba le-DNS. Xa utshintshela kwiseva elawulwa ngumntu wesithathu ongekho phantsi kolawulo lwakho, Ungaziphepha ezinye zezo miqathangoAyisiyonto ingenakuphoswa, kodwa kudla ngokwanela "ukuvusa" iiwebhusayithi ezazibonakala zingenakufikeleleka.
Xa ukhetha umboneleli we-intanethi, akukho mntu uphumeleleyo. Kuxhomekeke kwindawo okuyo, izinto eziza kuqala kuwe (isantya, ubumfihlo, ukhuseleko), kunye neemeko ozimisele ukuzenza. Nangona kunjalo, kukho amagama athile afanele ukujongwa: I-Google Public DNS, i-Cloudflare, i-Quad9, i-OpenDNS kunye ne-NextDNS Ziphakathi kwezona zisetyenziswa kakhulu nezicetyiswayo.
Iiseva ze-DNS ezicetyiswayo: imizekelo kunye nolwazi oluphambili
Igqala elisetyenziswa kakhulu yiGoogle Public DNS. Inika iidilesi ze-IPv4 ezifana ne 8.8.8.8 kunye ne8.8.4.4kunye needilesi ze-IPv6 ezifana no-2001:4860:4860::8888 kunye no-2001:4860:4860::8844. Isimahla, izinzile, iyakhawuleza, kwaye ixhasa ukubethela kusetyenziswa i-DNS-over-TLS (DoT) kunye ne-DNS-over-HTTPS (DoH) kusetyenziswa i-host dns.googleeli ligama elisetyenziswa ngqo xa uchaza i-DNS yabucala kwi-Android.
I-Cloudflare yenye yemidlalo ephambili edumileyo 1.1.1.1Iidilesi zayo ze-IPv4 ziyi-1.1.1.1 kunye ne-1.0.0.1; kwi-DNS yabucala kwi-Android, kusetyenziswa amagama e-hostname afana ne-[type missing]. 1dot1dot1dot1.cloudflare-dns.com okanye iindlela ezifanayo ezifana ne-one.one.one.one.one.bagxininisa kakhulu kubumfihlo kwaye bathi Bayawacima loo marekhodi ngexesha elifutshane kakhulu.ukongeza kwizinga eliphezulu lesantya njenge-DNSPerf kwiindawo ezininzi.
Ukuba ubeka ukhuseleko phambili kunayo yonke into, iQuad9 ifanelwe yingqwalasela enzulu. Inkwenkwezi yayo i-IPv4 yiyo 9.9.9.9 Kwaye, kwi-DNS yabucala kwi-Android, igama eliqhelekileyo ngu dns.quad9.netIgxile ekuthinteleni iidomeyini ze-malware, i-phishing, kunye nezinye izoyikiso ezifanayo, ukuze Isebenza njengesihluzi sokhuseleko esivela kwisisombululo segama ngokwalo..
I-OpenDNS (ephethwe yiCisco) kunye ne-NextDNS ziwela kudidi lweenkonzo ezinokucwangciswa kakhulu. Zikuvumela ukuba wenze iiprofayili ezinolawulo lwabazali, izihluzi zomxholo wabantu abadala, ukuvimba iintengiso, kunye needeshibhodi ezinezibalo ezineenkcukacha. Zilungele nabani na ofuna. chaza imigaqo-nkqubo ecwangcisiweyo yabantwana, iindawo zomsebenzi, okanye uthungelwano lwasekhaya oluntsonkothileyo.
Ukuze ukhethe eyona ifanelekileyo kuwe, licebo elihle ukuzama izihlandlo ezininzi uze ulinganise amaxesha okuphendula kwindawo okuyo. Izixhobo ezifana ne-DNSPerf zinokunceda. Bathelekisa ukubambezeleka kunye nokufumaneka kweenkonzo ezininzi ze-DNS ezivela kwiindawo ezingaphezu kwama-200okukunceda ubone ukuba nguwuphi umboneleli osebenza kakuhle kwindawo okuyo.
