Buza i-DNS ku-TCP ngokudlulisela kwe-SSH yasendaweni

Ukudlulisela kwe-OpenSSH kwasendaweni kuthwala i-TCP. I-DNS nayo ingasebenzisa i-TCP, uma ithuluzi lokubuza kanye nensizakalo ye-DNS ekude zisebenzisa lowo mzila.

Mayelana ne-server ye-DNS efinyeleleka kusuka ku-host ye-SSH, vula ukudlulisela okulalela ku-loopback kuphela:

ssh -N -L 127.0.0.1:1053:dns.internal:53 [email protected]

Bese uthumela umbuzo ocacile we-TCP DNS usuka emshinini wasendaweni:

dig +tcp @127.0.0.1 -p 1053 app.internal A

Shintsha i-server ye-DNS, i-host ye-SSH kanye negama elibuzwayo ngamavelu ahlosiwe. Uhlangothi lwe-server ye-SSH kufanele lukwazi ukufinyelela ku-dns.internal:53, futhi inqubomgomo yokudlulisela kufanele ikuvume.

Iphothi yasendaweni ingaphezulu kwebanga lamaphothi anelungelo. Umbuzo oya kuphothi yasendaweni 1053 awudingi ukubopha iphothi ye-DNS yohlelo 53.

Lokhu akuhambisi kabusha imibuzo evamile ye-UDP DNS ngokuzenzakalela. Ipayipi lamabhayithi eluhlaza le-UDP-kuya-TCP alanele, ngoba i-DNS over TCP yengeza inkambu yobude kanye nokwakheka komfudlana. Ukuhlanganiswa nesisombululo sohlelo kudinga isidluliseli se-DNS esifanele noma ukucushwa kwe-TCP okusekelwa ngokusobala.

Ekugcineni, ukuthola ikheli ngale ndlela akuhambisi ukuxhumana kwewebhu okulandelayo nge-SSH. Ukusesha kwe-DNS nokuthutha okuya endaweni yokufika kuhlala kuyizinqumo ezihlukene.