关于 paopaodns 有时会出现淘宝无法打开的问题？

[gukey]

碰到这个问题也比较频繁一些，由于自己最近一直在逛淘宝组装一个功放，买些配件，有时候就出现点击一些产品页面无法打开的情况，需要拉个横条验证，最近有两次比较离谱，直接淘宝网站无法访问，同样的页面，换了114 的 dns 就可以了，目前发现淘宝对vpn这一块监测比较频繁，京东现在也一样，有些能正常显示，有些无法显示，附图：
怕是浏览器问题，特别用一个没装任何插件的试了下也一样，刚把网关编辑开启嗅探模式，还是无法解决，目前替换为114 就能正常显示，比较无解，不知道问题出在哪地方；

测试记录：

[INFO] images build time : 2024-04-25 16:23:16 UTC
[OK]DATA_writeable
[OK]DATA_readable
[INFO] NETWORK
*********************************************************************************

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1000
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP qlen 1000
    inet 192.168.1.5/24 scope global eth0
    inet6 fe80::215:5dff:fe02:680f/64 scope link
3: docker0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP
    inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
    inet6 fe80::42:b5ff:fe17:ccbf/64 scope link
5: veth82db041@if4: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue master docker0 state UP
    inet6 fe80::5c5a:9ff:fe89:39fa/64 scope link
7: veth938a0de@if6: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue master docker0 state UP
    inet6 fe80::9c69:2ff:fea7:a7a4/64 scope link
9: veth320352c@if8: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue master docker0 state UP
    inet6 fe80::7cd0:29ff:fe05:f413/64 scope link
default via 192.168.1.1 dev eth0  metric 1 onlink
172.17.0.0/16 dev docker0 scope link  src 172.17.0.1
192.168.1.0/24 dev eth0 scope link  src 192.168.1.5
PING 223.5.5.5 (223.5.5.5): 56 data bytes
64 bytes from 223.5.5.5: seq=0 ttl=116 time=21.245 ms

--- 223.5.5.5 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max = 21.245/21.245/21.245 ms
PING 119.29.29.29 (119.29.29.29): 56 data bytes
64 bytes from 119.29.29.29: seq=0 ttl=52 time=28.904 ms

--- 119.29.29.29 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max = 28.904/28.904/28.904 ms
Server:         223.5.5.5
Address:        223.5.5.5#53

Non-authoritative answer:
www.taobao.com  canonical name = www.taobao.com.danuoyi.tbcache.com.
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 125.74.38.70
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 125.74.38.71
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 240e:935:a00:212:3::3e4
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 240e:935:a00:212:3::3e5

Server:         119.29.29.29
Address:        119.29.29.29#53

Non-authoritative answer:
www.qq.com      canonical name = ins-r23tsuuf.ias.tencent-cloud.net.
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 101.91.22.57
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 101.91.42.232
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 240e:e1:a800:120::36
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 240e:e1:a800:120::76

*********************************************************************************

[INFO] ENV
*********************************************************************************

====ENV TEST====
[OK]DATA_writeable-
[OK]DATA_readable-
MEM:50m 100m 200 100mb
prefPC:9
CORES:-1-
POWCORES:-1-
ulimit :-1048576-
FDLIM :-1-
TZ:-Asia/Shanghai-
UPDATE:-weekly-
DNS_SERVERNAME:-PaoPaoDNS,blog.03k.org-
SERVER_IP:-none-
ETHIP:-192.168.1.5-
DNSPORT:-53-
SOCKS5:-IP:PORT-
CNAUTO:-yes-
IPV6:-no-
CNFALL:-yes-
CUSTOM_FORWARD:-192.168.1.3:53-
AUTO_FORWARD:-yes-
AUTO_FORWARD_CHECK:-yes-
USE_MARK_DATA:-yes-
RULES_TTL:-604800-
CUSTOM_FORWARD_TTL:-0-
SHUFFLE:-no-
CN_TRACKER:-yes-
USE_HOSTS:-no-
HTTP_FILE:-no-
SAFEMODE:--
QUERY_TIME:-2000ms-
ADDINFO:-no-
PLATFORM:-Linux localhost 5.15.108-0-virt #1-Alpine SMP Fri, 21 Apr 2023 05:55:14 +0000 x86_64 Linux-
====ENV TEST====
mosdns kkkgo/mosdns:240322.2
total 6M
   4.0K drwxrwxrwx    3 0        0           4.0K May  2 00:05 .
   4.0K drwxr-xr-x    1 0        0           4.0K Apr 27 01:09 ..
 256.0K -rwxrwxrwx    1 0        0         256.0K Apr 27 01:09 Country-only-cn-private.mmdb
   4.0K -rwxrwxrwx    1 0        0            233 Apr 27 01:09 custom_env.ini
   4.0K -rwxrwxrwx    1 0        0            416 Apr 29 08:04 custom_mod.yaml
      0 -rwxrwxrwx    1 0        0              0 Feb 22 20:50 debug
   4.0K drwxrwxrwx    2 0        0           4.0K May  1 01:17 dnscrypt-resolvers
   4.0K -rwxrwxrwx    1 0        0           3.0K Apr 27 01:09 dnscrypt.toml
   4.0K -rwxrwxrwx    1 0        0            252 Apr 13 21:41 force_cn_list.txt
   4.0K -rwxrwxrwx    1 0        0            445 Apr 27 01:09 force_dnscrypt_list.txt
   4.0K -rwxrwxrwx    1 0        0            129 Apr 13 12:06 force_forward_list.txt
   4.0K -rwxrwxrwx    1 0        0            192 Feb 29 00:12 force_nocn_list.txt
   4.0K -rwxrwxrwx    1 0        0            387 Apr 27 01:09 force_recurse_list.txt
      0 -rwxrwxrwx    1 0        0              0 Feb  8 20:22 force_ttl_rules.txt
   1.2M -rwxrwxrwx    1 0        0           1.2M Apr 29 08:10 global_mark.dat
  12.0K -rwxrwxrwx    1 0        0           9.7K Apr 27 01:09 mosdns.yaml
   8.0K -rwxrwxrwx    1 0        0           5.7K Apr 27 01:09 redis.conf
   3.9M -rw-r--r--    1 0        0           3.9M May  2 00:05 redis_dns_v2.rdb
  48.0K -rwxrwxrwx    1 0        0          45.0K Apr 27 01:12 trackerslist.txt
  52.0K -rwxrwxrwx    1 0        0          50.5K Apr 27 01:09 unbound.conf
   4.0K -rwxrwxrwx    1 0        0            508 Jul 17  2023 unbound_custom.conf
*********************************************************************************

