Indlela yokudala indawo evikelekile nge-DNS yangokwezifiso kufoni yakho ephathekayo

  • Ukulungiselela i-DNS eyenziwe ngokwezifiso nebethelwe (i-DoH/DoT) kuthuthukisa ubumfihlo, ukuphepha, kanye nesivinini uma kuqhathaniswa ne-DNS ejwayelekile yomqhubi.
  • I-Android inikeza i-DNS yangasese ezingeni lesistimu, kuyilapho i-iOS, amakhompyutha, nama-router evumela ukusetha izixazululi ngenethiwekhi noma isikhombimsebenzisi.
  • Amadivayisi axhunywe ku-hotspot yeselula awahlali ethola i-DNS yayo njengefa, ngakho-ke kuyalulekwa ukulungisa i-DNS kuklayenti ngalinye noma ku-router.
  • Ukuhlanganisa i-DNS evikelekile nezixazululo ezifana ne-VPN, i-Pi-hole, noma i-AdGuard Home kuvumela ukulawulwa okucacile kokuhlunga nokubhalisa imisebenzi eku-inthanethi.

Dala indawo evikelekile nge-DNS yangokwezifiso

Uma usebenzisa ifoni yakho ephathekayo kukho konke, usebenzisa idatha eyabiwe kwi-laptop yakho, futhi uxhuma kunoma iyiphi inethiwekhi ye-WiFi ongayithola, Lungiselela indawo evikelekile nge-DNS yangokwezifiso Kungenye yezinto ezibonakala ziwubuwula, kodwa kuphawula isivinini sobumfihlo, ukuphepha ngisho nokuphequlula ngaphambi nangemuva.

Izindaba ezinhle ukuthi awudingi ukuba ngumphathi wesistimu: uma unemibono embalwa ecacile mayelana nokuthi iyini i-DNS, yiziphi izingozi ezihilelekile endleleni yendabuko, nokuthi izinketho zisebenza kanjani, uzokwazi ukukwenza. I-DNS yangasese, i-DoH, i-DoT noma izixazululo ezifana ne-AdGuard Home, i-Pi-hole kanye ne-VPNUngasetha indawo ephephile kahle yefoni yakho ephathekayo kanye namadivayisi axhunywe endaweni yayo yokufinyelela.

Iyini i-DNS futhi kungani kufanele ukhathazeke?

I-DNS, efingqiwe ngokuthi i-Domain Name System, ngokuyisisekelo iwuhlelo lwe-DNS. uhlu loxhumana nabo be-inthanethiUthayipha igama lesizinda elifanele njenge-"google.com" noma "xatakandroid.com," bese ngaphansi, ifoni yakho idinga ikheli le-IP lezinombolo ukuze ithole iseva efanele. Iseva ye-DNS inesibopho sokuhumusha lelo gama ekhelini layo le-IP elihambisanayo ukuze uxhumano lukwazi ukusungulwa.

Cishe kuzo zonke izinethiwekhi, ezilungisiwe neziphathwayo, ngokuvamile umqhubi wakho, i-router, noma i-Wi-Fi hotspot yomphakathi enquma ukuthi iyiphi iseva ye-DNS okufanele isetshenziswe. Lokhu kusho ukuthi, ngokuzenzakalelayo, Idivayisi yakho ibuza nge-DNS enikezwe ngumhlinzeki wakho. ngaphandle kokuthi uthinte noma yini. Kuyasebenza, yebo, kodwa kunezinkinga eziningana ezibalulekile maqondana nobumfihlo nokulawula.

Inkinga eyisisekelo ukuthi le mibuzo, kumodeli yakudala, Bahamba ngombhalo ocacile futhi ngaphandle kokuqinisekiswa.Njalo uma ifoni yakho ephathekayo ibuza ukuthi "iliphi ikheli le-IP elinalo leli domain?", leso sicelo sibonakala kunoma ubani olawula inethiwekhi: i-ISP yakho, umnikazi we-WiFi yebha, umhlaseli kunethiwekhi efanayo, njll.

Ngaphezu kwalokho, i-DNS isibe yindawo ebalulekile yokuvimba noma yokuhlunga amawebhusayithi. Abaqhubi, amanethiwekhi ezinkampani, noma ohulumeni banganquma ukuthi izizinda ezithile "ziphele" kubasebenzisi. ngokungaxazululi amagama abo noma ukubuyisa ama-IP aguquliweKusukela ekugcineni kwakho, okubonayo nje ukuthi iwebhusayithi ayisebenzi, sengathi iseva iphukile.

Ngenxa yazo zonke lezi zizathu, ukulawula ukuthi iyiphi iseva ye-DNS oyisebenzisayo, nokuthi uyisebenzisa kanjani, Ivula umnyango wokusebenza okuthuthukisiwe, ubumfihlo obuthuthukisiwe, ukudlula amabhlogo athile, kanye nokuhlunga izinsongo.Futhi, njengebhonasi, ikuvumela ukuthi uguqule ifoni yakho ephathekayo ibe yindawo ephephile kakhulu kunaleyo evela kuzilungiselelo zasefekthri.

Izinkinga ze-DNS yendabuko kanye nezingozi zangempela

Izingozi zokusebenzisa i-DNS engabethelwe

Uma sikhuluma nge-DNS yakudala, sikhuluma ngohlelo lapho Imibuzo ayibethelwe futhi ayisayinwanga.Lokhu kuvumela umlamuleli ukuthi abone ukuthi yiziphi izizinda ozivakashelayo, ashintshe izimpendulo, noma azivimbele ngaphandle kokuthi idivayisi yakho iqaphele ngokucacile.

