Ɗaya daga cikin fasalulluka na Chromium yana haifar da babban nauyi akan tushen sabar DNS

Ɗaya daga cikin fasalulluka na Chromium yana haifar da babban nauyi akan tushen sabar DNS

Mai binciken Chromium, babban tushen tushen tushen Google Chrome da sabon Microsoft Edge, ya sami kulawa mara kyau ga fasalin da aka yi niyya tare da kyakkyawar niyya: yana bincika ko ISP na mai amfani yana "sata" sakamakon binciken yanki wanda babu shi. .

Mai Neman Canza Hanyar Intanet, wanda ke haifar da tambayoyin karya don "domains" na bazuwar waɗanda ba za a iya yiwuwa su wanzu ba, yana da alhakin kusan rabin jimlar zirga-zirgar da tushen sabar DNS ke karɓa a duk duniya. Injiniyan Verisign Matt Thomas ya rubuta dogon lokaci post a kan shafin APNIC da ke bayyana matsalar da kuma tantance ma'aunin sa.

Yadda ake yawan aiwatar da ƙudurin DNS

Ɗaya daga cikin fasalulluka na Chromium yana haifar da babban nauyi akan tushen sabar DNS
Waɗannan sabobin sune mafi girman ikon da ya kamata ka tuntuɓi don warware .com, .net, da sauransu don su gaya maka cewa frglxrtmpuf ba babban yanki ba ne (TLD).

DNS, ko Tsarin Sunan Domain, shine tsarin da kwamfutoci zasu iya warware sunayen yanki masu mantawa kamar arstechnica.com zuwa cikin adiresoshin IP marasa amfani da yawa kamar 3.128.236.93. Idan ba tare da DNS ba, Intanet ba za ta wanzu ta hanyar da mutane za su iya amfani da su ba, ma'ana nauyin da ba dole ba a kan manyan abubuwan more rayuwa matsala ce ta gaske.

Load da shafin yanar gizo na zamani guda ɗaya na iya buƙatar adadin duban DNS mai ban mamaki. Misali, lokacin da muka bincika shafin farko na ESPN, mun kirga sunayen yanki guda 93 daban, daga a.espncdn.com zuwa z.motads.com. Dukkanin su wajibi ne don shafin ya cika cikakke!

Don ɗaukar irin wannan nau'in nauyin aiki don injin bincike wanda ke buƙatar hidima ga dukan duniya, an ƙirƙira DNS a matsayin matsayi mai yawa. A saman wannan dala akwai tushen sabobin - kowane yanki na sama, kamar .com, yana da nasa dangin uwar garken da ke da iko mafi girma ga kowane yanki da ke ƙasa da su. Mataki daya daga cikin waɗannan sabobin sune tushen sabobin kansu, daga a.root-servers.net to m.root-servers.net.

Sau nawa hakan ke faruwa?

Godiya ga manyan matakan caching na kayan aikin DNS, ƙaramin kaso na tambayoyin DNS na duniya sun isa tushen sabar. Yawancin mutane suna samun bayanan mai warwarewar DNS kai tsaye daga ISP ɗin su. Lokacin da na'urar mai amfani ke buƙatar sanin yadda ake zuwa takamaiman gidan yanar gizon, ana fara aika buƙatu zuwa uwar garken DNS wanda waccan na gida ke gudanarwa. Idan uwar garken DNS na gida bai san amsar ba, yana tura buƙatun zuwa nasa "masu gabatarwa" (idan an ƙayyade).

Idan uwar garken DNS na gida ko "sabar masu aikawa" da aka ƙayyade a cikin tsarinta ba su da amsawar da aka adana, ana tayar da buƙatar kai tsaye zuwa uwar garken yanki mai iko. mafi girma wanda kuke kokarin tuba. Yaushe домен.com wannan yana nufin cewa an aika buƙatar zuwa ga sabar masu iko na yankin da kansa com, wadanda suke a gtld-servers.net.

tsarin gtld-servers, wanda aka yi buƙatun, yana amsawa tare da jerin sunayen sabobin suna don domain domain.com, da kuma aƙalla rikodin hanyar haɗin gwiwa guda ɗaya mai ɗauke da adireshin IP na ɗaya irin wannan sabar suna. Bayan haka, martanin yana motsawa ƙasa da sarkar - kowane mai turawa yana ƙaddamar da waɗannan martanin zuwa uwar garken da ya buƙace su, har sai lokacin da martani ya isa uwar garken gida da kuma kwamfutar mai amfani. Dukkansu suna adana wannan martanin don kar a dagula tsarin manyan matakan ba dole ba.