I-DNS ekhuselekileyo: i-DoH, i-DoT, i-DNSCrypt kunye nengcamango ye-DNS yabucala
Xa sithetha "nge-DNS ekhuselekileyo," sithetha nge-"secure DNS". indlela imibuzo ehamba ngayo phakathi kwesixhobo sakho kunye nesevaEndaweni yokuthumela idatha ngombhalo ocacileyo, iiprotokholi ezifana ne-DNS-over-HTTPS (DoH), i-DNS-over-TLS (DoT), okanye i-DNSCrypt zivumela ukuba loo traffic ibethelwe kwaye iqinisekiswe.
I-DoH ihlanganisa izicelo ze-DNS ngaphakathi konxibelelwano lwe-HTTPS oluqhelekileyo, ngesiqhelo isebenzisa i-port 443. Oku kwenza kube lula kumcensi okanye umboneleli ozama ukuzihluza. Kunokuba nzima ukwahlula ithrafikhi ye-DNS efihliweyo kwezinye iindlela zokukhangela kwiwebhu.Kungoko ke, ukuyivimba ngaphandle kokuphula isiqingatha se-intanethi kunzima kakhulu.
I-DoT, yona, ibhala ngemfihlo imibuzo isebenzisa iprotocol ye-TLS ngokukodwa ye-DNS. Le yindlela esetyenziswa yi-Android phantsi kwelebheli ka I-DNS yabucala iqala nge-Android 9Yiyo loo nto ithathwa njengeyona ndlela ithe ngqo xa ufuna ukukhusela zonke ii-apps zenkqubo ngaphandle kokuxhomekeka kwisikhangeli ngasinye.
I-DNSCrypt sisisombululo esidala esongeza ukubethela kunye nokuqinisekiswa, nangona kwiminyaka yakutshanje iye yagqunywa yi-DoH kunye ne-DoT. Nangona kunjalo, isasebenza kwiindawo eziphambili apho abasebenzisi Bazimisela abasombululi babo okanye iinethiwekhi zasekhaya ezineendlela zokhuseleko ezongezelelweyo.
Kwi-Android 9 nakweminye i-Android, ukhetho olubizwa ngokuba yi-“Private DNS” kufuneka lubhalwe “Secure DNS.” Ukuyivumela inyanzelisa inkqubo ukuba isebenzise iseva ye-DNS ekhuselekileyo. Yonke imibuzo yenkqubo ithunyelwa ngokufihliweyo kwiseva exhasa i-DoTAwuyilawuli iseva yakho, kodwa ukhetha iseva yomntu wesithathu oqhagamshela kuyo ngokukhuselekileyo.
I-DNS ekhuselekileyo kunye ne-VPN: amahlakani, hayi izinto ezithatha indawo yazo
Kuqhelekile kakhulu ukubhidanisa iingcamango: ukwenza i-DNS efihliweyo kukunyuka okukhulu kubumfihlo, kodwa Akufani nokusebenzisa i-VPNNge-DNS ekhuselekileyo ukhusela kuphela izicelo zamagama; ezinye iitrafikhi (amaphepha, ukhuphelo, iividiyo, imidlalo ekwi-intanethi...) ziya kuxhomekeka ekubeni iwebhusayithi isebenzisa i-HTTPS kunye nenethiwekhi odlula kuyo.
Kwelinye icala, i-VPN yakha umngxuma ofihliweyo phakathi kwesixhobo sakho kunye neseva ekude. Yonke into (okanye phantse yonke into, ukuba icwangciswe kakuhle) eshiya isixhobo sakho idluliselwa kuyo. Ihamba ivalwe kwaye ibethelwe kwiseva yeVPN.Kwaye iiwebhusayithi ozityelelayo zibona idilesi ye-IP yaloo seva endaweni yeyakho yokwenyani.
Ababoneleli abaninzi be-VPN bezorhwebo baquka i-DNS yabo ekhuselweyo, kwaye xa beqhagamshela, Zithintela ukuvuza kwiiseva ze-DNS zomqhubi weselula okanye iinethiwekhi ze-WiFi.Ezinye zikuvumela ukuba ukhethe: i-DNS yakho, i-DNS yomntu wesithathu (iCloudflare, iGoogle, iQuad9), okanye neseva yasekhaya oyisebenzisileyo. Ungafumana iingcebiso kwi ababoneleli beVPN zorhwebo ukuze ubone iindlela ezinokuthenjwa.
