把MosDNS的日志级别提高后发现有警告级别的日志报错信息

[biggbuddy]

在提交之前，请确认

• 我已经尝试搜索过Issue和看过参数说明，但没有找到相关问题。
• 我正在使用最新的docker镜像版本（可以尝试docker pull sliamb/paopaodns:latest后重新创建容器，如果不确定的话可以尝试使用sliamb/paopaodns:dev）。

脚本自检日志

[INFO] images build time : 2023-12-21 16:16:49 UTC
[OK]DATA_writeable
[OK]DATA_readable
[INFO] NETWORK
*********************************************************************************

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1000
    inet 127.0.0.1/8 scope host lo
366: eth0@if367: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue state UP
    inet 192.168.48.2/20 brd 192.168.63.255 scope global eth0
default via 192.168.48.1 dev eth0
192.168.48.0/20 dev eth0 scope link  src 192.168.48.2
PING 223.5.5.5 (223.5.5.5): 56 data bytes
64 bytes from 223.5.5.5: seq=0 ttl=117 time=7.038 ms

--- 223.5.5.5 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max = 7.038/7.038/7.038 ms
PING 119.29.29.29 (119.29.29.29): 56 data bytes
64 bytes from 119.29.29.29: seq=0 ttl=54 time=39.681 ms

--- 119.29.29.29 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max = 39.681/39.681/39.681 ms
Server:         223.5.5.5
Address:        223.5.5.5#53

Non-authoritative answer:
www.taobao.com  canonical name = www.taobao.com.danuoyi.tbcache.com.
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 112.45.115.195
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 112.45.115.194
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 2409:8c62:e10:37:3::3db
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 2409:8c62:e10:37:3::3dc

Server:         119.29.29.29
Address:        119.29.29.29#53

Non-authoritative answer:
www.qq.com      canonical name = ins-r23tsuuf.ias.tencent-cloud.net.
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 112.53.42.52
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 112.53.42.114
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 2409:8c54:871:2::34
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 2409:8c54:871:1::73

*********************************************************************************

[INFO] ENV
*********************************************************************************

====ENV TEST====
[OK]DATA_writeable-
[OK]DATA_readable-
MEM:200m 400m 200 450mb
prefPC:41
CORES:-2-
POWCORES:-2-
ulimit :-1048576-
FDLIM :-4096-
TZ:-Asia/Shanghai-
UPDATE:-daily-
DNS_SERVERNAME:-PaoPaoDNS-
SERVER_IP:-none-
ETHIP:-192.168.48.2-
DNSPORT:-53-
SOCKS5:-no-
CNAUTO:-yes-
IPV6:-yes-
CNFALL:-no-
CUSTOM_FORWARD:-IP:PORT-
AUTO_FORWARD:-no-
AUTO_FORWARD_CHECK:-yes-
USE_MARK_DATA:-no-
RULES_TTL:-0-
CUSTOM_FORWARD_TTL:-0-
SHUFFLE:-no-
CN_TRACKER:-yes-
USE_HOSTS:-no-
HTTP_FILE:-no-
SAFEMODE:-no-
QUERY_TIME:-2000ms-
ADDINFO:-no-
PLATFORM:-Linux 072f8c8c5624 5.10.0-23-amd64 #1 SMP Debian 5.10.179-1 (2023-05-12) x86_64 Linux-
====ENV TEST====
mosdns kkkgo/mosdns:231210.1
*********************************************************************************

[INFO] PS
*********************************************************************************

PID   USER     TIME  COMMAND
    1 root      0:00 {init.sh} /bin/sh /usr/sbin/init.sh
   13 root      0:00 crond
   44 root      0:01 redis-server unixsocket:/tmp/redis.sock
  102 root      0:01 dnscrypt-proxy -config /data/dnscrypt-resolvers/dnscrypt.toml
  126 root      0:00 unbound -c /tmp/unbound_forward.conf -p
  131 root      0:00 mosdns start -d /tmp -c /tmp/mosdns.yaml
  138 root      0:00 {watch_list.sh} /bin/sh /usr/sbin/watch_list.sh
  141 root      0:00 tail -f /dev/null
  149 root      0:01 unbound -c /tmp/unbound_raw.conf -p
  175 root      0:00 inotifywait -e modify,delete /etc/unbound/named.cache /data/Country-only-cn-private.mmdb /data/force_c
  243 root      0:00 /bin/sh
  249 root      0:00 {debug.sh} /bin/sh /usr/sbin/debug.sh
  262 root      0:00 ps -ef
*********************************************************************************

