Comments (38)
PikuZheng
commented on June 11, 2024
2
从 #1673 起，我就开始从家里的宽带监视阿里doh可用性，从未有错误（联通）
目前还是考虑单个ip查询超出阿里配额上限，被黑名单
哥!!! 你这个监测软件可以分享一下嘛....
https://github.com/louislam/uptime-kuma
from smartdns.
PikuZheng
commented on June 11, 2024
从 #1673 起，我就开始从家里的宽带监视阿里doh可用性，从未有错误（联通）
目前还是考虑单个ip查询超出阿里配额上限，被黑名单
from smartdns.
giveup
commented on June 11, 2024
@PikuZheng 使用dot时并不会出现这种错误，难道针对IP的策略还区分doh和dot？
除了500错误偶尔还会出现400
Tue Mar 26 15:10:44 2024 user.warn smartdns: http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error
Tue Mar 26 15:19:51 2024 user.warn smartdns: http server query from 223.6.6.6:443 failed, server return http code : 400, Bad Request
Tue Mar 26 15:19:51 2024 user.warn smartdns: http server query from 223.5.5.5:443 failed, server return http code : 400, Bad Request
from smartdns.
PikuZheng
commented on June 11, 2024
建议不时的ping一下223.5.5.5，观察ttl会不会变化。
@pymumu 有没有可能是到阿里的数据中心发生跳跃，但是smartdns在尝试保持https链路
from smartdns.
PikuZheng
commented on June 11, 2024
问下 楼主用的哪里的联通
from smartdns.
giveup
commented on June 11, 2024
根据阿里dns官网的说法，我所在地区是有阿里dns的节点的，无论是稳定性还是延迟都应该是比较优秀的。
目前手工ping，挂机一段时间看看ttl如何。
from smartdns.
pymumu
commented on June 11, 2024
发一下配置看看。
from smartdns.
giveup
commented on June 11, 2024
完整配置如下，配置doh和dot除了上游dns（阿里）不同之外，其他完全一致。 @pymumu
server-name smartdns
speed-check-mode none
dualstack-ip-selection no
prefetch-domain yes
serve-expired yes
dnsmasq-lease-file /tmp/dhcp.leases
rr-ttl-min 600
log-size 64K
log-num 1
log-level notice
log-syslog yes
audit-size 64K
audit-num 1
cache-persist yes
cache-file /etc/smartdns/smartdns.cache
resolv-file /tmp/resolv.conf.d/resolv.conf.auto
bind :1153@br-lan -group domestic
bind :1153@lo -group domestic
bind :1154@br-lan -no-speed-check -no-dualstack-selection -force-aaaa-soa -group oversea
bind :1154@lo -no-speed-check -no-dualstack-selection -force-aaaa-soa -group oversea
server-https https://223.5.5.5/dns-query -no-check-certificate -http-host dns.alidns.com -group domestic -subnet ***
server-https https://223.6.6.6/dns-query -no-check-certificate -http-host dns.alidns.com -group domestic -subnet ***
server-https https://223.5.5.5/dns-query -no-check-certificate -http-host dns.alidns.com -group oversea -subnet ***
server-https https://223.6.6.6/dns-query -no-check-certificate -http-host dns.alidns.com -group oversea -subnet ***
domain-set -name domain-block-list -file /etc/smartdns/domain-block.list
domain-rules /domain-set:domain-block-list/ -address #
conf-file /etc/smartdns/address.conf
conf-file /etc/smartdns/blacklist-ip.conf
conf-file /etc/smartdns/custom.conf
/etc/smartdns/custom.conf 这个配置为空，没有特殊自定义配置
from smartdns.
