Chimwe chezvinhu zveChromium chinogadzira mutoro wakakura pamidzi DNS maseva

Chimwe chezvinhu zveChromium chinogadzira mutoro wakakura pamidzi DNS maseva

Iyo Chromium bhurawuza, ari kubudirira akavhurika-sosi mubereki weGoogle Chrome uye nyowani Microsoft Edge, yakagamuchira kutariswa kwakashata kwechinhu chakagadzirirwa nevavariro dzakanaka: inotarisa kana ISP yemushandisi iri "kuba" isiripo yemubvunzo yemubvunzo wedomasi. .

Intranet Redirect Detector, iyo inogadzira mibvunzo yemanyepo ye "domains" isina kurongeka iyo isingafungidzike kuvapo, ine chekuita nehafu yehuwandu hwetraffic inogamuchirwa nemidzi DNS maseva pasi rese. Verisign injiniya Matt Thomas akanyora refu post pa APNIC blog inotsanangura dambudziko uye kuongorora chiyero chayo.

Iyo DNS resolution inowanzoitwa sei

Chimwe chezvinhu zveChromium chinogadzira mutoro wakakura pamidzi DNS maseva
Masevha aya ndiwo chiremera chepamusoro chaunofanirwa kubata kuti ugadzirise .com, .net, etc. kuitira kuti vakuudze kuti frglxrtmpuf is not a top-level domain (TLD).

DNS, kana Domain Name System, igadziriro iyo makomputa anogona kugadzirisa asingakanganwike mazita edomasi se arstechnica.com mune isinganyanyi kushandisa-ushamwari IP kero se 3.128.236.93. Pasina DNS, iyo Internet yaisazovepo nenzira yaigona kushandiswa nevanhu, zvichireva kuti mutoro usingakoshi padanho repamusoro-soro idambudziko chairo.

Kuisa peji yewebhu yemazuva ano kunogona kuda nhamba inoshamisa yeDNS lookups. Semuyenzaniso, patakaongorora peji rekutanga reESPN, takaverenga mazita makumi mapfumbamwe nematatu akasiyana, kubva ku a.espncdn.com kusvika z.motads.com. Ese akakosha kuti peji rizadze zvizere!

Kugadzirisa rudzi urwu rwebasa rekutsvaga injini inoda kushumira pasi rose, DNS yakagadzirirwa sehuwandu hwehuwandu hwehuwandu. Pamusoro pepiramidhi iyi pane midzi maseva - imwe neimwe yepamusoro-level domain, senge .com, ine mhuri yayo yemaseva ayo ari chiremera chepamusoro kune imwe neimwe domain iri pazasi pavo. Imwe nhanho kumusoro pane izvi maseva ndiwo maseva emidzi pachawo, kubva a.root-servers.net up to m.root-servers.net.

Izvi zvinoitika kakawanda sei?

Kutenda kune akawanda-level caching hierarchy yeDNS infrastructure, chikamu chidiki kwazvo chemibvunzo yeDNS yenyika inosvika kumaseva emidzi. Vanhu vazhinji vanowana yavo DNS solver ruzivo zvakananga kubva kune yavo ISP. Kana chishandiso chemushandisi chichida kuziva nzira yekusvika kune chaiyo webhusaiti, chikumbiro chinotanga kutumirwa kuDNS server inotungamirwa nemupi wepano. Kana sevha yeDNS yemunharaunda isingazive mhinduro, inoendesa chikumbiro kune yayo "vanotungamira" (kana yatsanangurwa).

Kana iyo DNS sevha yemupi wepanzvimbo kana "maseva ekutumira" akatsanangurwa mukumisikidzwa kwayo ane mhinduro yakavharirwa, chikumbiro chinosimudzwa zvakananga kune ane chiremera domain server. yepamusorosoro iyo yauri kuedza kutendeutsa. Rini Π΄ΠΎΠΌΠ΅Π½.com izvi zvinoreva kuti chikumbiro chinotumirwa kune ane chiremera maseva eiyo domain pachayo com, izvo zviri pa gtld-servers.net.

maitiro gtld-servers, iyo yakakumbirwa chikumbiro, inopindura nerunyorwa rwemazita ane chiremera maseva edomain.com, pamwe chete nerekodhi rekodhi rekodhi rine IP kero yezita rakadaro sevha. Tevere, mhinduro dzinodzika pasi pechetani - mufambisi wega wega anotambidza mhinduro idzi pasi kune sevha yadzikumbira, kusvika mhinduro yasvika sevha yemupi wepanzvimbo uye komputa yemushandisi. Vese vanochengeta iyi mhinduro kuitira kuti varege kukanganisa zvisina basa masisitimu epamusoro-soro.

