如果unbound递归转发不是dnscrypt，而是转发给自建mosdns的可行吗？ #23

4thanks · 2023-05-28T13:07:49Z

4thanks
May 28, 2023

自从搞dns后，偶尔有意外发现，经过一段时间使用比对后，感觉mosdns自定义多组dns比dnscrypt好用些（可能不够严谨）。

比如Instagram app，之前偶然在手机使用apad.pro的doh dns，在电信和联通网络测试过是可以正常使用的，虽然偶尔不稳定，但够用。
后来在路由也从smartdns换到mosdns，把已知的 DNS 提供商加入自定义多组dns，类似下面的配置，国内国外fallback，基本能够满足我偶尔访问连接一些不太稳定的国外网站。

在使用paopaodns后那些“边缘不稳定”的国外网站又不能“正常”访问连接了，所以想着paopaodns是不是可以逆向递归mosdns呢？感觉比较小众需求，不知道可不可行？

  - tag: forward_local
    type: forward
    args:
      concurrent: 3
      upstreams:
        - addr: 'https://doh.pub/dns-query'
          dial_addr: '1.12.12.12:443'
        - addr: 'https://doh.pub/dns-query'
          dial_addr: '120.53.53.53:443'
        - addr: 'tls://dot.pub'
          dial_addr: '1.12.12.12:853'
        - addr: 'tls://dot.pub'
          dial_addr: '120.53.53.53:853'
        - addr: 'https://dns.alidns.com/dns-query'
          dial_addr: '223.5.5.5:443'
        - addr: 'https://dns.alidns.com/dns-query'
          dial_addr: '223.6.6.6:443'
        - addr: 'tls://dns.alidns.com'
          dial_addr: '223.5.5.5:853'
        - addr: 'tls://dns.alidns.com'
          dial_addr: '223.6.6.6:853'
        - ....
           ....

  - tag: forward_remote
    type: forward
    args:
      concurrent: 3
      upstreams:
        - addr: 'https://dns.google/dns-query'
          dial_addr: '8.8.4.4:443'
        - addr: 'https://dns.google/dns-query'
          dial_addr: '8.8.8.8:443'
        - addr: 'tls://dns.google'
          dial_addr: '8.8.4.4:853'
        - addr: 'tls://dns.google'
          dial_addr: '8.8.8.8:853'
        - addr: 'https://cloudflare-dns.com/dns-query'
          dial_addr: '1.0.0.1:443'
        - addr: 'https://cloudflare-dns.com/dns-query'
          dial_addr: '1.1.1.1:443'
        - addr: 'tls://1dot1dot1dot1.cloudflare-dns.com'
          dial_addr: '1.0.0.1:853'
        - addr: 'tls://1dot1dot1dot1.cloudflare-dns.com'
          dial_addr: '1.1.1.1:853'
        - ....
           ....

  - tag: local_ip_sequence
    type: sequence
    args:
      - exec: $cn_local
      - matches:
          - 'resp_ip $ip_set_local'
         exec: accept
      - exec: drop_resp

  - tag: remote_sequence
    type: sequence
    args:
      - exec: $forward_remote
      - exec: accept

  - tag: "fallback"
    type: "fallback"
    args:
      primary: local_ip_sequence
      secondary: remote_sequence
      threshold: 500
      always_standby: true

kkkgo · 2023-05-28T14:29:54Z

kkkgo
May 28, 2023
Maintainer

“递归”是对域名权威服务器查询的结果，你描述的用“递归”这个词其实不准确，你说的其实是转发，国外IP的话是会加密转发到dnscrypt，而dnscrypt本身是有负载均衡和选择低延迟服务器转发的功能的（你列的那些服务器也在dnscrypt的范围），跟你上面写的“forward_remote”一样的原理，至于你不能访问某个网站，你可以使用nslookup查询具体的域名看看解析结果是否正常，或者和你上面列的DNS的解析结果有什么不一样，如果解析结果都差不多，那么应该不是DNS的问题，而是他就是不能访问了（比如敏感时期或者网络波动）。

