routeros 配置 paopaodns 并利用 script 和 scheduler 进行故障转移.

[hyird]

配置 paopaodns

ppdns ip:172.16.0.10/16 ppgateway:10.10.0.10

/interface/veth/add name=veth0 address=172.16.0.10/16 gateway=172.16.0.1 
/interface/bridge/add name=br-container 
/ip/address/add address=172.16.0.1/24 interface=br-container 
/interface/bridge/port add bridge=br-container interface=veth0 
/container/config/set registry-url=https://dockerproxy.cn tmpdir=tmp 
/container/envs/add name=PaoPaoDNS key=IPV6 value="yes_only6" 
/container/envs/add name=PaoPaoDNS key=AUTO_FORWARD value="yes" 
/container/envs/add name=PaoPaoDNS key=CUSTOM_FORWARD value="10.10.0.10:53" 
/container/envs/add name=PaoPaoDNS key=SOCKS5 value="10.10.0.10:1080" 
/container/envs/add name=PaoPaoDNS key=USE_MARK_DATA value="yes" 
/container/envs/add name=PaoPaoDNS key=HTTP_FILE value="yes" 
/container/envs/add name=PaoPaoDNS key=SHUFFLE value="trnc" 
/container/mounts/add name=PaoPaoDNS src=/container/paopaodns/data dst=/data 
/container/add remote-image=sliamb/paopaodns:latest interface=veth0 root-dir=/container/paopaodns mounts=PaoPaoDNS envlist=PaoPaoDNS

配置防火墙劫持53到ROS

/ip firewall nat
add action=redirect chain=dstnat comment="lanconf: redirect DNS query (UDP)" dst-port=53 in-interface-list=LAN protocol=udp to-ports=53
add action=redirect chain=dstnat comment="lanconf: redirect DNS query (TCP)" dst-port=53 in-interface-list=LAN protocol=tcp to-ports=53

在配置完ppdns+ppgw后 system->script 添加脚本

:local primaryDns "172.16.0.10"
:local backupDns1 "223.5.5.5"
:local backupDns2 "223.6.6.6"

:local currentDns [/ip dns get servers]

:if ([/ping $primaryDns count=3] = 3) do={
    :if ($currentDns != $primaryDns) do={
        /ip dns set servers=$primaryDns
        /ip dns cache flush
        :log info "DNS set to $primaryDns and cache flushed"
    }
} else={
    :local backupDnsList "$backupDns1,$backupDns2"
    :if ($currentDns != $backupDnsList) do={
        /ip dns set servers=$backupDnsList
        /ip dns cache flush
        :log info "DNS set to backup DNS servers: $backupDns1, $backupDns2 and cache flushed"
    }
}

然后在system->scheduler 添加定时器 dns-check为script的名称

/system scheduler add name=dns-check-scheduler interval=1h on-event=dns-check

另外 可以用

/tool fetch url="https://www.youtube.com" http-method=get keep-result=no

来检查youtube的连通性,来进行故障转移,在ppgw/ppdns故障后 不影响访问正常的国外网站.
后续会完善脚本.