Indibaniselwano efanelekileyo, ukuba uthatha ubumfihlo bakho nzulu, kukuba i-DNS ekhuselekileyo elungiselelwe kwinqanaba lenkqubo kwaye usebenzise i-VPN xa uqhagamshela kwiinethiwekhi zikawonke-wonke, uhamba, okanye ufuna ukudlula imiqathango yendawo. Sebenzisa i-VPN kwi-Android kwaye ukuthintela ithrafikhi engakhuselekanga, eso sikhokelo siluncedo kakhulu. Nangona kunjalo, qiniseka ukuba ujonga ushicilelo oluncinci lwe-app yakho ye-VPN, kuba abanye abayinaki i-DNS yabucala ye-Android kunye Bazinyanzela ngokwabo abasombululi ngokwabo ngokungacwangciswanga..
Kwabaqalayo, ukuseta i-DNS efihliweyo sele kubonisa utshintsho olukhulu kwimeko yesiqhelo. Emva koko, ukuba ufuna ukunyusa umgangatho wokhuseleko, Ukongeza i-VPN phezulu kukhusela ngakumbi ithrafikhi yakho.Ukuba ukhetha ukhetho lwasimahla, ungajonga iiVPN zasimahla ezilungileyo njengendawo yokuqala.
Ungayitshintsha njani i-DNS kwifowuni yakho ye-Android
Kwi-Android, indlela yokwenza ngokwezifiso i-DNS ixhomekeke kwinguqulelo kunye nendlela umenzi azilungiselele ngayo iimenyu. Ukususela kwi-Android 9 (Pie) ukuya phambili, kukho ukhetho lokwenza njalo. I-DNS yabucala esebenza kuyo yonke inkqubo, zombini i-WiFi kunye nedatha yeselulaKwiinguqulelo zangaphambili ubunokuyilungisa kuphela inethiwekhi ngenethiwekhi.
Amagama ala macandelo ayahluka: into ebizwa ngokuba yi "Network & Internet" kwiPixel inokuvela njenge "Connections" okanye "Connection Settings" kwiSamsung Galaxy. Kodwa ingqiqo iyafana: Ungena kwizicwangciso zenethiwekhi, ujonge icandelo le-DNS labucala, uze uchaze umboneleli.kwaye kunokwenzeka kwiimodeli ezininzi Yenza iiprofayili ezizenzekelayo ngokusekelwe kwinethiwekhi ye-WiFi ukwenza lula inkqubo.
Kwiifowuni ezininzi zamva nje zeSamsung, indlela ikwiSetingi > Uqhagamshelo > Useto olongezelelweyo loqhagamshelo > I-DNS yabucala. Kwezinye izixhobo ze-Android, ulandelelwano ludla ngokuba yiSetingi > Inethiwekhi kunye ne-Intanethi (okanye efanayo) > I-Advanced > I-DNS yabucala. Wakufika apho, uza kubona ukhetho olufana no-"Automatic," "Valiwe," kunye no-"Private DNS provider host host."
Ukuba ushiya imo isetiwe kwi-"Automatic", inkqubo iya kuzama ukusebenzisa i-DNS efihliweyo kunye neseva ebonelelwe yinethiwekhi, kodwa ukuba ayifumaneki iza kubuyela buthule kwi-DNS yendabukoUkuqinisekisa ukuba uhlala usebenzisa umboneleli othile, kufuneka ukhethe u-“Hostname…” uze ufake idomeyini ehambelanayo yenkonzo oyikhethileyo.
Kukho iinkcukacha ezibalulekileyo: I-Android ayizamkeli iidilesi ze-IP zamanani kwicandelo labucala le-DNSUngaze usebenzise i-1.1.1.1 okanye i-8.8.8.8; soloko usebenzisa igama lomenzi elibonelelwe ngumboneleli wakho, njenge-dns.google, one.one.one.one, okanye i-1dot1dot1dot1.cloudflare-dns.com.
Lungiselela i-DNS yabucala kwi-Android 9 kunye neenguqulelo zamva nje
Ukuba ifowuni yakho isebenzisa i-Android 9 okanye ngaphezulu, ungamisela umboneleli we-DNS omnye, okhuselekileyo kuyo yonke inkqubo. Olu seto Oku kusebenza kwi-WiFi nakwiinethiwekhi zeselula kwaye kuchaphazela ne-hotspot oyidalayo., nangona kukho izinto ezimbalwa esiza kuzibona kamva.
