Bincika DNS ta TCP ta hanyar tura SSH na cikin gida

Turar OpenSSH ta cikin gida tana ɗaukar TCP. DNS ma na iya amfani da TCP, muddin kayan aikin bincike da sabis ɗin DNS mai nisa suna amfani da wannan hanyar.

Don uwar garken DNS da ake iya samu daga uwar garken SSH, buɗe turawa da ke saurare a loopback kawai:

ssh -N -L 127.0.0.1:1053:dns.internal:53 [email protected]

Sannan ka aika buƙatar TCP DNS a fili daga na'urar gida:

dig +tcp @127.0.0.1 -p 1053 app.internal A

Maye gurbin uwar garken DNS, uwar garken SSH da sunan da ake tambaya da ƙimar da aka yi niyya. Dole bangaren uwar garken SSH ya isa dns.internal:53, kuma manufar tura dole ta yarda da hakan.

Tashar gida tana sama da kewayon tashoshin izini. Buƙata zuwa tashar gida 1053 ba ta buƙatar ɗaure tashar DNS ta tsarin 53.

Wannan ba ya juya buƙatun UDP DNS na yau da kullum kai tsaye. Bututun byte na UDP-zuwa-TCP maras sarrafawa bai isa ba, domin DNS over TCP yana ƙara filin tsayi da tsarin rafi. Haɗawa da mai warwarewar tsarin yana buƙatar mai tura DNS da ya dace ko ingantaccen tsarin TCP da aka tallafa a fili.

A ƙarshe, samun adireshi ta wannan hanyar ba ya tura haɗin gidan yanar gizo na gaba ta SSH. Binciken DNS da jigilar zuwa manufa sun kasance zaɓuka daban.