Chii-chii chichaitika musi waFebruary 1st?

Kwete kuti zvaive, hongu yekutanga hurukuro yenyaya paHabré. Zvisinei, kusvikira zvino, migumisiro yacho yakanyanya kukurukurwa, asi, mumaonero edu, zvikonzero zvinonyanya kufadza.

Saka, yakarongerwa Kukadzi 1st DNS Mureza Zuva. Mhedzisiro yechiitiko ichi ichaitika zvishoma nezvishoma, asi ichiri kukurumidza kupfuura mamwe makambani achakwanisa kujairana nawo.

Chii? Mumashoko akapfava, izvi ndizvo manifesto vagadziri vepasi rose veDNS maseva: makambani CZ.NIC, ISC, NLnet Labs uye PowerDNS.

Vagadziri veDNS software vagara vakatarisana nedambudziko: kugadzira iyo domain zita sisitimu, kuwedzera mabasa matsva kwairi ayo anodiwa nevatengi, kugadzirisa nyaya dzekuchengetedza - ese aya maitiro anodzikiswa zvakanyanya nekuda kwekubatana kweiyo DNS system uye kudiwa. kuchengetedza maseva echinyakare anoita shanduro dzekare dzeprotocol (uye kunyangwe izvi zvinowanzoitwa nezvikanganiso).

Exceptional situation

Maererano ne DNS Protocol Standards Directory, iyo yazvino rondedzero ine, kubva muna Ndira 21, 2018, 3248 mapeji. Iwo anosanganisira ese akakodzera maRFC mumatatu "internet standard", "proposed standard" (izvo nhasi zviri chinhu chimwe chete), "best current practice" и "ruzivo". Kana tichienzanisa, iyo HTTP protocol, iyo inopa zvemukati kune ese mawebhusaiti paInternet, inovhara yakazara mapeji e672.

Sezvavanotaura, kana zvirevo zvepurojekiti yako zvisingaratidzike sechinhu chakadaro, usatomboedza kundikoka.

Iko kudikanwa kwekuita kugadzirisa kwese mabasa uye kunze kwemamiriro anotsanangurwa pamapeji zviuru zvitatu ibasa rakaoma pacharo, uye nekuwedzera, akati wandei eDNS maseva anoisa izvi kana izvo mashandiro zvisirizvo, izvo zvinotungamira kune kudiwa kwekuwedzera kubata zvisiri- mwero maitiro. Mune mamwe maRFC ataurwa pamusoro apa, kusuwa kunokunda vanhu vanoshanda neprotocol kunowedzera. kunyangwe mumusoro.

Zvinoenderana nevagadziri veDNS vakakosha, mamiriro ezvinhu nekuoma kwekodhi yepurogiramu atove akakomba zvekuti atore matanho akasimba. Musi waKukadzi 1, sechikamu chechiito chakarongeka, shanduro dzakagadziridzwa dzeese makuru eDNS maseva dzichaburitswa, umo tsigiro yeimwe hunhu husina kunaka ichamiswa ikozvino uye nekusingaperi.

Zvakadini nemamwe mashoko?

Kuti ndijekese kuti chii chaizvo chisingachatsigirwi, ini ndichapa kuenzanisa. Fungidzira kuti kusvika muna 1999 vanhu vakanga vasingabvumirwi mundege ine mikwende, asi muna 1999, nechisarudzo chepamutemo chechiremera chekutonga, vafambi vakabvumirwa kutora mabhegi muchikepe (emwe uremu uye zviyero). Zvakanaka chaizvo, handiti? Unogona kutakura zvinhu zvakawanda zvinobatsira.

Chimbofungidzira ikozvino kuti muna 2019 kuchine ndege pane mabhegi asingatenderwe, uye kusvika kukwira iwe hauna nzira yekuziva kana iwe unogona kutora mikwende newe.

Izvi ndizvo zvazvinoita zvinhu EDNS kuwedzera, kushayikwa kwerutsigiro kubva munaFebruary 1 kuchaita kuti kusasvikika kwehuwandu hwemawebhusaiti. Zvichireva kutaura, ndege dzisingakwanise kutora mikwende mubhodhi (zvishoma zvishoma) muna Kukadzi zvine chekuita nezera ravo remakumi maviri. yekutanga EDNS standard Havachabvumidzwa kupinda munhandare dzendege dzinoverengeka.

Chiziviso pamusoro peizvi chakaburitswa kare: muna Kurume-Chivabvu 2018, varongi vakuru veDNS Flag Day vakazivisa veruzhinji nezve. akati wandei akakurumbira indasitiri makonferensi. Uye zvakare, kuburitswa kweakagadziridzwa vhezheni yeDNS maseva pachayo hakuzotungamira kumatambudziko nekukurumidza, sezvo vashandisi vachiri kufanira kuchinjira kune idzi shanduro, uye izvi zvinotora nguva. Asi, zvakanyanya kukosha, huwandu hwegore DNS vanopa masevhisi vakabatanawo neDNS Flag Day. Izvi zvinosanganisira hofori dzakadai seGoogle (uye yavo yakakurumbira DNS server ine IP kero 8.8.8.8), Cloudflare, Facebook uye Cisco.

Nekuda kweizvozvo, masayiti anoshandisa maDNS maseva asina EDNS rutsigiro (kureva, "ndege" dzisingakwanisi "kutakura mikwende mubhodhi") dzichamira kushanda kutanga kwaFebruary 1 kune wese anoshandisa akavhurika DNS maseva 8.8.8.8, 9.9.9.9, 1.1.1.1 nevamwe vakati wandei. Sezvo vafambisi vekutaurirana vachivandudza maDNS maseva avo, rondedzero inokura.

