daeuniverse / dae

eBPF-based Linux high-performance transparent proxy solution.
GNU Affero General Public License v3.0
3.25k stars 202 forks source link

如何正确配置全局模式? #684

Open qazwsdc opened 1 week ago

qazwsdc commented 1 week ago

dns设置为 upstream { googledns: 'tcp+udp://8.8.8.8:53' } 路由为 pname(NetworkManager, systemd-resolved, dnsmasq) -> must_direct dip(geoip:private) -> direct fallback: proxy

这样设置后,少部分连接仍然走国内。在dae日志中看不到任何直连流量,非常蹊跷

dae-prow[bot] commented 1 week ago

Thanks for opening this issue!

mzz2017 commented 1 week ago

@dae-prow[bot] dns 不配 request fallback 默认 asis,show me the log

qazwsdc commented 1 week ago

dns默认的asis,还会走谷歌dns吗

mzz2017 commented 1 week ago

@qazwsdc 不会

qazwsdc commented 1 week ago

upstream { googledns: 'tcp+udp://8.8.8.8:53' } routing { request { fallback: googledns } }

这样配置全局吗?

xinyifly commented 1 week ago

@qazwsdc

dns {
  routing {
    request { fallback: googledns }
  }
  upstream {
    googledns: 'tcp+udp://8.8.8.8:53'
  }
}

routing {
  pname(NetworkManager, systemd-resolved, dnsmasq) -> must_direct
  dip(geoip:private) -> direct
  fallback: proxy
}

dns 和 routing 分开配置