giveup
commented on June 11, 2024
建议不时的ping一下223.5.5.5，观察ttl会不会变化。 @pymumu 有没有可能是到阿里的数据中心发生跳跃，但是smartdns在尝试保持https链路
跑了一段时间，除了偶尔几个包超时之外，没有其他异常。ttl也没有变化
root@AX6S:~# ping 223.5.5.5
PING 223.5.5.5 (223.5.5.5): 56 data bytes
64 bytes from 223.5.5.5: seq=0 ttl=118 time=9.488 ms
64 bytes from 223.5.5.5: seq=1 ttl=118 time=8.927 ms
64 bytes from 223.5.5.5: seq=2 ttl=118 time=9.372 ms
64 bytes from 223.5.5.5: seq=3 ttl=118 time=8.487 ms
64 bytes from 223.5.5.5: seq=4 ttl=118 time=8.218 ms
64 bytes from 223.5.5.5: seq=5 ttl=118 time=8.509 ms
64 bytes from 223.5.5.5: seq=6 ttl=118 time=8.275 ms
64 bytes from 223.5.5.5: seq=7 ttl=118 time=8.500 ms
64 bytes from 223.5.5.5: seq=8 ttl=118 time=8.283 ms
^C
--- 223.5.5.5 ping statistics ---
9 packets transmitted, 9 packets received, 0% packet loss
round-trip min/avg/max = 8.218/8.673/9.488 ms
路由跟踪
root@AX6S:~# traceroute 223.5.5.5
traceroute to 223.5.5.5 (223.5.5.5), 30 hops max, 46 byte packets
1 10.139.32.1 (10.139.32.1) 1.233 ms 1.109 ms 0.983 ms
2 120.80.166.45 (120.80.166.45) 2.901 ms 2.439 ms 2.571 ms
3 120.80.145.210 (120.80.145.210) 5.863 ms 120.80.144.78 (120.80.144.78) 6.475 ms 120.80.145.210 (120.80.145.210) 6.011 ms
4 120.80.99.18 (120.80.99.18) 13.989 ms 12.068 ms 120.80.98.202 (120.80.98.202) 10.058 ms
5 * 112.95.237.198 (112.95.237.198) 6.639 ms 112.95.237.194 (112.95.237.194) 8.785 ms
6 * * 116.251.113.146 (116.251.113.146) 8.552 ms
7 * * *
8 * * *
9 * * *
10 * * *
11 * * *
12 * * *
13 * * *
14 * * *
15 * * *
16 * * *
17 * * *
18 * * *
19 * * *
20 * * *
21 * * *
22 * * *
23 * * *
24 * * *
25 * * *
26 * * *
27 * * *
28 * * *
29 * * *
30 * * *
from smartdns.
pymumu
commented on June 11, 2024
你用我编译的release版本看看。
from smartdns.
giveup
commented on June 11, 2024
还是会出现500错误 @pymumu
Tue Mar 26 23:47:51 2024 user.notice smartdns: smartdns starting...(Copyright (C) Nick Peng <[email protected]>, build: 1.2024.02.08-0828 (Release43-141-g9ee27e7))
Tue Mar 26 23:50:00 2024 cron.err crond[5368]: USER root pid 10287 cmd /usr/share/wginstaller/wg.sh cleanup_wginterfaces
Tue Mar 26 23:50:03 2024 user.warn smartdns: http server query from 223.6.6.6:443 failed, server return http code : 500, Internal Server Error
Tue Mar 26 23:50:03 2024 user.warn smartdns: http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error
Tue Mar 26 23:50:03 2024 user.warn smartdns: send query ipcelou.com to upstream server failed, total server number 0
from smartdns.
lalasou
commented on June 11, 2024
大概有一段时间了 不止阿里 腾讯和谷歌都这样 阿里最严重
doh dot 都这样 貌似只有tcp udp不这样
不知道为什么
ping 都正常
from smartdns.
pymumu
commented on June 11, 2024
去掉server-https的subnet配置看看。
from smartdns.
lalasou
commented on June 11, 2024
去掉server-https的subnet配置看看。
我也用了edns-client-subnet
是这个问题吗？
我先去掉试试
之前缓存数量开的大 这种情况就很多log
我以为是请求太多风控了呢
from smartdns.
lalasou
commented on June 11, 2024
跑了试试 没有错误了 貌似真是这个subnet问题 我在用两天试试
from smartdns.
giveup
commented on June 11, 2024
@pymumu 用release版跑了两天，暂时没看到类似的错误。还有个变量是清除缓存了，之前用的每夜版有9000多个域名缓存，现在只有不到2000个。其他的配置保持不变。关于风控，我觉得不太可能，因为之前用dot时，也是这么多缓存，也有配置edns。但是没有出现这种错误。
from smartdns.
PikuZheng
commented on June 11, 2024
2024-03-29 03:58:04,559][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error
在一小时准时出现的 考虑是阿里不允许长连接？
from smartdns.
lalasou
commented on June 11, 2024
跑了两天 可以确定使用subnet问题
去掉subnet 现在缓存11m了没发生错误log
from smartdns.