Amanyathelo aqhelekileyo afana kakhulu kwiibhrendi ezahlukeneyo: yiya kwiSetingi > Inethiwekhi kunye ne-Intanethi (okanye uQhagamshelo) > i-DNS yabucala, khetha ukhetho lokufaka igama lomninimzi uze uthayiphe, umzekelo, dns.google ukuba ufuna ukusebenzisa iGoogle Public DNS kunye neDoTt one.one.one.one yenkonzo yeCloudflareUgcina, iselfowuni ijonga uqhagamshelo kwaye, ukuba yonke into ichanekile, ivula i-DNS ekhuselekileyo.
Ukuba uchwetheza idomeyini ngendlela engalunganga okanye iseva iyeke ukuphendula, uya kuqaphela ukuba Akukho mithwalo yewebhusayithi nangona unengxelo entle.Olu luphawu oluqhelekileyo lokusilela kwesisombululo segama. Isisombululo kukubuyela okwethutyana kwi "Automatic" okanye "Cima", uqalise kwakhona uqhagamshelo, uze ujonge idatha efakiweyo.
Kwi-Android 10 nakweminye i-intanethi, inkqubo ilawula unxibelelwano phakathi kwe-DNS yabucala kunye nezicelo ezifikelelekayo kwinethiwekhi (ii-VPN, ii-proxies, njl.njl.) ngcono kakhulu. Nangona kunjalo, kuyacetyiswa ukuqinisekisa ukuba yeyiphi iseva oyisebenzisayo ngokwenene kuvavanyo olukwi-intanethi olufana ne-"My DNS" okanye olufana nalo, ingakumbi ukuba udibanisa... I-VPN, i-DNS yabucala, kunye nee-apps zokucoca.
Tshintsha i-DNS kwi-Android 8 nangaphambili, inethiwekhi ngenethiwekhi
Ukuba ifowuni yakho isasebenzisa i-Android 8 okanye inguqulelo endala, awuyi kuba nokukhetha i-DNS yabucala yehlabathi. Kwezi meko, enye indlela kukuba lungisa ngokwakho useto lwe-DNS kwinethiwekhi nganye ye-WiFi oqhagamshela kuyo.ukuphinda le nkqubo ekhaya, emsebenzini, njl.
Inkqubo eqhelekileyo iqala ngokuqhagamshela kwi-Wi-Fi uze uye kwi-Settings > Wi-Fi okanye kwi-Settings > Network & Internet > Wi-Fi. Kuluhlu lweenethiwekhi, cofa uze ubambe leyo uyisebenzisayo uze ukhethe "Guqula inethiwekhi" okanye "Iinketho eziphambili," apho useto lwe-IP kunye ne-DNS luhlala lufumaneka khona.
Uza kubona intsimi ethi "IP Configuration" ebekwe kwi "DHCP" ngokuzenzekelayo. Ukuyitshintsha ibe yi "Static" kuvula idilesi ye-IP, isango, kwaye, okona kubaluleke kakhulu, ngeenjongo zethu. I-DNS 1 kunye ne-DNS 2Apho ungangena khona iiseva ofuna ukuzisebenzisa kuloo nethiwekhi ithile.
Kwezo ndawo ungabeka, umzekelo, 8.8.8.8 kunye no-8.8.4.4 ukuba ukhetha iGoogle, okanye 1.1.1.1 kunye 1.0.0.1 ukuba unamathela kwiCloudflare. Gcina, ifowuni yakho iyaxhuma kwakhona, kwaye ukususela ngelo xesha ukuya phambili, nayiphi na imibuzo oyenzayo kuloo WiFi iya kusebenzisa iiseva zeDNS ozichazileyo.
Ukuba nangaliphi na ixesha inethiwekhi iqala ukuziphatha ngendlela engaqhelekanga okanye ufuna ukubuyela kwizicwangciso zokuqala, buyela nje kweso sikrini uze utshintshe idilesi ye-IP ibe yi-“DHCP”. Oko kufanele kube njalo. I-DNS enikezelwa yi-router okanye indawo yokufikelela ibuyiselwa ngokuzenzekelayo..
