Uma usebenzisa i-VPN (bheka i-https: //www.vpn.com/VPN ... Usekelo lobuchwepheshe be-VPN ku-WindowsUma uvame ukushintsha izilungiselelo zenethiwekhi, kungenzeka ukuthi uke wabona izinketho ezifana I-DNS eqondene nomhlinzeki, isixazululo esihlanganisiwe, i-DNS yomphakathi evela ku-Google noma i-Cloudflare, i-Handshake, noma i-DNS eyenziwe ngokwezifiso njenge-Pi-holeUma uqala ukubuka kubonakala sengathi kungenye nje indlela yokusetha, kodwa ukukhetha iseva ye-DNS kunomthelela omkhulu kubumfihlo bakho, ukuphepha, ukusebenza, ngisho namawebhusayithi ongawavakashela.
Ekusetshenzisweni kwethu kwansuku zonke, sivame ukushiya izilungiselelo njengoba zinjalo: I-DNS evela kumhlinzeki we-ISP noma we-VPN isivele isebenzaKodwa-ke, ukushintshela ku-DNS yangokwezifiso (isibonelo, ukusetha i-Pi-hole ekhaya noma ukusebenzisa isevisi efana ne-Control-D) kungakunikeza ukulawula okwengeziwe kokuphequlula kwakho, ngezindleko zokuthatha izingozi nemithwalo yemfanelo ethile. Kuyafaneleka ukuqonda ukuthi i-DNS yenzani nokuthi yiziphi izinzuzo kanye nokungalungi kwenketho ngayinye.
Iyini i-DNS futhi kungani ibaluleke kangaka?
I-Domain Name System (DNS) "yincwadi yocingo" ye-inthanethiIhumusha amakheli afundeka kubantu (njenge-xataka.com noma i-kaspersky.com) abe amakheli e-IP anezinombolo aqondwa amakhompyutha. Ngaphandle kwalokhu kuhumusha okuzenzakalelayo, ubungeke ukwazi ukuphequlula i-inthanethi ngokuthayipha amagama ezizinda; kuzodingeka ukhumbule izinombolo ezinde zewebhusayithi ngayinye.
Umhlinzeki wakho Wesevisi Ye-inthanethi (i-ISP) uvame ukukunikeza i-router enezinye izindlela. amaseva e-DNS alungiselelwe kusengaphambili alawulwa yi-opharetha uqoboNjalo uma uthayipha ikheli lewebhu, idivayisi yakho ibuza amaseva e-DNS ukuthola ikheli le-IP elifanele. Lokhu kubalulekile hhayi nje kuphela ukuthi iwebhusayithi ilayishe, kodwa futhi kunquma ukuthi ubani ongabona imibuzo yakho nokuthi ubani ongavimba noma aguqule lezo zicelo.
Inqubo yokuxazulula amagama ihilela izinhlobo eziningana zamaseva: a isixazululi esiphindaphindayo esithola umbuzo wakhoAmaseva ezimpande, amaseva esizinda esiphezulu (TLD) (njenge-.com noma i-.net), kanye namaseva esizinda anegunya ekugcineni abuyisela ikheli le-IP elifanele. Ezimweni eziningi, olunye lwalolu lwazi lugcinwa kunqolobane ukuze kusheshiswe imibuzo yesikhathi esizayo.
Uma ufaka isizinda kusiphequluli, uhlelo luqala ngokuzama ukusixazulula kusukela ku- izilondolozi zendawo (ikhompyutha, uhlelo lokusebenza, i-resolver)Uma ingekho, umbuzo uya ku-recursive resolver, bese kuba kumaseva ezimpande, bese kuba kumaseva e-TLD, bese ekugcineni kuba kumaseva anegunya abuyisela ikheli lokugcina le-IP. Konke lokhu kwenzeka ngama-millisecond, kodwa ukugxuma ngakunye kuyindawo yokuhlasela noma indawo yokulawula.
Imininingwane ebalulekile ukuthi, ngokuzenzakalelayo, I-DNS yendabuko ayifaki ukubethelaLokhu kusho ukuthi i-ISP yakho kanye nanoma yimuphi umlamuleli onokufinyelela kuthrafikhi yakho bangabona ukuthi yiziphi izizinda ozivakashelayo, yize bengakwazi ukubona okuqukethwe okuqondile kwamakhasi uma usebenzisa i-HTTPS. Lo mklamo wenza kube lula ukuvimbela, ukulandelela, nokuhlasela uma uhlelo lungavikelekile kahle.
Yini umuntu olawula i-DNS ayaziyo ngawe?