22 replies

kkkgo Jun 1, 2023
Maintainer

docker run -d \
--name paopaodns \
-v /home/mydata:/data \
-e CNAUTO=yes \
--restart unless-stopped \
-p 53:53/tcp -p 53:53/udp \
sliamb/paopaodns

在这个命令行中， -p 53:53/udp的意思就是映射宿主的53端口到该docker的53端口。你应该改的是 -p 5333:53/udp

kkkgo Jun 1, 2023
Maintainer

包括你改unbound.conf，你需要指定具体的IP，不然127.0.0.1只是指的该容器内部端口通信。
/data/挂出来的配置就是给你改的，mosdns.yaml和unbound.conf都可以改，改了重启容器生效。

4thanks Jun 1, 2023
Author

不知道是不是我的表达有误，我想微调就只是该容器内部端口通信，修改调整后是按这个unbound(redis)→mosdns→wan/Internet逻辑测试

在这个命令行中， -p 53:53/udp的意思就是映射宿主的53端口到该docker的53端口。你应该改的是 -p 5333:53/udp

所以宿主的53端口应该是映射到unbound的才对。

kkkgo Jun 1, 2023
Maintainer

那你想改什么直接改/data/下面的配置就好了。

4thanks Jun 1, 2023
Author

好的，我这几天试试，感谢对我这小白不厌其烦的回答

kkkgo · 2023-05-28T14:44:10Z

kkkgo
May 28, 2023
Maintainer

你可以在这里找到PaoPaoDNS使用的所有dnscrypt上游：https://dnscrypt.info/public-servers/
注：不包括会过滤的服务器（描述中带禁止标志的）

0 replies

4thanks · 2023-06-08T03:11:09Z

4thanks
Jun 8, 2023
Author

1个坏消息1个好消息，坏消息docker搞崩了重置，好消息是重置后外网意外流畅，像Instagram比之前好上太多了。但又新的问题，国内的很慢，尤其是在线视频看动漫电影很卡，用网易DNS检测工具显示dns都是国外的，小几率是国内，感觉目前的分流有点问题。

8 replies

4thanks Jun 8, 2023
Author

这是目前在用的版本，我先贴出备用，你对比下。

您好，尊敬的网易用户
您的IP地址信息: 101.87.73.5 上海市上海市电信
您的DNS地址信息: 143.244.33.74
缺少地址对应信息

您好，尊敬的网易用户
您的IP地址信息: 101.87.73.5 上海市上海市电信
您的DNS地址信息: 164.68.121.162 巴伐利亚州纽伦堡
您的DNS设置可能存在问题，请联系您的ISP服务商

测试nslookup -type=TXT whoami.ds.akahelp.net
docker内

/ # nslookup -type=TXT whoami.ds.akahelp.net
;; Got SERVFAIL reply from 127.0.0.1, trying next server
;; Got SERVFAIL reply from 223.5.5.5, trying next server
Server:         1.0.0.1
Address:        1.0.0.1#53

** server can't find whoami.ds.akahelp.net: SERVFAIL

电脑的

PS C:\Users\4thanks.mobile> nslookup -type=TXT whoami.ds.akahelp.net
服务器:  OpenWrt.lan
Address:  192.168.5.1

*** OpenWrt.lan 找不到 whoami.ds.akahelp.net: Server failed
PS C:\Users\4thanks.mobile>

debug

/ # debug.sh
ping: bad address 'whoami.03k.org'
=====PaoPaoDNS docker debug=====
[info] images build time : 2023-06-07 13:05:33 UTC
[info] ========== env info ==========
====ENV TEST====
MEM:100k 200k 200 16mb
prefPC:1
CORES:1
POWCORES:1
ulimit :1048576
FDLIM :1
TZ:Asia/Shanghai
UPDATE:weekly
DNS_SERVERNAME:PaoPaoDNS,blog.03k.org
SERVER_IP:none
ETHIP:172.17.0.2
DNSPORT:53
SOCKS5:IP:PORT
CNAUTO:yes
IPV6:no
CNFALL:yes
CUSTOM_FORWARD:IP:PORT
AUTO_FORWARD:no
AUTO_FORWARD_CHECK:yes
CN_TRACKER:yes
USE_HOSTS:no
HTTP_FILE:no
SAFEMODE:
====ENV TEST====
[info] ========== process info ==========
PID   USER     TIME  COMMAND
    1 root      0:00 {init.sh} /bin/sh /usr/sbin/init.sh
   20 root      0:01 crond
   85 root      9:47 dnscrypt-proxy -config /data/dnscrypt-resolvers/dnscrypt.toml
  104 root      0:11 unbound -c /tmp/unbound_forward.conf -p
  119 root      7:27 redis-server unixsocket:/tmp/redis.sock
  124 root      1:05 unbound -c /tmp/unbound_raw.conf -p
  170 root      0:00 /bin/sh
  271 root      2:03 mosdns start -d /tmp -c mosdns.yaml
  296 root      0:00 {watch_list.sh} /bin/sh /usr/sbin/watch_list.sh
  297 root      0:00 {watch_list.sh} /bin/sh /usr/sbin/watch_list.sh
  299 root      0:00 inotifywait -e modify,delete /etc/unbound/named.cache
  301 root      0:00 inotifywait -e modify,delete /data/Country-only-cn-private.mmdb /data/force_cn_list.txt /data/force_nocn_list.txt /data/t
  540 root      0:00 /bin/sh
  568 root      0:00 {debug.sh} /bin/sh /usr/sbin/debug.sh
  571 root      0:00 ps -ef
[info] ========== cn list info ==========
domain:whoami.ds.akahelp.net
domain:whoami.03k.org
[info] ========== reids info ==========
used_memory_human:1.15M
used_memory_rss_human:5.05M
used_memory_peak_human:1.15M
total_system_memory_human:495.86M
used_memory_lua_human:22.00K
used_memory_vm_total_human:45.00K
used_memory_scripts_human:105B
maxmemory_human:16.00M
(integer) 1368
[test] IP test, you will see that all the following IPs are your public network exit IP !
[test] ========== IP TEST START ==========
CN IP URL:
101.87.73.5
------------------
Non-CN IP URL:
101.87.73.5
101.87.73.5
101.87.73.5
101.87.73.5
101.87.73.5
------------------
IP INFO:
curl: (6) Could not resolve host: ip.03k.org

------------------
----mosdns whoami aka dig:
------------------
----local-unbound whoami aka dig:
------------------
----mosdns whoami 03k dig:
------------------
----local-unbound whoami 03k dig:
[test] ========== IP TEST END ==========

[test] The DNS hijacking test, you will see timed out message !
[test] ========== DNS HIJACK START ==========
Server:         6.7.8.9
Address:        6.7.8.9#53

Non-authoritative answer:
www.qq.com      canonical name = ins-r23tsuuf.ias.tencent-cloud.net.
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 101.91.22.57
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 101.91.42.232

[test] ========== DNS HIJACK END ==========
[test] CN domain test, you will see that the DNS resolution result is CN IP !
[test] ========== CN DOMAIN TEST START ==========
----mosdns CN dig:
www.taobao.com.danuoyi.tbcache.com.
128.1.157.232
128.1.157.233
------------------
----local-unbound CN dig:
[test] ========== CN DOMAIN TEST END ==========
[test] Non-CN domain test, you will see that the DNS resolution result is correct IP !
[test] ========== Non-CN DOMAIN TEST START ==========
----mosdns Non-CN dig:
youtube-ui.l.google.com.
172.217.168.238
142.250.179.174
------------------
----dnscrypt-unbound NOCN dig:
youtube-ui.l.google.com.
216.58.222.14
142.251.128.14
------------------
----dnscrypt Non-CN dig:
youtube-ui.l.google.com.
142.251.129.174
142.251.129.142
------------------
----dnscrypt-socks5 Non-CN dig:
;; communications error to 127.0.0.1#5303: connection refused
;; communications error to 127.0.0.1#5303: connection refused
;; communications error to 127.0.0.1#5303: connection refused
[test] ========== Non-CN DOMAIN TEST END ==========
[test] IPv6 Dual CN test: you will see that IPv6 is OK !
[test] ========== IPV6 CN DOMAIN TEST START ==========
[test] ========== IPV6 CN DOMAIN TEST END ==========
[test] IPv6 Dual Non-CN test: you will see that IPv6 is empty !
[test] ========== IPV6 Non-CN DOMAIN TEST START ==========
[test] ========== IPV6 Non-CN DOMAIN TEST END ==========
[test] IPv6 only Non-CN test: you will see that IPv6 is ok !
[test] ========== IPV6 ONLY Non-CN DOMAIN TEST START ==========
[test] ========== IPV6 ONLY Non-CN DOMAIN TEST END ==========

[info] ALL TEST FINISH.

kkkgo Jun 8, 2023
Maintainer

你这旧的已经有问题嘞，6.7.8.9那里是DNS劫持测试，不应该有任何结果返回的，有结果说明你的容器的上游网络DNS被劫持DNS流量了

4thanks Jun 8, 2023
Author

你这旧的已经有问题嘞，6.7.8.9那里是DNS劫持测试，不应该有任何结果返回的，有结果说明你的容器的上游网络DNS被劫持DNS流量了

这倒提醒到我了，docker搞崩后，openwrt也整个重置了，防火墙那默认转发忘记注释了。注释去掉重启，现在正常了，国外也还行。

4thanks Jun 8, 2023
Author

这个应该是正常的吧？不过在启动日志里有个错误stdout: Network error: https://raw.githubusercontent.com/kkkgo/Country-only-cn-private.mmdb/main/Country-only-cn-private.mmdb.sha256sum

Address: 101.91.22.57
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 101.91.42.232

[test] ========== DNS HIJACK END ==========
[test] CN domain test, you will see that the DNS resolution result is CN IP !
[test] ========== CN DOMAIN TEST START ==========
----mosdns CN dig:
www.taobao.com.danuoyi.tbcache.com.
128.1.157.232
128.1.157.233
------------------
----local-unbound CN dig:
[test] ========== CN DOMAIN TEST END ==========
[test] Non-CN domain test, you will see that the DNS resolution result is correct IP !
[test] ========== Non-CN DOMAIN TEST START ==========
----mosdns Non-CN dig:
youtube-ui.l.google.com.
172.217.168.238
142.250.179.174
------------------
----dnscrypt-unbound NOCN dig:
youtube-ui.l.google.com.
216.58.222.14
142.251.128.14
------------------
----dnscrypt Non-CN dig:
youtube-ui.l.google.com.
142.251.129.174
142.251.129.142
------------------
----dnscrypt-socks5 Non-CN dig:
;; communications error to 127.0.0.1#5303: connection refused
;; communications error to 127.0.0.1#5303: connection refused
;; communications error to 127.0.0.1#5303: connection refused
[test] ========== Non-CN DOMAIN TEST END ==========
[test] IPv6 Dual CN test: you will see that IPv6 is OK !
[test] ========== IPV6 CN DOMAIN TEST START ==========
[test] ========== IPV6 CN DOMAIN TEST END ==========
[test] IPv6 Dual Non-CN test: you will see that IPv6 is empty !
[test] ========== IPV6 Non-CN DOMAIN TEST START ==========
[test] ========== IPV6 Non-CN DOMAIN TEST END ==========
[test] IPv6 only Non-CN test: you will see that IPv6 is ok !
[test] ========== IPV6 ONLY Non-CN DOMAIN TEST START ==========
[test] ========== IPV6 ONLY Non-CN DOMAIN TEST END ==========

