{"id":37892,"date":"2019-10-31T22:20:24","date_gmt":"2019-10-31T19:20:24","guid":{"rendered":"https:\/\/prohoster.info\/blog\/mozilla-perehodit-k-vklyucheniyu-po-umolchaniyu-dns-over-https-v-firefox\/"},"modified":"2019-10-31T22:20:24","modified_gmt":"2019-10-31T19:20:24","slug":"mozilla-perehodit-k-vklyucheniyu-po-umolchaniyu-dns-over-https-v-firefox","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/news\/mozilla-perehodit-k-vklyucheniyu-po-umolchaniyu-dns-over-https-v-firefox","title":{"rendered":"Mozilla p\u0101riet uz DNS-over-HTTPS noklus\u0113juma iesl\u0113g\u0161anu Firefox","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Firefox izstr\u0101d\u0101t\u0101ji pazi\u0146oju\u0161i<\/a><\/noindex> par DNS atbalsta test\u0113\u0161anas pabeig\u0161anu virs HTTPS (DoH, DNS over HTTPS) un nodomu beig\u0101s septembr\u012b iek\u013caut \u0161o tehnolo\u0123iju noklus\u0113jum\u0101 ASV lietot\u0101jiem. Iesl\u0113g\u0161ana notiks pak\u0101peniski, s\u0101kot ar da\u017eiem procentiem lietot\u0101ju, un, ja probl\u0113mu neb\u016bs, pak\u0101peniski palielinot l\u012bdz 100%. P\u0113c ASV aptveres tiks izskat\u012bta iesp\u0113ja DoH iesl\u0113gt ar\u012b cit\u0101s valst\u012bs.<\/p>\n

Gada laik\u0101 veiktais test\u0113\u0161ana par\u0101d\u012bja pakalpojuma uzticam\u012bbu un labu veiktsp\u0113ju, k\u0101 ar\u012b \u013c\u0101va identific\u0113t da\u017eas situ\u0101cijas, kad DoH var rad\u012bt probl\u0113mas, un izstr\u0101d\u0101t risin\u0101jumus to apiet\u0161anai (piem\u0113ram, apskat\u012bti issues<\/a><\/noindex> ar satiksmes optimiz\u0101ciju saturu pieg\u0101des t\u012bklos, vec\u0101ku kontroles un korporat\u012bvaj\u0101m iek\u0161\u0113j\u0101m DNS zon\u0101m). <\/p>\n

DNS satiksmes \u0161ifr\u0113\u0161anas noz\u012bmi nov\u0113rt\u0113 k\u0101 princip\u0101 svar\u012bgu faktoru lietot\u0101ju aizsardz\u012bb\u0101, t\u0101p\u0113c DoH nol\u0113ma iesl\u0113gt noklus\u0113juma re\u017e\u012bm\u0101, bet pirmaj\u0101 posm\u0101 tikai ASV lietot\u0101jiem. P\u0113c DoH aktiviz\u0113\u0161anas lietot\u0101jam tiks par\u0101d\u012bts br\u012bdin\u0101jums, kas \u013caus, ja v\u0113l\u0113sies, atteikties no sazi\u0146as ar centraliz\u0113tajiem DoH DNS serveriem un atgriezties pie tradicion\u0101l\u0101 ne\u0161ifr\u0113to piepras\u012bjumu s\u016bt\u012b\u0161anas uz sniedz\u0113ja DNS serveri (pretstat\u0101 izplat\u012btajai DNS rezol\u016btoru infrastrukt\u016brai, DoH izmanto piesaisti konkr\u0113tam DoH pakalpojumam, kas var tikt uzskat\u012bts par vienotu k\u013c\u016bmes punktu).<\/p>\n

Aktiviz\u0113jot DoH, var rasties probl\u0113mas ar vec\u0101ku kontroles sist\u0113m\u0101m un korporat\u012bvaj\u0101m t\u012bklam, kas izmanto tikai iek\u0161\u0113jai t\u012bklam pieejamu DNS nosaukumu strukt\u016bru intraneta adresu un korporat\u012bvo hostu p\u0101rv\u0113r\u0161anai. Lai risin\u0101tu probl\u0113mas ar \u0161\u0101d\u0101m sist\u0113m\u0101m, ir pievienota p\u0101rbaudes sist\u0113ma, kas autom\u0101tiski atsp\u0113jo DoH. P\u0101rbaudes tiek veiktas katru reizi, kad p\u0101rl\u016bkprogramma tiek palaista vai nosakot apak\u0161t\u012bkla izmai\u0146as.<\/p>\n

