Skip to content

Commit 9d363ec

Browse files
DustinWinDustinWin
committed
优化 DNS 配置
1 parent 66213fb commit 9d363ec

15 files changed

+265
-91
lines changed

‎_posts/2024-08-21-dnsbypass-mihomo-geodata.md‎

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,10 @@ geosite.dat 文件须包含 `fakeip-filter`、`cn` 和 `proxy`，推荐导入我
2424
2. 连接 SSH 后执行命令 `vi $CRASHDIR/yamls/user.yaml`，按一下 Ins 键（Insert 键），粘贴如下内容：
2525

2626
```yaml
27+
hosts:
28+
doh.pub: [1.12.12.21, 120.53.53.53, 2402:4e00::]
29+
dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
30+
2731
dns:
2832
enable: true
2933
prefer-h3: true
@@ -38,7 +42,9 @@ dns:
3842
- GEOSITE,proxy,fake-ip
3943
- GEOSITE,cn,real-ip # 此条仅演示，可删除
4044
- MATCH,real-ip
41-
nameserver: [system]
45+
nameserver:
46+
- https://dns.pub/dns-query
47+
- quic://dns.alidns.com:853
4248
```
4349
4450
按一下 Esc 键（退出键），输入英文冒号 `:`，继续输入 `wq` 并回车

‎_posts/2024-08-21-dnsbypass-mihomo-ruleset.md‎

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -51,6 +51,10 @@ rule-providers:
5151
2. 连接 SSH 后执行命令 `vi $CRASHDIR/yamls/user.yaml`，按一下 Ins 键（Insert 键），粘贴如下内容：
5252

5353
```yaml
54+
hosts:
55+
doh.pub: [1.12.12.21, 120.53.53.53, 2402:4e00::]
56+
dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
57+
5458
dns:
5559
enable: true
5660
prefer-h3: true
@@ -65,7 +69,9 @@ dns:
6569
- RULE-SET,proxy,fake-ip
6670
- RULE-SET,cn,real-ip # 此条仅演示，可删除
6771
- MATCH,real-ip
68-
nameserver: [system]
72+
nameserver:
73+
- https://dns.pub/dns-query
74+
- quic://dns.alidns.com:853
6975
```
7076

7177
按一下 Esc 键（退出键），输入英文冒号 `:`，继续输入 `wq` 并回车

‎_posts/2024-08-21-dnsnoleaks-mihomo-geodata.md‎

Lines changed: 31 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,12 @@ geosite.dat 文件须包含 `fakeip-filter`、`cn` 和 `proxy`，推荐导入我
2727
{: .prompt-info }
2828

2929
```yaml
30+
hosts:
31+
doh.pub: [1.12.12.21, 120.53.53.53, 2402:4e00::]
32+
dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
33+
dns.google: [8.8.8.8, 8.8.4.4, 2001:4860:4860::8888, 2001:4860:4860::8844]
34+
dns11.quad9.net: [9.9.9.11, 149.112.112.11, 2620:fe::11, 2620:fe::fe:11]
35+
3036
dns:
3137
enable: true
3238
ipv6: true
@@ -45,8 +51,12 @@ dns:
4551
# 推荐将 `ecs` 设置为当前宽带运营商分配的默认 DNS 的 IP 段
4652
- 'https://dns.google/dns-query#ecs=211.137.58.0/24'
4753
- 'https://dns11.quad9.net/dns-query#ecs=211.137.58.0/24'
48-
proxy-server-nameserver: [system]
49-
direct-nameserver: [system]
54+
proxy-server-nameserver:
55+
- https://dns.pub/dns-query
56+
- quic://dns.alidns.com:853
57+
direct-nameserver:
58+
- https://dns.pub/dns-query
59+
- quic://dns.alidns.com:853
5060
```
5161
5262
按一下 Esc 键（退出键），输入英文冒号 `:`，继续输入 `wq` 并回车
@@ -62,6 +72,10 @@ dns:
6272
- ② 连接 SSH 后执行 `vi $CRASHDIR/yamls/user.yaml`，按一下 Ins 键（Insert 键），粘贴如下内容：
6373

6474
```yaml
75+
hosts:
76+
doh.pub: [1.12.12.21, 120.53.53.53, 2402:4e00::]
77+
dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
78+
6579
dns:
6680
enable: true
6781
prefer-h3: true
@@ -74,7 +88,9 @@ dns:
7488
fake-ip-filter:
7589
- GEOSITE,fakeip-filter,real-ip
7690
- MATCH,fake-ip
77-
nameserver: [system]
91+
nameserver:
92+
- https://dns.pub/dns-query
93+
- quic://dns.alidns.com:853
7894
```
7995