Kazhinji, zita server rekodhi re domain.com ichatove yakachengetwa pane imwe yeava vanoendesa mberi, saka midzi maseva haizokanganiswe. Nekudaro, parizvino tiri kutaura nezve mhando yeURL yatinoziva - iyo inoshandurwa kuita webhusaiti yenguva dzose. Zvikumbiro zveChrome zviri pamwero yepamusorosoro izvi, padanho remasumbu pachawo root-servers.net.

Chromium uye NXDomain cheki yekubiwa

Chimwe chezvinhu zveChromium chinogadzira mutoro wakakura pamidzi DNS maseva
Chromium inotarisa "iyi DNS server inondipusa here?" account yeinoda kusvika hafu ye traffic yese inosvika Verisign's cluster yemidzi DNS maseva.

Iyo Chromium Browser, chirongwa chevabereki cheGoogle Chrome, iyo Microsoft Edge nyowani, uye isingaverengeke isingazivikanwe mabhurawuza, inoda kupa vashandisi nyore kutsvaga mubhokisi rimwe chete, dzimwe nguva rinonzi "Omnibox." Mune mamwe mazwi, mushandisi anopinda ese ari maviri echokwadi maURL uye injini yekutsvaga mibvunzo mune imwecheteyo mavara ndima kumusoro kwebrowser hwindo. Kutora imwe nhanho yekurerutsa, zvakare haimanikidze mushandisi kuisa chikamu che URL nacho http:// kana https://.

Sezviri nyore sezvazviri, nzira iyi inoda kuti bhurawuza kuti rinzwisise izvo zvinofanirwa kutorwa seURL uye chii chinofanira kutorwa semubvunzo wekutsvaga. Kazhinji izvi zviri pachena - semuenzaniso, tambo ine nzvimbo haigone kuve URL. Asi zvinhu zvinogona kuita tricker kana iwe uchifunga intranets-yakavanzika network inogona zvakare kushandisa yakavanzika yepamusoro-level domain kugadzirisa chaiwo mawebhusaiti.

Kana mushandisi ari pa intranet yekambani yake achinyora "marketing" uye intranet yekambani ine webhusaiti yemukati ine zita rimwe chetero, ipapo Chromium inoratidza bhokisi reruzivo richibvunza mushandisi kuti arikuda kutsvaga "kushambadzira" kana kuenda ku. https://marketing. Izvi zvinogona kunge zvisiri izvo, asi maISP mazhinji uye neveruzhinji Wi-Fi vanopa "hijack" yega yega URL isina kupetwa, vachiendesa mushandisi kune rimwe peji rakazadzwa-mabhena.

Random generation

Vagadziri veChromium vaisada kuti vashandisi venguva dzose network vaone bhokisi reruzivo vachibvunza zvavanenge vachireva pese pavanenge vachitsvaga izwi rimwe chete, saka vakaita bvunzo: Pavanotanga bhurawuza kana kushandura network, Chromium inoita DNS kutarisa pamatatu. akagadzirwa zvisina tsarukano "domains" yepamusoro level, manomwe kusvika gumi nemashanu mavara kureba. Kana chero zviviri zvezvikumbiro izvi zvikadzoka neiyo IP kero, ipapo Chromium inofungidzira kuti network yemuno "inotora" zvikanganiso. NXDOMAIN, iyo yainofanirwa kugamuchira, saka bhurawuza inoona zvese-izwi-izwi mibvunzo yakapinzwa sekuyedza kutsvaga kusvika imwezve chiziviso.