Guqula ifowuni yakho ibe yindawo ekhuselekileyo nge-DNS eyenzelwe wena
Masiqale ngokujonga eyona nto iphambili: xa usebenzisa i-tethering okanye indawo yokufikelela kwi-Wi-Fi, iqala ukusebenza njenge-router encinci. Inoxanduva lokusasaza iidilesi ze-IP zabucala kwizixhobo ezixhunyiweyo (ilaptop, ithebhulethi, ikhonsoli yomdlalo, enye ifowuni ephathwayo) kwaye izifundise. zeziphi iiseva ze-DNS ekufuneka bazisebenzise nge-DHCP. Ukuba ufuna ulwalathiso malunga Yabelana nge-intanethi kwi-PC yakho okanye wenze indawo ephathwayo yeselulaLoo mfundiso ichaza amanyathelo asisiseko.
Ngokwethiyori, kuvakala kumnandi kakhulu ukucinga ukuba, ukuba ifowuni yakho isebenzisa i-DNS yabucala efihliweyo, Izixhobo eziqhagamshelwe kwindawo yakho yokuzonwabisa zizuza olo khuseleko olufanayoEnyanisweni, kwiimodeli ezininzi ze-Android oku akwenzeki: bayaqhubeka nokuthengisa nge-DHCP i-DNS ebonelelwa yinethiwekhi yeselula, kungekhona leyo uyibeke kwinqanaba lenkqubo.
Ngenxa yoko, i-smartphone yakho isenokuba ikhangela ngemibuzo efihliweyo nehluziweyo, ngelixa i-laptop yakho iqhagamshelwe kwindawo yayo yokufikelela. Iyaqhubeka nokubuza ngqo kwiseva ye-DNS yomqhubi.Kwi-ISP yakho, akukho mahluko mkhulu xa kuthelekiswa nelaptop eqhagamshela ngokuzenzekelayo.
Indlela eyomeleleyo yokuqinisekisa ukhuseleko oluncinci oluhambelanayo kuzo zonke izixhobo kukuba Lungiselela i-DNS ngesandla kwisixhobo ngasinye somthengiKwilaptop yakho yeWindows, kwiMac, kwitablet, njl. Ngale ndlela awuxhomekekanga kwinto ethengiswa yi-hotspot nge-DHCP.
Kukho ukhetho oluphucukileyo kancinci: ukuseta iseva yakho ye-DNS efihliweyo (umzekelo, nge-AdGuard Home okanye i-resolver exhasa i-DoH/DoT) kunye nokudibanisa isixhobo sakho esiphathwayo kuyo, nokuba ngokuthe ngqo okanye nge-VPN. Ingxaki kukuba, ukuba ufuna ukufikelela kuyo ungaphandle kwekhaya lakho, kuya kufuneka usebenzise i-VPN. ukuvula ii-DNS okanye ii-HTTPS ports kwiseva yakho, ungenisa i-attack vector entsha ukuba loo matshini awukhuselekanga kakuhle.
Sebenzisa i-AdGuard Home, i-Pi-hole, kunye ne-Home DNS kwi-Android yakho
Ukuba sele usete izisombululo ezifana ne-AdGuard Home okanye i-Pi-hole kwinethiwekhi yakho yasekuhlaleni, mhlawumbi uzilungiselele njengeseva ye-DNS ephambili kwi-router yakho yasekhaya. Ke ngoko, Zonke izixhobo eziqhagamshelweyo ekhaya (ezinentambo okanye iWiFi) zidlula kwesi sihluzo ngaphandle kokuba ucwangcise nantoni na kwisixhobo ngasinye..
"Kodwa" ufika xa ushiya ikhaya kwaye ufuna ukuqhubeka nokusebenzisa olo hluzo oluvela kwifowuni yakho ephathwayo, kwaye ngaphezu koko, Uceba ukuba izixhobo eziqhagamshelwe kwindawo ephathwayo nazo zizuzeKukho amaqhinga aliqela:
Enye indlela yokwenza iseva yakho yasekhaya ifikeleleke kwi-intanethi usebenzisa i-DoH okanye i-DoT, enedomeyini esebenzayo kunye nesatifikethi. Uyimisela loo hostname njenge-DNS yabucala kwi-Android kwaye, naphi na apho ukhoyo, Ifowuni yakho ephathwayo iya kuthumela imibuzo efihliweyo kwi-home resolver yakho.Nangona kunjalo, ifuna ukuvula ii-ports kwi-router, ukugcina izatifikethi zihlaziyiwe, kunye nokuba loo matshini ukhuselwe kakuhle.
