xiaojieonly / Ehviewer_CN_SXJ

ehviewer,用爱发电,快乐前行
Apache License 2.0
13.2k stars 395 forks source link

安全dns 使用的Yandex DNS已经在cn地区无法访问 #1322

Closed a1092595196 closed 1 month ago

a1092595196 commented 1 month ago

安全dns 使用的Yandex DNS已经在cn地区无法请求成功 建议更换 地区:cn 代码位置:https://github.com/xiaojieonly/Ehviewer_CN_SXJ/blob/BiLi_PC_Gamer/app/src/main/java/com/hippo/ehviewer/client/EhDns.java 第88行:.url(HttpUrl.get("https://77.88.8.1/dns-query")); 请求更换至cloudflare DOH cloudflare==>>Zero Trust==>Gateway==>>DNS Locations==>>DoH endpoint 以下测试来自AS141739 China Telecom https://cloudflare-dns.com/dns-query 结果[{"Query": "e-hentai.org.", "TTL": "68", "RR": "A", "Answer": "172.67.2.238"}] https://security.cloudflare-dns.com/dns-query 结果[{"Query": "e-hentai.org.", "TTL": "181", "RR": "A", "Answer": "104.20.19.168"}] https://dns.quad9.net/dns-query 结果[{"Query": "e-hentai.org.", "TTL": "300", "RR": "A", "Answer": "172.67.2.238"}] https://doh.sb/dns-query 结果[{"Query": "e-hentai.org.", "TTL": "300", "RR": "A", "Answer": "104.20.18.168"}] https://doh.opendns.com/dns-query 结果[{"Query": "e-hentai.org.", "TTL": "300", "RR": "A", "Answer": "172.67.2.238"}] https://dns.opendns.com/dns-query 结果[{"Query": "e-hentai.org.", "TTL": "300", "RR": "A", "Answer": "172.67.2.238"}] https://dns.umbrella.com/dns-query 结果[{"Query": "e-hentai.org.", "TTL": "261", "RR": "A", "Answer": "172.67.2.238"}]

https://doh.pub/dns-query 结果[{"Query": "e-hentai.org.", "TTL": "300", "RR": "A", "Answer": "104.20.19.168"}] 有点意外dnspod居然没污染 测试结果均未污染

---------------以下测试都被污染了 https://dns.alidns.com/dns-query https://doh.360.cn/dns-query https://dns.ipv6dns.com/dns-query

UjuiUjuMandan commented 1 month ago

有点意外dnspod居然没污染

你关掉梯子再打开 https://doh.pub/dns-query?name=e-hentai.org 看看?

安全dns 使用的Yandex DNS已经在cn地区无法请求成功

你是怎么判断无法请求成功的?打开 https://77.88.8.1 看看?

https://www.itdog.cn/http/ 测试显示 1.1.1.1 和 1.0.0.1 在多个地区都是超时,而 77.88.8.1 响应速度都在 2s 以内,没有超时。状态写的“失败”明显是误判。

xiaojieonly commented 1 month ago

安全dns 使用的Yandex DNS已经在cn地区无法请求成功 建议更换 地区:cn 代码位置:https://github.com/xiaojieonly/Ehviewer_CN_SXJ/blob/BiLi_PC_Gamer/app/src/main/java/com/hippo/ehviewer/client/EhDns.java 第88行:.url(HttpUrl.get("https://77.88.8.1/dns-query")); 请求更换至cloudflare DOH cloudflare==>>Zero Trust==>Gateway==>>DNS Locations==>>DoH endpoint 以下测试来自AS141739 China Telecom https://cloudflare-dns.com/dns-query 结果[{"Query": "e-hentai.org.", "TTL": "68", "RR": "A", "Answer": "172.67.2.238"}] https://security.cloudflare-dns.com/dns-query 结果[{"Query": "e-hentai.org.", "TTL": "181", "RR": "A", "Answer": "104.20.19.168"}] https://dns.quad9.net/dns-query 结果[{"Query": "e-hentai.org.", "TTL": "300", "RR": "A", "Answer": "172.67.2.238"}] https://doh.sb/dns-query 结果[{"Query": "e-hentai.org.", "TTL": "300", "RR": "A", "Answer": "104.20.18.168"}] https://doh.opendns.com/dns-query 结果[{"Query": "e-hentai.org.", "TTL": "300", "RR": "A", "Answer": "172.67.2.238"}] https://dns.opendns.com/dns-query 结果[{"Query": "e-hentai.org.", "TTL": "300", "RR": "A", "Answer": "172.67.2.238"}] https://dns.umbrella.com/dns-query 结果[{"Query": "e-hentai.org.", "TTL": "261", "RR": "A", "Answer": "172.67.2.238"}]

https://doh.pub/dns-query 结果[{"Query": "e-hentai.org.", "TTL": "300", "RR": "A", "Answer": "104.20.19.168"}] 有点意外dnspod居然没污染 测试结果均未污染

---------------以下测试都被污染了 https://dns.alidns.com/dns-query https://doh.360.cn/dns-query https://dns.ipv6dns.com/dns-query

如果有更好的dns地址,非常欢迎提交pull request

a1092595196 commented 1 month ago

有点意外dnspod居然没污染

你关掉梯子再打开 https://doh.pub/dns-query?name=e-hentai.org 看看?

安全dns 使用的Yandex DNS已经在cn地区无法请求成功

你是怎么判断无法请求成功的?打开 https://77.88.8.1 看看?

https://www.itdog.cn/http/ 测试显示 1.1.1.1 和 1.0.0.1 在多个地区都是超时,而 77.88.8.1 响应速度都在 2s 以内,没有超时。状态写的“失败”明显是误判。

我明确写出了我的测试环境AS141739 China Telecom并没有梯子 打开https://doh.pub/dns-query?name=e-hentai.org 确实是没有污染可能其他ip测试不是这个结果 使用python import dns.message import requests import base64 import json

doh_url = "https://doh.pub/dns-query" domain = "e-hentai.org" rr = "A" result = []

message = dns.message.make_query(domain, rr) dns_req = base64.b64encode(message.to_wire()).decode("UTF8").rstrip("=") r = requests.get(doh_url + "?dns=" + dns_req, headers={"Content-type": "application/dns-message"}) for answer in dns.message.from_wire(r.content).answer: dns = answer.to_text().split() result.append({"Query": dns[0], "TTL": dns[1], "RR": dns[3], "Answer": dns[4]}) print(json.dumps(result))

UjuiUjuMandan commented 1 month ago

@a1092595196

DNSPod 有国外节点,或许这种架构让他对来自国外查询的回复没有污染。你可能为 doh.pub 使用了代理。

Screenshot 2024-07-25 at 18 30 29
a1092595196 commented 1 month ago

@a1092595196

DNSPod 有国外节点,或许这种架构让他对来自国外查询的回复没有污染。你可能为 doh.pub 使用了代理。

Screenshot 2024-07-25 at 18 30 29

屏幕截图 2024-07-25 183951

并没有梯子但是我发现我的dnspod使用的ip是162.14.21.56对他请求的https://doh.pub/dns-query https://162.14.21.56/dns-query?name=e-hentai.org) ,是我的问题我本地dns响应影响了测试结果。重新查询了全国dns对doh.pub的返回并没有这个ip只有海外ip返回的该ip

ihfserkm commented 1 month ago

en