Ngiyaqiniseka ukuthi lokhu kuye kwenzeka kuwe nge-WiFi yamahhala: uzama ukuvula noma iyiphi iwebhusayithi, futhi esikhundleni sokuya ngqo lapho uya khona, Ikhasi lokungena noma lokukhangisa livela kuqala.Lokhu kwenziwa ngokuqondisa kabusha izicelo zakho nge-DNS, ukubuyisela ikheli le-IP elihlukile kunalelo olicelile bese likuthumela ku-portal efihliwe.

Indlela efanayo, ezandleni zomuntu onenhloso embi, ivumela ukudalwa kwezimo eziyingozi kakhulu. Umhlaseli olawula inethiwekhi angakwazi, isibonelo, ukukuthumela ekhasini le-phishing elifana nokungena ngemvume kwebhange lakho. noma kuwebhusayithi esabalalisa i-malware, ngokushintsha nje i-IP yempendulo kumbuzo we-DNS.

Ukulawulwa kwe-DNS kusetshenziselwa futhi ukuphoqelela izinqubomgomo zokuhlola noma zokuhlunga. Ezindaweni zezinkampani, kumanethiwekhi ezemfundo, noma ezingeni likazwelonke, ukuxazululwa kwezizinda ezithile kuyenqatshwa ukuze Kungase kubonakale sengathi iwebhusayithi ayisebenzi noma ayikho.Azikho imilayezo ecacile yokuvimba: umsebenzisi ubona amaphutha okuxazulula kuphela.

Ngesikhathi esifanayo, umhlinzeki wakho we-inthanethi angasebenzisa umlando wakho wokuxazulula isizinda ukuze ukudala amaphrofayili anemininingwane eminingi yemikhuba yakho yokupheqululaLolu lwazi lusetshenziselwa ukwahlukanisa izikhangiso, imikhiqizo eyenzelwe wena, noma, esimweni esibi kakhulu, ukumaketha idatha ehlanganisiwe.

Yiziphi izinzuzo zokushintsha amaseva e-DNS nokukhetha abahlinzeki abahle?

Ukushintsha izilungiselelo ze-DNS kufoni yakho ephathekayo, i-PC, noma i-router akukona nje ukuma kobuchwepheshe: Kungathuthukisa isivinini, ubumfihlo, ukuphepha, kanye nokufinyelela kokuqukethwe.Konke ngesikhathi esisodwa. Ngeke uphindaphinde kabili i-bandwidth yakho, kodwa unganciphisa kakhulu ukubambezeleka futhi uthuthukise ukulawula.

Ngokuphathelene nokusebenza, izixazululo eziningi zomphakathi zinenethiwekhi yamaseva esatshalaliswe emhlabeni wonke enezinqolobane ezilungiselelwe kahle kakhulu. Lokhu kusho ukuthi uma ikhompyutha yakho ibuza ikheli le-IP lewebhusayithi, impendulo ifika ngokushesha futhi ikhasi liqala ukulayisha ngokusheshaIsixazululo ngasinye sithatha ama-millisecond kuphela, kodwa senza umehluko phakathi nosuku.

Ngokuphathelene nobumfihlo, abahlinzeki abanjengo-Cloudflare noma i-Quad9 bamemezela izinqubomgomo eziqinile kakhulu kunabasebenzisi abaningi. Isibonelo, I-Cloudflare ithi ihlanza izingodo ngokushesha futhi ayithengisi idatha yokusetshenziswaNgakolunye uhlangothi, i-Quad9 izigqaja ngokuqoqa ulwazi oluncane nokugxila ekuphepheni.

Ngokuphathelene nokuphepha, ezinye izinsizakalo zifaka uhlu oluvinjelwe lwezizinda ezinonya. Izibonelo zifaka amaseva afana ne-Quad9, amaphrofayela athile e-OpenDNS, kanye nezixazululo ezifana ne-NextDNS. Bavimba ukufinyelela kumawebhusayithi aqukethe i-malware, i-phishing, ama-botnet, noma ukukhangisa okuphazamisayo kakhulu.Uma uzama ukufinyelela (ngisho nangengozi) ikhasi eliyingozi, i-DNS ngokwayo iyangenelela futhi ikuvimbele ekulayisheni okuqukethwe okunonya.

Ngokuphathelene nokuvimba, izihlungi eziningi ze-opharetha kanye nezikahulumeni zisetshenziswa ngqo ezingeni le-DNS. Uma ushintshela kuseva ephethwe yiqembu lesithathu elingekho ngaphansi kolawulo lwakho, Ungazigwema ezinye zalezo zithibeloAkuyona into engenaphutha, kodwa kuvame ukwanele "ukuvusa" amawebhusayithi ayebonakala engafinyeleleki.

Uma ukhetha umhlinzeki we-inthanethi, akekho onqobayo oyedwa. Kuya ngendawo okuyo, izinto eziza kuqala kuwe (isivinini, ubumfihlo, ukuphepha), kanye nezindlela ozimisele ukuzenza. Noma kunjalo, kunezinye izindlela okufanele uziqaphele: I-Google Public DNS, i-Cloudflare, i-Quad9, i-OpenDNS kanye ne-NextDNS Ziphakathi kwezindlela ezisetshenziswa kakhulu nezinconywayo.