[info] ALL TEST FINISH.
root@OpenWrt:~# docker exec -it paopaodns /bin/sh
/ # nslookup -type=TXT whoami.ds.akahelp.net

;; Got SERVFAIL reply from 127.0.0.1, trying next server
;; Got SERVFAIL reply from 223.5.5.5, trying next server
Server:         1.0.0.1
Address:        1.0.0.1#53

** server can't find whoami.ds.akahelp.net: SERVFAIL

/ #
/ # nslookup -type=TXT whoami.ds.akahelp.net
;; Got SERVFAIL reply from 127.0.0.1, trying next server
;; Got SERVFAIL reply from 223.5.5.5, trying next server
Server:         1.0.0.1
Address:        1.0.0.1#53

** server can't find whoami.ds.akahelp.net: SERVFAIL

/ # eixt
/bin/sh: eixt: not found
/ # exit
root@OpenWrt:~# docker exec -it paopaotest /bin/sh
Error: No such container: paopaotest
root@OpenWrt:~# docker exec -it paopao_test /bin/sh
/ # nslookup -type=TXT whoami.ds.akahelp.net
;; Got SERVFAIL reply from 127.0.0.1, trying next server
;; Got SERVFAIL reply from 223.5.5.5, trying next server
Server:         1.0.0.1
Address:        1.0.0.1#53

** server can't find whoami.ds.akahelp.net: SERVFAIL

/ # debug.sh
ping: bad address 'whoami.03k.org'
=====PaoPaoDNS docker debug=====
[info] images build time : 2023-06-08 06:25:40 UTC
[info] ========== env info ==========
====ENV TEST====
MEM:100k 200k 200 16mb
prefPC:1
CORES:1
POWCORES:1
ulimit :1048576
FDLIM :1
TZ:Asia/Shanghai
UPDATE:weekly
DNS_SERVERNAME:PaoPaoDNS,blog.03k.org
SERVER_IP:none
ETHIP:172.17.0.3
DNSPORT:53
SOCKS5:IP:PORT
CNAUTO:yes
IPV6:no
CNFALL:yes
CUSTOM_FORWARD:192.168.1.3:53
AUTO_FORWARD:yes
AUTO_FORWARD_CHECK:yes
CN_TRACKER:yes
USE_HOSTS:no
HTTP_FILE:no
SAFEMODE:
====ENV TEST====
[info] ========== process info ==========
PID   USER     TIME  COMMAND
    1 root      0:00 {init.sh} /bin/sh /usr/sbin/init.sh
   20 root      0:00 crond
   94 root      0:08 dnscrypt-proxy -config /data/dnscrypt-resolvers/dnscrypt.toml
   96 root      0:00 mosdns start -d /tmp -c mosdns.yaml
  114 root      0:00 {data_update.sh} /bin/sh /usr/sbin/data_update.sh
  117 root      0:00 unbound -c /tmp/unbound_forward.conf -p
  124 root      0:00 {watch_list.sh} /bin/sh /usr/sbin/watch_list.sh
  125 root      0:00 {watch_list.sh} /bin/sh /usr/sbin/watch_list.sh
  128 root      0:00 inotifywait -e modify,delete /data/Country-only-cn-private.mmdb /data/force_cn_list.txt /data/force_nocn_list.txt /data/t
  129 root      0:00 inotifywait -e modify,delete /etc/unbound/named.cache
  131 root      0:00 unbound -c /tmp/unbound_raw.conf -p
  132 root      0:02 redis-server unixsocket:/tmp/redis.sock
  165 root      0:00 {data_update.sh} /bin/sh /usr/sbin/data_update.sh
  166 root      0:00 curl -4 --connect-timeout 10 -s https://raw.githubusercontent.com/kkkgo/Country-only-cn-private.mmdb/main/Country-only-cn
  167 root      0:00 grep -Eo [0-9A-Za-z]{64}
  168 root      0:00 head -1
  170 root      0:00 /bin/sh
  178 root      0:00 {debug.sh} /bin/sh /usr/sbin/debug.sh
  181 root      0:00 ps -ef
[info] ========== cn list info ==========
domain:whoami.ds.akahelp.net
domain:whoami.03k.org
[info] ========== reids info ==========
used_memory_human:749.68K
used_memory_rss_human:4.49M
used_memory_peak_human:779.24K
total_system_memory_human:495.86M
used_memory_lua_human:22.00K
used_memory_vm_total_human:45.00K
used_memory_scripts_human:105B
maxmemory_human:16.00M
(integer) 11
[test] IP test, you will see that all the following IPs are your public network exit IP !
[test] ========== IP TEST START ==========
CN IP URL:
101.87.73.5
------------------
Non-CN IP URL:
101.87.73.5
101.87.73.5
101.87.73.5
101.87.73.5
101.87.73.5
------------------
IP INFO:
curl: (6) Could not resolve host: ip.03k.org