PikuZheng
commented on June 11, 2024
跑了两天 可以确定使用subnet问题 去掉subnet 现在缓存11m了没发生错误log
我有不同意见 😃 server-https https://223.5.5.5/dns-query -http-host dns.alidns.com -group mainland -blacklist-ip这个配置
[2024-03-29 03:58:04,559][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error
[2024-03-29 07:09:45,559][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error
[2024-03-29 08:21:47,557][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error
[2024-03-29 08:46:19,555][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error
[2024-03-29 09:17:26,558][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error
[2024-03-29 09:51:10,558][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error
[2024-03-29 09:54:52,753][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error
[2024-03-29 11:58:04,559][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error
[2024-03-29 15:09:45,576][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error
[2024-03-29 16:21:47,559][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error
[2024-03-29 17:17:26,556][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error
[2024-03-29 17:51:10,737][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error
[2024-03-29 17:54:52,557][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error
from smartdns.
lalasou
commented on June 11, 2024
跑了两天 可以确定使用subnet问题 去掉subnet 现在缓存11m了没发生错误log
我有不同意见 😃
server-https https://223.5.5.5/dns-query -http-host dns.alidns.com -group mainland -blacklist-ip这个配置[2024-03-29 03:58:04,559][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error [2024-03-29 07:09:45,559][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error [2024-03-29 08:21:47,557][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error [2024-03-29 08:46:19,555][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error [2024-03-29 09:17:26,558][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error [2024-03-29 09:51:10,558][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error [2024-03-29 09:54:52,753][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error [2024-03-29 11:58:04,559][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error [2024-03-29 15:09:45,576][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error [2024-03-29 16:21:47,559][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error [2024-03-29 17:17:26,556][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error [2024-03-29 17:51:10,737][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error [2024-03-29 17:54:52,557][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error
好吧 我的暂时解决了
from smartdns.
PikuZheng
commented on June 11, 2024
发现不止是阿里dns，使用smartdns作为https服务时，在阿里出现500或connect reset问题的同时，smartdns的下游也会出现连接问题
DoH server connection error: remote disconnected while in HTTP exchange
DoH server connection error: ERROR parsing http: content-length overflow
而且到目前 只有阿里的https会出现
from smartdns.
giveup
commented on June 11, 2024
我从release 45切换到每夜版，又出现了Wed Apr 3 18:23:40 2024 user.warn smartdns: Handshake with 223.5.5.5 failed, Connection reset by peer ，每夜版和release版的区别是主要openssl的库的区别吧，会不会和这个有关呢？@PikuZheng @pymumu
from smartdns.
lalasou
commented on June 11, 2024
我从release 45切换到每夜版，又出现了`Wed Apr 3 18:23:40 2024 user.warn smartdns: Handshake with 223.5.5.5 failed, Connection reset by peer
`，每夜版和release版的区别是主要openssl的库的区别吧，会不会和这个有关呢？@PikuZheng @pymumu
我把subnet 都删了 证书-k
好几天了 没有任何错误报告
from smartdns.
PikuZheng
commented on June 11, 2024
我从release 45切换到每夜版，又出现了
Wed Apr 3 18:23:40 2024 user.warn smartdns: Handshake with 223.5.5.5 failed, Connection reset by peer，每夜版和release版的区别是主要openssl的库的区别吧，会不会和这个有关呢？@PikuZheng @pymumu
我用的alpine容器自带OpenSSL，应该是3.2.1。
我应该尝试用3.0.11编译吗（理论上来说应该总是使用最新版的OpenSSL
from smartdns.
PikuZheng
commented on June 11, 2024
试着换成openssl3.0.11结果更严重了，除了阿里，腾讯的也开始connect reset
[2024-04-04 06:28:05,764][ WARN][ dns_client.c:3310] Handshake with 1.12.12.12 failed, Connection reset by peer
[2024-04-04 06:28:05,768][ WARN][ dns_client.c:3310] Handshake with 120.53.53.53 failed, Connection reset by peer
[2024-04-04 06:28:43,068][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error
[2024-04-04 06:28:52,760][ WARN][ dns_client.c:3310] Handshake with 1.12.12.12 failed, Connection reset by peer
但是我在openssl3.1.4，只是阿里的会断续的出现500，腾讯的一直是正常的
from smartdns.
lalasou
commented on June 11, 2024
我用作者release版本正常
from smartdns.
