dns 运行不正常，ALL TEST PASS 测试错误！

[gukey]

这是我的网络拓扑图：

昨天无意中在局域网客户端ping了下 114.114.144.144 的DNS，发现无法ping通，223.5.5.5 可以，然后在paopaodns主机上 ping 可以通， 测试dns test.sh，结果如下，执行后输出不是 ALL TEST PASS，测试了递归验证，也不正常，麻烦看看是哪出问题了：

递归验证：

localhost:~# nslookup -type=TXT whoami.ds.akahelp.net 192.168.1.5
Server:         192.168.1.5
Address:        192.168.1.5:53

Non-authoritative answer:
whoami.ds.akahelp.net   text = "ns"

localhost:~# nslookup whoami.03k.org 192.168.1.5
Server:         192.168.1.5
Address:        192.168.1.5:53

** server can't find whoami.03k.org: SERVFAIL

test.sh：

localhost:~# docker exec paopaodns test.sh
*********************************************************************************
-> test start `1708565756`
rust
yyyyyyyyyNOCN-5301 failed:yy
[INFO] TEST FAIL.
-> test end `1708565759`
*********************************************************************************

dns docker配置：

docker run -d \
--name paopaodns \
-v /home/mydata:/data \
-e UPDATE=weekly \
-e CNAUTO=yes \
-e CNFALL=yes \
-e CN_TRACKER=yes \
-e IPV6=no \
-e CUSTOM_FORWARD=192.168.1.3:53  \
-e  AUTO_FORWARD=yes   \
-e  AUTO_FORWARD_CHECK=yes \
-e  USE_MARK_DATA=yes \
-e  CN_TRACKER=yes \
-e  USE_HOSTS=no \
-e  RULES_TTL=604800 \
-e  TZ=Asia/Shanghai \
--restart always \
-p 53:53/tcp -p 53:53/udp \
-p 5304:5304/tcp -p 5304:5304/udp \
sliamb/paopaodns

debug.sh 信息：

localhost:~# docker exec paopaodns  debug.sh
### == debug.sh : docker exec -it paopaodns sh ==
-> debug start `1708566588`
```rust
[INFO] images build time : 2024-02-08 15:59:28 UTC
[OK]DATA_writeable
[OK]DATA_readable
[INFO] NETWORK
*********************************************************************************

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1000
    inet 127.0.0.1/8 scope host lo
4: eth0@if5: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue state UP
    inet 172.17.0.2/16 brd 172.17.255.255 scope global eth0
default via 172.17.0.1 dev eth0
172.17.0.0/16 dev eth0 scope link  src 172.17.0.2
PING 223.5.5.5 (223.5.5.5): 56 data bytes
64 bytes from 223.5.5.5: seq=0 ttl=63 time=0.239 ms

--- 223.5.5.5 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max = 0.239/0.239/0.239 ms
PING 119.29.29.29 (119.29.29.29): 56 data bytes
64 bytes from 119.29.29.29: seq=0 ttl=63 time=2.475 ms

--- 119.29.29.29 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max = 2.475/2.475/2.475 ms
Server:         223.5.5.5
Address:        223.5.5.5#53

Non-authoritative answer:
www.taobao.com  canonical name = www.taobao.com.danuoyi.tbcache.com.
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 163.181.35.97
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 163.181.35.96

Server:         119.29.29.29
Address:        119.29.29.29#53

Non-authoritative answer:
www.qq.com      canonical name = ins-r23tsuuf.ias.tencent-cloud.net.
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 129.226.106.167
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 129.226.102.190
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 240e:97c:2f:2::4c
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 240e:97c:2f:1::5c

*********************************************************************************

[INFO] ENV
*********************************************************************************

====ENV TEST====
[OK]DATA_writeable-
[OK]DATA_readable-
MEM:50m 100m 200 100mb
prefPC:9
CORES:-1-
POWCORES:-1-
ulimit :-1048576-
FDLIM :-1-
TZ:-Asia/Shanghai-
UPDATE:-weekly-
DNS_SERVERNAME:-PaoPaoDNS,blog.03k.org-
SERVER_IP:-none-
ETHIP:-172.17.0.2-
DNSPORT:-53-
SOCKS5:-IP:PORT-
CNAUTO:-yes-
IPV6:-no-
CNFALL:-yes-
CUSTOM_FORWARD:-192.168.1.3:53-
AUTO_FORWARD:-yes-
AUTO_FORWARD_CHECK:-yes-
USE_MARK_DATA:-yes-
RULES_TTL:-604800-
CUSTOM_FORWARD_TTL:-0-
SHUFFLE:-no-
CN_TRACKER:-yes-
USE_HOSTS:-no-
HTTP_FILE:-no-
SAFEMODE:--
QUERY_TIME:-2000ms-
ADDINFO:-no-
PLATFORM:-Linux 543f8e525fb1 5.15.108-0-virt #1-Alpine SMP Fri, 21 Apr 2023 05:55:14 +0000 x86_64 Linux-
====ENV TEST====
mosdns kkkgo/mosdns:231210.1
*********************************************************************************

[INFO] PS
*********************************************************************************

PID   USER     TIME  COMMAND
    1 root      0:00 {init.sh} /bin/sh /usr/sbin/init.sh
   12 root      0:00 crond
   44 root      0:24 redis-server unixsocket:/tmp/redis.sock
  232 root      0:15 dnscrypt-proxy -config /data/dnscrypt-resolvers/dnscrypt.toml
  253 root      0:01 unbound -c /tmp/unbound_forward.conf -p
  255 root      0:00 {watch_list.sh} /bin/sh /usr/sbin/watch_list.sh
  259 root      0:00 tail -f /dev/null
  264 root      0:23 unbound -c /tmp/unbound_raw.conf -p
  482 root      0:21 mosdns start -d /data -c /tmp/mosdns.yaml
  527 root      0:00 inotifywait -e modify,delete /etc/unbound/named.cache /data/Country-only-cn-private.mmdb /data/force_cn_list.txt /data/force_nocn_list.txt /data/custom_env.ini /data/global_mark.dat /data/trackerslist.txt /data/force_forward_list.txt /data/force_ttl_rules.txt
 1098 root      0:00 {debug.sh} /bin/sh /usr/sbin/debug.sh
 1119 root      0:00 ps -ef
*********************************************************************************

[INFO] TOP
*********************************************************************************

CPU:   0% usr   0% sys   0% nic 100% idle   0% io   0% irq   0% sirq
  PID  PPID USER     STAT   VSZ %VSZ CPU %CPU COMMAND
  482   255 root     S    1212m  62%   0   0% mosdns start -d /data -c /tmp/mosd
  232     1 root     S    1211m  62%   2   0% dnscrypt-proxy -config /data/dnscr
   44     1 root     S    23964   1%   3   0% redis-server unixsocket:/tmp/redis
  264     1 root     S    12960   1%   1   0% unbound -c /tmp/unbound_raw.conf -