Autom\u0101tisk\u0101 atgrie\u0161an\u0101s pie oper\u0113t\u0101jsist\u0113mas noklus\u0113juma rezolv\u0113\u0161anas ir paredz\u0113ta ar\u012b tad, ja rodas k\u013c\u016bmes, m\u0113\u0123inot rezolv\u0113t caur DoH (piem\u0113ram, t\u012bklo\u0161anas pieejam\u012bbas p\u0101rtraukuma ar DoH pakalpojumu sniedz\u0113ju vai t\u0101 infrastrukt\u016bras k\u013c\u016bmes d\u0113\u013c). \u0160\u0101du p\u0101rbaudei j\u0113ga ir ap\u0161aub\u0101ma, jo nekas netrauc\u0113 uzbruc\u0113jiem, kas kontrol\u0113 rezolv\u0113\u0161anas darb\u012bbu vai sp\u0113j iejaukties satiksm\u0113, simul\u0113t \u0161\u0101du uzved\u012bbu, lai atsl\u0113gtu DNS satiksmes \u0161ifr\u0113\u0161anu. Problema ir atrisin\u0101ta, pievienojot iestat\u012bjumos opciju \"DoH vienm\u0113r\" (p\u0113c noklus\u0113juma nav akt\u012bva), kuras izv\u0113les gad\u012bjum\u0101 autom\u0101tisk\u0101 atsl\u0113g\u0161ana netiek piem\u0113rota, kas ir sapr\u0101t\u012bgs kompromiss.<\/p>\n

Lai noteiktu korporat\u012bvos resolverus, tiek veikta netipisku augst\u0101ko dom\u0113nu (TLD) p\u0101rbaude un tiek atgriezti intraneta adre\u0161u rezult\u0101ti no sist\u0113mas resolvera. Lai noteiktu vec\u0101ku kontroles aktiviz\u0101ciju, tiek m\u0113\u0123in\u0101ts rezolv\u0113t nosaukumu exampleadultsite.com un, ja rezult\u0101ts nesakr\u012bt ar faktisko IP adresi, tas tiek uzskat\u012bts par pieaugu\u0161o satura blok\u0113\u0161anas aktiviz\u0101ciju DNS l\u012bmen\u012b. K\u0101 r\u0101d\u012bt\u0101ji ar\u012b tiek p\u0101rbaud\u012btas Google un YouTube IP adreses, lai noskaidrotu, vai t\u0101s nav nomain\u012btas uz restrict.youtube.com, forcesafesearch.google.com un restrictmoderate.youtube.com. Papildus Mozilla pied\u0101v\u0101<\/a><\/noindex> ievie\u0161ot vienotu p\u0101rbaudes hostu use-application-dns.net<\/a><\/noindex>, ko var izmantot interneta pakalpojumu sniedz\u0113ji un vec\u0101ku kontroles pakalpojumi k\u0101 mar\u0137\u0113jumu DoH deaktiviz\u0113\u0161anai (ja hosts netiek noteikts, Firefox izsl\u0113dz DoH).<\/p>\n

Darbs caur vienu DoH pakalpojumu potenci\u0101li var rad\u012bt probl\u0113mas ar satura pieg\u0101des t\u012bklu pl\u016bsmas optimiz\u0101ciju, kas veic pl\u016bsmas balans\u0113\u0161anu, izmantojot DNS (CDN t\u012bkla DNS serveris veido atbildi, \u0146emot v\u0113r\u0101 rezolv\u0113\u0161anas adresi un nodro\u0161ina tuv\u0101ko hostu satura sa\u0146em\u0161anai). DNS piepras\u012bjuma nos\u016bt\u012b\u0161ana no tuv\u0101k\u0101 rezolv\u0113\u0161anas servera lietot\u0101jam t\u0101dos CDN nodro\u0161ina tuv\u0101k\u0101 hosta adreses atgrie\u0161anu, bet, nos\u016btot DNS piepras\u012bjumu no centraliz\u0113t\u0101 rezolv\u0113\u0161anas servera, tiks sniegta tuv\u0101k\u0101 hosta adrese DNS-over-HTTPS serverim. Praktiskie testi par\u0101d\u012bja, ka DNS-over-HTTP izmanto\u0161ana ar CDN gandr\u012bz nep\u0101rsniedza kav\u0113\u0161anos pirms satura p\u0101rs\u016bt\u012b\u0161anas s\u0101kuma (\u0101tr\u0101m savienojumiem kav\u0113\u0161an\u0101s nep\u0101rsniedza 10 milisekundes, savuk\u0101rt l\u0113n\u0101kajos sakaros pat nov\u0113rota pa\u0101trin\u0101\u0161ana). CDN rezolv\u0113\u0161anas sist\u0113mai klienta atra\u0161an\u0101s vietas nos\u016bt\u012b\u0161anai tika apsv\u0113rta ar\u012b EDNS Client Subnet papla\u0161in\u0101juma izmanto\u0161ana.<\/p>\n