Zonke izicelo ze-DNS ozenzayo zishiya umkhondo. Umnikazi weseva ye-DNS angabona ukuthi yiliphi ikheli le-IP obuza kulo nokuthi yiziphi izizinda ozama ukufinyelela kuzo.Ngaleyo datha elula (i-IP + isizinda + isikhathi) iphrofayili ehlanjululwe kakhulu yemikhuba yakho yokuphequlula ingakhiwa kakade.
Izinsizakalo ezifana ne-Google Public DNS zisho kanjalo obala: Bagcina ikheli lakho le-IP okwesikhashana (isibonelo, amahora angu-24-48) futhi bagcina unomphela eminye imininingwane yokusetshenziswa "engaziwa"Ngalokho, bangaqoqa izibalo, bathuthukise isevisi… futhi, uma kuziwa ezinkampanini ezisekelwe ekukhangiseni, bathuthukise ukuhlukaniswa kwazo ngisho noma bethembisa ukungakuhlanganisi ngqo nawe.
Abahlinzeki be-DNS beqembu lesithathu abagxile kakhulu kubumfihlo, njenge-Cloudflare noma i-Quad9, bazikhangisa ngokuthi Abalifaki unomphela ikheli lakho le-IP, banciphisa ama-log, futhi abathengisi idatha kubakhangisi.Kodwa kufanelekile ukukhumbula lokho ngokobuchwepheshe Banamandla afanayo nawanoma iyiphi enye iseva ye-DNS okubona imibuzo yakho: ukwethembana kuncike enqubweni yabo, ekubonakaleni, kanye nokuhlolwa okuzimele.
Ngaphezu kwalokho, i-DNS iyindawo yokulawula evamile kohulumeni kanye nabaqhubi. Amabhulokhi amaningi ewebhusayithi asetshenziswa kalula... ukwenqaba ukuxazululwa kwezizinda ezithile ku-DNS esemthethweni yezwe noma yenkampani. Ngokushintsha i-DNS yakho, ungavame ukugwema lokhu kuhlolwa okuyisisekelo, yize ezindaweni ezinemingcele kakhulu ezinye izindlela zokuvimba zingahlanganiswa.
Kubalulekile ukukuqonda lokho Ukusebenzisa i-DNS ehlukile akufihli ikheli lakho le-IP noma kuthathe indawo ye-VPNI-DNS yomphakathi yamahhala ayisebenzi njengenethiwekhi yangasese ebonakalayo: iwebhusayithi oyivakashelayo izobona ikheli lakho langempela le-IP, futhi i-ISP yakho izosakwazi ukubona ukuthi yimaphi ama-IP oxhuma kuwo, noma ngabe angayiboni kahle i-domain uma usebenzisa ubuchwepheshe obuthile besimanje. I-DNS iyingqimba yobumfihlo nokuphepha, kodwa akuyona ikhambi eliphelele.
I-ISP DNS, i-VPN DNS, noma i-DNS yangokwezifiso: izinketho ezijwayelekile
Abahlinzeki abaningi be-VPN banikeza ukucushwa okuningana kwe-DNS: Sebenzisa i-DNS yakho, i-resolver ehlanganisiwe, i-Handshake, gcina i-DNS yangaphandle (i-Google, i-Cloudflare, njll.) noma uchaze i-DNS yangokwezifiso, njenge-Pi-hole yasekhayaInketho ngayinye inemiphumela ehlukile.
Uma ushiya izilungiselelo ku-“eyakheLonke ithrafikhi yakho ye-DNS ixazululwa ngamaseva alawulwa yileyo VPN. Lokhu kunenzuzo yokuthi imibuzo ihamba ngaphakathi komhubhe obethelwe, ifihla izicelo ze-DNS ku-ISP yakho futhi inciphise ukuvuza kwe-DNS, kodwa ubeka lonke ithemba lakho kumhlinzeki we-VPN, ongabona ukuthi yiziphi izizinda ozifinyelelayo ngenkathi i-VPN isebenza.
Uma unquma ukusebenzisa i-DNS yangaphandle njenge I-Google (8.8.8.8), i-Cloudflare (1.1.1.1) noma ezinyeUngathola isivinini kanye nokuvikelwa okwengeziwe kuye ngesevisi oyikhethayo. Kodwa-ke, ngaphandle kwe-VPN, imibuzo yakho izothunyelwa ngqo kulabo abaxazulula izinkinga, futhi uzokwabelana ngomlando wesizinda sakho nenkampani enkulu engase ingahambisani nobumfihlo bakho.
