v2rayN icon indicating copy to clipboard operation
v2rayN copied to clipboard

Published 20 hours ago • verified publisher icon 2dust

[Feature request]: 改善 sing-box 的DNS设置与 DNS rule

Open choicky opened this issue 1 year ago • 3 comments

相关问题

默认DNS方案定义了remote和local的DNS服务器，但实际上绝大部分域名都走了local_local

描述你希望的解决方案

设置合理的rule，让国内走local，国外走remote

描述你所考虑的替代方案

设置合理的rule，让国内走local，国外走remote

我确认已查询历史issues

  • [X] 是

choicky avatar Apr 01 '24 01:04 choicky

v2rayN 使用 sing-box 核心，启用 tun 之后，将某个服务器的设置导出来作为客户端设置，就看到如下内容：

  "dns": {
    "servers": [
      {
        "tag": "remote",
        "address": "脱敏",
        "detour": "proxy"
      },
      {
        "tag": "local",
        "address": "脱敏",
        "detour": "direct"
      },
      {
        "tag": "block",
        "address": "rcode://success"
      },
      {
        "tag": "local_local",
        "address": "脱敏",
        "detour": "direct"
      }
    ],
    "rules": [
      {
        "server": "local",
        "disable_cache": true,
        "geosite": [
          "cn"
        ]
      },
      {
        "server": "block",
        "disable_cache": true,
        "geosite": [
          "category-ads-all"
        ]
      },
      {
        "outbound": "any",
        "server": "local_local"
      }
    ],
    "strategy": "ipv4_only"
  }

相当于虽然设置了 remote 和 local 的服务器，但主用的依然是 local_local，不太合理的样子。 我的理解是， remote 和 local 可以填写 DOH 之类的，然后 local_local 仅用于解析 remote 和 local 的DOH。

但是， local_local 是系统内置的，即使我手动定制 dns ，最终也依然是这个规则。

choicky avatar Apr 01 '24 01:04 choicky

您可以提供一个更好的rule 测试后没有问题可以作为默认rule加入

2dust avatar Apr 01 '24 05:04 2dust

参考这里 https://github.com/chika0801/sing-box-examples/tree/main/Tun

2dust avatar Apr 01 '24 06:04 2dust 

{
    "servers": [
        {
            "tag": "local-dns",
            "address": "https://dns.alidns.com/dns-query",
            "address_resolver": "dns-resolver",
            "detour": "direct"
        },
        {
            "tag": "remote-dns",
            "address": "https://cloudflare-dns.com/dns-query",
            "address_resolver": "dns-resolver",
            "detour": "proxy"
        },
        {
            "tag": "block",
            "address": "rcode://success"
        },
        {
            "tag": "dns-resolver",
            "address": "223.5.5.5",
            "detour": "direct"
        }
    ],
    "rules": [
        {
            "rule_set": [
                "geosite-wechat",
                "geosite-bilibili",
                "geosite-tencent",
                "geosite-cn",
                "geosite-geolocation-cn"
            ],
            "server": "local-dns"
        },
        {
            "outbound": "any",
            "server": "local-dns"
        }
    ],
    "final": "remote-dns",
    "strategy": "prefer_ipv4"
}

choicky avatar Apr 03 '24 05:04 choicky

吧

{
    "servers": [
        {
            "tag": "local-dns",
            "address": "https://dns.alidns.com/dns-query",
            "address_resolver": "dns-resolver",
            "detour": "direct"
        },
        {
            "tag": "remote-dns",
            "address": "https://cloudflare-dns.com/dns-query",
            "address_resolver": "dns-resolver",
            "detour": "proxy"
        },
        {
            "tag": "block",
            "address": "rcode://success"
        },
        {
            "tag": "dns-resolver",
            "address": "223.5.5.5",
            "detour": "direct"
        }
    ],
    "rules": [
        {
            "rule_set": [
                "geosite-wechat",
                "geosite-bilibili",
                "geosite-tencent",
                "geosite-cn",
                "geosite-geolocation-cn"
            ],
            "server": "local-dns"
        },
        {
            "outbound": "any",
            "server": "local-dns"
        }
    ],
    "final": "remote-dns",
    "strategy": "prefer_ipv4"
}

把你这个dns中的rule_set改成geosite，然后贴入是可以运行的。 但是下面这个规则将导致后面的 final 不起作用

{
       "outbound": "any",
       "server": "local-dns"
     },

2dust avatar Apr 04 '24 00:04 2dust

如下的规则可能可以

{
    "servers": [
        {
            "tag": "local-dns",
            "address": "https://dns.alidns.com/dns-query",
            "address_resolver": "dns-resolver",
            "detour": "direct"
        },
        {
            "tag": "remote-dns",
            "address": "https://cloudflare-dns.com/dns-query",
            "address_resolver": "dns-resolver",
            "detour": "proxy"
        },
        {
            "tag": "block",
            "address": "rcode://success"
        },
        {
            "tag": "dns-resolver",
            "address": "223.5.5.5",
            "detour": "direct"
        }
    ],
    "rules": [
        {
            "geosite": [
                "geolocation-!cn"
            ],
            "server": "remote-dns"
        },
        {
            "outbound": "any",
            "server": "local-dns"
        }
    ],
    "final": "remote-dns",
    "strategy": "prefer_ipv4"
}

2dust avatar Apr 04 '24 00:04 2dust

我也是想改一下DNS，就发现了这个帖子。顶一个。

dNEryno avatar Apr 04 '24 05:04 dNEryno

如下的规则可能可以

{
    "servers": [
        {
            "tag": "local-dns",
            "address": "https://dns.alidns.com/dns-query",
            "address_resolver": "dns-resolver",
            "detour": "direct"
        },
        {
            "tag": "remote-dns",
            "address": "https://cloudflare-dns.com/dns-query",
            "address_resolver": "dns-resolver",
            "detour": "proxy"
        },
        {
            "tag": "block",
            "address": "rcode://success"
        },
        {
            "tag": "dns-resolver",
            "address": "223.5.5.5",
            "detour": "direct"
        }
    ],
    "rules": [
        {
            "geosite": [
                "geolocation-!cn"
            ],
            "server": "remote-dns"
        },
        {
            "outbound": "any",
            "server": "local-dns"
        }
    ],
    "final": "remote-dns",
    "strategy": "prefer_ipv4"
}

如果想加多一个本地还有远程DNS，怎么修改呢？

dNEryno avatar Apr 04 '24 11:04 dNEryno

{ "servers": [ { "tag": "local-dns", "address": ["tls://dns.alidns.com","tls://dot.pub"], "address_resolver":"dns-resolver", "detour": "direct" }, { "tag": "remote-dns", "address": ["tls://dns.quad9.net","tls://security.cloudflare-dns.com"], "address_resolver": "dns-resolver", "detour": "proxy" }, { "tag": "block", "address": "rcode://success" }, { "tag": "dns-resolver", "address": "223.5.5.5", "detour": "direct" } ], "rules": [ { "geosite": ["geolocation-!cn"], "server": ["remote-dns"] }, { "outbound": "any", "server": ["local-dns"] } ], "final": "remote-dns", "strategy": "prefer_ipv4" }

不对

dNEryno avatar Apr 04 '24 12:04 dNEryno

我查了一下资料，目前不太明白 dns 里面的 final 与 dns-rule 里面的 outbound 的关系... 如果这两者是冲突的，是不是只设置其中之一即可？

把你这个dns中的rule_set改成geosite，然后贴入是可以运行的。 但是下面这个规则将导致后面的 final 不起作用

{
       "outbound": "any",
       "server": "local-dns"
     },

choicky avatar Apr 04 '24 14:04 choicky

如果想加多一个本地还有远程DNS，怎么修改呢？

{ "servers": [ { "tag": "local-dns", "address": ["tls://dns.alidns.com","tls://dot.pub"], "address_resolver":"dns-resolver", "detour": "direct" }, { "tag": "remote-dns", "address": ["tls://dns.quad9.net","tls://security.cloudflare-dns.com"], "address_resolver": "dns-resolver", "detour": "proxy" }, { "tag": "block", "address": "rcode://success" }, { "tag": "dns-resolver", "address": "223.5.5.5", "detour": "direct" } ], "rules": [ { "geosite": ["geolocation-!cn"], "server": ["remote-dns"] }, { "outbound": "any", "server": ["local-dns"] } ], "final": "remote-dns", "strategy": "prefer_ipv4" }

不对

我也尝试过每个 address 配置两个服务器，即使用 sing-box run 来测试，也是报错的。可能 sing-box 的 dns 的 server 目前尚未支持。

choicky avatar Apr 04 '24 14:04 choicky

address 只能是一个地址，不能多个 如下面的这样可以，但是rules是从上到下顺序，第二个不会被匹配到


{
    "servers": [
        {
            "tag": "local-dns",
            "address": "https://dns.alidns.com/dns-query",
            "address_resolver": "dns-resolver",
            "detour": "direct"
        },
        {
            "tag": "remote-dns",
            "address": "https://cloudflare-dns.com/dns-query",
            "address_resolver": "dns-resolver",
            "detour": "proxy"
        },{
            "tag": "local-dns2",
            "address": "https://dns.alidns.com/dns-query",
            "address_resolver": "dns-resolver",
            "detour": "direct"
        },
        {
            "tag": "remote-dns2",
            "address": "https://cloudflare-dns.com/dns-query",
            "address_resolver": "dns-resolver",
            "detour": "proxy"
        },
        {
            "tag": "block",
            "address": "rcode://success"
        },
        {
            "tag": "dns-resolver",
            "address": "223.5.5.5",
            "detour": "direct"
        }
    ],
    "rules": [
        {
            "geosite": [
                "geolocation-!cn"
            ],
            "server": "remote-dns"
        },
        {
            "geosite": [
                "geolocation-!cn"
            ],
            "server": "remote-dns2"
        },
        {
            "outbound": "any",
            "server": "local-dns"
        }
    ],
    "final": "remote-dns",
    "strategy": "prefer_ipv4"
}

2dust avatar Apr 04 '24 23:04 2dust

address 只能是一个地址，不能多个 如下面的这样可以，但是rules是从上到下顺序，第二个不会被匹配到


{
    "servers": [
        {
            "tag": "local-dns",
            "address": "https://dns.alidns.com/dns-query",
            "address_resolver": "dns-resolver",
            "detour": "direct"
        },
        {
            "tag": "remote-dns",
            "address": "https://cloudflare-dns.com/dns-query",
            "address_resolver": "dns-resolver",
            "detour": "proxy"
        },{
            "tag": "local-dns2",
            "address": "https://dns.alidns.com/dns-query",
            "address_resolver": "dns-resolver",
            "detour": "direct"
        },
        {
            "tag": "remote-dns2",
            "address": "https://cloudflare-dns.com/dns-query",
            "address_resolver": "dns-resolver",
            "detour": "proxy"
        },
        {
            "tag": "block",
            "address": "rcode://success"
        },
        {
            "tag": "dns-resolver",
            "address": "223.5.5.5",
            "detour": "direct"
        }
    ],
    "rules": [
        {
            "geosite": [
                "geolocation-!cn"
            ],
            "server": "remote-dns"
        },
        {
            "geosite": [
                "geolocation-!cn"
            ],
            "server": "remote-dns2"
        },
        {
            "outbound": "any",
            "server": "local-dns"
        }
    ],
    "final": "remote-dns",
    "strategy": "prefer_ipv4"
}

意思就是如果remote1可以用，remote2就没生效吗？

dNEryno avatar Apr 05 '24 14:04 dNEryno

是的，sing-box和clash系不同，只有一个dns生效就够了

2dust avatar Apr 06 '24 00:04 2dust

是的，sing-box和clash系不同，只有一个dns生效就够了

好的，另外斗鱼啥的都走代理，我规则里也有geosite:cn 是direct ，为啥还走代理呀。。

dNEryno avatar Apr 06 '24 11:04 dNEryno

是的，sing-box和clash系不同，只有一个dns生效就够了

好的，另外斗鱼啥的都走代理，我规则里也有geosite:cn 是direct ，为啥还走代理呀。。

我也遇到设置了 geosite:cn 和 geoip:cn 直连、其他proxy的情况下，有些国内网站依然走proxy的情况。我发现把 geosite:geolocation-cn 也列入直连之后，基本上能避免那个问题。

另外，sing-box 1.8 之后，官方就推荐使用 rule_set 而不是 geosite了。希望 v2rayN 后续能跟进。 ref: https://sing-box.sagernet.org/zh/configuration/route/geosite/

choicky avatar Apr 06 '24 14:04 choicky

在pc上，rule_set并没有太多好处，很可能会因为下载srs文件失败导致很多问题

2dust avatar Apr 07 '24 00:04 2dust

Geosite doesn't work anymore with the latest versions of Singbox and so routing is not working much in V2rayN Tun mode, We need to use rule_set to use the geosite files.

GibMeMyPacket avatar Apr 07 '24 13:04 GibMeMyPacket

https://github.com/2dust/v2rayN/releases/tag/6.43

2dust avatar Apr 10 '24 09:04 2dust