Amaseva e-DNS anconyiwe: izibonelo nolwazi oluyisihluthulelo

I-Google Public DNS, umakadebona osetshenziswa kakhulu, inikeza amakheli e-IPv4 afana nalawa: I-8.8.8.8 ne-8.8.4.4namakheli e-IPv6 afana no-2001:4860:4860::8888 kanye no-2001:4860:4860::8844. Imahhala, izinzile, iyashesha, futhi isekela ukubethela kusetshenziswa i-DNS-over-TLS (DoT) kanye ne-DNS-over-HTTPS (DoH) kusetshenziswa i-host dns.googleokuyigama elisetshenziswa ngqo uma uchaza i-DNS yangasese ku-Android.

I-Cloudflare ingenye isidlali esikhulu esidumile 1.1.1.1Amakheli ayo e-IPv4 angu-1.1.1.1 kanye no-1.0.0.1; kuma-DNS ayimfihlo ku-Android, kusetshenziswa amagama e-hostname afana no-[type missing]. 1dot1dot1dot1.cloudflare-dns.com noma izinketho ezifanayo njenge-one.one.one.one.one.bagcizelela kakhulu ubumfihlo futhi bathi Basusa amarekhodi ngesikhathi esifushane kakhulu.ngaphezu kokubeka isivinini esiphezulu njenge-DNSPerf ezindaweni eziningi.

Uma ubeka ukuphepha phambili kunanoma yini enye, i-Quad9 ifanelwe ukunakwa okukhulu. Inkanyezi yayo i-IPv4 iyi- 9.9.9.9 Futhi, nge-DNS yangasese ku-Android, igama elijwayelekile yileli dns.quad9.netIgxile ekuvimbeleni izizinda ze-malware, i-phishing, kanye nezinsongo ezifanayo, ukuze Isebenza njengesihlungi sokuphepha esivela kusisombululo segama uqobo..

I-OpenDNS (ephethwe yi-Cisco) kanye ne-NextDNS ziwela esigabeni sezinsizakalo ezilungisekayo kakhulu. Zikuvumela ukuthi udale amaphrofayili anezilawuli zabazali, izihlungi zokuqukethwe kwabantu abadala, ukuvimba izikhangiso, kanye namadeshibhodi anezibalo ezinemininingwane. Zilungele noma ubani ofuna. chaza izinqubomgomo ezilungisiwe kahle zezingane, izindawo zomsebenzi, noma amanethiwekhi asekhaya ayinkimbinkimbi.

Ukuze ukhethe engcono kakhulu kuwe, kungumqondo omuhle ukuzama izikhathi eziningana bese ulinganisa izikhathi zokuphendula usendaweni okuyo. Amathuluzi afana ne-DNSPerf angasiza. Baqhathanisa ukubambezeleka kanye nokutholakala kwezinsizakalo eziningi ze-DNS ezivela ezindaweni ezingaphezu kuka-200okukusiza ukuthi ubone ukuthi yimuphi umhlinzeki osebenza kahle kakhulu endaweni yakini.

I-DNS Ephephile: I-DoH, i-DoT, i-DNSCrypt kanye nomqondo we-DNS yangasese

Dala indawo evikelekile nge-DNS yangokwezifiso

Uma sikhuluma "nge-DNS evikelekile," empeleni sibhekisela ku- indlela imibuzo ehamba ngayo phakathi kwedivayisi yakho nesevaEsikhundleni sokuthumela idatha ngombhalo ocacile, amaphrothokholi afana ne-DNS-over-HTTPS (DoH), i-DNS-over-TLS (DoT), noma i-DNSCrypt avumela ukuthi leyo thrafikhi ibethelwe futhi iqinisekiswe.

I-DoH ihlanganisa izicelo ze-DNS ngaphakathi kokuxhumana okuvamile kwe-HTTPS, ngokuvamile isebenzisa i-port 443. Lokhu kwenza kube lula kumuntu ohlola noma umhlinzeki ozama ukuzihlunga. Kungaba nzima ukuhlukanisa ithrafikhi ye-DNS ebethelwe kokunye ukuphequlula iwebhu.Ngakho-ke, ukuyivimba ngaphandle kokuphazamisa ingxenye ye-inthanethi kunzima kakhulu.

I-DoT, yona, ibhala ngemfihlo imibuzo isebenzisa iphrothokholi ye-TLS ngqo ye-DNS. Lena yindlela esetshenziswa yi-Android ngaphansi kwelebula lika I-DNS yangasese eqala nge-Android 9Yingakho kubhekwa njengendlela eqondile kakhulu uma ufuna ukuvikela zonke izinhlelo zokusebenza zesistimu ngaphandle kokuncika kusiphequluli ngasinye.

I-DNSCrypt iyisisombululo esidala esiphinde sengeze ukubethela kanye nokuqinisekiswa, yize eminyakeni yamuva nje ibilokhu ifihlwe yi-DoH kanye ne-DoT. Noma kunjalo, isasebenza ezindaweni ezithuthukile lapho abasebenzisi Basungula izixazululo zabo noma amanethiwekhi asekhaya anezinyathelo zokuphepha ezengeziwe.

