Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

edns配置不生效 #231

Open
giveup opened this issue Jan 12, 2024 · 2 comments
Open

edns配置不生效 #231

giveup opened this issue Jan 12, 2024 · 2 comments

Comments

@giveup
Copy link
Contributor

giveup commented Jan 12, 2024

rust版(运行在本地)

关闭edns

dig @192.168.31.205 -p 1153 www.amd.com

; <<>> DiG 9.10.6 <<>> @192.168.31.205 -p 1153 www.amd.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58607
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;www.amd.com.			IN	A

;; ANSWER SECTION:
www.amd.com.		600	IN	CNAME	dsa-www.amd.com.edgekey.net.
dsa-www.amd.com.edgekey.net. 600 IN	CNAME	dsa-www.amd.com.edgekey.net.globalredir.akadns.net.
dsa-www.amd.com.edgekey.net.globalredir.akadns.net. 600	IN CNAME e2897.ca2.s.tl88.net.
e2897.ca2.s.tl88.net.	600	IN	A	222.138.4.192

;; Query time: 1497 msec
;; SERVER: 192.168.31.205#1153(192.168.31.205)
;; WHEN: Fri Jan 12 20:11:12 CST 2024
;; MSG SIZE  rcvd: 178

开启edns

dig @192.168.31.205 -p 1154 www.amd.com

; <<>> DiG 9.10.6 <<>> @192.168.31.205 -p 1154 www.amd.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34126
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;www.amd.com.			IN	A

;; ANSWER SECTION:
dsa-www.amd.com.edgekey.net. 600 IN	CNAME	dsa-www.amd.com.edgekey.net.globalredir.akadns.net.
e2897.ca2.s.tl88.net.	600	IN	A	222.138.4.192
www.amd.com.		600	IN	CNAME	dsa-www.amd.com.edgekey.net.
dsa-www.amd.com.edgekey.net.globalredir.akadns.net. 600	IN CNAME e2897.ca2.s.tl88.net.

;; Query time: 70 msec
;; SERVER: 192.168.31.205#1154(192.168.31.205)
;; WHEN: Fri Jan 12 20:11:36 CST 2024
;; MSG SIZE  rcvd: 178

无论开启还是关闭,返回的都是国内的CDN。

c版(运行在OpenWrt上)
关闭edns

HHH@HHHs-MBP ~ % dig @192.168.31.1 -p 1153 www.amd.com

; <<>> DiG 9.10.6 <<>> @192.168.31.1 -p 1153 www.amd.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10431
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;www.amd.com.			IN	A

;; ANSWER SECTION:
www.amd.com.		600	IN	CNAME	e2897.ca2.s.tl88.net.
e2897.ca2.s.tl88.net.	600	IN	A	222.138.4.192

;; Query time: 72 msec
;; SERVER: 192.168.31.1#1153(192.168.31.1)
;; WHEN: Fri Jan 12 20:13:17 CST 2024
;; MSG SIZE  rcvd: 79

开启edns

HHH@HHHs-MBP ~ % dig @192.168.31.1 -p 1154 www.amd.com

; <<>> DiG 9.10.6 <<>> @192.168.31.1 -p 1154 www.amd.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 51792
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;www.amd.com.			IN	A

;; ANSWER SECTION:
www.amd.com.		600	IN	CNAME	e2897.b.akamaiedge.net.
e2897.b.akamaiedge.net.	600	IN	A	23.48.8.115

;; Query time: 1096 msec
;; SERVER: 192.168.31.1#1154(192.168.31.1)
;; WHEN: Fri Jan 12 20:12:38 CST 2024
;; MSG SIZE  rcvd: 81

可以看到开启edns后返回的CDN是akamaiedge。

部分配置文件

bind 127.0.0.1:1153@en0 -group domestic
bind 127.0.0.1:1154@en0  -no-speed-check -no-dualstack-selection -force-aaaa-soa -group oversea
server-tls 223.5.5.5  -no-check-certificate -group domestic
server-tls 223.6.6.6  -no-check-certificate -group domestic
server-tls 223.5.5.5  -no-check-certificate -group oversea -subnet 172.67.141.83
server-tls 223.6.6.6  -no-check-certificate -group oversea -subnet 172.67.141.83

已经确定阿里dns支持edns。

@mokeyish
Copy link
Owner

应该是支持的,这有单元测试
https://github.com/mokeyish/smartdns-rs/blob/main/src/dns_mw_ns.rs#L476

@giveup
Copy link
Contributor Author

giveup commented Jan 17, 2024

是否为配置错误?因为rust版没有完整的配置文件说明。所以edns是按照c版的去配置。
rust版启动时没有错误提示。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants