Xray-core icon indicating copy to clipboard operation
Xray-core copied to clipboard

DNS 1.1.1.3 not woking for fragmentation config

Open Platon929 opened this issue 1 year ago • 4 comments

Since I upgraded core to version 1.8.0+(from feat: fragmentation) and above, this configuration no longer filters porn sites. This DNS is used for family safety, which filters porn sites. Even when Enable local Dns option checked in the settings it not working Client: V2rayNG

Config

{
  "dns": {
    "hosts": {
      "domain:googleapis.cn": "googleapis.com"
    },
    "servers": [
      "1.1.1.3"
    ]
  },
  "inbounds": [
    {
      "listen": "127.0.0.1",
      "port": 10808,
      "protocol": "socks",
      "settings": {
        "auth": "noauth",
        "udp": true,
        "userLevel": 8
      },
      "sniffing": {
        "destOverride": [
          "http",
          "tls"
        ],
        "enabled": true
      },
      "tag": "socks"
    },
    {
      "listen": "127.0.0.1",
      "port": 10809,
      "protocol": "http",
      "settings": {
        "userLevel": 8
      },
      "tag": "http"
    }
  ],
  "log": {
    "loglevel": "warning"
  },
  "outbounds": [
    {
      "mux": {
        "enabled": false,
        "concurrency": -1
      },
      "tag": "proxy",
      "protocol": "vless",
      "settings": {
        "vnext": [
          {
            "port": 443,
            "users": [
              {
                "id": "xxxx",
                "flow": "",
                "email": "[email protected]",
                "alterId": 0,
                "security": "auto",
                "encryption": "none"
              }
            ],
            "address": "xxxx"
          }
        ]
      },
      "streamSettings": {
        "network": "ws",
        "sockopt": {
          "mark": 255,
          "dialerProxy": "fragment",
          "tcpKeepAliveIdle": 100
        },
        "security": "tls",
        "wsSettings": {
          "path": "/?ed=2048",
          "headers": {
            "Host": "xxxx"
          }
        },
        "tlsSettings": {
          "alpn": [
            "h2",
            "http/1.1"
          ],
          "show": false,
          "serverName": "xxx",
          "fingerprint": "chrome",
          "allowInsecure": true
        }
      }
    },
    {
      "tag": "fragment",
      "protocol": "freedom",
      "settings": {
        "fragment": {
          "length": "100-200",
          "packets": "tlshello",
          "interval": "10-20"
        }
      },
      "streamSettings": {
        "sockopt": {
          "mark": 255,
          "TcpNoDelay": true,
          "tcpKeepAliveIdle": 100
        }
      }
    },
    {
      "protocol": "freedom",
      "settings": {},
      "tag": "direct"
    },
    {
      "protocol": "blackhole",
      "settings": {
        "response": {
          "type": "http"
        }
      },
      "tag": "block"
    }
  ],
  "routing": {
    "domainStrategy": "IPIfNonMatch",
    "rules": [
      {
        "ip": [
          "1.1.1.3"
        ],
        "outboundTag": "proxy",
        "port": "53",
        "type": "field"
      }
    ]
  }
}

Platon929 avatar Feb 16 '24 11:02 Platon929

DNS not working on this options `enable local dns`
{
  "dns": {
    "hosts": {
      "domain:googleapis.cn": "googleapis.com"
    },
    "servers": [
      "1.1.1.3"
    ]
  },
  "inbounds": [
    {
      "listen": "127.0.0.1",
      "port": 10808,
      "protocol": "socks",
      "settings": {
        "auth": "noauth",
        "udp": true,
        "userLevel": 8
      },
      "sniffing": {
        "destOverride": [
          "http",
          "tls"
        ],
        "enabled": true
      },
      "tag": "socks"
    },
    {
      "listen": "127.0.0.1",
      "port": 10809,
      "protocol": "http",
      "settings": {
        "userLevel": 8
      },
      "tag": "http"
    },
    {
      "listen": "127.0.0.1",
      "port": 10853,
      "protocol": "dokodemo-door",
      "settings": {
        "address": "1.1.1.3",
        "network": "tcp,udp",
        "port": 53
      },
      "tag": "dns-in"
    }
  ],
  "log": {
    "loglevel": "warning"
  },
  "outbounds": [
    {
      "mux": {
        "enabled": false,
        "concurrency": -1
      },
      "tag": "proxy",
      "protocol": "vless",
      "settings": {
        "vnext": [
          {
            "port": 443,
            "users": [
              {
                "id": "",
                "flow": "",
                "email": "[email protected]",
                "alterId": 0,
                "security": "auto",
                "encryption": "none"
              }
            ],
            "address": ""
          }
        ]
      },
      "streamSettings": {
        "network": "ws",
        "sockopt": {
          "mark": 255,
          "dialerProxy": "fragment",
          "tcpKeepAliveIdle": 100
        },
        "security": "tls",
        "wsSettings": {
          "path": "/?ed=2048",
          "headers": {
            "Host": ""
          }
        },
        "tlsSettings": {
          "alpn": [
            "h2",
            "http/1.1"
          ],
          "show": false,
          "serverName": "",
          "fingerprint": "chrome",
          "allowInsecure": true
        }
      }
    },
    {
      "tag": "fragment",
      "protocol": "freedom",
      "settings": {
        "fragment": {
          "length": "100-200",
          "packets": "tlshello",
          "interval": "10-20"
        }
      },
      "streamSettings": {
        "sockopt": {
          "mark": 255,
          "TcpNoDelay": true,
          "tcpKeepAliveIdle": 100
        }
      }
    },
    {
      "protocol": "freedom",
      "settings": {},
      "tag": "direct"
    },
    {
      "protocol": "dns",
      "tag": "dns-out"
    }
  ],
  "routing": {
    "domainStrategy": "IPIfNonMatch",
    "rules": [
      {
        "inboundTag": [
          "dns-in"
        ],
        "outboundTag": "dns-out",
        "type": "field"
      },
      {
        "ip": [
          "1.1.1.3"
        ],
        "outboundTag": "proxy",
        "port": "53",
        "type": "field"
      }
    ]
  }
}

Platon929 avatar Feb 16 '24 12:02 Platon929

VLESS protocol with VMess alterId?

{
  "tag": "proxy",
  "protocol": "vless", <======================= CHECK THIS
  "settings": {
    "vnext": [
      {
        "port": 443,
        "users": [
          {
            "id": "xxxx",
            "flow": "",
            "email": "[email protected]",
            "alterId": 0, <======================= CHECK THIS
            "security": "auto", <======================= CHECK THIS
            "encryption": "none"
          }
        ],
        "address": "xxxx"
}

qwerr0 avatar Feb 16 '24 15:02 qwerr0

@qwerr0 Excuse me, what does this have to do with DNS? Because only DNS is not working and other functionalities are working properly

Platon929 avatar Feb 16 '24 15:02 Platon929

{
  "log": {
    "loglevel": "warning"
  },
  "dns": {
    "hosts": {
      "geosite:category-ads-all": "127.0.0.1"
    },
    "servers": [
      "1.1.1.3"
    ],
    "queryStrategy": "UseIPv4"
  },
  "routing": {
    "domainStrategy": "AsIs",
    "rules": [
      {
        "type": "field",
        "inboundTag": [
          "dns-in"
        ],
        "outboundTag": "dns-out"
      },
      {
        "type": "field",
        "ip": [
          "1.1.1.3"
        ],
        "outboundTag": "proxy"
      },
      {
        "type": "field",
        "domain": [
          "geosite:category-ads-all"
        ],
        "outboundTag": "block"
      },
      {
        "type": "field",
        "domain": [
          "geosite:geolocation-!cn"
        ],
        "ip": [
          "geoip:!cn"
        ],
        "outboundTag": "proxy"
      },
      {
        "type": "field",
        "ip": [
          "geoip:cn",
          "geoip:private"
        ],
        "outboundTag": "direct"
      }
    ]
  },
  "inbounds": [
    {
      "listen": "127.0.0.1",
      "port": 10808,
      "protocol": "socks",
      "settings": {
        "udp": true
      },
      "sniffing": {
        "enabled": true,
        "destOverride": [
          "http",
          "tls",
          "quic"
        ],
        "routeOnly": true
      }
    },
    {
      "listen": "127.0.0.1",
      "port": 10853,
      "protocol": "dokodemo-door",
      "settings": {
        "address": "1.1.1.3",
        "port": 53,
        "network": "udp"
      },
      "tag": "dns-in"
    }
  ],
  "outbounds": [
    {
      "tag": "proxy"
    },
    {
      "protocol": "freedom",
      "settings": {
        "domainStrategy": "ForceIPv4"
      },
      "tag": "direct"
    },
    {
      "protocol": "blackhole",
      "tag": "block"
    },
    {
      "protocol": "dns",
      "settings": {
        "nonIPQuery": "drop"
      },
      "proxySettings": {
        "tag": "proxy"
      },
      "tag": "dns-out"
    }
  ]
}

https://github.com/chika0801/Xray-examples/blob/main/v2rayNG_custom_remote_dns.json

us254 avatar Feb 19 '24 20:02 us254