Enye indlela elungeleleneyo kukudibanisa i-DNS yakho yasekhaya kunye ne-VPN yakho (i-WireGuard, i-OpenVPN, njl.njl.). Uyilungiselela i-VPN kwi-router yakho okanye kwiseva kwinethiwekhi yasekuhlaleni, kwaye xa uqhagamshela ungaphandle, Zonke iitrafikhi, kuquka nemibuzo ye-DNS, zidlula kwi-tunnel ziye kwi-LAN yakhoUkusebenzisa i-Pi-hole okanye i-AdGuard Home njengesicombululi. Kufuna umsebenzi wokuqala, kodwa uyakuphepha ukutyhila ngqo inkonzo ye-DNS kwi-intanethi.
Ukuba konke oku kuvakala ngathi yingxaki enkulu kwindlela oyisebenzisa ngayo ifowuni yakho ephathwayo, eyona nto ifanelekileyo kwiimeko ezininzi kukusebenzisa iseva yakho yasekhaya xa usekhaya, nge-router yakho, kwaye Lungiselela i-DNS kawonke-wonke ekhuselekileyo kwi-Android xa uhamba (Cloudflare, Quad9, Google, njl.njl.). Kubasebenzisi abaninzi, olo lungelelwaniso phakathi kokulula kunye nokhuseleko lungaphezulu kakhulu.
Ngaba i-DNS yeselula iyazikhusela izixhobo eziqhagamshelweyo?
Umbuzo oqhelekileyo, odla ngokubonwa kwiiforam zabucala, kukuba ingaba ukuqalisa nje i-DNS yabucala okanye ekhuselekileyo kwifowuni yakho ephathwayo kwanele na... Zonke izixhobo eziqhagamshela kwindawo enendawo yokufikelela kwiindawo ezikude zikhuselwe ngokuzenzekelayoNgenxa yemeko yangoku, impendulo enyanisekileyo yile: ngesiqhelo, hayi.
Njengoko sele sixoxile, xa ifowuni isebenza njenge-router ephuculweyo, iiparameter zenethiwekhi ezisasaza (idilesi ye-IP, isango, i-DNS) zihlala zisekelwe kuzo. oko inethiwekhi yeselula imnika konaayikho kwizicwangciso ze-DNS ezikhuselekileyo ze-Android. Ngoko ke, kwiimeko ezininzi, i-DNS yabucala ikhawulelwe kwifowuni ngokwayo.
Kwilaptop oyiqhagamshelayo nge-tethering, imeko ifana kakhulu nokuba usebenzisa i-modem ye-USB: Jonga i-DNS yomqhubi weselula uze ubuze ngokuchasene nayo ngaphandle kokuba uyinyanzela ukuba isebenzise enye.Kwicala lomboneleli, ungaqhubeka nokujonga ukuba zeziphi iidomeyini ezisonjululwe kuqhagamshelo lwakho.
Indlela yokuqinisekisa ukuba isixhobo ngasinye sisebenza ngesisombululo osifunayo kukungena kwizicwangciso zaso zenethiwekhi kwaye chaza i-DNS ngesandlaKwiWindows, kwi-macOS okanye kwiLinux, oku kwenziwa kwiipropati zeadaptha yenethiwekhi (iWiFi okanye i-Ethernet), endaweni ye "i-DNS ezenzekelayo" ngeeseva ozikhethileyo.
Kwi-iPhone nakwi-iPad, ungayilungiselela i-DNS usebenzisa inethiwekhi yakho ye-Wi-Fi: yiya kwi-Settings > Wi-Fi, cofa u-"i" ecaleni kwenethiwekhi (enokuba yindawo eshushu kwi-Android), kwaye phantsi kwe-"Configure DNS," tshintshela ku-"Manual" ukuze ufake idilesi ye-IP yomboneleli wakho owuthandayo. Kuyadinisa kancinci ukuba uhlala utshintsha iinethiwekhi, kodwa Iqinisekisa ukuba isixhobo asisebenzisi i-DNS yomthwali ngaphandle kwemvume yakho..