8096
按一下 Esc 键（退出键），输入英文冒号 `:`，继续输入 `wq` 并回车
@@ -85,6 +101,12 @@ dns:
85101
{: .prompt-info }
86102

87103
```yaml
104+
hosts:
105+
doh.pub: [1.12.12.21, 120.53.53.53, 2402:4e00::]
106+
dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
107+
dns.google: [8.8.8.8, 8.8.4.4, 2001:4860:4860::8888, 2001:4860:4860::8844]
108+
dns11.quad9.net: [9.9.9.11, 149.112.112.11, 2620:fe::11, 2620:fe::fe:11]
109+
88110
dns:
89111
enable: true
90112
ipv6: true
@@ -98,8 +120,12 @@ dns:
98120
# 推荐将 `ecs` 设置为当前宽带运营商分配的默认 DNS 的 IP 段
99121
- 'https://dns.google/dns-query#ecs=211.137.58.0/24'
100122
- 'https://dns11.quad9.net/dns-query#ecs=211.137.58.0/24'
101-
proxy-server-nameserver: [system]
102-
direct-nameserver: [system]
123+
proxy-server-nameserver:
124+
- https://dns.pub/dns-query
125+
- quic://dns.alidns.com:853
126+
direct-nameserver:
127+
- https://dns.pub/dns-query
128+
- quic://dns.alidns.com:853
103129
```
104130
105131
按一下 Esc 键（退出键），输入英文冒号 `:`，继续输入 `wq` 并回车

‎_posts/2024-08-21-dnsnoleaks-mihomo-ruleset.md‎

Lines changed: 31 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -54,6 +54,12 @@ rule-providers:
5454
{: .prompt-info }
5555

5656
```yaml
57+
hosts:
58+
doh.pub: [1.12.12.21, 120.53.53.53, 2402:4e00::]
59+
dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
60+
dns.google: [8.8.8.8, 8.8.4.4, 2001:4860:4860::8888, 2001:4860:4860::8844]
61+
dns11.quad9.net: [9.9.9.11, 149.112.112.11, 2620:fe::11, 2620:fe::fe:11]
62+
5763
dns:
5864
enable: true
5965
ipv6: true
@@ -72,8 +78,12 @@ dns:
7278
# 推荐将 `ecs` 设置为当前宽带运营商分配的默认 DNS 的 IP 段
7379
- 'https://dns.google/dns-query#ecs=211.137.58.0/24'
7480
- 'https://dns11.quad9.net/dns-query#ecs=211.137.58.0/24'
75-
proxy-server-nameserver: [system]
76-
direct-nameserver: [system]
81+
proxy-server-nameserver:
82+
- https://dns.pub/dns-query
83+
- quic://dns.alidns.com:853
84+
direct-nameserver:
85+
- https://dns.pub/dns-query
86+
- quic://dns.alidns.com:853
7787
```
7888
7989
按一下 Esc 键（退出键），输入英文冒号 `:`，继续输入 `wq` 并回车
@@ -91,6 +101,10 @@ dns:
91101
- ② 连接 SSH 后执行 `vi $CRASHDIR/yamls/user.yaml`，按一下 Ins 键（Insert 键），粘贴如下内容：
92102

93103
```yaml
104+
hosts:
105+
doh.pub: [1.12.12.21, 120.53.53.53, 2402:4e00::]
106+
dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
107+
94108
dns:
95109
enable: true
96110
prefer-h3: true
@@ -103,7 +117,9 @@ dns:
103117
fake-ip-filter:
104118
- RULE-SET,fakeip-filter,real-ip
105119
- MATCH,fake-ip
106-
nameserver: [system]
120+
nameserver:
121+
- https://dns.pub/dns-query
122+
- quic://dns.alidns.com:853
107123
```
108124

109125
按一下 Esc 键（退出键），输入英文冒号 `:`，继续输入 `wq` 并回车
@@ -114,6 +130,12 @@ dns:
114130
{: .prompt-info }
115131