Ku-Android 9 nakamuva, inketho ebizwa ngokuthi “i-Private DNS” kufanele empeleni ibhalwe ngokuthi “i-Secure DNS.” Ukuyivumela kuphoqa uhlelo ukuthi lusebenzise iseva ye-DNS evikelekile. Yonke imibuzo yesistimu ithunyelwa ngokubethela kuseva esekela i-DoTAwuphathi iseva yakho, kodwa ukhetha iseva yomuntu wesithathu oxhuma kuyo ngokuphephile.

I-DNS evikelekile kanye ne-VPN: abalingani, hhayi abathathe indawo

Kuvamile kakhulu ukudida imiqondo: ukuvumela i-DNS ebethelwe kuyisinyathelo esikhulu sobumfihlo, kodwa Akufani nokusebenzisa i-VPNNge-DNS evikelekile uvikela izicelo zamagama kuphela; yonke ithrafikhi (amakhasi, okulandwayo, amavidiyo, imidlalo eku-inthanethi...) izosancika ekutheni iwebhusayithi isebenzisa i-HTTPS kanye nenethiwekhi odlula kuyo.

Ngakolunye uhlangothi, i-VPN yakha umhubhe obethelwe phakathi kwedivayisi yakho neseva ekude. Konke (noma cishe konke, uma kuhlelwe kahle) okushiya idivayisi yakho kudluliswa kuyo. Ihamba ivalwe futhi ibethelwe kuseva ye-VPN.Futhi amawebhusayithi owavakashelayo abona ikheli le-IP laleyo seva esikhundleni sekheli lakho langempela.

Abahlinzeki abaningi be-VPN bezentengiselwano bafaka i-DNS yabo evikelwe, futhi uma bexhuma, Zivimbela ukuvuza kumaseva e-DNS enethiwekhi yeselula noma ye-WiFi.Ezinye zikuvumela ukuthi ukhethe: i-DNS yakho, i-DNS yomuntu wesithathu (i-Cloudflare, i-Google, i-Quad9), noma ngisho neseva yasekhaya oyisebenzisile. Ungathola izincomo ku- abahlinzeki be-VPN bezentengiselwano ukuze ubone izinketho ezinokwethenjelwa.

Inhlanganisela ekahle, uma uthatha ubumfihlo bakho ngokungathi sína, ukuba i-DNS evikelekile elungiselelwe ezingeni lesistimu futhi usebenzise i-VPN uma uxhuma kumanethiwekhi omphakathi, uhamba, noma udinga ukudlula imikhawulo yendawo. Ukuze ufunde ukuthi kanjani Sebenzisa i-VPN ku-Android futhi ukuvimba ithrafikhi engaphephile, lowo mhlahlandlela uwusizo kakhulu. Kodwa-ke, qiniseka ukuthi uhlola umbhalo omncane wohlelo lwakho lokusebenza lwe-VPN, ngoba abanye abayinaki i-DNS yangasese ye-Android kanye Baphoqa abaxazululi babo ngokuzenzakalelayo..

Kwabaqalayo, ukusetha i-DNS ebethelwe kakade kumelela ushintsho olukhulu kusukela esimweni esivamile. Bese, uma ufuna ukwandisa izinga lokuvikelwa, Ukwengeza i-VPN phezulu kuvikela kakhulu ithrafikhi yakho.Uma ukhetha izinketho zamahhala, ungabheka ama-VPN amahle kakhulu wamahhala njengesiqalo.

Ungashintsha kanjani i-DNS kufoni yakho ye-Android

Ku-Android, indlela yokwenza ngezifiso i-DNS incike enguqulweni kanye nendlela umenzi ahlele ngayo amamenyu. Kusukela ku-Android 9 (Pie) kuya phambili, kukhona inketho yokwenza kanjalo I-DNS yangasese esebenza ohlelweni lonke, kokubili i-WiFi kanye nedatha yeselulaEzinguqulweni zangaphambilini ubungayilungisa kuphela inethiwekhi ngenethiwekhi.

Amagama ezingxenye ayahlukahluka: lokho okubizwa ngokuthi "Inethiwekhi ne-inthanethi" ku-Pixel kungase kuvele ngokuthi "Ukuxhumana" noma "Izilungiselelo Zokuxhumana" ku-Samsung Galaxy. Kodwa i-logic iyafana: Ungena kuzilungiselelo zenethiwekhi, ubheke isigaba se-DNS yangasese, bese uchaza umhlinzeki.futhi kungenzeka kumamodeli amaningana Dala amaphrofayili azenzakalelayo ngokusekelwe kunethiwekhi ye-WiFi ukwenza lula inqubo.

Kumafoni amaningi akamuva e-Samsung, indlela i-Izilungiselelo > Ukuxhumana > Izilungiselelo ezengeziwe zokuxhumeka > I-DNS Eyimfihlo. Kwamanye amadivayisi e-Android, ukulandelana kuvame ukuba yi-Izilungiselelo > Inethiwekhi ne-inthanethi (noma okufanayo) > Okuthuthukisiwe > I-DNS Eyimfihlo. Uma usufikile lapho, uzobona izinketho ezifana nokuthi "Okuzenzakalelayo," "Kuvaliwe," kanye nokuthi "Igama lomphathi we-DNS eyimfihlo."

Uma ushiya imodi isethwe ku-“Okuzenzakalelayo”, uhlelo luzozama ukusebenzisa i-DNS ebethelwe ngeseva enikezwe yinethiwekhi, kodwa uma ingatholakali izobuyela buthule ku-DNS yendabukoUkuqinisekisa ukuthi uhlala usebenzisa umhlinzeki othize, kufanele ukhethe okuthi “Igama Lomphathi…” bese ufaka isizinda esihambisanayo sesevisi oyithandayo.