A mafi yawan lokuta, sunan uwar garken yana yin rikodin don yankin.com za a riga an adana shi akan ɗaya daga cikin waɗannan masu turawa, don haka tushen sabar ba za ta damu ba. Koyaya, a yanzu muna magana ne game da nau'in URL ɗin da muka saba da shi - wanda aka canza zuwa gidan yanar gizo na yau da kullun. Buƙatun Chrome suna kan matakin mafi girma wannan, a kan mataki na gungu kansu root-servers.net.

Binciken sata na Chromium da NXDomain

Ɗaya daga cikin fasalulluka na Chromium yana haifar da babban nauyi akan tushen sabar DNS
Chromium yana duba "wannan uwar garken DNS yana yaudarata?" asusu na kusan rabin duk zirga-zirgar da ke kaiwa ga gungu na tushen sabar DNS na Verisign.

Mai binciken Chromium, aikin iyaye na Google Chrome, sabon Microsoft Edge, da masu bincike marasa adadi, suna son samarwa masu amfani da sauƙi na bincike a cikin akwati guda, wani lokaci ana kiranta "Omnibox." A wasu kalmomi, mai amfani yana shigar da ainihin URLs da kuma tambayoyin injin bincike a cikin filin rubutu iri ɗaya a saman taga mai bincike. Ɗaukar wani mataki na sauƙaƙa, shi ma baya tilasta mai amfani ya shigar da sashin URL da shi http:// ko https://.

Kamar yadda ya dace kamar wannan, wannan hanyar tana buƙatar mai bincike don fahimtar abin da ya kamata a yi la'akari da URL da abin da ya kamata a yi la'akari da tambayar nema. A mafi yawan lokuta wannan a bayyane yake - alal misali, kirtani mai sarari ba zai iya zama URL ba. Amma abubuwa na iya yin wayo lokacin da kuka yi la'akari da intranets-cibiyoyin sadarwa masu zaman kansu waɗanda kuma za su iya amfani da manyan yankuna masu zaman kansu don warware gidajen yanar gizo na gaske.

Idan mai amfani a cikin nau'ikan intranet na kamfaninsu na "kasuwa" kuma intranet ɗin kamfanin yana da gidan yanar gizon ciki mai suna iri ɗaya, to Chromium yana nuna akwatin bayani yana tambayar mai amfani ko yana son bincika "kasuwa" ko je zuwa. https://marketing. Wannan ƙila ba haka lamarin yake ba, amma yawancin ISPs da masu samar da Wi-Fi na jama'a suna "sata" kowane URL ɗin da ba daidai ba, suna tura mai amfani zuwa wani shafi mai cike da tuta.

Bazuwar tsara

Masu haɓaka Chromium ba sa son masu amfani a cibiyoyin sadarwa na yau da kullun su ga akwatin bayani suna tambayar abin da suke nufi a duk lokacin da suka nemi kalma ɗaya, don haka sun aiwatar da gwaji: Lokacin da suka ƙaddamar da mai lilo ko canza cibiyoyin sadarwa, Chromium yana yin binciken DNS akan uku. babban matakin “domains” da aka ƙirƙira bazuwar, tsayin haruffa bakwai zuwa goma sha biyar. Idan ɗayan waɗannan buƙatun guda biyu sun dawo tare da adireshin IP iri ɗaya, to Chromium yana ɗauka cewa cibiyar sadarwar gida tana "satar" kurakurai. NXDOMAIN, wanda ya kamata ya karɓa, don haka mai binciken ya ɗauki duk tambayoyin kalma ɗaya da aka shigar a matsayin ƙoƙarin neman har sai an ƙara sanarwa.

Abin baƙin ciki, a cikin cibiyoyin sadarwa cewa ba Satar sakamakon tambayoyin DNS, waɗannan ayyuka guda uku yawanci suna tashi zuwa sama, har zuwa tushen sabobin da kansu: uwar garken gida bai san yadda ake warwarewa ba. qwajuixk, don haka mika wannan bukata ga mai tura ta, wanda ya aikata haka, har zuwa karshe a.root-servers.net ko kuma ɗaya daga cikin “’yan’uwansa” ba za a tilasta masa ya ce “Yi haƙuri, amma wannan ba yanki ba ne.”