116132
```yaml
133+
hosts:
134+
doh.pub: [1.12.12.21, 120.53.53.53, 2402:4e00::]
135+
dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
136+
dns.google: [8.8.8.8, 8.8.4.4, 2001:4860:4860::8888, 2001:4860:4860::8844]
137+
dns11.quad9.net: [9.9.9.11, 149.112.112.11, 2620:fe::11, 2620:fe::fe:11]
138+
117139
dns:
118140
enable: true
119141
ipv6: true
@@ -127,8 +149,12 @@ dns:
127149
# 推荐将 `ecs` 设置为当前宽带运营商分配的默认 DNS 的 IP 段
128150
- 'https://dns.google/dns-query#ecs=211.137.58.0/24'
129151
- 'https://dns11.quad9.net/dns-query#ecs=211.137.58.0/24'
130-
proxy-server-nameserver: [system]
131-
direct-nameserver: [system]
152+
proxy-server-nameserver:
153+
- https://dns.pub/dns-query
154+
- quic://dns.alidns.com:853
155+
direct-nameserver:
156+
- https://dns.pub/dns-query
157+
- quic://dns.alidns.com:853
132158
```
133159
134160
按一下 Esc 键（退出键），输入英文冒号 `:`，继续输入 `wq` 并回车

‎_posts/2024-08-21-share-android-mihomo-ruleset.md‎

Lines changed: 17 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,8 @@ tags: [Clash, Clash Mi, mihomo, Android, ruleset, rule-set, 分享]
88

99
> 声明
1010
{: .prompt-warning }
11-
请根据自身情况进行修改，**适合自己的方案才是最好的方案**，如无特殊需求，可以照搬
11+
1. 请根据自身情况进行修改，**适合自己的方案才是最好的方案**，如无特殊需求，可以照搬
12+
2. 若 `谷歌服务` 出现错误，请删除 `nameserver` 相关配置项里的所有[阿里云公共 DNS](https://help.aliyun.com/zh/dns/what-is-alibaba-cloud-public-dns)
1213

1314
## 一、 生成配置文件 .yaml 文件直链
1415
具体方法请参考《[生成带有自定义策略组和规则的 mihomo 配置文件直链-ruleset 方案](https://proxy-tutorials.dustinwin.us.kg/posts/link-mihomo-ruleset)》，贴一下我使用的配置：
@@ -62,9 +63,9 @@ tun:
6263
strict-route: true
6364

6465
hosts:
65-
dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
66-
doh.pub: [1.12.12.12, 1.12.12.21, 120.53.53.53]
6766
miwifi.com: [192.168.31.1, 127.0.0.1]
67+
doh.pub: [1.12.12.21, 120.53.53.53, 2402:4e00::]
68+
dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
6869
services.googleapis.cn: [services.googleapis.com]
6970

7071
dns:
@@ -76,8 +77,8 @@ dns:
7677
fake-ip-range6: fc00::/16
7778
fake-ip-filter: ['rule-set:trackerslist,private,cn']
7879
nameserver:
79-
- https://dns.alidns.com/dns-query
8080
- https://doh.pub/dns-query
81+
- quic://dns.alidns.com:853
8182
nameserver-policy: {'rule-set:ads': [rcode://success]}
8283

8384
# 若没有单个出站代理节点，须删除所有 `🆚 vless 节点` 相关内容
@@ -305,7 +306,12 @@ proxy-groups:
305306
- 2. 推荐将 `ecs` 设置为当前宽带运营商分配的默认 DNS（可进入光猫或路由器拨号页面查看，或者前往[公共 DNS 大全](https://toolb.cn/publicdns)查询）的 IP 段，如默认 DNS 为 `211.137.58.20`，可设置为 `211.137.58.0/24`
306307

307308
```yaml
308-
hosts: {miwifi.com: [192.168.31.1, 127.0.0.1]}
309+
hosts:
310+
miwifi.com: [192.168.31.1, 127.0.0.1]
311+
doh.pub: [1.12.12.21, 120.53.53.53, 2402:4e00::]
312+
dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
313+
dns.google: [8.8.8.8, 8.8.4.4, 2001:4860:4860::8888, 2001:4860:4860::8844]
314+
dns11.quad9.net: [9.9.9.11, 149.112.112.11, 2620:fe::11, 2620:fe::fe:11]
309315
310316
dns:
311317
enable: true
@@ -320,8 +326,12 @@ dns:
320326
# 推荐将 `ecs` 设置为当前宽带运营商分配的默认 DNS 的 IP 段
321327
- 'https://dns.google/dns-query#ecs=211.137.58.0/24'
322328
- 'https://dns11.quad9.net/dns-query#ecs=211.137.58.0/24'
323-
proxy-server-nameserver: [system]
324-
direct-nameserver: [system]
329+
proxy-server-nameserver:
330+
- https://doh.pub/dns-query
331+
- quic://dns.alidns.com:853
332+
direct-nameserver:
333+
- https://doh.pub/dns-query
334+
- quic://dns.alidns.com:853
325335
nameserver-policy: {'rule-set:ads': [rcode://success]}
326336
```
327337

