TLS orqali DNS sahifasining manbasini koʻrish

'''TLS orqali DNS''' ('''DoT''') - bu ''Domen nomlari tizimi'' (DNS) so'rovlari va javoblarini ''Transport Layer Security'' (TLS) protokoli orqali shifrlash orqali tarmoq xavfsizligi protokoli. Usulning maqsadi –  man-in-the-middle hujumlari(MITM) orqali [[DNS]] ma'lumotlarini tinglash va manipulyatsiya qilishning oldini olish orqali foydalanuvchi maxfiyligi va xavfsizligini oshirishdir.

DNS-over-TLS har qanday DNS tranzaksiyalari uchun qo'llanilishi mumkin bo'lsa-da, u birinchi bo'lib stub yoki forwarding relvers va rekursiv rezolverchilar o'rtasida foydalanish uchun standartlashtirilgan. 2016-yil may oyida. Keyingi IETF harakatlari rekursiv va authoriative serverlar ("Authoritative DNS-over-TLS" yoki "ADoT")<ref>{{veb manbasi|last1=Henderson|first1=Karl|last2=April|first2=Tim|last3=Livingood|first3=Jason|title=Authoritative DNS-over-TLS Operational Considerations|url=https://datatracker.ietf.org/doc/draft-hal-adot-operational-considerations/|publisher=Internet Engineering Task Force|access-date=17-iyul 2021-yil|date=2020-02-14}}</ref> va vakolatli serverlar (Zone Transfer-over-TLS yoki "xfr-over-") o'rtasida DoT-dan foydalanishni belgilaydi. TLS")<ref>{{veb manbasi|last1=Mankin|first1=Allison|title=DNS Zone Transfer-over-TLS|url=https://datatracker.ietf.org/doc/html/draft-hzpa-dprive-xfr-over-tls|publisher=Internet Engineering Task Force|access-date=17-iyul 2021-yil|date=2019-07-08}}</ref>.

== Server dasturiy ta'minot ==
BIND 9.17 versiyasidan boshlab DoT ulanishlarini qo'llab-quvvatlaydi<ref>{{veb manbasi|title=4. BIND 9 Configuration Reference — BIND 9  documentation|url=https://bind9.readthedocs.io/en/latest/reference.html?highlight=DoT#interfaces|access-date=2021-11-14|website=bind9.readthedocs.io|language=en}}</ref>. Oldingi versiyalar stunnel orqali proksi-server orqali DoT qobiliyatini taklif qildi<ref>{{veb manbasi|title=Bind - DNS over TLS|url=https://kb.isc.org/article/AA-01386/0/DNS-over-TLS.html|qaralgan sana=2022-05-26|arxivsana=2017-10-20|arxivurl=https://web.archive.org/web/20171020030829/https://kb.isc.org/article/AA-01386/0/DNS-over-TLS.html}}</ref>. Unbound 2018-yil 22-yanvardan beri TLS orqali DNS-ni qoʻllab-quvvatlaydi<ref>{{veb manbasi|url=https://nlnetlabs.nl/svn/unbound/tags/release-1.7.3/doc/Changelog|title=Unbound version 1.7.3 Changelog|access-date=2022-05-26|archive-date=2018-08-07|archive-url=https://web.archive.org/web/20180807064027/https://nlnetlabs.nl/svn/unbound/tags/release-1.7.3/doc/Changelog}}</ref><ref>{{Yangiliklar manbasi|url=https://www.ctrl.blog/entry/unbound-tls-forwarding|title=Actually secure DNS over TLS in Unbound|accessdate=2018-08-07}}</ref>. Unwind 2019-yil 29-yanvardan beri DoT-ni qoʻllab-quvvatlaydi<ref>{{veb manbasi|url=https://marc.info/?l=openbsd-cvs&m=154859286717496&w=2|title=openbsd-cvs mailing list archives}}</ref><ref>{{veb manbasi|url=https://marc.info/?l=openbsd-cvs&m=155408952506689&w=2|title=openbsd-cvs mailing list archives}}</ref>. [[Android]] Pie-ning TLS orqali DNS-ni qo'llab-quvvatlashi bilan ba'zi reklama blokerlari endi VPN va proksi-serverlar kabi odatda ishlatiladigan turli xil ishlov berish usullariga nisbatan o'z xizmatlariga kirishning nisbatan oson usuli sifatida shifrlangan protokoldan foydalanishni qo'llab-quvvatlaydi<ref>{{veb manbasi|url=https://blockerdns.com/|title=blockerDNS - Block Ads and Online Trackers So You Can Browse the Web Privately on Your Android Phone Without Installing an App!|website=blockerdns.com|access-date=2019-08-14}}</ref><ref>{{veb manbasi|url=https://adguard.com/en/blog/adguard-dns-announcement.html|title=The official release of AdGuard DNS — a new unique approach to privacy-oriented DNS|website=AdGuard Blog|language=en|access-date=2019-08-14|arxivsana=2021-09-16|arxivurl=https://web.archive.org/web/20210916223000/https://adguard.com/en/blog/adguard-dns-announcement.html}}</ref><ref>{{veb manbasi|url=https://blahdns.com/|title=Blahdns -- Dns service support DoH, DoT, DNSCrypt|website=blahdns.com|access-date=2019-08-14}}</ref>. Simple DNS Plus, Windows uchun hal qiluvchi va vakolatli DNS server, 2021-yil 28-sentabrda chiqarilgan 9.0 versiyasida DoT-ni qoʻllab-quvvatladi.

