DNS服务器导致网络连接数太多，引起运营商频繁断连

[sanwuping]

我架设了DNS服务器，并用了PPGW，功能都一切正常，但是在使用过程中，如果大量刷抖音视频的话，就会导致，网络连接数迅速上升到3000，然后就会导致我被运营商断线重连。我查看了，连接数量，主要来自DNS服务器的UDP请求。如果我换成运营商的DNS就不会出现这种状况，有什么办法可以解决我这个问题，还是说我这个需要开启足够的时长等待DNS缓存足够多就不会这样了？

[sanwuping]

我在ikuai路由里限制了Dns的IP连接数，貌似稳定了很多，而且感觉刷视频比以前速度也快了很多，看来这个就是运营商会话连接数限制的问题，连接数变大导致整个网络都变卡，所以感觉解析速度不如运营商的DNS。

[kkkgo]

跑一下test.sh和debug.sh看看。

[sanwuping]

我看了 这些都没问题。
paopaodns:~# docker exec paopaodns test.sh

---

images build time : 2024-04-11 15:59:32 UTC
check for the latest version ,
go to https://github.com/kkkgo/PaoPaoDNS/discussions
-> test start 1713527362

[INFO] ALL TEST PASS.✅

-> test end 1713527365

DEBUG
-> debug start 1713527417

[INFO] images build time : 2024-04-11 15:59:32 UTC
[OK]DATA_writeable
[OK]DATA_readable
[INFO] NETWORK
*********************************************************************************

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1000
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP qlen 1000
    inet 192.168.99.114/24 scope global eth0
    inet6 fe80::20c:29ff:fe21:a41c/64 scope link 
3: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN 
    inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
default via 192.168.99.1 dev eth0  metric 1 onlink 
172.17.0.0/16 dev docker0 scope link  src 172.17.0.1 
192.168.99.0/24 dev eth0 scope link  src 192.168.99.114 
PING 223.5.5.5 (223.5.5.5): 56 data bytes
64 bytes from 223.5.5.5: seq=0 ttl=116 time=29.014 ms

--- 223.5.5.5 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max = 29.014/29.014/29.014 ms
PING 119.29.29.29 (119.29.29.29): 56 data bytes
64 bytes from 119.29.29.29: seq=0 ttl=52 time=32.502 ms

--- 119.29.29.29 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max = 32.502/32.502/32.502 ms
Server:         223.5.5.5
Address:        223.5.5.5#53

Non-authoritative answer:
www.taobao.com  canonical name = www.taobao.com.danuoyi.tbcache.com.
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 111.19.204.200
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 111.19.204.201
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 2409:8c70:3a0e:2:3::3de
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 2409:8c70:3a0e:2:3::3df

Server:         119.29.29.29
Address:        119.29.29.29#53

Non-authoritative answer:
www.qq.com      canonical name = ins-r23tsuuf.ias.tencent-cloud.net.
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 101.91.22.57
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 101.91.42.232
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 240e:e1:a800:120::76
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 240e:e1:a800:120::36

*********************************************************************************

[INFO] ENV
*********************************************************************************

====ENV TEST====
[OK]DATA_writeable-
[OK]DATA_readable-
MEM:50m 100m 200 100mb
prefPC:9
CORES:-1-
POWCORES:-1-
ulimit :-1048576-
FDLIM :-1-
TZ:-Asia/Shanghai-
UPDATE:-weekly-
DNS_SERVERNAME:-PaoPaoDNS,blog.03k.org-
SERVER_IP:-192.168.99.114-
ETHIP:-192.168.99.114-
DNSPORT:-53-
SOCKS5:-192.168.99.2:1080-
CNAUTO:-yes-
IPV6:-no-
CNFALL:-yes-
CUSTOM_FORWARD:-192.168.99.2:53-
AUTO_FORWARD:-yes-
AUTO_FORWARD_CHECK:-yes-
USE_MARK_DATA:-yes-
RULES_TTL:-0-
CUSTOM_FORWARD_TTL:-0-
SHUFFLE:-lite-
CN_TRACKER:-yes-
USE_HOSTS:-no-
HTTP_FILE:-yes-
SAFEMODE:--
QUERY_TIME:-2000ms-
ADDINFO:-yes-
PLATFORM:-Linux paopaodns 6.6.26-0-virt #1-Alpine SMP PREEMPT_DYNAMIC Thu, 11 Apr 2024 06:39:39 +0000 x86_64 Linux-
====ENV TEST====
mosdns kkkgo/mosdns:240322.2
total 3M     
   4.0K drwxrwxrwx    3 0        0           4.0K Apr 19 14:52 .
   4.0K drwxr-xr-x    1 0        0           4.0K Apr 17 17:59 ..
 256.0K -rwxrwxrwx    1 0        0         255.9K Apr 19 00:57 Country-only-cn-private.mmdb
   4.0K -rwxrwxrwx    1 0        0            233 Apr 19 00:57 custom_env.ini
   4.0K -rwxrwxrwx    1 0        0            416 Apr 19 18:51 custom_mod.yaml
   4.0K drwxrwxrwx    2 0        0           4.0K Apr 19 18:51 dnscrypt-resolvers
   4.0K -rwxrwxrwx    1 0        0           3.0K Apr 17 17:59 dnscrypt.toml
   4.0K -rwxrwxrwx    1 0        0            328 Apr 14 15:35 force_cn_list.txt
   4.0K -rwxrwxrwx    1 0        0            311 Apr 14 15:35 force_forward_list.txt
   4.0K -rwxrwxrwx    1 0        0            386 Apr 14 15:35 force_nocn_list.txt
   1.2M -rwxrwxrwx    1 0        0           1.2M Apr 19 18:55 global_mark.dat
  12.0K -rwxrwxrwx    1 0        0           9.7K Apr 17 17:59 mosdns.yaml
   4.0K -rwxrwxrwx    1 0        0           1.7K Apr 19 19:46 ppgw.ini
   8.0K -rwxrwxrwx    1 0        0           5.7K Apr 17 17:59 redis.conf
   1.4M -rwxrwxrwx    1 0        0           1.4M Apr 19 14:52 redis_dns_v2.rdb
  12.0K -rwxrwxrwx    1 0        0          11.9K Apr 17 18:04 trackerslist.txt
  52.0K -rwxrwxrwx    1 0        0          50.4K Apr 17 17:59 unbound.conf
   4.0K -rwxrwxrwx    1 0        0            289 Apr 14 15:35 unbound_custom.conf
*********************************************************************************