Indlela yokutshintsha i-DNS kwi-iPhone, kwezinye iifowuni eziphathwayo, kunye neekhompyutha
Kwi-iOS kunye ne-iPadOS, i-Apple yazisa inkxaso ye-DoH kunye ne-DoT iqala nge-iOS 14 kunye ne-macOS 11, kodwa Akukho seto ebonakalayo njenge "Private DNS" ye-Android.Ngokuzenzekelayo, indlela elula kukutshintsha i-DNS kwinethiwekhi nganye ye-WiFi: Useto > i-Wi-Fi > uphawu "i" > Lungiselela i-DNS > Ngesandla, cima iiseva ezindala uze wongeze ezintsha (umzekelo, i-1.1.1.1 kunye ne-1.0.0.1 okanye i-8.8.8.8 kunye ne-8.8.4.4).
Olu seto lusebenza kuphela kwinethiwekhi apho uyichaza khona, ngoko ke ukuba uqhagamshela kwinethiwekhi eyahlukileyo, kuya kufuneka uphinde le nkqubo. Kwidatha yeselula kunye nokusebenzisa i-DoH/DoT ngokucacileyo, Kukho ii-apps kwi-App Store ezifaka iiprofayili zoqwalaselo nge-DNS efihliweyo, kunye nezixhobo zomsebenzisi eziphambili ezikuvumela ukuba upakishe iiprofayili zakho.
KwiWindows 10 kunye ne-11, ukutshintsha i-DNS kubandakanya ukuya kwizicwangciso zenethiwekhi (okanye iPhaneli yoLawulo yakudala) kunye nokuhlela iipropati zeadaptha. Khetha iprotocol ye-IPv4, jonga ibhokisi ethi "Sebenzisa iidilesi zeseva ze-DNS ezilandelayo," kwaye Ufaka iidilesi ze-IP ezihambelana nomboneleli wakho owuthandayoKwiinguqulelo zamva nje, le nkqubo ikwaxhasa i-DoH yendalo kunye nezisombululi ezithile.
Kwi-macOS, indlela iyafana: vula iiSetingi zeNkqubo > iNethiwekhi, khetha ujongano lwakho (iWiFi okanye iEthernet), cofa u-Advanced/Details, kwaye kwithebhu ye-DNS, Yongeza iiseva ezintsha usebenzisa iqhosha lokongeza.Emva kokusebenzisa utshintsho, lonke uqhagamshelo olusebenzisa loo interface luya kusebenzisa ezo seva ze-DNS ude uzitshintshe.
KwiLinux, inkqubo ixhomekeke ekubeni usebenzisa iNetworkManager okanye omnye umphathi, kodwa ingcamango iyafana: fikelela kwizicwangciso zonxibelelwano, usete ngesandla izisombululo, kwaye, ukuba ufuna ulawulo oluphezulu, hlela iifayile ezifana neeprofayili ze-/etc/resolv.conf okanye ze-NetworkManager.
Lungiselela i-DNS kwinqanaba le-router nakwizisombululo ze-hotspot ezizinikeleyo
Enye indlela enamandla, ukuba awufuni ukuchukumisa isixhobo ngasinye ngokwaso ekhayeni lakho, kukuba Tshintsha useto lwe-DNS ngqo kwi-router yakho yasekhaya.Ngokufikelela kwi-web interface (ngesiqhelo kwi-192.168.1.1 okanye kwenye idilesi ye-IP ye-LAN), ungangena kwicandelo le-WAN/Internet uze ufake iiseva ze-DNS ezizenzekelayo endaweni yazo.
Ngokugcina nokuqalisa kwakhona, zonke izixhobo ezifumana iidilesi ze-IP nge-DHCP ziya kuzidla ilifa ezo setingi ze-DNS ngaphandle kokuba wenze enye into. Oku kuquka iiselfowuni, iilaptop, ii-game consoles, iiSmart TV, njl.njl., lo gama nje zingenazo useto lwe-DNS olungaguqukiyo. Yindlela elula yokwenza oku. lungelelanisa ukucoca kunye nobumfihlo kuyo yonke inethiwekhi.
