apt的dns相关问题 #149

Edmondguo · 2024-05-24T04:28:14Z

Edmondguo
May 24, 2024

你好，我遇到一个关于shell里执行apt相关命令的问题：
环境是PVE的shell，PVE DNS设置为paopaodns，执行apt相关命令的时候会报一些错误，例如apt update：

W: Failed to fetch http://ftp.debian.org/debian/dists/bookworm/InRelease  Connection failed [IP: 7.0.59.57 80]
W: Failed to fetch http://ftp.debian.org/debian/dists/bookworm-updates/InRelease  Connection failed [IP: 7.0.59.57 80]
W: Failed to fetch http://security.debian.org/debian-security/dists/bookworm-security/InRelease  Connection failed [IP: 7.0.59.57 80]

我注意到他把一些软件源的ip解析到fakeIP段了，但是不知道为什么paopaogateway并没有正确工作；
另外我尝试了一下，PVE的DNS设置为运营商DNS可以正常拉取，说明这些域名国内是可以访问的，临时修改解决了问题。我知道那相应的域名加到白名单里可以让他们不被解析到fakeIP段，不过我还是想知道为什么在shell环境paopaogateway没有正确工作。

Answered by kkkgo

May 26, 2024

如果在开启CNFALL的情况下，sliamb/paopaodns:dev镜像在查询到ttl为0的结果时，大概5秒后会触发主动回收，再查询应该不会有一样的结果了。

View full answer

kkkgo · 2024-05-24T05:32:28Z

kkkgo
May 24, 2024
Maintainer

命令行apt update一般来说是节点连接不够稳定的原因导致Connection failed，与浏览器行为不同，命令行并不会等待太长时间和多次重试。
可以尝试定制sniff=yes的iso镜像，apt update的时候手动重复多试几次，或者更换更好的软件源。当然，也可以把地址复制粘贴到浏览器看看访问是否流畅。

0 replies

Edmondguo · 2024-05-25T03:28:50Z

Edmondguo
May 25, 2024
Author

遇到一个问题，用paopaodns的时候，天猫域名的一些网址打不开，例如这个，切换成公共dns就打开了，不清楚怎么排查https://detail.tmall.com/item.htm?id=748569772336&spm=a1z09.2.0.0.72932e8dFJuU6E&_u=p1m9t8hb9f9e

12 replies

kkkgo May 26, 2024
Maintainer

你是否有启用CNFALL功能？

Edmondguo May 26, 2024
Author

是的启用了。附上debug.sh吧方便大佬排查

== debug.sh : docker exec -it paopaodns sh ==

-> debug start 1716705066

[INFO] images build time : 2024-05-25 08:48:51 UTC
[OK]DATA_writeable
[OK]DATA_readable
[INFO] NETWORK
*********************************************************************************

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1000
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
2: eth0@if16: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue state UP qlen 1000
    inet 192.168.0.3/24 scope global eth0
    inet6 fdef:43d:dcfd:fa4e:8ab:70ff:fee6:4a57/64 scope global dynamic flags 100 
    inet6 fe80::8ab:70ff:fee6:4a57/64 scope link 
3: docker0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP 
    inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
    inet6 fe80::42:eff:fef2:e9f9/64 scope link 
5: veth8216afb@if4: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue master docker0 state UP 
    inet6 fe80::b0c4:43ff:fe7c:33a8/64 scope link 
7: vethed106e5@if6: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue master docker0 state UP 
    inet6 fe80::ec30:9dff:fe13:abc5/64 scope link 
9: veth35418f2@if8: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue master docker0 state UP 
    inet6 fe80::5033:8eff:fe14:88b5/64 scope link 
13: vethcbc714e@if12: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue master docker0 state UP 
    inet6 fe80::84f8:d4ff:fe4a:62a5/64 scope link 
default via 192.168.0.1 dev eth0  metric 1 onlink 
172.17.0.0/16 dev docker0 scope link  src 172.17.0.1 
192.168.0.0/24 dev eth0 scope link  src 192.168.0.3 
PING 223.5.5.5 (223.5.5.5): 56 data bytes
64 bytes from 223.5.5.5: seq=0 ttl=118 time=4.226 ms

--- 223.5.5.5 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max = 4.226/4.226/4.226 ms
PING 119.29.29.29 (119.29.29.29): 56 data bytes
64 bytes from 119.29.29.29: seq=0 ttl=55 time=5.585 ms

--- 119.29.29.29 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max = 5.585/5.585/5.585 ms
Server:         223.5.5.5
Address:        223.5.5.5#53

Non-authoritative answer:
www.taobao.com  canonical name = www.taobao.com.danuoyi.tbcache.com.
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 58.222.46.210
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 58.222.46.211
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 240e:978:b30:20:3::3e2
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 240e:978:b30:20:3::3e3

Server:         119.29.29.29
Address:        119.29.29.29#53

Non-authoritative answer:
www.qq.com      canonical name = ins-r23tsuuf.ias.tencent-cloud.net.
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 101.91.22.57
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 101.91.42.232
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 240e:e1:a800:120::36
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 240e:e1:a800:120::76

*********************************************************************************

[INFO] ENV
*********************************************************************************

====ENV TEST====
[OK]DATA_writeable-
[OK]DATA_readable-
MEM:400m 800m 500000 900mb
prefPC:82
CORES:-2-
POWCORES:-2-
ulimit :-1048576-
FDLIM :-4096-
TZ:-Asia/Shanghai-
UPDATE:-weekly-
DNS_SERVERNAME:-PaoPaoDNS,blog.03k.org-
SERVER_IP:-192.168.0.3-
ETHIP:-192.168.0.3-
DNSPORT:-53-
SOCKS5:-192.168.0.4:1080-
CNAUTO:-yes-
IPV6:-no-
CNFALL:-yes-
CUSTOM_FORWARD:-192.168.0.4:53-
AUTO_FORWARD:-yes-
AUTO_FORWARD_CHECK:-yes-
USE_MARK_DATA:-yes-
RULES_TTL:-600-
CUSTOM_FORWARD_TTL:-0-
SHUFFLE:-no-
CN_TRACKER:-yes-
USE_HOSTS:-no-
HTTP_FILE:-yes-
SAFEMODE:--
QUERY_TIME:-2000ms-
ADDINFO:-yes-
PLATFORM:-Linux b0f0868db68a 6.5.11-7-pve #1 SMP PREEMPT_DYNAMIC PMX 6.5.11-7 (2023-12-05T09:44Z) x86_64 Linux-
====ENV TEST====
mosdns kkkgo/mosdns:240520.1
total 245M   
   4.0K drwxrwxrwx    3 0        0           4.0K May 26 14:19 .
   4.0K drwxr-xr-x    1 0        0           4.0K May 26 14:18 ..
 260.0K -rw-r--r--    1 0        0         256.6K May 26 14:19 Country-only-cn-private.mmdb
   4.0K -rwxrwxrwx    1 0        0            233 May 26 14:16 custom_env.ini
   4.0K -rwxrwxrwx    1 0        0            416 May 26 14:19 custom_mod.yaml
   4.0K drwxr-xr-x    2 0        0           4.0K May 26 14:19 dnscrypt-resolvers
   4.0K -rw-r--r--    1 0        0           3.0K May 26 14:19 dnscrypt.toml
   4.0K -rwxrwxrwx    1 0        0           4.0K Dec  9 15:55 dubug.sh
   4.0K -rwxrwxrwx    1 0        0            340 Dec  9 15:35 force_cn_list.txt
   4.0K -rwxrwxrwx    1 0        0            445 May  5 14:24 force_dnscrypt_list.txt
   4.0K -rwxrwxrwx    1 0        0            276 Dec 21 09:55 force_forward_list.txt
   4.0K -rwxrwxrwx    1 0        0            407 Dec  9 15:35 force_nocn_list.txt
   4.0K -rwxrwxrwx    1 0        0            387 May  5 14:24 force_recurse_list.txt
   4.0K -rwxrwxrwx    1 0        0             30 May  5 22:09 force_ttl_rules.txt
   1.3M -rw-r--r--    1 0        0           1.3M May 26 14:23 global_mark.dat
  12.0K -rw-r--r--    1 0        0           9.9K May 26 14:19 mosdns.yaml
   4.0K -rwxrwxrwx    1 0        0           1.4K May 15 00:11 ppgw.ini
   8.0K -rw-r--r--    1 0        0           5.7K May 26 14:18 redis.conf
 243.2M -rwxrwxrwx    1 0        0         243.2M May 26 14:10 redis_dns_v2.rdb
  16.0K -rwxrwxrwx    1 0        0          12.9K May 26 14:16 trackerslist.txt
  52.0K -rw-r--r--    1 0        0          50.6K May 26 14:18 unbound.conf
   4.0K -rwxrwxrwx    1 0        0            289 Dec  9 15:35 unbound_custom.conf
*********************************************************************************

[INFO] PS
*********************************************************************************

PID   USER     TIME  COMMAND
    1 root      0:00 {init.sh} /bin/sh /usr/sbin/init.sh
   23 root      0:00 crond
   55 root      0:03 redis-server unixsocket:/tmp/redis.sock
  305 root      0:00 dnscrypt-proxy -config /data/dnscrypt-resolvers/dnscrypt.toml
  306 root      0:01 dnscrypt-proxy -config /data/dnscrypt-resolvers/dnscrypt_socks.toml
  324 root      0:00 unbound -c /tmp/unbound_forward.conf -p
  331 root      0:00 mosdns start -d /tmp -c /tmp/mosdns.yaml
  342 root      0:00 {watch_list.sh} /bin/sh /usr/sbin/watch_list.sh
  343 root      0:00 unbound -c /tmp/unbound_raw.conf -p
  347 root      0:00 tail -f /dev/null
  384 root      0:00 inotifywait -e modify,delete /etc/unbound/named.cache /data/Country-only-cn-private.mmdb /data/force_recurse_list.txt /data/force_dnscrypt_list.txt /data/custom_env.ini /data/force_cn_list.txt /data/force_nocn_list.txt /data/global_mark.dat /data/trackerslist.txt /data/force_forward_list.txt /data/force_ttl_rules.txt
  617 root      0:00 {debug.sh} /bin/sh /usr/sbin/debug.sh
  643 root      0:00 ps -ef
  343 root      0:00 unbound -c /tmp/unbound_raw.conf -p
unbound OK.
  324 root      0:00 unbound -c /tmp/unbound_forward.conf -p
unbound_forward OK.
*********************************************************************************

[INFO] TOP
*********************************************************************************

CPU:   5% usr   5% sys   0% nic  87% idle   0% io   0% irq   2% sirq
  PID  PPID USER     STAT   VSZ %VSZ CPU %CPU COMMAND
  343     1 root     S    1219m  15%   1   0% unbound -c /tmp/unbound_raw.conf -
  331     1 root     S    1211m  15%   0   0% mosdns start -d /tmp -c /tmp/mosdn
  306     1 root     S    1210m  15%   1   0% dnscrypt-proxy -config /data/dnscr
  305     1 root     S    1210m  15%   0   0% dnscrypt-proxy -config /data/dnscr
   55     1 root     S     343m   4%   1   0% redis-server unixsocket:/tmp/redis
  324     1 root     S    20692   0%   1   0% unbound -c /tmp/unbound_forward.co
  342     1 root     S     1712   0%   1   0% {watch_list.sh} /bin/sh /usr/sbin/
    1     0 root     S     1632   0%   0   0% {init.sh} /bin/sh /usr/sbin/init.s
  617     0 root     S     1628   0%   0   0% {debug.sh} /bin/sh /usr/sbin/debug
  650   617 root     R     1624   0%   1   0% top -n1
  347     1 root     S     1616   0%   1   0% tail -f /dev/null
  651   617 root     S     1612   0%   0   0% grep %
  384   342 root     S     1072   0%   1   0% inotifywait -e modify,delete /etc/
   23     1 root     S      860   0%   1   0% crond
*********************************************************************************