Tunda akwai kusan 1,67*10^21 yuwuwar sunayen yanki na karya daga tsayin haruffa bakwai zuwa goma sha biyar, mafi yawanci. kowane daga waɗannan gwaje-gwajen da aka yi a kan hanyar sadarwa na "masu gaskiya", yana kaiwa ga tushen uwar garke. Wannan ya kai adadin rabi na jimlar nauyin akan tushen DNS, bisa ga ƙididdiga daga wannan ɓangaren gungu root-servers.net, wadanda mallakar Verisign ne.

Tarihi ya maimaita kansa

Wannan ba shine karo na farko da wani aiki ya ƙirƙira da kyakkyawar niyya ba kasa ko kusan cika albarkatun jama'a tare da zirga-zirgar da ba dole ba - wannan nan da nan ya tunatar da mu dogon tarihin bakin ciki na sabar D-Link da Poul-Henning Kamp's NTP (Network Time Protocol) a tsakiyar 2000s.

A cikin 2005, mai haɓaka FreeBSD Poul-Henning, wanda shi ma ya mallaki uwar garken ka'ida ta Stratum 1 Network Time Protocol na Denmark, ya sami wani babban lissafin da ba a zata ba don zirga-zirgar ababen hawa. A takaice, dalilin shine masu haɓaka D-Link sun rubuta adiresoshin sabobin Stratum 1 NTP, gami da uwar garken Kampa, a cikin firmware na layin kamfani na masu sauyawa, masu amfani da hanyoyin sadarwa da wuraren samun damar shiga. Wannan nan take ya ƙara yawan zirga-zirgar uwar garken Kampa ninki tara, wanda hakan ya sa Kasuwancin Intanet na Danish (Ma'aikatar Musanya Intanet ta Denmark) ta canza jadawalin kuɗin fito daga "Free" zuwa "$ 9 a kowace shekara."

Matsalar ba shine cewa akwai masu amfani da hanyoyin sadarwa na D-Link da yawa ba, amma sun kasance "ba a kan layi." Yawancin kamar DNS, NTP dole ne yayi aiki a cikin tsari na matsayi - Stratum 0 sabobin suna ba da bayanai zuwa sabobin Stratum 1, waɗanda ke ba da bayanai zuwa sabobin Stratum 2, da sauransu a ƙasan matsayi. Na'ura mai ba da hanya tsakanin hanyoyin sadarwa na gida, sauyawa, ko wurin shiga kamar wanda D-Link ya tsara tare da adiresoshin uwar garken NTP zai aika buƙatun zuwa uwar garken Stratum 2 ko Stratum 3.

Aikin Chromium, mai yiwuwa tare da mafi kyawun niyya, ya maimaita matsalar NTP a cikin matsalar DNS, yana loda tushen sabar Intanet tare da buƙatun da ba a taɓa nufin su ba.

Akwai fatan samun mafita cikin gaggawa

Aikin Chromium yana da buɗaɗɗen tushe kwaro, wanda ke buƙatar kashe Intranet Redirect Detector ta tsohuwa don warware wannan batu. Dole ne mu ba da daraja ga aikin Chromium: an sami kwaro kafin hakanyadda Matt Thomas na Verisign ya ba shi kulawa da yawa tare da nasa azumi a kan shafin APNIC. An gano kwaron a watan Yuni, amma an manta da shi har zuwa sakon Thomas; Bayan ya yi azumi, sai ya fara kula da shi sosai.

Ana sa ran nan ba da jimawa ba za a shawo kan matsalar, kuma tushen DNS server ba za su sake amsa tambayoyin bogi da aka kiyasta kusan biliyan 60 a kowace rana ba.

Hakoki na Talla

Sabbin almara Shin VPS a kan Windows ko Linux tare da masu sarrafa dangin AMD EPYC masu ƙarfi da injin Intel NVMe mai sauri. Yi sauri don yin oda!

Ɗaya daga cikin fasalulluka na Chromium yana haifar da babban nauyi akan tushen sabar DNS

source: www.habr.com

Add a comment