Iyo yakasarudzika yekushanda kweiyo DNS sevha mune yekambani masisitimu ndeyekuti kazhinji haibvunze iyo, inoshanda uye inoshanda, saka kazhinji hapana anomboigadzirisa. Vatariri vehurongwa hwechikoro chekare kunyange kuda kuzvikudza nguva refu yekukwira kwemichina yakadaro. Dambudziko nderekuti kana paine chinodiwa chekusimudzira, zvinoita kuti izvi zvinoda, semuenzaniso, kutama kubva kuFreeBSD 5 kuenda kuFreeBSD 10 (nyaya chaiyo), iyo, pakati pemamwe matambudziko, inoda reboot, uye kubva pakatangazve. sevha yekare yatova Inogona kungosabuda.

Chinhu chisingafadzi ndechekuti mhinduro yedambudziko mune yakajairika kesi haina kuuya pasi pakungovandudza maDNS maseva. Mamwe masangano anoshandisa firewalls (zvese software nehardware) izvo zvinomanikidza ese maDNS mapaketi ane EDNS mashandiro kuti adonhe. Pakati pezvimwe zvinhu, izvi zvakaitwa nemhando dzekare dzeJuniper SRX, asi nyaya yacho haina kuganhurirwa kwavari. Muchidimbu, kana tikataura nezve firewall uye DPI mhinduro mune zvakajairika, iyo yakaderera mwero wemhando mukuvandudzwa kwehuwandu hwemhinduro dzakadaro dzagara dzichizivikanwa. Makore ese aya, vagadziri veiyo DNS protocol vakatambura nematambudziko avakakonzeresa, uye zvino vafunga kudzorera.

Asi kugadzirisa zvigadziriso zvakadaro zvinogona kutora nguva yakakosha, uye mune dzimwe nguva zvingave zvakakosha kurasa kamwe-inodhura midziyo mumarara uye kutenga mitsva, izvo zvinokonzeresa matambudziko mazhinji, semuenzaniso, mukati mehurongwa hweRussia bhajeti kutenderera. (kunyanya kana midziyo yakaraswa yakabudiswa panguva yekune dzimwe nyika, asi hapasisina mukana wekutenga zvinhu zvekunze kubva kune sangano nokuda kwechikonzero chimwe kana chimwe - zvemari, zvematongerwe enyika, zvepfungwa).

Saka kune avo vane dambudziko iri, inguva yekutanga kurigadzirisa. Ziva kuti matambudziko iwayo chete anoda kugadziriswa nekukurumidza mudziyo wekusimbisa wakakodzera inoratidza nemavara matsvuku okuti “MIRA” kana kuti “SLOW”. Mucherechedzo wekushevedzera muyero katatu ingori yambiro ikozvino uye haizokonzerese matambudziko muna Kukadzi 1 (kunyangwe dambudziko iri richizoda kugadziriswa munguva refu).

Chii chinotevera?

Chekutanga, DNS Mureza Zuva harifanire kumutsa chero njodzi dzakakosha.

Unogona kunzwa kutsoropodzwa munhaurirano dzakasiyana siyana chinyorwa chepakutanga Alexey Lukatsky paHabré: vanoti munyori akatora toni yakanyanyisa yekutyisidzira. Zvisinei, hazvibviri kusacherechedza kuti Alexey ndiye munhu anonyatsoziva kuti network network yemasangano makuru eRussia uye masangano ehurumende dzimwe nguva inogadziriswa uye ndezvipi midziyo yakabatana nayo. Maererano neongororo ine mhedzisiro inoratidzika iripo Coordination Center ye .RU uye .РФ domains, dambudziko rakanyoreswa nehuwandu hwemasayiti anozivikanwa pamberi peLukatsky post, nhasi iri kutozviratidza muhuwandu hwekutsvaga, ndiko kuti, kupinda paCisco blog (uye zvinyorwa zvinotevera, taura, pa blog Roskomsvoboda) ine zvaidiwa.

Zvisinei, kubudirira kweDNS Flag Day kuchatungamirira kumigumisiro, iyo huru ndeyokuti zviitiko zvakadaro zvicharamba zvichiitwa mune ramangwana. MuDNS system ichiripo kune nzvimbo dzakawanda dzasara, iyo vagadziri vangada kuwedzera nekukurumidza sezvinobvira; Uye zvakare, DNS haisiriyo yega protocol yakadai mune chimwe chinhu chekuparadzanisa. Muenzaniso neBGP hunhu 0xFF, yatichakurukura munyaya inotevera, inoratidza zvakajeka kuti dzimwe nguva Indaneti inogona kubatsirwa nekudzivirira.

Izvo, nhasi, zvinosiya vatariri vehurongwa vaine dambudziko rakajeka:

1. Pamwe iyo DNS server administrator inofanirwa kutarisa hupenyu hwenharaunda yeInternet, kunyanya, nhau dzenharaunda yehunyanzvi yevagadziri veDNS, uye, kunyanya, kazhinji kutarisisa uye nguva yekuvandudza server;
2. Kana manejimendi enzvimbo yako yedunhu anofanirwa kuendeswa kune wechitatu-bato mupi anoshanda nebasa rakadai (aro, mune musimboti, akawanda munyika).

Zvisinei, tichazodzokera kunyaya iyi gare gare.

Source: www.habr.com