[INFO] TOP
*********************************************************************************

CPU:   2% usr   2% sys   0% nic  95% idle   0% io   0% irq   0% sirq
  PID  PPID USER     STAT   VSZ %VSZ CPU %CPU COMMAND
  149     1 root     S    1219m  20%   1   0% unbound -c /tmp/unbound_raw.conf -
  131     1 root     S    1211m  20%   0   0% mosdns start -d /tmp -c /tmp/mosdn
  102     1 root     S    1211m  20%   3   0% dnscrypt-proxy -config /data/dnscr
   44     1 root     S    69516   1%   1   0% redis-server unixsocket:/tmp/redis
  126     1 root     S    20260   0%   3   0% unbound -c /tmp/unbound_forward.co
  138     1 root     S     1708   0%   3   0% {watch_list.sh} /bin/sh /usr/sbin/
  243     0 root     S     1696   0%   1   0% /bin/sh
    1     0 root     S     1632   0%   2   0% {init.sh} /bin/sh /usr/sbin/init.s
  249   243 root     S     1628   0%   1   0% {debug.sh} /bin/sh /usr/sbin/debug
  263   249 root     R     1624   0%   2   0% top -n1
  141     1 root     S     1616   0%   3   0% tail -f /dev/null
  264   249 root     S     1612   0%   3   0% grep %
  175   138 root     S     1072   0%   2   0% inotifywait -e modify,delete /etc/
   13     1 root     S      860   0%   2   0% crond
*********************************************************************************

[INFO] REDIS
*********************************************************************************

used_memory_human:37.99M
used_memory_rss_human:50.18M
used_memory_peak_human:38.01M
total_system_memory_human:5.79G
used_memory_lua_human:31.00K
used_memory_vm_total_human:63.00K
used_memory_scripts_human:181B
maxmemory_human:450.00M
(integer) 59743
*********************************************************************************

[TEST] IP ROUTE
*********************************************************************************

CN IP URL:
111.9.0.214
111.9.0.214
111.9.0.214
CN RAW-IP URL:
111.9.0.214
------------------
Non-CN IP URL:
42.3.27.146
42.3.27.146
42.3.27.146
Non-CN RAW-IP URL:
42.3.27.146
42.3.27.146
42.3.27.146
42.3.27.146
------------------
IP INFO:
42.3.27.146
HK,Hong Kong,Central and Western District
ASN4760/Netvigator Home Broadband
HTTP/1.1
Mozilla/5.0 Gecko/20100101 Firefox/120.0 https://github.com/kkkgo/PaoPaoDNS
Asia/Hong_Kong Time: 12/23/2023, 3:36:50 PM
[INFO] force_cn_list
domain:whoami.ds.akahelp.net
domain:whoami.03k.org
MOSDNS WHOAMI :
akahelp: "ns" "111.9.0.214"
03k: 111.9.0.214
UNBOUND WHOAMI:
akahelp: "ns" "111.9.0.214"
03k: 111.9.0.214
*********************************************************************************

[TEST] HIJACK
*********************************************************************************

;; communications error to 9.8.7.5#53: timed out
;; no servers could be reached

;; communications error to 9.8.7.6#53: timed out
;; no servers could be reached

HIJACK 127.0.0.1 = 112.25.12.178
*********************************************************************************

[TEST] DIG-CN [taobao]
*********************************************************************************

MOSDNS CN:
www.taobao.com.danuoyi.tbcache.com.
112.45.115.194
112.45.115.195
UNBOUND CN:
www.taobao.com.danuoyi.tbcache.com.
112.45.115.195
112.45.115.194
[TEST] DIG-NOCN [youtube]
MOSDNS NOCN:
youtube-ui.l.google.com.
172.217.14.238
142.250.69.206
DNSCRYPT-UNBOUND NOCN:
youtube-ui.l.google.com.
142.251.211.238
142.251.33.78
DNSCRYPT NOCN:
youtube-ui.l.google.com.
142.250.113.136
142.250.113.190
DNSCRYPT-SOCKS5 NOCN:
;; communications error to 127.0.0.1#5303: connection refused
;; no servers could be reached