[INFO] REDIS
*********************************************************************************

used_memory_human:270.66M
used_memory_rss_human:325.61M
used_memory_peak_human:270.67M
total_system_memory_human:7.59G
used_memory_lua_human:31.00K
used_memory_vm_total_human:63.00K
used_memory_scripts_human:181B
maxmemory_human:900.00M
236816
*********************************************************************************

[TEST] IP ROUTE
*********************************************************************************

CN IP URL:
124.78.25.197
-
124.78.25.197
--
124.78.25.197
CN RAW-IP URL:
124.78.25.197
------------------
Non-CN IP URL:
141.11.132.40
-
141.11.132.40
--
141.11.132.40
Non-CN RAW-IP URL:
124.78.25.197
-
124.78.25.197
--
124.78.25.197
---
124.78.25.197
------------------
IP INFO:
124.78.25.197
CN,Shanghai,Shanghai
ASN4812/China Telecom
HTTP/1.1 
Mozilla/5.0 Gecko/20100101 Firefox/120.0 https://github.com/kkkgo/PaoPaoDNS
Asia/Shanghai Time: 5/26/2024, 2:31:13 PM
[INFO] force_recurse_list
domain:whoami.ds.akahelp.net
domain:whoami.03k.org
MOSDNS WHOAMI :
MOSDNS akahelp: "ns" "124.78.27.219"
MOSDNS 03k: 124.78.25.197
UNBOUND WHOAMI:
UNBOUND akahelp: "ns" "124.78.27.219"
UNBOUND 03k: 124.78.25.197
*********************************************************************************

[TEST] HIJACK
*********************************************************************************

;; communications error to 9.8.7.5#53: timed out
;; no servers could be reached

;; communications error to 9.8.7.6#53: timed out
;; no servers could be reached

HIJACK 127.0.0.1 = 58.217.249.177
*********************************************************************************

[TEST] DIG-CN [taobao]
*********************************************************************************

MOSDNS CN:
www.taobao.com.danuoyi.tbcache.com.
58.222.46.211
58.222.46.210
UNBOUND CN:
www.taobao.com.danuoyi.tbcache.com.
58.222.46.210
58.222.46.211
[TEST] DIG-NOCN [youtube]
MOSDNS NOCN:
7.0.1.121
DNSCRYPT-UNBOUND NOCN:
youtube-ui.l.google.com.
172.217.175.78
172.217.161.78
DNSCRYPT NOCN:
youtube-ui.l.google.com.
172.217.174.110
172.217.175.238
DNSCRYPT-SOCKS5 NOCN:
youtube-ui.l.google.com.
74.125.68.93
142.251.10.190
*********************************************************************************

CUSTOM_FORWARD TEST [youtube]:
7.0.1.121
CUSTOM_FORWARD TEST [taobao]:
7.0.2.253
*********************************************************************************

[TEST] DUAL CN [IPv6=YES will have aaaa,taobao]
*********************************************************************************

[TEST] DUAL NOCN [IPv6=YES will block aaaa,youtube]
[TEST] ONLY6 [IPv6=only6 will block aaaa if a ok]
checkipv6.synology.com : ip6.03k.org : 6.ipw.cn : 
*********************************************************************************

[info] ALL TEST FINISH.

