关于配置文件和domain-rules

[ixmu]

#  DNS服务器名
server-name smartdns
resolv-hostname yes
#user nobody

#  日志设置
log-level info
log-file /var/log/smartdns/smartdns.log 
log-size 128k
log-num 8
log-console yes

#  IPV4 绑定信息
bind :53
bind-tcp :53


#  DNS缓存条数
cache-size 32768

#  DNS缓存持久化
cache-persist no
cache-file /tmp/smartdns.cache
cache-checkpoint-time 86400

#  域名预先解析
prefetch-domain yes

#  缓存过期
serve-expired yes
serve-expired-ttl 0
serve-expired-reply-ttl 0

#  测速模式
speed-check-mode ping,tcp:80,tcp:443

#  首次响应模式
response-mode first-ping

#  扩展域名 RTP
expand-ptr-from-address yes

#  过期缓存服务功能
serve-expired yes
serve-expired-ttl 0
serve-expired-reply-ttl 5
serve-expired-prefetch-time 28800

#  IPV4/IPV6 双栈优选
dualstack-ip-selection no
dualstack-ip-selection-threshold 10ms

#  强制 AAAA 地址返回 SOA 禁用IPV6
force-AAAA-SOA no

#  黑名单ip
# blacklist-ip [ip/subnet]
conf-file blacklist-ip.conf

#  白名单ip
# whitelist-ip [ip/subnet]
conf-file whitelist-ip.conf

# 上游 UDP DNS private
server 211.139.5.29:53 -group private -whitelist-ip -exclude-default-group
server 211.139.5.30:53 -group private -whitelist-ip -exclude-default-group
server 223.5.5.5:53 -group private -whitelist-ip -exclude-default-group
server 119.29.29.29:53 -group private -whitelist-ip -exclude-default-group

# 上游 TLS DNS public
server-tls dns.google:853 -group public -blacklist-ip
server-tls one.one.one.one:853 -group public -blacklist-ip
server-tls dns.opendns.com:853 -group public -blacklist-ip
server-tls dns.quad9.net:853 -group public -blacklist-ip

#  DNS上游BOOTSTRAP规则
server 114.114.114.114 -bootstrap-dns -exclude-default-group

#  域名规则
domain-set -name china-domain-list -file ./china-domain.conf
domain-rules /domain-set:china-domain-list/ -nameserver private -response-mode first-ping -speed-check-mode ping,tcp:80,tcp:443

domain-set -name gfw-domain-list -file ./gfw-domain.conf
domain-rules /domain-set:gfw-domain-list/ -nameserver public -speed-check-mode none

blacklist-ip.conf 为空
whitelist-ip.conf内容格式为1.0.0.0/10
china-domain.conf内容格式为baidu.com
gfw-domain.conf内容格式为google.com

我的需求为：
1、国内域名使用private组进行解析；响应模式为first-ping；测速模式为ping,tcp:80,tcp:443
2、国外域名使用pubilc组进行解析；跳过测速；用address设定在域名让其自动匹配子域名，仅返回IPV4结果（这一步暂时没有思路）

[ixmu]

发现会漏ip

[PikuZheng]

https://github.com/PikuZheng/smartdns/wiki/%E8%87%AA%E7%94%A8%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6%E5%A4%87%E4%BB%BD 供参考

[PikuZheng]

你的配置可能问题在于 china-domain.conf 这个列表中的域名会同时被 private 和 public 组的上游所解析，一旦public上游返回速度较快或测速较快或其他情形，可能对应的ip不会在 whitelist 中。

[ixmu]

#  DNS服务器名
server-name smartdns
resolv-hostname yes
user nobody

#  日志设置
log-level info
log-file /var/log/smartdns/smartdns.log 
log-size 128k
log-num 8
log-console yes

#  IPV4 绑定信息
bind :53
bind-tcp :53


#  DNS缓存条数
cache-size 32768
rr-ttl-min 300
rr-ttl-max 3600

#  DNS缓存持久化
cache-persist no
cache-file /tmp/smartdns.cache
cache-checkpoint-time 86400

#  域名预先解析
prefetch-domain yes

#  测速模式
speed-check-mode ping,tcp:80,tcp:443

#  首次响应模式
response-mode first-ping

#  扩展域名 RTP
expand-ptr-from-address yes

#  过期缓存服务功能
serve-expired yes
serve-expired-ttl 0
serve-expired-reply-ttl 5
serve-expired-prefetch-time 28800

#  IPV4/IPV6 双栈优选
dualstack-ip-selection no
dualstack-ip-selection-threshold 10ms

#  强制 AAAA 地址返回 SOA 禁用IPV6
force-AAAA-SOA no

#  白名单ip
# whitelist-ip [ip/subnet]
conf-file whitelist-ip.conf

#  黑名单ip
# blacklist-ip [ip/subnet]
conf-file blacklist-ip.conf

#  上游UDP DNS default
server 211.139.5.30:53
server 223.6.6.6:53
server 114.114.115.115:53
server 101.6.6.6:5353

# 上游 UDP DNS private
server 211.139.5.29:53 -group private -whitelist-ip -exclude-default-group
server 223.5.5.5:53 -group private -whitelist-ip -exclude-default-group
server 114.114.114.114:53 -group private -whitelist-ip -exclude-default-group
server 1.2.4.8:53 -group private -whitelist-ip -exclude-default-group

# 上游 TLS DNS public
server-tls dns.google:853 -group public -blacklist-ip -exclude-default-group
server-tls one.one.one.one:853 -group public -blacklist-ip -exclude-default-group
server-tls dns.opendns.com:853 -group public -blacklist-ip -exclude-default-group
server-tls dns.quad9.net:853 -group public -blacklist-ip -exclude-default-group

#  域名规则
domain-set -name domain-set -name direct-list -file ./direct-list.conf
domain-rules /domain-set:direct-list/ -nameserver private

domain-set -name proxy-list -file ./proxy-list.conf
domain-rules /domain-set:proxy-list/ -nameserver public -speed-check-mode none

这样配置是否会有所改善？

[PikuZheng]

原理上是对的，设计上smartdns也确实是这样用。但如果一个网址既在国内组（比如国内组匹配了所有.cn）又是国外的ip，则会无法解析。所以需要谨慎的配置黑白名单ip和域名列表