youtube老是无法访问 #21

gukey · 2023-05-22T16:48:18Z

gukey
May 22, 2023

我默认就用paopaodns，alpine 上搭建的，alpine dns 设置为了127.0.0.1，之前用可以，现在总是有断联，换成了114，也一样的情况，网关走的是拨号路由，不走翻墙的lede（lede dns就是泡泡dns本身），然后redis缓存也有2MB了，最近几天有时候发现长时间不用，youtube就无法访问，而且装了chrome 插件都无法同步，将dns换成114都可以了，很郁闷，不知道是那地址设置不合适，前来请教下.

Answered by gukey

May 23, 2023

好像是有点问题，请教下这个lede dns 该如何设置好：

C:\Users\Administrator>nslookup www.youtube.com 6.7.8.9
DNS request timed out.
    timeout was 2 seconds.
服务器:  UnKnown
Address:  6.7.8.9

非权威应答:
名称:    youtube-ui.l.google.com
Addresses:  2404:6800:4005:80d::200e
          2404:6800:4005:805::200e
          2404:6800:4005:80a::200e
          2404:6800:4005:80c::200e
          142.250.204.142
          142.251.220.46
          142.251.220.110
          142.250.204.110
          172.217.31.14
          216.58.203.78
          142.251.222.206
          142.251.220.14
          142.250.199.78
          216.58.200.238
          142.250.66.46
          142.251.220.78
          142.250.204.46
          142.251.130.…

View full answer

kkkgo · 2023-05-22T17:06:31Z

kkkgo
May 22, 2023
Maintainer

容器内跑一下debug.sh，把测试结果贴出来。

0 replies

kkkgo · 2023-05-23T03:44:44Z

kkkgo
May 23, 2023
Maintainer

主要你在youtube访问异常的时候可以手动nslookup查一下DNS记录有没有异常，不太清楚你描述的架构，能有个图最好。但我根据你的描述有点像是这个问题：v2ray/v2ray-core#895

0 replies

gukey · 2023-05-23T06:50:06Z

gukey
May 23, 2023
Author

/ # ./usr/sbin/debug.sh
=====PaoPaoDNS docker debug=====
[info] images build time : 2023-05-19 07:17:56 UTC
[info] ========== env info ==========
====ENV TEST====
MEM:50m 100m 200 100mb
prefPC:9
CORES:1
POWCORES:2
ulimit :1048576
FDLIM :4096
TZ:Asia/Shanghai
UPDATE:weekly
DNS_SERVERNAME:PaoPaoDNS,blog.03k.org
SERVER_IP:
ETHIP:172.17.0.2
DNSPORT:53
SOCKS5:no
CNAUTO:yes
IPV6:no
CNFALL:yes
CUSTOM_FORWARD:
AUTO_FORWARD:no
CN_TRACKER:yes
USE_HOSTS:no
HTTP_FILE:no
SAFEMODE:
====ENV TEST====
[info] ========== process info ==========
PID   USER     TIME  COMMAND
    1 root      0:00 {init.sh} /bin/sh /usr/sbin/init.sh
   11 root      0:00 crond
   63 root      0:26 dnscrypt-proxy -config /data/dnscrypt-resolvers/dnscrypt.toml
   72 root      0:00 {watch_list.sh} /bin/sh /usr/sbin/watch_list.sh
   73 root      0:00 {watch_list.sh} /bin/sh /usr/sbin/watch_list.sh
   76 root      0:00 inotifywait -e modify /etc/unbound/named.cache
   77 root      1:37 redis-server unixsocket:/tmp/redis.sock
   92 root      0:31 unbound -c /tmp/unbound_raw.conf -p
   93 root      0:03 unbound -c /tmp/unbound_forward.conf -p
  150 root      0:16 mosdns start -d /tmp -c mosdns.yaml
  160 root      0:00 inotifywait -e modify /data/Country-only-cn-private.mmdb /data/force_cn_list.txt /data/trackerslist.txt /data/for
  168 root      0:00 /bin/sh
  351 root      0:00 /bin/sh
  374 root      0:00 {debug.sh} /bin/sh ./usr/sbin/debug.sh
  377 root      0:00 ps -ef
[info] ========== cn list info ==========
domain:whoami.ds.akahelp.net
domain:whoami.03k.org
[info] ========== reids info ==========
used_memory_human:3.34M
used_memory_rss_human:8.66M
used_memory_peak_human:3.34M
total_system_memory_human:1.94G
used_memory_lua_human:31.00K
used_memory_vm_total_human:63.00K
used_memory_scripts_human:181B
maxmemory_human:100.00M
(integer) 8497
[test] IP test, you will see that all the following IPs are your public network exit IP !
[test] ========== IP TEST START ==========
CN IP URL:
27.227.128.224
27.227.128.224
------------------
Non-CN IP URL:
27.227.128.224
27.227.128.224
27.227.128.224
27.227.128.224
27.227.128.224
------------------
IP INFO:
27.227.128.224
CN,Lanzhou,Gansu
ASN4134/China Telecom
HTTP/1.1
curl/8.1.0
------------------
----mosdns whoami aka dig:
------------------
----local-unbound whoami aka dig:
"ns" "27.227.128.224"
------------------
----mosdns whoami 03k dig:
27.227.128.224
------------------
----local-unbound whoami 03k dig:
27.227.128.224
[test] ========== IP TEST END ==========