== Mijoz dasturiy ta'minot ==
Android 9 (Pie) yoki undan yangiroq versiyada ishlaydigan Android mijozlari TLS orqali DNS-ni qo'llab-quvvatlaydi va agar tarmoq infratuzilmasi, masalan, ISP uni qo'llab-quvvatlasa, standart holda undan foydalanadi<ref>{{veb manbasi|url=https://android-developers.googleblog.com/2018/04/dns-over-tls-support-in-android-p.html|title=DNS over TLS support in Android P Developer Preview|website=Android Developers Blog|language=en|access-date=2019-12-07}}</ref><ref>{{veb manbasi|date=23-avgust 2018-yil|first=Jack|last=Wallen|title=How to enable DNS over TLS in Android Pie|url=https://www.techrepublic.com/article/how-to-enable-dns-over-tls-in-android-pie/|access-date=2021-03-17|website=TechRepublic|language=en}}</ref>.

2018-yil aprel oyida Google Android Pie’ga TLS orqali DNS-ni qoʻllab-quvvatlashini e’lon qildi<ref>{{veb manbasi|date=17-aprel 2018-yil|title=DNS over TLS support in Android P Developer Preview|url=https://security.googleblog.com/2018/04/dns-over-tls-support-in-android-p.html|work=Google Security Blog}}</ref>, bu foydalanuvchilarga Wi-Fi va mobil ulanishlarda DNS-serverni telefon boʻylab oʻrnatish imkonini beradi, bungacha bu imkoniyat faqat root user ochilgan qurilmalar orqali mavjud edi. PowerDNS -dan DNSDist, shuningdek, 1.3.0 versiyasida TLS orqali DNS-ni qo'llab-quvvatlashini e'lon qildi<ref name="DNSDist DNS over TLS">{{veb manbasi|title=DNS-over-TLS|url=https://dnsdist.org/guides/dns-over-tls.html|access-date=25-aprel 2018-yil|website=dnsdist.org}}</ref>.

[[Linux]] va [[Microsoft Windows|Windows]] foydalanuvchilari NLnet Labs stubby demoni yoki Knot Resolver orqali mijoz sifatida TLS orqali DNS dan foydalanishlari mumkin<ref>{{Veb manbasi|url=https://www.knot-resolver.cz/}}</ref>. Shu bilan bir qatorda ular getdns-utils<ref>{{Citation|url=https://packages.ubuntu.com/search?keywords=getdns-utils|title=Package: getdns-utils|access-date=2019-04-04|language=en}}</ref> ni getdns_query vositasi bilan to'g'ridan-to'g'ri DoT dan foydalanish uchun o'rnatishlari mumkin. NLnet Labs tomonidan bog'lanmagan DNS-resolver ham TLS orqali DNS-ni qo'llab-quvvatlaydi<ref>{{veb manbasi|title=Unbound - About|url=https://nlnetlabs.nl/projects/unbound/about/|website=NLnet Labs|language=en|access-date=2020-05-26}}</ref>.

Apple [[iOS]] 14 tizimi TLS orqali DNS (va HTTPS orqali DNS) uchun [[Ishlatuv tizimi|operatsion tizim]] darajasida qoʻllab-quvvatlashni joriy qildi. iOS DoT serverlarini qo'lda sozlash imkonini bermaydi va konfiguratsiyani o'zgartirish uchun uchinchi tomon ilovasidan foydalanishni talab qiladi<ref>{{veb manbasi|last=Cimpanu|first=Catalin|title=Apple adds support for encrypted DNS (DoH and DoT)|url=https://www.zdnet.com/article/apple-adds-support-for-encrypted-dns-doh-and-dot/|access-date=2020-10-03|website=ZDNet|language=en}}</ref>.

systemd-resolved - bu faqat Linux uchun moʻljallangan dastur boʻlib, uni <code>/etc/systemd/resolved.conf</code> da <code>DNSOverTLS</code> opsiyasini yoqish orqali TLS orqali DNS-dan foydalanish uchun sozlash mumkin<ref>{{veb manbasi|title=resolved.conf manual page|url=https://www.freedesktop.org/software/systemd/man/resolved.conf.html#DNSOverTLS=|access-date=16-dekabr 2019-yil}}</ref><ref>{{veb manbasi|title=Fedora Magazine: Use DNS over TLS|date=10-iyul 2020-yil|url=https://fedoramagazine.org/use-dns-over-tls/|access-date=4-sentabr 2020-yil}}</ref>. Ko'pgina asosiy Linux distributivlarida starndart holatda bu opsiya yoqilgan bo'ladi<ref>{{veb manbasi|title=Systemd adoption|url=https://en.wikipedia.org/wiki/Systemd#Adoption|access-date=16-dekabr 2019-yil}}</ref>. 

personalDNSfilter<ref>{{veb manbasi|title=personalDNSfilter - a personal open source dns filter for stopping ads and more|url=https://zenz-solutions.de/personaldnsfilter/|website=zenz-solutions.de|access-date=2020-05-26}}</ref> – bu ochiq manba DNS filtri boʻlib, DoT va HTTPS (DoH) orqali DNS -ni qoʻllab-quvvatlaydigan Java-ni yoqadigan qurilmalar, shu jumladan Android uchun.

Nebulo<ref>{{veb manbasi|title=Nebulo - DNS Changer for DNS over HTTPS/TLS - Apps on Google Play|url=https://play.google.com/store/apps/details?id=com.frostnerd.smokescreen&hl=en_US|website=play.google.com|language=en|access-date=2020-05-26}}</ref>. Android uchun ochiq manba DNS oʻzgartiruvchi ilova boʻlib, DoT va DoHni qoʻllab-quvvatlaydi.

== Manbalar ==
{{manbalar}}

{{Turkumsiz|date=Aprel 2024}}