Kwiindawo ezishushu zobungcali (umzekelo, abalawuli abafana nabo bavela kwizisombululo ze-EdgeCore okanye ze-WifiCloud), kuqhelekile ukudibanisa i-DNS yangokwezifiso kunye nemithetho ye-firewall ukuze Nqanda abasebenzisi ekuphepheni ukucoca ngokutshintsha useto lwe-DNS yesixhobo saboEnye indlela eqhelekileyo yile:
Okokuqala, misela useto lwe-WAN lwesixhobo ukuze usebenzise iiseva ze-DNS zenkonzo yokucoca (umzekelo, iidilesi ze-IP zeWifiCloud) njenge "server ye-DNS ekhethwayo" kunye "ne-server ye-DNS eyahlukileyo". Ngaloo nto, Izicelo ezivela kuyo yonke inethiwekhi zidlula kwezi zisombululi zihluziweyo..
Emva koko kwenziwa imithetho yomlilo evumela kuphela i-DNS traffic (port 53) kwezo IP ezithile kunye Zithintela naluphi na umzamo wokusebenzisa iiseva ze-DNS zangaphandle ezifana ne-8.8.8.8 okanye i-1.1.1.1Enyanisweni, abasebenzisi bangaseta nayiphi na i-DNS abayifunayo kwi-laptop yabo, kodwa ukuba ayifani nezo zivunyiweyo, ithrafikhi iyanqanyulwa kwaye abakwazi ukukhangela.
Le ndlela ikwafikelela nakwii-routers zasekhaya eziphambili okanye i-firmware efana ne-OpenWrt. Kunokwenzeka ukumisela iinkonzo ezifana ne-dnsmasq, uzikhombe kwi-Pi-hole kwinethiwekhi yendawo (umzekelo, 192.168.1.201), kwaye udibanise oku nemithetho ye-firewall ukuze nyanzela lonke ithrafikhi ye-DNS ukuba idlule kwisisombululo sakho sokucocaukuthintela ukuvuza kwi-DNS yangaphandle.
Nangona kunjalo, kwiindlela ezinzima zokucwangcisa i-OpenWrt kunye ne-Pi-hole, kulula ukulahleka: kufuneka ulungiselele ujongano lwe-LAN ukuze usebenzise i-Pi-hole njengeseva ye-DNS, wongeze ukhetho lwe-DHCP 6 (iseva ye-DNS yabathengi), kwaye uthathe isigqibo sokuba ingaba i-router ngokwayo iyayisebenzisa na loo seva okanye ibuza i-intanethi ngokuthe ngqo. I-nslookup elula iya kukunceda ujonge. ukuba abathengi basebenzisa i-DNS oyichazileyo ngokwenene okanye bayaqhubeka nokukhomba abanye ngomnwe.
Ekugqibeleni, ukuqonda ukuba yeyiphi i-DNS esetyenziswa ngumaleko ngamnye (isixhobo, i-router, i-hotspot, i-VPN) kunye nokuba izicelo zisonjululwa ngoluphi ulungelelwaniso kubalulekile kulungiselelo lwakho. Indawo ekhuselekileyo ene-DNS yangokwezifiso isebenza njengoko kulindelekile kwaye ungahlali nje kwithiyori.
Lonke eli qhinga lokulungisa i-DNS, ukudibanisa i-encryption (DoH/DoT), ukusebenzisa iinkonzo ezifana ne-Cloudflare, i-Google, i-Quad9, i-OpenDNS okanye i-NextDNS, ukusebenzisa izixhobo ezifana ne-AdGuard Home okanye i-Pi-hole kunye nokuyihambisa ne-VPN elungileyo xa kuyimfuneko, liguqulela kwiinkcukacha zakho, zombini kwiselfowuni yakho nakwizixhobo ezixhomekeke kwindawo yakho yokufikelela, Zisebenza ngokukhawuleza, zihluza izoyikiso ngcono, zihlonipha ubumfihlo bakho ngakumbi, kwaye zikunika ulawulo lokwenyani malunga nokuba kwenzeka ntoni kwidatha yakho kwi-intanethi..