  253     1 root     S    11512   1%   0   0% unbound -c /tmp/unbound_forward.co
  255     1 root     S     1712   0%   3   0% {watch_list.sh} /bin/sh /usr/sbin/
    1     0 root     S     1632   0%   2   0% {init.sh} /bin/sh /usr/sbin/init.s
 1098     0 root     S     1628   0%   0   0% {debug.sh} /bin/sh /usr/sbin/debug
 1120  1098 root     R     1624   0%   3   0% top -n1
  259     1 root     S     1616   0%   3   0% tail -f /dev/null
 1121  1098 root     S     1612   0%   0   0% grep %
  527   255 root     S     1072   0%   0   0% inotifywait -e modify,delete /etc/
   12     1 root     S      860   0%   1   0% crond
*********************************************************************************

[INFO] REDIS
*********************************************************************************

used_memory_human:2.22M
used_memory_rss_human:5.65M
used_memory_peak_human:2.22M
total_system_memory_human:1.91G
used_memory_lua_human:31.00K
used_memory_vm_total_human:63.00K
used_memory_scripts_human:181B
maxmemory_human:100.00M
2825
*********************************************************************************

[TEST] IP ROUTE
*********************************************************************************

CN IP URL:
119.28.20.151
-
119.28.20.151
--
119.28.20.151
CN RAW-IP URL:
119.28.20.151
------------------
Non-CN IP URL:
119.28.20.151
-
119.28.20.151
--
119.28.20.151
Non-CN RAW-IP URL:
119.28.20.151
-
119.28.20.151
--
119.28.20.151
---
119.28.20.151
------------------
IP INFO:
119.28.20.151
HK,Hong Kong,undefined
ASN132203/Tencent cloud computing
HTTP/1.1
Mozilla/5.0 Gecko/20100101 Firefox/120.0 https://github.com/kkkgo/PaoPaoDNS
Asia/Hong_Kong Time: 2/22/2024, 9:49:54 AM
[INFO] force_cn_list
domain:whoami.ds.akahelp.net
domain:whoami.03k.org
MOSDNS WHOAMI :
akahelp: "ns" "119.28.20.151"
03k: UNBOUND WHOAMI:
akahelp: "ns" "119.28.20.151"
03k: *********************************************************************************

[TEST] HIJACK
*********************************************************************************

;; communications error to 9.8.7.5#53: timed out
;; no servers could be reached

;; communications error to 9.8.7.6#53: timed out
;; no servers could be reached

HIJACK 127.0.0.1 = 112.25.12.178
*********************************************************************************

[TEST] DIG-CN [taobao]
*********************************************************************************

MOSDNS CN:
www.taobao.com.danuoyi.tbcache.com.
163.181.35.96
163.181.35.97
UNBOUND CN:
www.taobao.com.danuoyi.tbcache.com.
163.181.35.97
163.181.35.96
[TEST] DIG-NOCN [youtube]
MOSDNS NOCN:
7.0.0.9
DNSCRYPT-UNBOUND NOCN:
youtube-ui.l.google.com.
216.58.196.46
216.58.199.238
DNSCRYPT NOCN:
youtube-ui.l.google.com.
172.217.26.78
142.251.222.238
DNSCRYPT-SOCKS5 NOCN:
;; communications error to 127.0.0.1#5303: connection refused
;; no servers could be reached

*********************************************************************************

CUSTOM_FORWARD TEST [youtube]:
7.0.0.9
CUSTOM_FORWARD TEST [taobao]:
7.0.1.31
*********************************************************************************

[TEST] DUAL CN [IPv6=YES will have aaaa,taobao]
*********************************************************************************

[TEST] DUAL NOCN [IPv6=YES will block aaaa,youtube]
[TEST] ONLY6 [IPv6=only6 will block aaaa if a ok]
checkipv6.synology.com : ip6.03k.org : 6.ipw.cn :
*********************************************************************************

[info] ALL TEST FINISH.
-> debug end `1708566600`
localhost:~#

[kkkgo]

你这IP测试结果怎么全是香港，看了眼你网关都挂到ppgw去了，那肯定不对的，这样就是全局走ppgw了。
正常设置就应该是IP 192.168.1.5/网关192.168.1.1。DNS无所谓，宿主能把docker镜像拉下来就行。

[kkkgo]

我仔细看了下，你的是NOCN-5301 failed:不是CN-5301 failed:。这项测试是测试境外递归效果，境外递归测试失败其实也属于正常情况，就当一个网络情况指标参考。
host模式性能会更好。和网关配置没啥关系，冲不冲突主要看你宿主机跑的服务占用的端口是否和docker冲突而已，比如 宿主机占用了53端口，你用host模式就会冲突。因为host模式相当于直接用宿主的网卡IP。

[gukey]

明白了，第一次感觉整体浏览网页，电视盒子加载都快了很多，以前都能用，但是得加载一会，现在都是秒开了，目前这个虚拟机就只跑了 paopaodns，没有其他服务 ，现在用起来感觉很爽，哈哈，感谢你的回复和制作这么好用的工具，谢谢！

[kkkgo]

ROS可以参考kkkgo/PaoPaoGateWay#48 (reply in thread)

[gukey]

用 ros 分流以前也用过，还写过一个国内 cnip 地址更新帖子， 就是根据 cnip 地址表在 ros 防火墙打标记来判断国内国外的流量来分流，不是国内的地址访问就走出国网关，然后定时更新最新的国内 cnip 地址来增加判断的可用性， 能用，但是很不高效，经常会出现很多网站直接打不开的情况，我刚设置以为是网站问题，因为有些之前能访问，后来取消分流，直接用旁路网关模式，又能用了，我的 XBOX 游戏机，用 ros 分流，云存档也同步不下来，搞得很郁闷，而且国外的一些网站访问起来很慢，后来就放弃了，直到看到你这个项目，感觉才是出国分流的最优解，简单，高效；

[kkkgo]

上面发的这个是其他ROS用户遇到慢的问题的可能解决参考。（ROS防火墙的设置）