[test] The DNS hijacking test, you will see timed out message !
[test] ========== DNS HIJACK START ==========
;; communications error to 6.7.8.9#53: timed out
;; communications error to 6.7.8.9#53: timed out
;; communications error to 6.7.8.9#53: timed out
;; no servers could be reached


[test] ========== DNS HIJACK END ==========
[test] CN domain test, you will see that the DNS resolution result is CN IP !
[test] ========== CN DOMAIN TEST START ==========
----mosdns CN dig:
www.taobao.com.danuoyi.tbcache.com.
125.74.3.230
125.74.3.231
------------------
----local-unbound CN dig:
www.taobao.com.danuoyi.tbcache.com.
125.74.3.230
125.74.3.231
[test] ========== CN DOMAIN TEST END ==========
[test] Non-CN domain test, you will see that the DNS resolution result is correct IP !
[test] ========== Non-CN DOMAIN TEST START ==========
----mosdns Non-CN dig:
youtube-ui.l.google.com.
142.250.66.238
142.250.67.14
------------------
----dnscrypt-unbound NOCN dig:
youtube-ui.l.google.com.
172.217.167.78
142.250.66.238
------------------
----dnscrypt Non-CN dig:
youtube-ui.l.google.com.
142.250.180.14
142.250.187.206
------------------
----dnscrypt-socks5 Non-CN dig:
;; communications error to 127.0.0.1#5303: connection refused
;; communications error to 127.0.0.1#5303: connection refused
;; communications error to 127.0.0.1#5303: connection refused
[test] ========== Non-CN DOMAIN TEST END ==========
[test] IPv6 Dual CN test: you will see that IPv6 is OK !
[test] ========== IPV6 CN DOMAIN TEST START ==========
[test] ========== IPV6 CN DOMAIN TEST END ==========
[test] IPv6 Dual Non-CN test: you will see that IPv6 is empty !
[test] ========== IPV6 Non-CN DOMAIN TEST START ==========
[test] ========== IPV6 Non-CN DOMAIN TEST END ==========
[test] IPv6 only Non-CN test: you will see that IPv6 is ok !
[test] ========== IPV6 ONLY Non-CN DOMAIN TEST START ==========
[test] ========== IPV6 ONLY Non-CN DOMAIN TEST END ==========

[info] ALL TEST FINISH.
/ #

0 replies

kkkgo · 2023-05-23T10:00:01Z

kkkgo
May 23, 2023
Maintainer

从你贴的日志来看DNS各方面都正常呢，你客户端也是直接用的PaoPaoDNS吗，不太清楚你的网络什么拓扑，为什么换114DNS能访问youtube？或者你遇到无法访问的时候，你可以手动nslookup www.youtube.com看看解析结果是否正确。我猜测的话可能是和你代理了UDP导致youtube流量走了QUIC而你的UDP代理不太稳定的原因，你可以尝试把UDP代理禁止了

0 replies

gukey · 2023-05-23T10:35:19Z

gukey
May 23, 2023
Author

hyper-v 虚拟机：

这是重做Win10 系统后情况

翻墙用的passwall：

协议用的 xary 的reality ：xray 状态 running 1.8.1

这是DNS 测试，看着也没问题，但就是无法访问：

C:\Users\Administrator>dig youtube.com @192.168.1.5

; <<>> DiG 9.14.0 <<>> youtube.com @192.168.1.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 194
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;youtube.com.                   IN      A

;; ANSWER SECTION:
youtube.com.            0       IN      A       142.250.218.14

;; Query time: 15 msec
;; SERVER: 192.168.1.5#53(192.168.1.5)
;; WHEN: Tue May 23 18:09:06 ;; MSG SIZE  rcvd: 67


C:\Users\Administrator>dig youtube.com @114.114.114.114

; <<>> DiG 9.14.0 <<>> youtube.com @114.114.114.114
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 45380
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;youtube.com.                   IN      A

;; ANSWER SECTION:
youtube.com.            187     IN      A       142.250.204.110

;; Query time: 0 msec
;; SERVER: 114.114.114.114#53(114.114.114.114)
;; WHEN: Tue May 23 18:09:18 ;; MSG SIZE  rcvd: 56


C:\Users\Administrator>dig youtube.com @223.5.5.5

; <<>> DiG 9.14.0 <<>> youtube.com @223.5.5.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44748
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;youtube.com.                   IN      A

;; ANSWER SECTION:
youtube.com.            177     IN      A       142.250.204.110

;; Query time: 15 msec
;; SERVER: 223.5.5.5#53(223.5.5.5)
;; WHEN: Tue May 23 18:09:28 ;; MSG SIZE  rcvd: 56


