sing-box(Linux)旁路inbounds配置

[luweijun1992]

Operating system

Linux

System version

Debian 12

Installation type

Original sing-box Command Line

If you are using a graphical client, please provide the version of the client.

No response

Version

sing-box version 1.10.0-alpha.18

Environment: go1.22.4 linux/amd64
Tags: with_gvisor,with_quic,with_dhcp,with_wireguard,with_ech,with_utls,with_reality_server,with_acme,with_clash_api
Revision: f7c96d9d78c2146e695e4ce7171f1e019850a065
CGO: disabled

Description

sing-box部署在debian 12系统 inbounds的配置应该怎么写？

type = direct 监听53端口处理dns相关。 type = tun 处理流量，主路由配置了静态路由 198.18.0.0/16 指向sing-box IP 局域网内设备 网关IP是主路由，DNS为sing-box IP地址

tun开启 auto_route=true，strict_route=true 后，dns无法处理解析，网页也无法打开。 如果注释tun部分配置去测试dns解析，是正常解析的。

请问tun部分的参数应该怎么配置才能正常使用。 针对旁设备部署sing-box解决局域网的需求应该采用 tun? Redirect? TProxy? 哪种更合适？ 除了sing-box配置，Debian 12系统上有需要做什么配置吗？

Reproduction

Logs

No response

Supporter

• [X] I am a sponsor

Integrity requirements

• [X] I confirm that I have read the documentation, understand the meaning of all the configuration items I wrote, and did not pile up seemingly useful options or default values.
• [X] I confirm that I have provided the server and client configuration files and process that can be reproduced locally, instead of a complicated client configuration file that has been stripped of sensitive data.
• [X] I confirm that I have provided the simplest configuration that can be used to reproduce the error I reported, instead of depending on remote servers, TUN, graphical interface clients, or other closed-source software.
• [X] I confirm that I have provided the complete configuration files and logs, rather than just providing parts I think are useful out of confidence in my own intelligence.