[INFO] PS
*********************************************************************************

PID   USER     TIME  COMMAND
    1 root      0:00 {init.sh} /bin/sh /usr/sbin/init.sh
   13 root      0:00 crond
   46 root      0:02 redis-server unixsocket:/tmp/redis.sock
  170 root      0:00 dnscrypt-proxy -config /data/dnscrypt-resolvers/dnscrypt.toml
  171 root      0:02 dnscrypt-proxy -config /data/dnscrypt-resolvers/dnscrypt_socks.toml
  182 root      0:02 mosdns start -d /tmp -c /tmp/mosdns.yaml
  191 root      0:00 {watch_list.sh} /bin/sh /usr/sbin/watch_list.sh
  197 root      0:00 tail -f /dev/null
  199 root      0:00 unbound -c /tmp/unbound_forward.conf -p
  205 root      0:03 unbound -c /tmp/unbound_raw.conf -p
  236 root      0:00 inotifywait -e modify,delete /etc/unbound/named.cache /data/Country-only-cn-private.mmdb /data/force_cn_list.txt /data/force_nocn_list.txt /data/custom_env.ini /data/global_mark.dat /data/trackerslist.txt /data/force_forward_list.txt
  757 root      0:00 {debug.sh} /bin/sh /usr/sbin/debug.sh
  778 root      0:00 ps -ef
  205 root      0:03 unbound -c /tmp/unbound_raw.conf -p
unbound OK.
*********************************************************************************

[INFO] TOP
*********************************************************************************

CPU:   0% usr   0% sys   0% nic 100% idle   0% io   0% irq   0% sirq
  PID  PPID USER     STAT   VSZ %VSZ CPU %CPU COMMAND
  182     1 root     S    1211m  61%   0   0% mosdns start -d /tmp -c /tmp/mosdn
  171     1 root     S    1211m  61%   1   0% dnscrypt-proxy -config /data/dnscr
  170     1 root     S    1211m  61%   1   0% dnscrypt-proxy -config /data/dnscr
   46     1 root     S    24864   1%   2   0% redis-server unixsocket:/tmp/redis
  205     1 root     S    19488   1%   0   0% unbound -c /tmp/unbound_raw.conf -
  199     1 root     S    11752   1%   1   0% unbound -c /tmp/unbound_forward.co
  191     1 root     S     1708   0%   2   0% {watch_list.sh} /bin/sh /usr/sbin/
    1     0 root     S     1632   0%   3   0% {init.sh} /bin/sh /usr/sbin/init.s
  757     0 root     S     1628   0%   0   0% {debug.sh} /bin/sh /usr/sbin/debug
  782   757 root     R     1624   0%   3   0% top -n1
  197     1 root     S     1616   0%   2   0% tail -f /dev/null
  783   757 root     S     1612   0%   1   0% grep %
  236   191 root     S     1072   0%   3   0% inotifywait -e modify,delete /etc/
   13     1 root     S      860   0%   0   0% crond
*********************************************************************************

[INFO] REDIS
*********************************************************************************

used_memory_human:2.64M
used_memory_rss_human:5.86M
used_memory_peak_human:2.64M
total_system_memory_human:1.93G
used_memory_lua_human:31.00K
used_memory_vm_total_human:63.00K
used_memory_scripts_human:181B
maxmemory_human:100.00M
1542
*********************************************************************************