------------------
----mosdns whoami aka dig:
------------------
----local-unbound whoami aka dig:
------------------
----mosdns whoami 03k dig:
------------------
----local-unbound whoami 03k dig:
[test] ========== IP TEST END ==========

[test] The DNS hijacking test, you will see timed out message !
[test] ========== DNS HIJACK START ==========
Server:         6.7.8.9
Address:        6.7.8.9#53

Non-authoritative answer:
www.qq.com      canonical name = news.qq.com.edgekey.net.
news.qq.com.edgekey.net canonical name = e6156.dscf.akamaiedge.net.
Name:   e6156.dscf.akamaiedge.net
Address: 104.82.18.94

[test] ========== DNS HIJACK END ==========
[test] CN domain test, you will see that the DNS resolution result is CN IP !
[test] ========== CN DOMAIN TEST START ==========
----mosdns CN dig:
www.taobao.com.danuoyi.tbcache.com.
128.1.157.232
128.1.157.233
------------------
----local-unbound CN dig:
[test] ========== CN DOMAIN TEST END ==========
[test] Non-CN domain test, you will see that the DNS resolution result is correct IP !
[test] ========== Non-CN DOMAIN TEST START ==========
----mosdns Non-CN dig:
youtube-ui.l.google.com.
142.251.111.190
142.251.111.93
------------------
----dnscrypt-unbound NOCN dig:
youtube-ui.l.google.com.
142.250.188.238
142.250.176.14
------------------
----dnscrypt Non-CN dig:
youtube-ui.l.google.com.
142.251.46.174
142.251.46.206
------------------
----dnscrypt-socks5 Non-CN dig:
;; communications error to 127.0.0.1#5303: connection refused
;; communications error to 127.0.0.1#5303: connection refused
;; communications error to 127.0.0.1#5303: connection refused
[test] ========== Non-CN DOMAIN TEST END ==========
[test] IPv6 Dual CN test: you will see that IPv6 is OK !
[test] ========== IPV6 CN DOMAIN TEST START ==========
[test] ========== IPV6 CN DOMAIN TEST END ==========
[test] IPv6 Dual Non-CN test: you will see that IPv6 is empty !
[test] ========== IPV6 Non-CN DOMAIN TEST START ==========
[test] ========== IPV6 Non-CN DOMAIN TEST END ==========
[test] IPv6 only Non-CN test: you will see that IPv6 is ok !
[test] ========== IPV6 ONLY Non-CN DOMAIN TEST START ==========
[test] ========== IPV6 ONLY Non-CN DOMAIN TEST END ==========