[INFO] PS
*********************************************************************************

PID   USER     TIME  COMMAND
    1 root      0:00 {init.sh} /bin/sh /usr/sbin/init.sh
   12 root      0:00 crond
   45 root      3:01 redis-server unixsocket:/tmp/redis.sock
  240 root      0:53 dnscrypt-proxy -config /data/dnscrypt-resolvers/dnscrypt.toml
  251 root      2:48 mosdns start -d /tmp -c /tmp/mosdns.yaml
  258 root      0:00 {watch_list.sh} /bin/sh /usr/sbin/watch_list.sh
  264 root      0:13 unbound -c /tmp/unbound_forward.conf -p
  265 root      0:04 tail -f /dev/null
  285 root      4:17 unbound -c /tmp/unbound_raw.conf -p
  317 root      0:00 inotifywait -e modify,delete /etc/unbound/named.cache /data/Country-only-cn-private.mmdb /data/force_recurse_list.txt /data/force_dnscrypt_list.txt /data/custom_env.ini /data/force_cn_list.txt /data/force_nocn_list.txt /data/global_mark.dat /data/trackerslist.txt /data/force_forward_list.txt /data/force_ttl_rules.txt
 1096 root      0:00 {debug.sh} /bin/sh /usr/sbin/debug.sh
 1121 root      0:00 ps -ef
  285 root      4:17 unbound -c /tmp/unbound_raw.conf -p
unbound OK.
*********************************************************************************

[INFO] TOP
*********************************************************************************

CPU:   0% usr   0% sys   0% nic 100% idle   0% io   0% irq   0% sirq
  PID  PPID USER     STAT   VSZ %VSZ CPU %CPU COMMAND
  251     1 root     S    1212m  52%   1   0% mosdns start -d /tmp -c /tmp/mosdn
  240     1 root     S    1210m  52%   1   0% dnscrypt-proxy -config /data/dnscr
   45     1 root     S    28584   1%   0   0% redis-server unixsocket:/tmp/redis
  285     1 root     S    16932   1%   0   0% unbound -c /tmp/unbound_raw.conf -
  264     1 root     S    12616   1%   0   0% unbound -c /tmp/unbound_forward.co
  258     1 root     S     1712   0%   1   0% {watch_list.sh} /bin/sh /usr/sbin/
    1     0 root     S     1632   0%   1   0% {init.sh} /bin/sh /usr/sbin/init.s
 1096     0 root     S     1628   0%   1   0% {debug.sh} /bin/sh /usr/sbin/debug
 1125  1096 root     R     1624   0%   1   0% top -n1
  265     1 root     S     1616   0%   1   0% tail -f /dev/null
 1126  1096 root     S     1612   0%   0   0% grep %
  317   258 root     S     1072   0%   1   0% inotifywait -e modify,delete /etc/
   12     1 root     S      872   0%   1   0% crond
*********************************************************************************

[INFO] REDIS
*********************************************************************************

used_memory_human:5.54M
used_memory_rss_human:9.78M
used_memory_peak_human:5.55M
total_system_memory_human:2.26G
used_memory_lua_human:31.00K
used_memory_vm_total_human:63.00K
used_memory_scripts_human:181B
maxmemory_human:100.00M
9419
*********************************************************************************

[TEST] IP ROUTE
*********************************************************************************

CN IP URL:
27.227.135.235
-
27.227.135.235
--
27.227.135.235
CN RAW-IP URL:
27.227.135.235
------------------
Non-CN IP URL:
119.28.20.151
-
119.28.20.151
--
119.28.20.151
Non-CN RAW-IP URL:
27.227.135.235
-
27.227.135.235
--
27.227.135.235
---
27.227.135.235
------------------
IP INFO:
27.227.135.235
CN,Lanzhou,Gansu
ASN4134/China Telecom
HTTP/1.1
Mozilla/5.0 Gecko/20100101 Firefox/120.0 https://github.com/kkkgo/PaoPaoDNS
Asia/Shanghai Time: 5/2/2024, 12:22:34 AM
[INFO] force_recurse_list
domain:whoami.ds.akahelp.net
domain:whoami.03k.org
MOSDNS WHOAMI :
MOSDNS akahelp: "ns" "27.227.131.119"
MOSDNS 03k: 27.227.135.235
UNBOUND WHOAMI:
UNBOUND akahelp: "ns" "27.227.131.119"
UNBOUND 03k: 27.227.135.235
*********************************************************************************

[TEST] HIJACK
*********************************************************************************

;; communications error to 9.8.7.5#53: timed out
;; no servers could be reached

;; communications error to 9.8.7.6#53: timed out
;; no servers could be reached

HIJACK 127.0.0.1 = 58.217.249.177
*********************************************************************************

[TEST] DIG-CN [taobao]
*********************************************************************************

MOSDNS CN:
www.taobao.com.danuoyi.tbcache.com.
125.74.38.220
125.74.38.219
UNBOUND CN:
www.taobao.com.danuoyi.tbcache.com.
125.74.38.220
125.74.38.219
[TEST] DIG-NOCN [youtube]
MOSDNS NOCN:
7.0.0.26
DNSCRYPT-UNBOUND NOCN:
youtube-ui.l.google.com.
142.250.74.14
142.250.74.46
DNSCRYPT NOCN:
youtube-ui.l.google.com.
142.250.180.206
142.250.180.238
DNSCRYPT-SOCKS5 NOCN:
;; communications error to 127.0.0.1#5303: connection refused
;; no servers could be reached

*********************************************************************************

CUSTOM_FORWARD TEST [youtube]:
7.0.0.26
CUSTOM_FORWARD TEST [taobao]:
7.0.0.27
*********************************************************************************

[TEST] DUAL CN [IPv6=YES will have aaaa,taobao]
*********************************************************************************

[TEST] DUAL NOCN [IPv6=YES will block aaaa,youtube]
[TEST] ONLY6 [IPv6=only6 will block aaaa if a ok]
checkipv6.synology.com : ip6.03k.org : 6.ipw.cn :
*********************************************************************************

[info] ALL TEST FINISH.

-> debug end 1714580558
~ #
~ #
~ # docker exec paopaodns test.sh

---

images build time : 2024-04-25 16:23:16 UTC
check for the latest version ,
go to https://github.com/kkkgo/PaoPaoDNS/discussions
-> test start 1714580577

yyyyyyyyyNOCN-5301 failed:yyy
[INFO] TEST FAIL.❌

-> test end 1714580579

---

[kkkgo]

按浏览器F12，点击network标签，然后进行操作，查看是哪个请求失败，点开他，然后看是什么域名导致的。

[gukey]

是有一些访问失败的记录,有一些都是框框，显示不出来；

https://img12.360buyimg.com/n7/jfs/t1/205773/36/29324/63447/638028d6Edcf8c955/aaf71a96211a44d8.jpg.avif
https://im-x.jd.com/dsp/np?log=PPV-kHDbiX85TqXIQ0Q-kAtcZsJ2kd5I6xAII7bKsPxlN2mPa2R1-dI6LMgCQ8-Q9SjE7y6gXlQcq

[kkkgo]

没看懂你这个是在哪里的配置，如果你是说DNS的docker的配置的话，你配置啥DNS都应该不影响，paopaodns docker会自己解析自己。

[gukey]

不好意思，上面第一个就是 paopaodns 的宿主机网络配置，IP 网关， DNS这些，dns docker 使用host 模式，第二个ros 默认就是分配dns 为 192.168.1.5这个dns 服务器IP， 192.168.1.100 是我现在上网的电脑，不指定dns 的话 默认就是 192。168.1.5 ，指定了dns 就是114.114.114.114，访问就正常了，感觉好像那没设置合适，是这个意思；

[kkkgo]

还有个排查思路是，如果你认为是代理导致的，你可以把AUTO_FORWARD=no，这样应该就不会有流量经过网关。
如果正常的话，你可以到网关开启流量记录，然后观察是哪个域名跑到网关去了。
如果依然不正常（修改配置之后，最好重启下电脑网卡和退掉浏览器再开），那么就应该不是代理导致的问题。

[gukey]

OK，我试试。

[gukey]

不知道是不是缓存文件引起的问题，我是每次升级 docker 就会把 这个缓存 redis_dns_v2.rdb 文件 备份出来，dns 搭建好以后在吧 redis_dns_v2.rdb 复制到 /home/mydata/ 下，重启docker在，刚才我重新部署，直接把之前的 /home/mydata/ 目录删除，redis_dns_v2.rdb 备份文件也不复制进去，直接按 docker 默认配置，就访问正常了，目前淘宝及京东访问都正常；

[kkkgo]

#154