blackmatrix7 / ios_rule_script

分流规则、重写写规则及脚本。
GNU General Public License v2.0
16.29k stars 2.62k forks source link

AWS 区域: us-west-2 的相关域名和 PlayStation 手机 APP 相关域名被误分流到 Netflix #1289

Open FanxJK opened 1 month ago

FanxJK commented 1 month ago

这一条规则会导致大量 AWS 相关资源误分流到 Netflix

DOMAIN-SUFFIX,us-west-2.amazonaws.com

us-west-2 是 AWS 的一个区域 相关: https://docs.aws.amazon.com/general/latest/gr/rande.html https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.RegionsAndAvailabilityZones.html https://www.alibabacloud.com/help/zh/data-online-migration/support/old-version-amazon-s3-inventory-regions-and-endpoints

既然 Netflix 的检测域名为:

近期Netflix在AWS美西增加了一组代理检测节点,URL地址如下: https://dualstack.apiproxy-device-prod-nlb-*-****.us-west-2.amazonaws.com 其中URL中有2组*号,第一组表示数字0-9(大概率为3,小概率为2),第二组为长度为16的十六进制字符串(有一定随机性,有兴趣可以自行搜集一下)。

那 Netflix 规则里已有的这些 DOMAIN-KEYWORD 已足够,不需要再加入 us-west-2.amazonaws.com

DOMAIN-KEYWORD,apiproxy-device-prod-nlb-
DOMAIN-KEYWORD,dualstack.apiproxy-

相关: https://github.com/blackmatrix7/ios_rule_script/issues/411 https://github.com/blackmatrix7/ios_rule_script/issues/502#issuecomment-1049540255

FanxJK commented 2 weeks ago

另外 Playstation 的域名被 Netflix IP-CIDR 误分流 image

    "destinationIP": "54.187.14.118",
    "destinationGeoIP": null,
    "destinationIPASN": "",
    "destinationPort": "443",
    "inboundIP": "192.168.16.1",
    "inboundPort": "7892",
    "inboundName": "DEFAULT-REDIR",
    "inboundUser": "",
    "host": "mobile-pushcl.np.communication.playstation.net",
    "dnsMode": "redir-host",
    "rule": "RuleSet",
    "rulePayload": "Netflix_ipcidr",
    "downloadSpeed": 0,
    "uploadSpeed": 0