‎_posts/2024-08-21-share-android-singboxr-ruleset.md‎

Lines changed: 17 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -50,14 +50,13 @@ tags: [sing-box, sing-boxr, Android, ruleset, rule_set, 分享]
5050
"tag": "dns_hosts",
5151
"type": "hosts",
5252
"predefined": {
53-
"dns.alidns.com": [ "223.5.5.5", "223.6.6.6", "2400:3200::1", "2400:3200:baba::1" ],
54-
"dns.google": [ "8.8.8.8", "8.8.4.4", "2001:4860:4860::8888", "2001:4860:4860::8844" ],
55-
"miwifi.com": [ "192.168.31.1", "127.0.0.1" ]
53+
"miwifi.com": [ "192.168.31.1", "127.0.0.1" ],
54+
"doh.pub": [ "1.12.12.21", "120.53.53.53", "2402:4e00::" ],
55+
"dns.google": [ "8.8.8.8", "8.8.4.4", "2001:4860:4860::8888", "2001:4860:4860::8844" ]
5656
}
5757
},
58-
{ "tag": "dns_resolver", "type": "https", "server": "223.5.5.5" },
59-
{ "tag": "dns_direct", "type": "quic", "server": "dns.alidns.com", "domain_resolver": "dns_resolver" },
60-
{ "tag": "dns_proxy", "type": "https", "server": "dns.google", "detour": "GLOBAL" },
58+
{ "tag": "dns_direct", "type": "https", "server": "doh.pub", "domain_resolver": "dns_hosts" },
59+
{ "tag": "dns_proxy", "type": "https", "server": "dns.google", "domain_resolver": "dns_hosts", "detour": "GLOBAL" },
6160
{ "tag": "dns_fakeip", "type": "fakeip", "inet4_range": "28.0.0.0/8", "inet6_range": "fc00::/16" }
6261
],
6362
"rules": [
@@ -119,7 +118,7 @@ tags: [sing-box, sing-boxr, Android, ruleset, rule_set, 分享]
119118
{ "tag": "免费节点", "type": "urltest", "tolerance": 100, "providers": [ "🆓 免费订阅" ] }
120119
],
121120
"route": {
122-
"default_domain_resolver": { "server": "dns_resolver" },
121+
"default_domain_resolver": { "server": "dns_direct" },
123122
"rules": [
124123
{ "action": "sniff" },
125124
{ "protocol": [ "dns" ], "action": "hijack-dns" },
@@ -313,10 +312,17 @@ tags: [sing-box, sing-boxr, Android, ruleset, rule_set, 分享]
313312
{
314313
"dns": {
315314
"servers": [
316-
{ "tag": "dns_hosts", "type": "hosts", "predefined": { "miwifi.com": [ "192.168.31.1", "127.0.0.1" ] } },
317-
{ "tag": "dns_resolver", "type": "local" },
318-
{ "tag": "dns_direct", "type": "https", "server": "doh.pub", "domain_resolver": "dns_resolver" },
319-
{ "tag": "dns_proxy", "type": "https", "server": "dns.google", "detour": "GLOBAL" },
315+
{
316+
"tag": "dns_hosts",
317+
"type": "hosts",
318+
"predefined": {
319+
"miwifi.com": [ "192.168.31.1", "127.0.0.1" ],
320+
"doh.pub": [ "1.12.12.21", "120.53.53.53", "2402:4e00::" ],
321+
"dns.google": [ "8.8.8.8", "8.8.4.4", "2001:4860:4860::8888", "2001:4860:4860::8844" ]
322+
}
323+
},
324+
{ "tag": "dns_direct", "type": "https", "server": "doh.pub", "domain_resolver": "dns_hosts" },
325+
{ "tag": "dns_proxy", "type": "https", "server": "dns.google", "domain_resolver": "dns_hosts", "detour": "GLOBAL" },
320326
{ "tag": "dns_fakeip", "type": "fakeip", "inet4_range": "28.0.0.0/8", "inet6_range": "fc00::/16" }
321327
],
322328
"rules": [