Kukhona imininingwane ebalulekile: I-Android ayiwamukeli amakheli e-IP ezinombolo ensimini ye-DNS yangaseseUngalokothi usebenzise u-1.1.1.1 noma u-8.8.8.8; sebenzisa njalo igama lomethuleli elinikezwe umhlinzeki wakho, njenge-dns.google, one.one.one.one, noma i-1dot1dot1dot1.cloudflare-dns.com.

Lungiselela i-DNS yangasese ku-Android 9 kanye nezinguqulo zakamuva

Uma ifoni yakho isebenzisa i-Android 9 noma ngaphezulu, ungasetha umhlinzeki we-DNS oyedwa, ophephile wesistimu yonke. Lesi silungiselelo Lokhu kusebenza kokubili kumanethiwekhi e-WiFi kanye naweselula futhi kuthinta nendawo yokuxhuma oyenzayo., yize kunezingqinamba esizozibona kamuva.

Izinyathelo ezijwayelekile zifana kakhulu kuzo zonke izinhlobo: iya kuzilungiselelo > Inethiwekhi ne-inthanethi (noma Ukuxhumana) > I-DNS Eyimfihlo, khetha inketho yokufaka igama lomethuleli bese uthayipha, isibonelo, i-dns.google uma ufuna ukusebenzisa i-Google Public DNS ne-DoT, noma one.one.one.one yesevisi ye-CloudflareUma ulondoloza, iselula ihlola uxhumano futhi, uma konke kulungile, ivula i-DNS ephephile.

Uma uthayipha isizinda ngendlela engafanele noma iseva iyeka ukuphendula, uzobona ukuthi Akukho webhusayithi elayishwayo noma ngabe unesembozo esihle.Lolu uphawu olujwayelekile lokwehluleka kokulungiswa kwegama. Isixazululo ukushintshela okwesikhashana ku-"Automatic" noma "Valiwe", uqalise kabusha uxhumano, bese uhlola idatha efakiwe.

Ku-Android 10 nakamuva, uhlelo luphatha kangcono kakhulu ukusebenzisana phakathi kwe-DNS yangasese nezinhlelo zokusebenza ezifinyeleleka kunethiwekhi (ama-VPN, ama-proxies, njll.). Noma kunjalo, kuyalulekwa ukuqinisekisa ukuthi iyiphi iseva oyisebenzisayo ngempela ngokuhlolwa okuku-inthanethi njenge-"My DNS" noma okufanayo, ikakhulukazi uma uhlanganisa... I-VPN, i-DNS yangasese, kanye nezinhlelo zokusebenza zokuhlunga.

Shintsha i-DNS ku-Android 8 nangaphambilini, inethiwekhi ngenethiwekhi

Uma ifoni yakho isasebenzisa i-Android 8 noma inguqulo endala, ngeke ube nenketho ye-DNS yangasese yomhlaba wonke. Kulezi zimo, okuwukuphela kwendlela ehlukile ukuthi shintsha izilungiselelo ze-DNS ngesandla kunethiwekhi ngayinye ye-WiFi oxhuma kuyo.ukuphinda inqubo yasekhaya, emsebenzini, njll.

Inqubo evamile iqala ngokuxhuma kwi-Wi-Fi bese iya ku-Izilungiselelo > I-Wi-Fi noma ku-Izilungiselelo > Inethiwekhi ne-inthanethi > I-Wi-Fi. Ohlwini lwamanethiwekhi, thepha bese ubamba leyo oyisebenzisayo bese ukhetha okuthi "Shintsha inethiwekhi" noma "Izinketho Ezithuthukisiwe," lapho izilungiselelo ze-IP ne-DNS zivame ukutholakala khona.

Ngokuvamile uzobona inkambu ethi "Ukucushwa kwe-IP" esethwe ku-"DHCP" ngokuzenzakalelayo. Ukuyishintsha ibe yi-"Static" kuvula ikheli le-IP, isango, futhi, okubaluleke kakhulu ngezinjongo zethu, I-DNS 1 ne-DNS 2Lapho ungafaka amaseva ofuna ukuwasebenzisa kuleyo nethiwekhi ethile.

Kulawo masimu ungabeka, isibonelo, 8.8.8.8 kanye no-8.8.4.4 uma ukhetha i-Google, noma u-1.1.1.1 kanye no-1.0.0.1 uma unamathela ku-Cloudflare. Londoloza, ifoni yakho iyaxhuma kabusha, futhi kusukela ngaleso sikhathi kuqhubeke, noma yimiphi imibuzo oyenzayo kuleyo WiFi izosebenzisa amaseva e-DNS owachazile.

Uma nganoma yisiphi isikhathi inethiwekhi iqala ukuziphatha ngendlela exakile noma ufuna ukubuyela kuzilungiselelo zokuqala, vele ubuyele kuleso sikrini bese ushintsha ikheli le-IP libe “i-DHCP”. Lokho kufanele kukwenze. I-DNS enikezwa yi-router noma indawo yokufinyelela ibuyiselwa ngokuzenzakalelayo..