[info] ALL TEST FINISH.
/ #
/ # debug.sh
=====PaoPaoDNS docker debug=====
[info] images build time : 2023-06-08 06:25:40 UTC
[info] ========== env info ==========
====ENV TEST====
MEM:100k 200k 200 16mb
prefPC:1
CORES:1
POWCORES:1
ulimit :1048576
FDLIM :1
TZ:Asia/Shanghai
UPDATE:weekly
DNS_SERVERNAME:PaoPaoDNS,blog.03k.org
SERVER_IP:none
ETHIP:172.17.0.2
DNSPORT:53
SOCKS5:IP:PORT
CNAUTO:yes
IPV6:no
CNFALL:yes
CUSTOM_FORWARD:IP:PORT
AUTO_FORWARD:no
AUTO_FORWARD_CHECK:yes
CN_TRACKER:yes
USE_HOSTS:no
HTTP_FILE:no
SAFEMODE:
====ENV TEST====
[info] ========== process info ==========
PID   USER     TIME  COMMAND
    1 root      0:00 {init.sh} /bin/sh /usr/sbin/init.sh
   20 root      0:00 crond
   85 root      0:15 dnscrypt-proxy -config /data/dnscrypt-resolvers/dnscrypt.toml
   87 root      0:02 mosdns start -d /tmp -c mosdns.yaml
   96 root      0:00 {data_update.sh} /bin/sh /usr/sbin/data_update.sh
  105 root      0:00 unbound -c /tmp/unbound_forward.conf -p
  114 root      0:03 redis-server unixsocket:/tmp/redis.sock
  115 root      0:00 {watch_list.sh} /bin/sh /usr/sbin/watch_list.sh
  116 root      0:00 {watch_list.sh} /bin/sh /usr/sbin/watch_list.sh
  117 root      0:00 inotifywait -e modify,delete /etc/unbound/named.cache
  120 root      0:00 inotifywait -e modify,delete /data/Country-only-cn-private.mmdb /data/force_cn_list.txt /data/force_nocn_list.txt /data/t
  122 root      0:05 unbound -c /tmp/unbound_raw.conf -p
  166 root      0:00 {data_update.sh} /bin/sh /usr/sbin/data_update.sh
  167 root      0:00 curl -4 --connect-timeout 10 -s https://raw.githubusercontent.com/kkkgo/Country-only-cn-private.mmdb/main/Country-only-cn
  168 root      0:00 grep -Eo [0-9A-Za-z]{64}
  170 root      0:00 head -1
  187 root      0:00 /bin/sh
  196 root      0:00 {debug.sh} /bin/sh /usr/sbin/debug.sh
  199 root      0:00 ps -ef
[info] ========== cn list info ==========
domain:whoami.ds.akahelp.net
domain:whoami.03k.org
[info] ========== reids info ==========
used_memory_human:812.49K
used_memory_rss_human:4.60M
used_memory_peak_human:813.42K
total_system_memory_human:495.86M
used_memory_lua_human:22.00K
used_memory_vm_total_human:45.00K
used_memory_scripts_human:105B
maxmemory_human:16.00M
(integer) 245
[test] IP test, you will see that all the following IPs are your public network exit IP !
[test] ========== IP TEST START ==========
CN IP URL:
101.87.73.5
101.87.73.5
------------------
Non-CN IP URL:
101.87.73.5
101.87.73.5
101.87.73.5
101.87.73.5
101.87.73.5
------------------
IP INFO:
101.87.73.5
CN,Shanghai,Shanghai
ASN4812/China Telecom
HTTP/1.1
curl/8.1.1
------------------
----mosdns whoami aka dig:
"ns" "101.87.73.5"
------------------
----local-unbound whoami aka dig:
"ns" "101.87.73.5"
------------------
----mosdns whoami 03k dig:
101.87.73.5
------------------
----local-unbound whoami 03k dig:
101.87.73.5
[test] ========== IP TEST END ==========

[test] The DNS hijacking test, you will see timed out message !
[test] ========== DNS HIJACK START ==========
;; communications error to 6.7.8.9#53: timed out
;; communications error to 6.7.8.9#53: timed out
;; communications error to 6.7.8.9#53: timed out
;; no servers could be reached