Sezvineiwo, muma network izvo kwete kuba mhedzisiro yemibvunzo yeDNS, aya matatu mavhisi anowanzo kukwira kumusoro chaiko, kusvika kumidzi yezita maseva ivo pachavo: sevha yenzvimbo haizive kugadzirisa. qwajuixk, saka inoendesa mberi chikumbiro ichi kune inoendesa mberi, iyo inoita zvakafanana, kusvika pakupedzisira a.root-servers.net kana kuti mumwe weβ€œhama” dzake haazomanikidzwi kuti β€œNdine urombo, asi iyi haisi nzvimbo.”

Sezvo paine angangoita 1,67 * 10 ^ 21 anogona kunge ari emanyepo mazita edomasi kubva pamanomwe kusvika gumi nemashanu mavara pakureba, anonyanya kuzivikanwa mumwe nomumwe kubva pabvunzo idzi dzakaitwa pane "yakatendeseka" network, inosvika kune midzi server. Izvi zvakaenzana hafu kubva pamutoro wakazara pamudzi weDNS, maererano nehuwandu kubva kune iyo chikamu chemasumbu root-servers.net, izvo zviri zveVerisign.

Nhoroondo inozvidzokorora

Aka hakasi kekutanga kuti purojekiti igadzirwe nechinangwa chakanakisa akakundikana kana kuti yakapotsa yazadza zviwanikwa zveveruzhinji zvine traffic isingaite - izvi zvakabva zvatiyeuchidza nhoroondo refu uye inosiririsa yeD-Link uye Poul-Henning Kamp's NTP (Network Time Protocol) server pakati pe2000s.

Muna 2005, mugadziri weFreeBSD Poul-Henning, aivewo muridzi weDenmark chete Stratum 1 Network Time Protocol server, akagamuchira mari isingatarisirwe uye hombe yetraffic traffic. Muchidimbu, chikonzero chaive chekuti vagadziri veD-Link vakanyora kero dzeStratum 1 NTP maseva, kusanganisira sevha yeKampa, mufirmware yekambani mutsara wekuchinja, ma routers uye nzvimbo dzekuwana. Izvi zvakabva zvawedzera Kampa's server traffic zvakapetwa kapfumbamwe, zvichiita kuti Danish Internet Exchange (Denmark's Internet Exchange Point) ichinje mutero wayo kubva ku "Free" kuenda ku "$9 pagore."

Dambudziko rakanga risiri rekuti pakanga paine ma routers eD-Link akawandisa, asi kuti "akange asiri mumutsara." Zvakawanda seDNS, NTP inofanirwa kushanda mune yemhando yepamusoro - Stratum 0 maseva anopfuudza ruzivo kuStratum 1 maseva, ayo anopfuudza ruzivo kuStratum 2 maseva, zvichingodaro pasi peiyo hierarchy. Yakajairika router yekumba, switch, kana nzvimbo yekupinda senge iyo D-Link yakanga yarongwa neNTP server kero yaizotumira zvikumbiro kuStratum 2 kana Stratum 3 server.

Chromium purojekiti, pamwe nevavariro dzakanakisa, yakadzokorora dambudziko reNTP mudambudziko reDNS, kurodha midzi yeInternet maseva nezvikumbiro zvavasina kumboitirwa kubata.

Pane tariro yemhinduro inokurumidza

Chromium purojekiti ine yakavhurika sosi bug, izvo zvinoda kudzima Intranet Redirect Detector nekukasira kugadzirisa nyaya iyi. Tinofanira kupa chikwereti kune Chromium chirongwa: bug yakawanikwa zvisati zvaitikakuti Verisign's Matt Thomas akamuunza sei kutariswa kwakawanda neyake kutsanya pa APNIC blog. Iyo bug yakawanikwa muna Chikumi, asi yakaramba yakakanganikwa kusvika pakutumira kwaThomas; Mushure mekutsanya, akatanga kutariswa zvakanyanya.

Zvinotarisirwa kuti dambudziko richagadziriswa munguva pfupi, uye midzi yeDNS maseva haichazofanira kupindura kune inofungidzirwa 60 bhiriyoni mibvunzo yenhema zuva rega rega.

Pamusoro pekodzero dzekutsvaga

Epic maseva - ichi chi VPS paWindows kana Linux ine simba AMD EPYC mhuri processors uye inokurumidza Intel NVMe madhiraivha. Kurumidza kuodha!

Chimwe chezvinhu zveChromium chinogadzira mutoro wakakura pamidzi DNS maseva

Source: www.habr.com

Voeg