Guqula iselula yakho ibe yindawo evikelekile nge-DNS yangokwezifiso

Ake sifinyelele emnyombweni wendaba: uma usebenzisa i-tethering noma indawo yokufinyelela ye-Wi-Fi, iqala ukusebenza njenge-router encane. Inesibopho sokusabalalisa amakheli e-IP ayimfihlo kumadivayisi axhunyiwe (i-laptop, ithebhulethi, ikhonsoli yomdlalo, enye ifoni ephathekayo) kanye nokuwafundisa. yimaphi amaseva e-DNS okufanele bawasebenzise nge-DHCP. Uma udinga isiqondiso ku- Yabelana nge-inthanethi kusuka kwi-PC yakho noma dala indawo yeselulaLeso sifundo sichaza izinyathelo eziyisisekelo.

Ngokwethiyori, kuzwakala kukuhle kakhulu ukucabanga ukuthi, uma ifoni yakho ephathekayo isebenzisa i-DNS yangasese ebethelwe, Amadivayisi axhunywe ku-hotspot yakho athola leso sivikelo esifanayoEmpeleni, ngamamodeli amaningi e-Android lokhu akwenzeki: ayaqhubeka nokukhangisa nge-DHCP i-DNS enikezwa yinethiwekhi yeselula, hhayi leyo oyibeke ezingeni lesistimu.

Ngenxa yalokho, i-smartphone yakho ingase iphequlule ngemibuzo ebethelwe futhi ehlungiwe, kuyilapho i-laptop yakho ixhunywe endaweni yayo yokufinyelela. Iyaqhubeka nokubuza ngqo iseva ye-DNS yomqhubi.Ku-ISP yakho, akukho mehluko omkhulu uma kuqhathaniswa ne-laptop exhuma ngokuzenzakalelayo.

Indlela eqinile yokuqinisekisa ukuvikelwa okungaguquguquki kuyo yonke imishini yile Lungiselela i-DNS ngesandla kudivayisi ngayinye yeklayentiKukhompyutha yakho ephathekayo yeWindows, i-Mac, ithebhulethi, njll. Ngale ndlela awunciki kulokho okukhangisa i-hotspot nge-DHCP.

Kukhona inketho ethuthuke kancane: ukusetha iseva yakho ye-DNS ebethelwe (isibonelo, nge-AdGuard Home noma i-resolver esekela i-DoH/DoT) nokuxhuma idivayisi yakho yeselula kuyo, kungaba ngokuqondile noma nge-VPN. Inkinga iwukuthi, uma ufuna ukuyifinyelela ungaphandle kwekhaya lakho, kuzodingeka usebenzise i-VPN. ukuvula amachweba e-DNS noma e-HTTPS kuseva yakho, wethula i-vector entsha yokuhlasela uma lowo mshini ungavikelekile kahle.

Sebenzisa i-AdGuard Home, i-Pi-hole, kanye ne-Home DNS nge-Android yakho

Uma usuvele usethe izixazululo ezifana ne-AdGuard Home noma i-Pi-hole kunethiwekhi yakho yendawo, cishe uzilungiselele njengeseva ye-DNS eyinhloko ku-router yakho yasekhaya. Ngakho-ke, Wonke amadivayisi axhunyiwe ekhaya (anezintambo noma i-WiFi) adlula kulesi sihlungi ngaphandle kokuthi ulungiselele noma yini kudivayisi ngayinye..

"Kodwa" kuza uma ushiya ikhaya futhi ufuna ukuqhubeka nokusebenzisa lokho kuhlunga kusuka kufoni yakho ephathekayo, futhi ngaphezu kwalokho, Uhlose ukuthi amadivayisi axhunywe ku-hotspot yeselula nawo azuzeKunezindlela eziningana:

Enye indlela yokwenza iseva yakho yasekhaya ifinyeleleke kwi-inthanethi usebenzisa i-DoH noma i-DoT, ngesizinda esivumelekile kanye nesitifiketi. Ulungiselela lelo hostname njenge-DNS yangasese ku-Android futhi, noma ngabe ukuphi, Ifoni yakho ephathekayo izothumela imibuzo ebethelwe ku-resolver yakho yasekhaya.Kodwa-ke, kudinga ukuvula ama-port ku-router, ukugcina izitifiketi zisesikhathini, kanye nokuba nomshini ovikelwe kahle kakhulu.

Enye inketho elinganiselayo ukuhlanganisa i-DNS yakho yasekhaya ne-VPN yakho (i-WireGuard, i-OpenVPN, njll.). Ulungiselela i-VPN ku-router yakho noma kuseva kunethiwekhi yendawo, futhi uma uxhuma ungaphandle, Yonke ithrafikhi, kufaka phakathi imibuzo ye-DNS, idlula emhubheni iye kwi-LAN yakhoUkusebenzisa i-Pi-hole noma i-AdGuard Home njengesixazululi. Kudinga umsebenzi wokuqala owengeziwe, kodwa ugwema ukudalula isevisi ye-DNS ngqo ku-inthanethi.

Uma konke lokhu kuzwakala kuyinkathazo enkulu ngendlela osebenzisa ngayo ifoni yakho ephathekayo, into enengqondo kakhulu ezimweni eziningi ukusebenzisa iseva yakho yasekhaya uma usekhaya, nge-router yakho, kanye Lungiselela i-DNS yomphakathi evikelekile ku-Android uma uhamba (Cloudflare, Quad9, Google, njll.). Kubasebenzisi abaningi, lokho kulinganisela phakathi kokunethezeka nokuvikelwa kungaphezu kokufanele.

Ingabe i-DNS yeselula ivikela namadivayisi axhunyiwe?