Inketho "I-DNS ekhonaUkunika amandla i-"Sebenzisa i-DNS yesistimu" ku-VPN kugcina izilungiselelo zakho ze-DNS ezikhona. Lokhu kulula, kodwa kungaholela ekuvuzeni kwe-DNS uma iklayenti le-VPN lingaphoqeleli ukusetshenziswa kwezixazululi zalo noma libhale ngemfihlo leyo mibuzo. Ngamanye amazwi, ungase ucabange ukuthi konke kuhamba nge-VPN, kodwa izicelo zakho zesizinda zisaya ku-ISP yakho.
I-Los I-DNS yangokwezifiso (Isibonelo, ukukhomba i-Pi-hole noma iseva yakho yamafu) kukunikeza ukulawula okuphezulu: unquma ukuthi yini elogiwe, yini evinjiwe, nokuthi ihlungwa kanjani. Kodwa-ke, uba nesibopho ngokuphepha kwayo, ukutholakala kwayo, kanye nokugcinwa kwayo, futhi uma uyiveza ngokunganaki ku-inthanethi, ingaba yindlela yokuhlasela.
Izinzuzo zokusebenzisa i-DNS yangokwezifiso (i-Pi-hole, i-Control D kanye nezinye)
Setha i-DNS yangokwezifiso, kungaba nge I-Pi-hole kunethiwekhi yakho yendawo, iseva yakho ene-DNSSEC, noma isevisi ephethwe njenge-Control-DInikeza izinzuzo eziningi kakhulu kunokusebenzisa i-DNS ezenzakalelayo ye-ISP noma ezinye ezivamile zomphakathi.
Inzuzo yokuqala enkulu yikhono lokwenza izinsongo zokuvimba emthonjeniI-DNS yesimanje enezinhlu zokuvimba ezibuyekeziwe ingavimbela idivayisi yakho ekuxazululeni izizinda ezihlotshaniswa ne-malware, i-phishing, i-cryptojacking, noma ukukhangisa okunonya. Njengoba igama lesizinda "elibi" lingenakuhunyushwa libe ikheli le-IP, ukuxhumana akukasungulwa.
Le ndlela "yokuvimbela" ibikezela ukuthi i-antivirus yendabuko ingenzani, okuvame ukusabela. uma usongo seluqalile kakade ohlelweni lwakhoNge-DNS yokuhlunga, awusoze wathintana nezizinda eziyingozi ezaziwayo, okunciphisa kakhulu ingozi yamakhompyutha asekhaya, futhi ngaphezu kwakho konke, kumanethiwekhi ebhizinisi anabasebenzisi abaningi.
Okwesibili, ukusebenzisa i-DNS yangokwezifiso elungiselelwe kahle kungathuthukisa ukusebenza. vimba izikhangiso, ama-tracker, kanye nezinsiza ezingadingekile (futhi, isibonelo, susa izikhangiso ku-Smart TV yakhoAmakhasi alayisha ngokushesha, inani lezicelo zangaphandle liyancishiswa, futhi ukusetshenziswa komkhawulokudonsa kwehla. Ekuxhumaneni okuncane noma kumanethiwekhi anamadivayisi amaningi axhunyiwe, umehluko ungabonakala kakhulu.
Enye inzuzo ebalulekile ubumfihlo obuthuthukisiwe (bheka eyethu amathiphu abalulekile obumfihlo ku-inthanethiIzixazululo ezifana ne-Pi-hole noma izinsizakalo ezigxile kubumfihlo zingakwazi vimbela abathungathi bezinto zokulandelela nezinkampani zokukhangisa ekuqoqeni umsebenzi wakho wokuphequlula ngokusebenzisa izikripthi kanye nezizinda zokulandelela. Nakuba kungeyona ikhambi lazo zonke izinto, kunciphisa kakhulu "ukwaziswa" okuqhubekayo kumanethiwekhi amaningi okukhangisa njengoba uphequlula i-inthanethi.
Okokugcina, amaseva amaningi e-DNS enziwe ngokwezifiso afana ne-Control D anikeza ukusetha okulula, okunezifanekiso zokuhlunga (isb., abantu abadala abavinjelwe, imidlalo, amanethiwekhi omphakathi, njll.) kanye nezinketho zokuhlanganisa isevisi ekusetshenzisweni okukhulu kusetshenziswa i-RMM noma i-MDM emabhizinisini. Lokhu kwenza kube lula ukuletha lolo ngqimba lokuphepha nokulawula kumadivayisi amaningi noma amakhulu.