[test] ========== DNS HIJACK END ==========
[test] CN domain test, you will see that the DNS resolution result is CN IP !
[test] ========== CN DOMAIN TEST START ==========
----mosdns CN dig:
www.taobao.com.danuoyi.tbcache.com.
106.227.21.185
106.227.21.184
------------------
----local-unbound CN dig:
www.taobao.com.danuoyi.tbcache.com.
106.227.21.185
106.227.21.184
[test] ========== CN DOMAIN TEST END ==========
[test] Non-CN domain test, you will see that the DNS resolution result is correct IP !
[test] ========== Non-CN DOMAIN TEST START ==========
----mosdns Non-CN dig:
youtube-ui.l.google.com.
172.253.122.190
172.253.122.93
------------------
----dnscrypt-unbound NOCN dig:
youtube-ui.l.google.com.
172.217.23.206
216.58.208.110
------------------
----dnscrypt Non-CN dig:
youtube-ui.l.google.com.
172.253.122.190
172.253.122.93
------------------
----dnscrypt-socks5 Non-CN dig:
;; communications error to 127.0.0.1#5303: connection refused
;; communications error to 127.0.0.1#5303: connection refused
;; communications error to 127.0.0.1#5303: connection refused
[test] ========== Non-CN DOMAIN TEST END ==========
[test] IPv6 Dual CN test: you will see that IPv6 is OK !
[test] ========== IPV6 CN DOMAIN TEST START ==========
[test] ========== IPV6 CN DOMAIN TEST END ==========
[test] IPv6 Dual Non-CN test: you will see that IPv6 is empty !
[test] ========== IPV6 Non-CN DOMAIN TEST START ==========
[test] ========== IPV6 Non-CN DOMAIN TEST END ==========
[test] IPv6 only Non-CN test: you will see that IPv6 is ok !
[test] ========== IPV6 ONLY Non-CN DOMAIN TEST START ==========
[test] ========== IPV6 ONLY Non-CN DOMAIN TEST END ==========

[info] ALL TEST FINISH.

kkkgo Jun 8, 2023
Maintainer

githubusercontent的错误不用管，那个是GEOIP数据更新，下载失败他会使用另外一个地址下重试

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

如果unbound递归转发不是dnscrypt，而是转发给自建mosdns的可行吗？ #23

{{title}}

Replies: 3 comments 30 replies

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

{{title}}

Select a reply

如果unbound递归转发不是dnscrypt，而是转发给自建mosdns的可行吗？ #23

4thanks May 28, 2023

Replies: 3 comments · 30 replies

kkkgo May 28, 2023 Maintainer

kkkgo Jun 1, 2023 Maintainer

kkkgo Jun 1, 2023 Maintainer

4thanks Jun 1, 2023 Author

kkkgo Jun 1, 2023 Maintainer

4thanks Jun 1, 2023 Author

kkkgo May 28, 2023 Maintainer

4thanks Jun 8, 2023 Author

4thanks Jun 8, 2023 Author

kkkgo Jun 8, 2023 Maintainer

4thanks Jun 8, 2023 Author

4thanks Jun 8, 2023 Author

kkkgo Jun 8, 2023 Maintainer

4thanks
May 28, 2023

Replies: 3 comments 30 replies

kkkgo
May 28, 2023
Maintainer

kkkgo Jun 1, 2023
Maintainer

kkkgo Jun 1, 2023
Maintainer

4thanks Jun 1, 2023
Author

kkkgo Jun 1, 2023
Maintainer

4thanks Jun 1, 2023
Author

kkkgo
May 28, 2023
Maintainer

4thanks
Jun 8, 2023
Author

4thanks Jun 8, 2023
Author

kkkgo Jun 8, 2023
Maintainer

4thanks Jun 8, 2023
Author

4thanks Jun 8, 2023
Author

kkkgo Jun 8, 2023
Maintainer