giveup
commented on June 11, 2024
试着换成openssl3.0.11结果更严重了，除了阿里，腾讯的也开始connect reset
[2024-04-04 06:28:05,764][ WARN][ dns_client.c:3310] Handshake with 1.12.12.12 failed, Connection reset by peer [2024-04-04 06:28:05,768][ WARN][ dns_client.c:3310] Handshake with 120.53.53.53 failed, Connection reset by peer [2024-04-04 06:28:43,068][ WARN][ dns_client.c:2866] http server query from 223.5.5.5:443 failed, server return http code : 500, Internal Server Error [2024-04-04 06:28:52,760][ WARN][ dns_client.c:3310] Handshake with 1.12.12.12 failed, Connection reset by peer但是我在openssl3.1.4，只是阿里的会断续的出现500，腾讯的一直是正常的
每夜版依赖的openssl应该是系统自带的，我这边是3.0.13-1,release版应该是把依赖也编译进去了，但是我看不出版本是多少。
root@AX6S:~# opkg depends smartdns
smartdns depends on:
libc
libpthread
libopenssl3
root@AX6S:~# opkg list-installed | grep 'libopenssl3'
libopenssl3 - 3.0.13-1
from smartdns.
CallMeR
commented on June 11, 2024
不仅是 SmartDNS 会有，我测试环境中 Unbound DNS 用来 AliDNS 的 DoT 也会有这个现象：
from smartdns.
lalasou
commented on June 11, 2024
之前 好几天都没出现了 今天突然感觉打开网页卡 查看log 就出现了一堆
缓存数量大概 22301
from smartdns.
crackerfly
commented on June 11, 2024
从 #1673 起，我就开始从家里的宽带监视阿里doh可用性，从未有错误（联通）
哥!!! 你这个监测软件可以分享一下嘛....
from smartdns.
giveup
commented on June 11, 2024
使用release版，且使用dot时，也会出现类似的错误。
Mon Apr 15 19:16:35 2024 user.notice smartdns: smartdns starting...(Copyright (C) Nick Peng <[email protected]>, build: 1.2024.02.08-0828 (Release43-141-g9ee27e7))
Mon Apr 15 19:16:35 2024 user.warn smartdns: Handshake with 223.5.5.5 failed, No error information
Mon Apr 15 19:16:35 2024 user.warn smartdns: Handshake with 223.6.6.6 failed, No error information
Mon Apr 15 19:16:36 2024 user.warn smartdns: Handshake with 223.5.5.5 failed, No error information
from smartdns.
devioa
commented on June 11, 2024
我最新源码编译的，阿里DNS的所有查询方式(DoH/DoT/HTTPS等)我都没问题，相反我腾讯DNS前不久开始到现在却是经常Connection reset by peer，也是DoH/DoT/HTTPS等都报错
from smartdns.
PikuZheng
commented on June 11, 2024
阿里突然挂了
from smartdns.
lalasou
commented on June 11, 2024
一堆错误代码
放弃了 国内用 直接阿里udp了
from smartdns.
CallMeR
commented on June 11, 2024
难道开始用 360 的 dot 和 doh （
from smartdns.
lalasou
commented on June 11, 2024
难道开始用 360 的 dot 和 doh （
**dns 也挺好
from smartdns.
CallMeR
commented on June 11, 2024
难道开始用 360 的 dot 和 doh （
**dns 也挺好
指个路？ 我去看看延迟和解析结果怎么样 （
from smartdns.
PikuZheng
commented on June 11, 2024
考虑和 #1730 是相同问题？因为我测试过从路由器断开https查询后，smartdns重连端口号是不变的
from smartdns.
Related Issues (20)
- 什麼狀況緩存紀錄會被踢掉？：serve-expired-ttl 0 HOT 6
- 莫名其妙的丢一些 DNS 解析 HOT 23
- immortalwrt23.05.1安装smartdns失败 HOT 5
- 同步最新的代码后编译失败了 HOT 3
- HTTP 400 Bad Request for DOH ordns.he.net HOT 2
- commit: 5d76934d8359e6894ad9a5f4465cbf216a5dbc02 编译报错！
- Mullvad DNS HOT 1
- Total speed check failure shouldn't be cached HOT 1
- ipset-timeout问题 HOT 3
- 开启缓存后，如果某个域名被污染了，即使修改了该域名的 domain-rules 规则，也无法快速更新缓存文件中的被污染域名结果 HOT 1
- domain-rules的group参数问题 HOT 5
- speed-check-mode使用问题 HOT 34
- CNAME doesn't follow domain-rules HOT 4
- nft 添加 ipset 错误 HOT 5
- 网赌被黑了不给提款怎么办？解决微：lyh20085150 HOT 2
- 软路由运行4天后 Smartdns卡死崩溃 HOT 5
- 配置文件支持相对路径 HOT 3
- 设置成非53端口不能生效 HOT 1
- 223.5.5.5/dns-query支持h3吗 在我这里测试一直是h2 运营商dns可以h3 HOT 2
- 切换WLAN导致DNS查询失败
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from smartdns.