Umbuzo ovame kakhulu, ovame ukubonwa ezinkundleni zobumfihlo, ukuthi ngabe ukusebenzisa i-DNS yangasese noma evikelekile kufoni yakho ephathekayo kwanele yini... Wonke amadivayisi axhuma ku-hotspot avikelwe ngokuzenzakalelayoUma sibheka isimo samanje, impendulo eqotho ithi: ngokuvamile, cha.

Njengoba sesixoxile, uma ifoni ephathekayo isebenza njenge-router eyenziwe ngokungemthetho, amapharamitha enethiwekhi ewasabalalisa (ikheli le-IP, isango, i-DNS) ngokuvamile asekelwe kuwo lokho inethiwekhi yeselula emnika konahhayi kuzilungiselelo ze-DNS eziphephile ze-Android. Ngakho-ke, ezimweni eziningi, i-DNS eyimfihlo ikhawulelwe ocingweni uqobo.

Kwi-laptop oyixhuma nge-tethering, isimo sifana ncamashi nokuthi usebenzisa i-modem ye-USB: Hlola i-DNS yomqhubi weselula bese ubuza ngayo ngaphandle kokuthi uyiphoqe ukuthi isebenzise enye.Kusukela ohlangothini lomhlinzeki, ungaqhubeka nokuphrofayilisha ukuthi yiziphi izizinda ezixazululiwe kusukela ekuxhumekeni kwakho.

Indlela yokuqinisekisa ukuthi idivayisi ngayinye isebenza ngesisombululo osifunayo ukuya kuzilungiselelo zayo zenethiwekhi bese chaza i-DNS ngesandlaKu-Windows, macOS noma i-Linux, lokhu kwenziwa ngezakhiwo ze-adaptha yenethiwekhi (i-WiFi noma i-Ethernet), kufakwa esikhundleni se-"automatic DNS" ngamaseva owakhethayo.

Ku-iPhone naku-iPad, ungalungisa ne-DNS usebenzisa inethiwekhi yakho ye-Wi-Fi: iya kuzilungiselelo > i-Wi-Fi, thepha u-"i" eduze kwenethiwekhi (okungaba yindawo eshisayo ku-Android), bese ngaphansi kokuthi "Lungiselela i-DNS," shintshela ku-"Manual" ukuze ufake ikheli le-IP lomhlinzeki wakho olithandayo. Kuyacasula kancane uma uvame ukushintsha amanethiwekhi, kodwa Kuqinisekisa ukuthi idivayisi ayisebenzisi i-DNS yenkampani yenethiwekhi ngaphandle kwemvume yakho..

Ungashintsha kanjani i-DNS ku-iPhone, kwamanye amafoni, kanye namakhompyutha

Ku-iOS kanye ne-iPadOS, i-Apple yethule ukwesekwa kwe-DoH kanye ne-DoT kusukela nge-iOS 14 kanye ne-macOS 11, kodwa Akukho ukulungiselelwa okubonakala njenge-"Private DNS" ye-Android.Ngokuzenzakalelayo, indlela elula ukushintsha i-DNS yenethiwekhi ngayinye ye-WiFi: Izilungiselelo > I-Wi-Fi > isithonjana "i" > Lungiselela i-DNS > Manual, susa amaseva amadala bese wengeza amasha (isibonelo, 1.1.1.1 kanye no-1.0.0.1 noma 8.8.8.8 kanye no-8.8.4.4).

Lesi silungiselelo sisebenza kuphela kunethiwekhi lapho uyichaza khona, ngakho-ke uma uxhuma kunethiwekhi ehlukile, kuzodingeka uphinde inqubo. Ngedatha yeselula nokusebenzisa i-DoH/DoT ngendlela esobala kakhudlwana, Kunezinhlelo zokusebenza ku-App Store ezifaka amaphrofayili okucushwa nge-DNS ebethelwe, namathuluzi omsebenzisi athuthukile akuvumela ukuthi upakishe amaphrofayela akho.

Ku-Windows 10 no-11, ukushintsha i-DNS kuhilela ukuya kuzilungiselelo zenethiwekhi (noma i-Control Panel yakudala) nokuhlela izakhiwo ze-adaptha. Khetha iphrothokholi ye-IPv4, maka ibhokisi elithi "Sebenzisa amakheli eseva ye-DNS alandelayo," kanye Ufaka amakheli e-IP ahambisana nomhlinzeki wakho omthandayoEzinguqulweni zakamuva, uhlelo luphinde lusekele i-DoH yomdabu ngezixazululi ezithile.

Ku-macOS, indlela iyafana: vula Izilungiselelo Zesistimu > Inethiwekhi, khetha isikhombikubona sakho (i-WiFi noma i-Ethernet), chofoza okuthi Advanced/Details, bese kuthebhu ye-DNS, Engeza amaseva amasha usebenzisa inkinobho yokwengeza.Ngemva kokusebenzisa izinguquko, konke ukuxhumana ngaleyo ndlela kuzosebenzisa lawo maseva e-DNS uze uwashintshe.

Ku-Linux, inqubo incike ekutheni usebenzisa i-NetworkManager noma omunye umphathi, kodwa umqondo uyafana: finyelela izilungiselelo zokuxhumeka, usethe ngesandla izixazululi, futhi, uma ufuna ukulawula okuphezulu, hlela amafayela afana namaphrofayela e-/etc/resolv.conf noma e-NetworkManager.