[TEST] IP ROUTE
*********************************************************************************

CN IP URL:
117.37.127.225
-
117.37.127.225
--
117.37.127.225
CN RAW-IP URL:
------------------
Non-CN IP URL:
45.62.172.118
-
45.62.172.118
--
45.62.172.118
Non-CN RAW-IP URL:
117.37.127.225
-
117.37.127.225
--
117.37.127.225
---
117.37.127.225
------------------
IP INFO:
117.37.127.225
CN,Xianyang,Shaanxi
ASN4134/China Telecom
HTTP/1.1 
Mozilla/5.0 Gecko/20100101 Firefox/120.0 https://github.com/kkkgo/PaoPaoDNS
Asia/Shanghai Time: 4/19/2024, 7:50:27 PM
[INFO] force_cn_list
domain:whoami.ds.akahelp.net
domain:whoami.03k.org
MOSDNS WHOAMI :
MOSDNS akahelp: "ns" "117.37.125.150"
MOSDNS 03k: 117.37.127.225
UNBOUND WHOAMI:
UNBOUND akahelp: "ns" "117.37.125.150"
UNBOUND 03k: 117.37.127.225
*********************************************************************************

[TEST] HIJACK
*********************************************************************************

;; communications error to 9.8.7.5#53: timed out
;; no servers could be reached

;; communications error to 9.8.7.6#53: timed out
;; no servers could be reached

HIJACK 127.0.0.1 = 58.217.249.177
*********************************************************************************

[TEST] DIG-CN [taobao]
*********************************************************************************

MOSDNS CN:
111.19.204.201
111.19.204.200
UNBOUND CN:
www.taobao.com.danuoyi.tbcache.com.
111.19.204.200
111.19.204.201
[TEST] DIG-NOCN [youtube]
MOSDNS NOCN:
11.0.0.37
DNSCRYPT-UNBOUND NOCN:
youtube-ui.l.google.com.
142.250.189.174
142.250.189.206
DNSCRYPT NOCN:
youtube-ui.l.google.com.
142.251.36.46
172.217.168.238
DNSCRYPT-SOCKS5 NOCN:
youtube-ui.l.google.com.
64.233.170.91
142.251.12.190
*********************************************************************************

CUSTOM_FORWARD TEST [youtube]:
11.0.0.37
CUSTOM_FORWARD TEST [taobao]:
11.0.0.38
*********************************************************************************

[TEST] DUAL CN [IPv6=YES will have aaaa,taobao]
*********************************************************************************

[TEST] DUAL NOCN [IPv6=YES will block aaaa,youtube]
[TEST] ONLY6 [IPv6=only6 will block aaaa if a ok]
checkipv6.synology.com : ip6.03k.org : 6.ipw.cn : 
*********************************************************************************

[info] ALL TEST FINISH.

-> debug end 1713527430

[sanwuping]

经过测试我发现，就是这个抖音导致连接数突然变多，有没有办法让抖音或者国内某些域名使用运营商DNS，我大概咨询 貌似家用宽带的会话连接数都有限制，好一点的5000以上，差一点的1000就会导致卡顿断线重播。

[TwoBall]

另外，大佬怎么NTP同步，我不管设置成内网的NTP服务器，还是TR609的网关，都获取不到时间。

[kkkgo]

我设置的是
ntp1：tr069的DNS地址
ntp2：tr069的网关地址

[TwoBall]

我的tr069 dns获取到的是192.168.0.×这种🌚🌚

[kkkgo]

正常的，我也是192开头

[TwoBall]

这个问题在我把固件降级到1.1.3版本之后居然莫名其妙的好了

[kkkgo]

SAFEMODE设为yes看看。

[sanwuping]

瞬间就会达到这种，有时候更多直接8000以上，但是实际电脑使用不多，就开两台电脑浏览网页啥的，难道是我电脑有病毒？

[kkkgo]

你可以套个adguardhome之类看看查询记录。

[sanwuping]

ikuai里也可以看到查询记录，瞬间的，我也不知道查的是什么，主要好像就是抖音刷视频的时候。我是不是应该再弄个虚拟机安装一个MOSDNS进行一下分流，让国内的走国内运营商DNS，海外的走自建的paopaodns.

[kkkgo]

你都不知道查的是什么又怎么看查询记录。

[Makerlong]

原来总是重新拨号是这么回事啊。

[sanwuping]

为啥我的redis_dns_v2.rdb这个文件才1.5M 而且不怎么变大

[kkkgo]

因为你的使用强度没有什么新记录可以缓存。
另外如果开安全模式会限制缓存。

[kkkgo]

ikuai里也可以看到查询记录，瞬间的，我也不知道查的是什么，主要好像就是抖音刷视频的时候。我是不是应该再弄个虚拟机安装一个MOSDNS进行一下分流，让国内的走国内运营商DNS，海外的走自建的paopaodns.

参考【PaoPaoDNS使用技巧】自定义递归对接服务器”外包“
#131