Izingozi kanye nokungalungi kwe-DNS eyenziwe ngokwezifiso
Olunye uhlangothi lwemali ukuthi i-DNS yangokwezifiso nayo iyethula amaphuzu amasha okwehluleka kanye nemithwalo yemfaneloOkokuqala kusobala: uma iseva yakho ye-DNS iwa, igcwele ngokweqile, noma uyilungisa ngendlela engafanele, ungashiya yonke inethiwekhi yakho ngaphandle kokufinyelela i-inthanethi okusobala, ngoba amawebhusayithi azoyeka ukuxazulula yize uxhumano lwakho lusebenza.
Uma uthemba iseva ye-DNS engaziwa noma engabazayoIngozi iyanda. Iseva ye-DNS enonya noma esengozini ingalawula izicelo zakho ukuze ikuqondise kumawebhusayithi angamanga (ubugebengu bokweba imininingwane ebucayi), ukufaka i-malware, noma ukubamba ulwazi olubucayi. Ubuthi be-DNS cache noma ukuntshontshwa kweseva ye-DNS kuyizindlela ezivame ukusetshenziswa abahlaseli ukuqondisa kabusha ithrafikhi kumasayithi abawalawulayo.
Ngaphezu kwalokho, i-DNS yangokwezifiso ingase ingabi nayo izinyathelo ezifanayo zokuvikela ngokumelene ne-DDoS noma ukuhlaselwa kwengqalasizinda kunabahlinzeki abakhulu. Ukuhlaselwa kokwenqatshwa kwensizakalo ngokumelene noxazululi wakho kungasusa isinqumo segama kubo bonke abasebenzisi abathembele kuso. Ngakho-ke, uma usetha i-DNS yakho yebhizinisi noma isevisi ebalulekile, kungcono ukuyisebenzisa ngokungafuneki futhi kunethiwekhi eqinile.
Elinye iphuzu elibalulekile ukuthi, uma ungazisebenzisi izinyathelo ezifana ne-DNSSEC noma ukucushwa okuvikelekile, iseva yakho ingase ibe sengozini. ukuhlaselwa ubuthi be-cacheKulezi zimo, isigebengu sikhohlisa umxazululi ukuba akholelwe ukuthi igama lesizinda elisemthethweni likhomba ekhelini le-IP leseva ekhohlisayo. Kusukela ngaleso sikhathi kuqhubeke, bonke abasebenzisi ababuza ngesizinda bazothola ikheli elishintshiwe kuze kube yilapho i-cache isuliwe.
Okokugcina, ukuhlunga kwe-DNS okunamandla kakhulu kwezikhangiso, ama-tracker, noma izigaba zokuqukethwe kungabangela imiphumela emihle engamanga kanye nokwephula imisebenzi esemthethweniAmawebhusayithi angalayishi kahle, amasevisi angasebenzi, noma izibuyekezo zokuphepha ezingafiki ngoba izizinda zawo zivinjelwe. Ukulungisa kahle uhlu nokubuyekeza amalogi kubalulekile.
Izinsongo ezithile ezihlobene ne-DNS nokuthi ungazinciphisa kanjani
Ngenxa yokuthi ingqalasizinda ye-DNS ibaluleke kakhulu, iyisisulu sokuhlaselwa okuhlukahlukene. Lokhu yikona okuvame kakhulu:
- Ukuhlaselwa kwe-DDoS (Distributed Denial of Service) ngokumelene namaseva e-DNS ewebhusayithi noma omhlinzeki. Ngokuhlasela iseva ngethrafikhi enonya, bagcwalisa izinsiza zayo futhi izicelo ezisemthethweni azisacutshungulwa, okwenza amawebhusayithi "anyamalale" ku-inthanethi isikhathi sokuhlasela.
- UkuthayiphaLokhu kuhilela ukubhalisa ama-domain acishe afana nalawo emikhiqizo eyaziwayo, kusizakale ngamaphutha abasebenzisi abawabhalayo. I-DNS engahlungiwe izokuqondisa kula ma-domain fake uma uwapela kabi, futhi kusukela lapho, ukuhlaselwa kwe-phishing noma ukwebiwa kweziqinisekiso kungaqaliswa ngendlela ekholisayo kakhulu.
- Ukwebiwa kokubhaliswa kwesizinda. Uma umhlaseli efaka engcupheni i-akhawunti yakho yombhalisi wesizinda, angashintsha amarekhodi e-DNS futhi awakhombe kumaseva awalawulayo, okungenzeka ashintshe ngisho nobunikazi besizinda. Ukuze unciphise le ngozi, kubalulekile ukusebenzisa amaphasiwedi aqinile, ukuqinisekiswa kwezinto ezimbili, kanye nababhalisi abanezinyathelo zokuphepha eziqinile.