Lungiselela i-DNS ezingeni le-router kanye nezixazululo ze-hotspot ezizinikele

Enye indlela enamandla, uma ungafuni ukuthinta idivayisi ngayinye ekhaya lakho, Shintsha izilungiselelo ze-DNS ngqo ku-router yakho yasekhaya.Ngokufinyelela ku-interface yewebhu (ngokuvamile ku-192.168.1.1 noma kwenye ikheli le-IP le-LAN), ungafaka isigaba se-WAN/Inthanethi bese ushintsha i-DNS ezenzakalelayo ngamaseva enziwa ngesandla.

Ngokulondoloza nokuqalisa kabusha, wonke amadivayisi athola amakheli e-IP nge-DHCP azozuza lawo masethingi e-DNS ngaphandle kokuthi wenze noma yini enye. Lokhu kufaka phakathi omakhalekhukhwini, ama-laptop, ama-game consoles, ama-Smart TV, njll., uma nje engenawo amasethingi e-DNS angaguquki alungiselelwe. Kuyindlela elula yokwenza kanjalo ukwenza ukuhlunga kanye nobumfihlo kube ngendlela efanayo kuyo yonke inethiwekhi.

Ezindaweni ze-hotspot zobungcweti (isibonelo, abalawuli abafana nalezo ezivela kuzixazululo ze-EdgeCore noma ze-WifiCloud), kuvamile ukuhlanganisa i-DNS yangokwezifiso nemithetho ye-firewall ukuze Vimbela abasebenzisi ekugwemeni ukuhlunga ngokushintsha izilungiselelo ze-DNS zedivayisi yaboEnye indlela evamile yile:

Okokuqala, lungiselela izilungiselelo ze-WAN zedivayisi ukuze usebenzise amaseva e-DNS esevisi yokuhlunga (isibonelo, amakheli e-IP e-WifiCloud) njenge-"server ye-DNS ekhethwayo" kanye "ne-server ye-DNS ehlukile". Ngaleyo ndlela, Izicelo ezivela kuyo yonke inethiwekhi zidlula kulezi zixazululi ezihlungiwe..

Bese kudalwa imithetho yomlilo evumela kuphela ithrafikhi ye-DNS (i-port 53) kulawo ma-IP athile kanye Bavimba noma yimuphi umzamo wokusebenzisa amaseva e-DNS angaphandle njenge-8.8.8.8 noma i-1.1.1.1Empeleni, abasebenzisi bangasetha noma iyiphi i-DNS abayifunayo kuma-laptop abo, kodwa uma ingahambisani naleyo evunyiwe, ithrafikhi iyanqanyulwa futhi abakwazi ukuphequlula.

Le ndlela ibuye ifinyelele kuma-router asekhaya athuthukile noma i-firmware efana ne-OpenWrt. Kungenzeka ukumisa izinsizakalo ezifana ne-dnsmasq, uzikhombe ku-Pi-hole kunethiwekhi yendawo (isibonelo, 192.168.1.201), bese uhlanganisa lokhu nemithetho ye-firewall ukuze phoqa yonke ithrafikhi ye-DNS ukuthi idlule kusisombululo sakho sokuhlungaukuvimbela ukuvuza ku-DNS yangaphandle.

Kodwa-ke, ekucushweni okuyinkimbinkimbi kwe-OpenWrt kanye ne-Pi-hole, kulula ukulahleka: kufanele ulungiselele isikhombimsebenzisi se-LAN ukuze usebenzise i-Pi-hole njengeseva ye-DNS, engeza inketho ye-DHCP 6 (iseva ye-DNS yamakhasimende), bese unquma ukuthi i-router ngokwayo iyayisebenzisa yini leyo seva noma ibuza i-inthanethi ngqo. I-nslookup elula izokusiza ukuthi uhlole. uma amaklayenti empeleni esebenzisa i-DNS oyichazile noma bayaqhubeka nokukhomba abanye ngomunwe.

Ekugcineni, ukuqonda ukuthi iyiphi i-DNS esebenzisa isendlalelo ngasinye (idivayisi, i-router, i-hotspot, i-VPN) nokuthi izicelo zixazululwa kanjani ngokulandelana kubalulekile ekucushweni kwakho. Indawo evikelekile ene-DNS yangokwezifiso isebenza njengoba kulindelekile futhi ungagcini nje ngomqondo.

Yonke le mizamo yokulungisa i-DNS, ukuhlanganisa ukubethela (i-DoH/DoT), ukusebenzisa izinsizakalo ezifana ne-Cloudflare, i-Google, i-Quad9, i-OpenDNS noma i-NextDNS, ukusebenzisa amathuluzi afana ne-AdGuard Home noma i-Pi-hole nokuyihambisana ne-VPN enhle uma kudingeka, ihumushela ekuxhumaneni kwakho, kokubili kusuka kuselula yakho nakumadivayisi ancike endaweni yakho yokufinyelela, Zisebenza ngokushesha, zihlunga izinsongo kangcono, zihlonipha ubumfihlo bakho kakhudlwana, futhi zikunikeza ukulawula kwangempela ngalokho okwenzekayo kudatha yakho ku-inthanethi..

Ungawavimba kanjani amadivayisi angaziwa axhunywe kunethiwekhi yakho ku-Android
I-athikili ehlobene:
Ungawavimba kanjani amadivayisi angaziwa axhunywe kunethiwekhi yakho ku-Android