C:\Users\Administrator>ipconfig /all

Windows IP 配置
无线局域网适配器 WLAN:

   连接特定的 DNS 后缀 . . . . . . . :
   描述. . . . . . . . . . . . . . . : Intel(R) Wi-Fi 6 AX200 160MHz
   物理地址. . . . . . . . . . . . . : 6C-6A-77-3E-34-1F
   DHCP 已启用 . . . . . . . . . . . : 是
   自动配置已启用. . . . . . . . . . : 是
   本地链接 IPv6 地址. . . . . . . . : fe80::a9:3c7d:d654:98dd%14(首选)
   IPv4 地址 . . . . . . . . . . . . : 192.168.1.100(首选)
   子网掩码  . . . . . . . . . . . . : 255.255.255.0
   获得租约的时间  . . . . . . . . . : 2023年5月23日, 星期二 18:04:47
   租约过期的时间  . . . . . . . . . : 2023年5月23日, 星期二 18:31:49
   默认网关. . . . . . . . . . . . . : 192.168.1.3
   DHCP 服务器 . . . . . . . . . . . : 192.168.1.1
   DHCPv6 IAID . . . . . . . . . . . : 141322871
   DHCPv6 客户端 DUID  . . . . . . . : 00-01-00-01-2B-FE-47-49-50-7B-9D-C9-FC-0A
   DNS 服务器  . . . . . . . . . . . : 192.168.1.5
   TCPIP 上的 NetBIOS  . . . . . . . : 已禁用

0 replies

kkkgo · 2023-05-23T10:51:08Z

kkkgo
May 23, 2023
Maintainer

虽然我觉得你的情况跟DNS关系应该不大，但有一点值得注意，你的客户端在逻辑上，其实是位于网关192.168.1.3下面吗？这类openwrt插件其实DNS都会有劫持的情况，你用什么DNS都会被劫持到openwrt自己那里去，你可以在客户端上测试：

nslookup www.youtube.com 6.7.8.9

在这个测试例子里面，6.7.8.9是一个不存在的DNS服务器，如果他有返回，那么说明你的客户端DNS流量实际上是被劫持的。
另外你这个架构似乎是相当于经过了两层NAT，如果单纯是为了分流的话，可以看看这个相关的项目，可以配合PaoPaoDNS使用：
https://github.com/kkkgo/PaoPaoGateWay

0 replies

gukey · 2023-05-23T10:54:28Z

gukey
May 23, 2023
Author

好像是有点问题，请教下这个lede dns 该如何设置好：

C:\Users\Administrator>nslookup www.youtube.com 6.7.8.9
DNS request timed out.
    timeout was 2 seconds.
服务器:  UnKnown
Address:  6.7.8.9

非权威应答:
名称:    youtube-ui.l.google.com
Addresses:  2404:6800:4005:80d::200e
          2404:6800:4005:805::200e
          2404:6800:4005:80a::200e
          2404:6800:4005:80c::200e
          142.250.204.142
          142.251.220.46
          142.251.220.110
          142.250.204.110
          172.217.31.14
          216.58.203.78
          142.251.222.206
          142.251.220.14
          142.250.199.78
          216.58.200.238
          142.250.66.46
          142.251.220.78
          142.250.204.46
          142.251.130.14
          142.250.204.78
          172.217.24.78
Aliases:  www.youtube.com


C:\Users\Administrator>

貌似应该是passwall dns 解析问题，我重定向到192.168.1.5 可以访问了,谢谢你的解答;

0 replies

kkkgo · 2023-05-23T10:59:35Z

kkkgo
May 23, 2023
Maintainer

哈哈。这边推荐尝试一下更轻量的代理网关项目PaoPao GateWay：https://github.com/kkkgo/PaoPaoGateWay

0 replies

gukey · 2023-05-23T11:02:34Z

gukey
May 23, 2023
Author

nice,一定试试！

0 replies

lyp49472060 · 2023-06-18T07:05:46Z

lyp49472060
Jun 18, 2023

chinadns ng选项关了应该就好了

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

youtube老是无法访问 #21

{{title}}

Replies: 10 comments

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

Select a reply

youtube老是无法访问 #21

gukey May 22, 2023

Replies: 10 comments

kkkgo May 22, 2023 Maintainer

kkkgo May 23, 2023 Maintainer

gukey May 23, 2023 Author

kkkgo May 23, 2023 Maintainer

gukey May 23, 2023 Author

kkkgo May 23, 2023 Maintainer

gukey May 23, 2023 Author

kkkgo May 23, 2023 Maintainer

gukey May 23, 2023 Author

lyp49472060 Jun 18, 2023

gukey
May 22, 2023

kkkgo
May 22, 2023
Maintainer

kkkgo
May 23, 2023
Maintainer

gukey
May 23, 2023
Author

kkkgo
May 23, 2023
Maintainer

gukey
May 23, 2023
Author

kkkgo
May 23, 2023
Maintainer

gukey
May 23, 2023
Author

kkkgo
May 23, 2023
Maintainer

gukey
May 23, 2023
Author

lyp49472060
Jun 18, 2023