*********************************************************************************

[TEST] DUAL CN [IPv6=YES will have aaaa,taobao]
*********************************************************************************

www.taobao.com.danuoyi.tbcache.com.
2409:8c62:e10:37:3::3db
2409:8c62:e10:37:3::3dc
[TEST] DUAL NOCN [IPv6=YES will block aaaa,youtube]
[TEST] ONLY6 [IPv6=only6 will block aaaa if a ok]
checkipv6.synology.com : ip6.03k.org : 6.ipw.cn : 2402:4e00:1013:e500:0:9671:f018:4947

*********************************************************************************

[info] ALL TEST FINISH.

我的docker-compose.yml如下

version: "3"

services:
  paopaodns:
    image: sliamb/paopaodns:latest
    container_name: paopaodns
    restart: always
    volumes:
      - ./data:/data
    environment:
      - TZ=Asia/Shanghai
      - UPDATE=daily
      - DNS_SERVERNAME=PaoPaoDNS
      - DNSPORT=53
      - SOCKS5=no
      - CNAUTO=yes
      - IPV6=yes
      - CNFALL=no
      # - CUSTOM_FORWARD=10.10.10.3:53
      # - AUTO_FORWARD=no
      - CN_TRACKER=yes
      - SAFEMODE=no
    ports:
      - "53:53/udp"
      - "53:53/tcp"
      - "5304:5304/udp"
      - "5304:5304/tcp"
      - "7889:7889/tcp"

问题描述和复现步骤

我把MosDNS配置文件mosdns.yaml的日志级别修改为INFO后, 在使用paopao-perf来预热域名时, 发现docker日志有大量如下报错.

paopaodns  | 2023-12-23T14:55:15.434+0800       WARN    forward_unbound upstream error  {"uqid": 214294, "qname": "external-media209.public.wsjcm-a-8.prod.infra.webex.com.", "qtype": 1, "qclass": 1, "upstream": "udp://127.0.0.1:5304", "error": "context deadline exceeded"}
paopaodns  | 2023-12-23T14:55:15.801+0800       WARN    forward_unbound upstream error  {"uqid": 214309, "qname": "prod-mobile-api.jn3cx6xo36.net.", "qtype": 1, "qclass": 1, "upstream": "udp://127.0.0.1:5302", "error": "context deadline exceeded"}
paopaodns  | 2023-12-23T14:55:16.471+0800       WARN    forward_dnscrypt        upstream error  {"uqid": 214250, "qname": "file.mackolikfeeds.com.", "qtype": 1, "qclass": 1, "upstream": "udp://127.0.0.1:5302", "error": "context deadline exceeded"}

非预热域名时也会有如有输出

paopaodns  | 2023-12-23T15:28:54.006+0800       WARN    forward_unbound upstream error  {"uqid": 287, "qname": "dl-cdn.alpinelinux.org.", "qtype": 1, "qclass": 1, "upstream": "udp://127.0.0.1:5302", "error": "context deadline exceeded"}
paopaodns  | /etc/unbound/named.cache Same hash, skip update.
paopaodns  | used_memory_human:37.99M
paopaodns  | 2023-12-23 15:28:55 CST
paopaodns  | /usr/sbin/Country-only-cn-private.mmdb.xz Same hash, skip update.
paopaodns  | 2023-12-23 15:28:55 CST
paopaodns  | /usr/sbin/trackerslist.txt.xz Same hash, skip update.
paopaodns  | 2023-12-23T15:36:48.227+0800       WARN    local_unbound   upstream error  {"uqid": 629, "qname": "v4.ident.me.", "qtype": 28, "qclass": 1, "upstream": "udp://127.0.0.1:5301", "error": "context deadline exceeded"}
paopaodns  | 2023-12-23T15:36:48.227+0800       WARN    local_unbound   upstream error  {"uqid": 630, "qname": "v4.ident.me.", "qtype": 1, "qclass": 1, "upstream": "udp://127.0.0.1:5301", "error": "context deadline exceeded"}
paopaodns  | 2023-12-23T15:43:28.318+0800       WARN    forward_unbound upstream error  {"uqid": 882, "qname": "hub.docker.com.", "qtype": 1, "qclass": 1, "upstream": "udp://127.0.0.1:5302", "error": "context deadline exceeded"}
paopaodns  | 2023-12-23T15:43:50.590+0800       WARN    local_unbound   upstream error  {"uqid": 894, "qname": "whoami.03k.org.", "qtype": 28, "qclass": 1, "upstream": "udp://127.0.0.1:5301", "error": "context deadline exceeded"}
paopaodns  | 2023-12-23T15:45:25.826+0800       WARN    local_unbound   upstream error  {"uqid": 990, "qname": "img.shields.io.", "qtype": 1, "qclass": 1, "upstream": "udp://127.0.0.1:5301", "error": "context deadline exceeded"}
paopaodns  | 2023-12-23T15:45:25.866+0800       WARN    local_unbound   upstream error  {"uqid": 991, "qname": "img.shields.io.", "qtype": 1, "qclass": 1, "upstream": "udp://127.0.0.1:5301", "error": "context deadline exceeded"}
paopaodns  | 2023-12-23T15:46:06.050+0800       WARN    local_unbound   upstream error  {"uqid": 1022, "qname": "whoami.03k.org.", "qtype": 28, "qclass": 1, "upstream": "udp://127.0.0.1:5301", "error": "context deadline exceeded"}