‎_posts/2024-08-21-share-shellcrash-mihomo-geodata.md‎

Lines changed: 16 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,7 @@ tags: [Clash, mihomo, ShellCrash, geodata, geosite, 分享, Router]
1212
2. 此方案适用于 [ShellCrash](https://github.com/juewuy/ShellCrash)（以 arm64 架构为例，且安装路径为 `/data/ShellCrash`{: .filepath}）
1313
3. 本方案绕过了 CNIP 且不搭配 [AdGuard Home](https://github.com/AdguardTeam/AdGuardHome)，在 DNS 层拦截广告
1414
4. 本人将路由器设置了每天早上 6 点重启，使得《[五](https://proxy-tutorials.dustinwin.us.kg/posts/share-shellcrash-mihomo-geodata/#%E4%BA%94-%E6%B7%BB%E5%8A%A0%E5%AE%9A%E6%97%B6%E4%BB%BB%E5%8A%A1)》中设置的定时任务生效
15+
5. 若 `谷歌服务` 出现错误如 [Google Chrome](https://www.google.com/chrome/) 检查更新失败，请删除 `nameserver` 相关配置项里的所有[阿里云公共 DNS](https://help.aliyun.com/zh/dns/what-is-alibaba-cloud-public-dns)
1516

1617
## 一、 生成配置文件 .yaml 文件直链
1718
具体方法此处不再赘述，请看《[生成带有自定义策略组和规则的 mihomo 配置文件直链-geodata 方案](https://proxy-tutorials.dustinwin.us.kg/posts/link-mihomo-geodata)》，贴一下我使用的配置：
@@ -170,9 +171,9 @@ profile: {store-selected: true, store-fake-ip: true}
170171
geodata-mode: true
171172
172173
hosts:
173-
dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
174-
doh.pub: [1.12.12.12, 1.12.12.21, 120.53.53.53]
175174
miwifi.com: [192.168.31.1, 127.0.0.1]
175+
doh.pub: [1.12.12.21, 120.53.53.53, 2402:4e00::]
176+
dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
176177
services.googleapis.cn: [services.googleapis.com]
177178
178179
dns:
@@ -185,8 +186,8 @@ dns:
185186
fake-ip-range6: fc00::/16
186187
fake-ip-filter: ['geosite:trackerslist,private,cn']
187188
nameserver:
188-
- https://dns.alidns.com/dns-query
189189
- https://doh.pub/dns-query
190+
- quic://dns.alidns.com:853
190191
nameserver-policy: {'geosite:ads': [rcode://success]}
191192
```
192193

@@ -200,7 +201,12 @@ dns:
200201
- 2. 推荐将 `ecs` 设置为当前宽带运营商分配的默认 DNS（可进入光猫或路由器拨号页面查看，或者前往[公共 DNS 大全](https://toolb.cn/publicdns)查询）的 IP 段，如默认 DNS 为 `211.137.58.20`，可设置为 `211.137.58.0/24`
201202

202203
```yaml
203-
hosts: {miwifi.com: [192.168.31.1, 127.0.0.1]}
204+
hosts:
205+
miwifi.com: [192.168.31.1, 127.0.0.1]
206+
doh.pub: [1.12.12.21, 120.53.53.53, 2402:4e00::]
207+
dns.alidns.com: [223.5.5.5, 223.6.6.6, 2400:3200::1, 2400:3200:baba::1]
208+
dns.google: [8.8.8.8, 8.8.4.4, 2001:4860:4860::8888, 2001:4860:4860::8844]
209+
dns11.quad9.net: [9.9.9.11, 149.112.112.11, 2620:fe::11, 2620:fe::fe:11]
204210
205211
dns:
206212
enable: true
@@ -216,8 +222,12 @@ dns:
216222
# 推荐将 `ecs` 设置为当前宽带运营商分配的默认 DNS 的 IP 段
217223
- 'https://dns.google/dns-query#ecs=211.137.58.0/24'
218224
- 'https://dns11.quad9.net/dns-query#ecs=211.137.58.0/24'
219-
proxy-server-nameserver: [system]
220-
direct-nameserver: [system]
225+
proxy-server-nameserver:
226+
- https://doh.pub/dns-query
227+
- quic://dns.alidns.com:853
228+
direct-nameserver:
229+
- https://doh.pub/dns-query
230+
- quic://dns.alidns.com:853
221231
nameserver-policy: {'geosite:ads': [rcode://success]}
222232
```
223233

0 commit comments

Comments
 (0)