-> debug end 1716705078

kkkgo May 26, 2024
Maintainer

看起来像是lxc。现在dig detail.tmall.com @192.168.0.3的结果还是一样吗？

kkkgo May 26, 2024
Maintainer

如果在开启CNFALL的情况下，sliamb/paopaodns:dev镜像在查询到ttl为0的结果时，大概5秒后会触发主动回收，再查询应该不会有一样的结果了。

Answer selected by Edmondguo

Edmondguo May 26, 2024
Author

是的，该docker环境是部署在PVE下的lxc容器中，PVE下的的ROS主路由用来拨号，获取的是公网IP，NAT层数应当不高了

如果在开启CNFALL的情况下，sliamb/paopaodns:dev镜像在查询到ttl为0的结果时，大概5秒后会触发主动回收，再查询应该不会有一样的结果了。

现在正常了，和腾讯dns返回的结果是一样的。原来如此，我之前部署完第一次还是不一样的，现在是一样得了

alpineForDNS:~/mydata# dig detail.tmall.com @119.29.29.29

; <<>> DiG 9.18.19 <<>> detail.tmall.com @119.29.29.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2802
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: 7c2be97df0cd66a7 (echoed)
;; QUESTION SECTION:
;detail.tmall.com.              IN      A

;; ANSWER SECTION:
detail.tmall.com.       46      IN      CNAME   detail.tmall.com.danuoyi.tbcache.com.
detail.tmall.com.danuoyi.tbcache.com. 8 IN A    58.222.46.211
detail.tmall.com.danuoyi.tbcache.com. 8 IN A    58.222.46.210

;; Query time: 8 msec
;; SERVER: 119.29.29.29#53(119.29.29.29) (UDP)
;; WHEN: Sun May 26 06:45:46 UTC 2024
;; MSG SIZE  rcvd: 136

alpineForDNS:~/mydata# dig detail.tmall.com @192.168.0.3

; <<>> DiG 9.18.19 <<>> detail.tmall.com @192.168.0.3
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3353
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 2

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;detail.tmall.com.              IN      A

;; ANSWER SECTION:
detail.tmall.com.       42      IN      CNAME   detail.tmall.com.danuoyi.tbcache.com.
detail.tmall.com.danuoyi.tbcache.com. 38 IN A   58.222.46.211
detail.tmall.com.danuoyi.tbcache.com. 38 IN A   58.222.46.210

;; ADDITIONAL SECTION:
20240526144548.084791074.addinfo.paopaodns. 43 IN TXT "Since 0ms From:cn_mark"

;; Query time: 0 msec
;; SERVER: 192.168.0.3#53(192.168.0.3) (UDP)
;; WHEN: Sun May 26 06:45:48 UTC 2024
;; MSG SIZE  rcvd: 292

kkkgo May 26, 2024
Maintainer

谢谢测试，在下个正式版本将会在不久后会发布。

kkkgo · 2024-05-27T13:57:10Z

kkkgo
May 27, 2024
Maintainer

#154

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

apt的dns相关问题 #149

{{title}}

Replies: 3 comments 12 replies

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

Select a reply

apt的dns相关问题 #149

Edmondguo May 24, 2024

Replies: 3 comments · 12 replies

kkkgo May 24, 2024 Maintainer

Edmondguo May 25, 2024 Author

kkkgo May 26, 2024 Maintainer

Edmondguo May 26, 2024 Author

== debug.sh : docker exec -it paopaodns sh ==

kkkgo May 26, 2024 Maintainer

kkkgo May 26, 2024 Maintainer

Edmondguo May 26, 2024 Author

kkkgo May 26, 2024 Maintainer

kkkgo May 27, 2024 Maintainer

Edmondguo
May 24, 2024

Replies: 3 comments 12 replies

kkkgo
May 24, 2024
Maintainer

Edmondguo
May 25, 2024
Author

kkkgo May 26, 2024
Maintainer

Edmondguo May 26, 2024
Author

kkkgo May 26, 2024
Maintainer

kkkgo May 26, 2024
Maintainer

Edmondguo May 26, 2024
Author

kkkgo May 26, 2024
Maintainer

kkkgo
May 27, 2024
Maintainer