- I-DNS cache poisoning Bahamba ibanga elide. Umhlaseli ufaka idatha engamanga yezizinda ezithile ku-cache yeseva ye-DNS, ukuze imibuzo yesikhathi esizayo evela kubasebenzisi abangaqaphile ixazululwe kusetshenziswa ikheli le-IP eliyinkohliso. Ngenxa yokuthi isiphequluli sithembele empendulweni ye-DNS, umsebenzisi angagcina ethole ikhophi engamanga yebhange lakhe noma isayithi eligcwele i-malware ngokungazi.
Ukuze kuncishiswe lezi zingozi, Kunconywa ukusebenzisa izandiso zokuphepha ze-DNSSEC (DNS)Lezi zinhlelo zengeza amasignesha e-cryptographic ezimpendulweni ze-DNS ukuqinisekisa ukuthi idatha ayiphazanyisiwe. Ukwengeza lokhu ngokuxhumana okubethelwe (i-DoT, i-DoH, i-VPN) kanye nezinqubomgomo zokufinyelela iseva ye-DNS eziqinile kunciphisa kakhulu amathuba okubanjwa noma ukudliswa ubuthi.
Amaseva e-DNS avamile kakhulu omphakathi nawangasese
Ngaphezu kwamaseva e-DNS e-ISP noma e-VPN, unekhathalogi ebanzi ye- Amaseva e-DNS amahhala navulekile ongazilungisa mathupha ku-router yakho, i-PC, noma idivayisi yeselula. Ezinye zezaziwa kakhulu yilezi:
- I-OpenDNS (208.67.222.222 kanye no-208.67.220.220). Enye yezinsizakalo zomphakathi ezindala kakhulu, manje ephethwe yiCisco. Inikeza izinhlobo ezikhokhelwayo kanye nenguqulo yamahhala enesivinini esihle, ukutholakala okuphezulu, ukuvimba okuzenzakalelayo kwamawebhusayithi e-phishing, kanye nezinketho zokulawula kwabazali.
- I-Cloudflare (1.1.1.1 kanye no-1.0.0.1). Igxile ekusebenzeni nasekugcinweni kobumfihlo. Ithembisa ukungasebenzisi idatha yakho ekukhangiseni futhi ingabhali ikheli lakho le-IP kudiski. Ngokuvamile kuyashesha futhi kulula ukukusetha, ngaphandle kokwengezwa okuningi kakhulu.
- I-Google Public DNS (8.8.8.8 kanye no-8.8.4.4). Yakhelwe abasebenzisi abangochwepheshe kangako, ngamadokhumenti amahle. Ukuze kube lula ukuyisebenzisa nokusebenza, igcina amalogi okuphequlula angaziwa kanye nekheli lakho le-IP isikhathi esilinganiselwe.
- I-Comodo Safe DNS (8.26.56.26 kanye no-8.20.247.20). Ihlose ukuvimba amasayithi ayingozi, i-spyware kanye nama-domain ngokukhangisa okweqile, kuncike kokuhlangenwe nakho kukaComodo emkhakheni wezokuphepha.
- Quad9 (9.9.9.9 kanye no-149.112.112.112). Kusha kakhulu, kodwa kugxile ekuvimbeleni izizinda ezinonya kusetshenziswa ubuhlakani bokusongela obuvela emithonjeni eminingi. Kunikeza ibhalansi enhle phakathi kokuphepha nokusebenza.
- I-Yandex.DNS (77.88.8.8 kanye no-77.88.8.1). Enye indlela yaseRussia, enamaphrofayili ayisisekelo kanye nezinhlobo "eziphephile" (77.88.8.88 kanye no-77.88.8.2) zokuvimba amawebhusayithi ayingozi kanye "nomndeni" (77.88.8.7 kanye no-77.88.8.3) zokuhlunga okuqukethwe kwabantu abadala.
- Uhlu Lweseva Ye-DNS YomphakathiIsizindalwazi esikhulu lapho ungasesha khona amaseva e-DNS mahhala emhlabeni wonke, uhlunga ngezwe.
Uma ukhetha phakathi kokushiya i-DNS ye-VPN yakho, ukusebenzisa amaseva omphakathi, noma ukusetha i-Pi-hole yakho, into ebalulekile ukunquma ubani ofuna ukumethemba ukuze abone imibuzo yakho yesizinda nokuthi yiliphi izinga lokulawula olidingayo mayelana nokuhlunga, ukusebenza, kanye nobumfihloNgokuqonda izinzuzo nezingozi zenketho ngayinye, kulula kakhulu ukulungisa izilungiselelo ukuze zihambisane nezinto eziza kuqala kuwe ngaphandle kwezinkinga zokuphepha noma zokuzulazula ezingalindelekile.
