Su'aal DNS oo TCP ah iyada oo loo marayo gudbinta gudaha SSH

U gudbi deked TCP gudaha ah oo aan u baahnayn fasax gaar ah server DNS fog, oo si cad u codso DNS over TCP adigoo isticmaalaya dig.

Gudbinta gudaha OpenSSH waxay qaaddaa TCP. DNS sidoo kale wuu isticmaali karaa TCP, haddii qalabka su'aalaha iyo adeegga DNS ee fog ay isticmaalaan marinkaas.

Server DNS oo laga gaari karo host SSH, fur gudbin kaliya dhageysata loopback:

ssh -N -L 127.0.0.1:1053:dns.internal:53 [email protected]

Kadib dir su'aal TCP DNS oo cad oo ka socota mishiinka gudaha:

dig +tcp @127.0.0.1 -p 1053 app.internal A

Beddel server DNS, host SSH iyo magaca la weydiinayo qiimaha loogu talagalay. Dhinaca server SSH waa inuu gaari karaa dns.internal:53, oo siyaasadda gudbintuna waa inay oggolaataa.

Dekeda gudaha waxay ka sarraysa xadka dekedaha mudnaanta leh. Su'aal loo diro deked gudaha 1053 uma baahna in la xiro dekedda DNS ee nidaamka 53.

Tani si otomaatig ah uma leexiso su'aalaha UDP DNS ee caadiga ah. Tuubo byte UDP-ilaa-TCP cayriin kuma filna, sababtoo ah DNS over TCP wuxuu ku darayaa goob dherer iyo qaabaynta qulqulka. Isku-dhafka resolver-ka nidaamka wuxuu u baahan yahay gudbiye DNS ku habboon ama habayn TCP si cad loo taageeray.

Ugu dambayntii, helitaanka cinwaan marinkan kama maro isku-xirka webka ee xiga SSH. Raadinta DNS iyo qaadista ilaa meesha loo socdo waxay ahaanayaan doorashooyin gooni ah.

Maqaallo la xiriira