Atg\u0101din\u0101m, ka DoH var b\u016bt noder\u012bgs, lai nov\u0113rstu inform\u0101cijas nopl\u016bdi par piepras\u012btajiem viesu v\u0101rdiem caur pakalpojumu sniedz\u0113ju DNS serveriem, c\u012bn\u012btos pret MITM uzbrukumiem un DNS trafika vilto\u0161anu, pretotos blo\u0137\u0113\u0161anai DNS l\u012bmen\u012b vai organiz\u0113tu darb\u012bbu gad\u012bjum\u0101, ja nav iesp\u0113jams tie\u0161i piek\u013c\u016bt DNS serveriem (piem\u0113ram, str\u0101d\u0101jot caur proksi). Ja parast\u0101 situ\u0101cij\u0101 DNS piepras\u012bjumi tiek nos\u016bt\u012bti tie\u0161i noteiktiem DNS serveriem atbilsto\u0161i sist\u0113mas konfigur\u0101cijai, tad DoH gad\u012bjum\u0101 piepras\u012bjums p\u0113c IP adreses ir ietverts HTTPS trafika ietvaros un nos\u016bt\u012bts uz HTTP serveri, kur rezolvers apstr\u0101d\u0101 piepras\u012bjumus caur Web API. Eso\u0161ais standarts DNSSEC izmanto \u0161ifr\u0113\u0161anu tikai klienta un servera autentifik\u0101cijai, bet nepasarg\u0101 trafiku no p\u0101rtver\u0161anas un negarant\u0113 piepras\u012bjumu konfidencialit\u0101ti. <\/p>\n

Lai aktiviz\u0113tu DoH, lap\u0101 about:config j\u0101maina main\u012bg\u0101 network.trr.mode v\u0113rt\u012bba, kas tiek atbalst\u012bta kop\u0161 Firefox 60. V\u0113rt\u012bba 0 piln\u012bb\u0101 atsl\u0113dz DoH; 1 \u2014 tiek izmantots DNS vai DoH, atkar\u012bb\u0101 no t\u0101, kas ir \u0101tr\u0101k; 2 \u2014 p\u0113c noklus\u0113juma tiek izmantots DoH, bet DNS k\u0101 rezerves variants; 3 \u2014 tiek izmantots tikai DoH; 4 \u2014 re\u017e\u012bms, kad DoH un DNS tiek izmantoti paral\u0113li. P\u0113c noklus\u0113juma tiek izmantots CloudFlare DNS serveris, ta\u010du to var main\u012bt ar main\u012bg\u0101 network.trr.uri pal\u012bdz\u012bbu; piem\u0113ram, var iestat\u012bt «https:\/\/dns.google.com\/experimental» vai «https:\/\/9.9.9.9\/dns-query».<\/p>\n

<\/a><\/noindex><\/p>\n

Avots: opennet.lv<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Firefox \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 DNS \u043f\u043e\u0432\u0435\u0440\u0445 HTTPS (DoH, DNS over HTTPS) \u0438 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0438\u0438 \u0432 \u043a\u043e\u043d\u0446\u0435 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u0443\u044e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0421\u0428\u0410. \u0412\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0432\u043d\u0430\u0447\u0430\u043b\u0435 \u0434\u043b\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u043d\u0442\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0430 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043f\u043e\u0441\u0442\u0435\u043f\u0435\u043d\u043d\u043e \u0434\u043e\u0432\u043e\u0434\u044f \u0434\u043e 100%. \u041f\u043e\u0441\u043b\u0435 \u043e\u0445\u0432\u0430\u0442\u0430 \u0421\u0428\u0410 \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f DoH \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-37892","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mozilla p\u0101riet uz noklus\u0113juma DNS-over-HTTPS aktiviz\u0113\u0161anu Firefox | ProHoster","description":"Firefox izstr\u0101d\u0101t\u0101ji pazi\u0146oju\u0161i par test\u0113\u0161anas atbalsta pabeig\u0161anu.","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/news\/mozilla-perehodit-k-vklyucheniyu-po-umolchaniyu-dns-over-https-v-firefox","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Mozilla \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442 \u043a \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e DNS-over-HTTPS \u0432 Firefox | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Firefox \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438.","og:url":"https:\/\/prohoster.info\/lv\/blog\/news\/mozilla-perehodit-k-vklyucheniyu-po-umolchaniyu-dns-over-https-v-firefox","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:20:24+00:00","article:modified_time":"2019-10-31T19:20:24+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37892","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 19:39:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:39:22","updated":"2026-01-23 19:39:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/37892","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=37892"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/37892\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=37892"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=37892"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=37892"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}