Icyo iki kizamini kikubwira
DNS Security Extensions, cyangwa DNSSEC, bituma abakemura amazina bagenzura amakuru ya DNS yashyizweho umukono. Iki kizamini kibaza niba ukemura amazina watoranyijwe yanga umukono wakozwe ku bushake ngo ube utemewe. Ibyo bireba ukuri n’ubudahangarwa bw’ibisubizo bya DNS; ntibihisha ibibazo cyangwa ngo byemeze ukemura amazina mushakisha yawe isanzwe ikoresha.
Uko wakora ikizamini
- Injiza aderesi y’ukemura amazina ushaka kugerageza kandi ugumane port ya DNS yatoranyijwe mu magereranya.
- Kora igenzura rya domaine yemewe yashyizweho umukono n’iya domaine yakozwe ku bushake ngo itemerwe.
- Gereranya domaine itemewe igihe igenzura rifunguye n’igihe rifunze, hamwe na domaine yemewe ikoreshwa nk’igenzura.
Uko gupima bikora
Seriveri yacu yohereza ibibazo bya DNS bisanzwe ku ukemura amazina watoranyijwe, ikoresheje UDP na TCP igihe bikenewe. Isaba inyandiko za DNSSEC kandi igasubiramo ikibazo kitemewe hamwe n’ikimenyetso Checking Disabled.
Ibi bibazo bituruka ku muyoboro wa seriveri. Ukemura amazina watoranyijwe n’ibikorwa remezo bya DNS bya domaine z’igenzura biravugishwa; ikizamini ntikimenya byikora utanga DNS-over-HTTPS wa mushakisha yawe.
Gusobanukirwa ibisubizo byawe
- Kwemeza byagenzuwe
- Domaine yemewe ikoreshwa nk’igenzura igarura amakuru, domaine itemewe ikananirwa igihe igenzura rifunguye, kandi amakuru yayo akagaruka igihe igenzura rifunze. Hamwe ibi bishyigikira ko imikono igenzurwa.
- Nta kwemeza
- Ukemura amazina agarura amakuru y’umukono wakozwe ku bushake ngo ube utemewe igihe igenzura rifunguye. Ntiyanze icyo gisubizo kitemewe muri iki kizamini.
- Ntibizwi
- Igihe kirenze, kwangwa, kunanirwa kwa domaine yemewe y’igenzura cyangwa ibisubizo bidahuye bibuza gufata umwanzuro wizewe. Kunanirwa byonyine ntibyemeza ko habaye kwemeza.
Gereranya mbere na nyuma
- Bika ukemura amazina, port, ibisubizo by’igenzura n’ibisobanuro by’ibisubizo nk’ibipimo by’ibanze.
- Hindura ukemura amazina umwe cyangwa igenamiterere rimwe ryo kwemeza kandi usubiremo igenzura rimwe ukoresheje iki gikoresho.
- Gereranya ibisubizo bitatu hamwe. Niba uhinduye igenamiterere rya DNS ry’igikoresho cyawe, menya neza ko ukemura amazina wageragejwe hano ari uwo washakaga gusuzuma.
Imbogamizi z’ikizamini
- Imbogamizi z’umuyoboro hagati ya seriveri n’ukemura amazina zishobora kugira ingaruka ku bisubizo.
- Ikimenyetso cy’amakuru yemejwe cyongeraho ibisobanuro, ariko igereranya rigenzurwa rya domaine yemewe n’itemewe ni ryo kimenyetso nyamukuru.
Icyo wahindura, niba bikenewe
- Imikono itemewe iremewe
- Niba ucunga ukemura amazina, suzuma igenamiterere ryo kwemeza; bitabaye ibyo tekereza ku ukemura amazina wemeza kandi usobanuye mu nyandiko, wongere ugerageze.
- Domaine yemewe y’igenzura na yo irananirwa
- Genzura ko ukemura amazina agerwaho na port ya DNS ishobora gukoreshwa mbere yo kwitirira DNSSEC kunanirwa.
Ibibazo bikunze kubazwa
DNSSEC ihisha ibibazo byanjye bya DNS?
Oya. DNSSEC igenzura ibisubizo byashyizweho umukono. Inzira zihishe za DNS zireba ikindi gice cy’ihuriro.
Igisubizo cyiza kireba DNS ya mushakisha?
Gusa niba mushakisha yawe ikoresha koko ukemura amazina wageragejwe. Igenamiterere rya DNS itekanye rishobora guhitamo indi serivisi.