请问是什么原因呢?

我的部署是在一个PVE下装了一个OpenWrt(10.0.0.1), 另建了一个LXC容器(10.0.0.201)用来装docker, PaoPaoDNS也在这个LXC容器上
另外我部署好docker后, 按文档执行命令, 并没有输出配置好的serverName和非权限应答

nslookup -type=TXT whoami.ds.akahelp.net 10.0.0.201
Server:         10.0.0.201
Address:        10.0.0.201#53

Non-authoritative answer:
whoami.ds.akahelp.net   text = "ns" "111.9.0.214"

Authoritative answers can be found from:

nslookup whoami.03k.org 10.0.0.201
Server:         10.0.0.201
Address:        10.0.0.201#53

Non-authoritative answer:
Name:   whoami.03k.org
Address: 111.9.0.214

我把openwrt的dns指向 10.0.0.201#53, 然后把paopaoDNS服务关掉后, 无法解析域名从而无法正常上网, 但把服务打开后就正常了, 所以服务应该是生效的.
容器内执行 test.sh 也是 [INFO] ALL TEST PASS.

[kkkgo]

1、DNS_SERVERNAME仅在你容器IP和你实际使用的IP一致的时候才能正确显示。在你的信息中容器IP是192.168.48.2，实际使用的IP是10.0.0.201。如果你使用host或者类似macvlan就可以正确显示。或者你可以手动编辑unbound_custom.conf添加ptr记录。
2、你的Non-CN RAW-IP URL不是你的宽带IP，也就是你上层网络存在IP分流。

需要注意的是，如果你的网络有“自动分流IP”的功能，请把容器的IP加入不分流的名单，因为权威DNS需要准确的IP去判断，IP分流会影响权威DNS的判断。

3、报错是正常的，pref也是压力测试，既然是压力，那就不等于能承受。5301报错也是正常的，里面有些查不到的记录，比如type28是AAAA记录，因为他这个域名不存在AAAA所以报错，或者这个域名本来就不适合递归，开启USE_MARK_DATA功就能跳过这些步骤。

4、正常使用建议开启CNFALL和USE_MARK_DATA功能。

[biggbuddy]

谢谢回复!
我的openwrt里用了SSR来帮梯子, 应该就是你说的IP分流的地方, 但我没找到哪里可以配置将 10.0.0.201 这个IP加入不分流的配置. 不知道你了解吗?

[kkkgo]

我看你容器的架构是x86_64，那么我觉得你可以把分流的部分单独拎出来，这样灵活很多还能提高主路由性能，可以参考一下PaoPaoGateway的拓扑。

[biggbuddy]

正在研究中, 这两个应用都是很符合我现在需求的, 非常感谢
以前也有看到过你这两个应用, 但名字叫PaoPaoXXX, 感觉有点二次元, 所以没深入了解过.......

[stcwl]

我也是把日志等级改为“info”后很多5301和5303的报错，但至今没发现有问题。