The internet doesn't work. Probably DNS issue.

[AFrantsevich]

Hello!
I use sing-box with Nekoray, but I need to manage my connection with cm. Start, stop, check status.
So I’ve exported config from Nekoray and try to run it like:

sing-box run -c /usr/local/etc/sing-box/config.json

And it starts, but in browser working only google services, another sites doesn’t work.
Another apps like telegram seems to work.
My system is Arch Linux.

My sing-box logs:

ERROR[0017] dns: exchange failed for beacons.gcp.gvt2.com. IN AAAA: Post "https://8.8.8.8/dns-query": context canceled
ERROR[0017] dns: exchange failed for beacons.gcp.gvt2.com. IN A: Post "https://8.8.8.8/dns-query": context deadline exceeded
ERROR[0017] dns: exchange failed for beacons.gcp.gvt2.com. IN A: Post "https://8.8.8.8/dns-query": context canceled
ERROR[0017] dns: exchange failed for encrypted-tbn0.gstatic.com. IN AAAA: Post "https://8.8.8.8/dns-query": context deadline exceeded
ERROR[0017] dns: exchange failed for encrypted-tbn0.gstatic.com. IN AAAA: Post "https://8.8.8.8/dns-query": context canceled
ERROR[0017] dns: exchange failed for encrypted-tbn0.gstatic.com. IN A: Post "https://8.8.8.8/dns-query": context deadline exceeded
ERROR[0017] dns: exchange failed for encrypted-tbn0.gstatic.com. IN A: Post "https://8.8.8.8/dns-query": context canceled
ERROR[0017] dns: exchange failed for optimizationguide-pa.googleapis.com. IN AAAA: Post "https://8.8.8.8/dns-query": context deadline exceeded
ERROR[0017] dns: exchange failed for optimizationguide-pa.googleapis.com. IN A: Post "https://8.8.8.8/dns-query": context deadline exceeded
ERROR[0017] dns: exchange failed for optimizationguide-pa.googleapis.com. IN AAAA: Post "https://8.8.8.8/dns-query": context canceled
ERROR[0017] dns: exchange failed for optimizationguide-pa.googleapis.com. IN A: Post "https://8.8.8.8/dns-query": context canceled
ERROR[0017] dns: exchange failed for www.gstatic.com. IN AAAA: Post "https://8.8.8.8/dns-query": context deadline exceeded
ERROR[0017] dns: exchange failed for fonts.gstatic.com. IN AAAA: Post "https://8.8.8.8/dns-query": context deadline exceeded
ERROR[0017] dns: exchange failed for www.google.com. IN AAAA: Post "https://8.8.8.8/dns-query": context deadline exceeded
ERROR[0017] dns: exchange failed for www.gstatic.com. IN AAAA: Post "https://8.8.8.8/dns-query": context canceled
ERROR[0017] dns: exchange failed for www.google.com. IN A: Post "https://8.8.8.8/dns-query": context deadline exceeded
ERROR[0017] dns: exchange failed for www.gstatic.com. IN A: Post "https://8.8.8.8/dns-query": context deadline exceeded
ERROR[0017] dns: exchange failed for www.google.com. IN AAAA: Post "https://8.8.8.8/dns-query": context canceled
ERROR[0017] dns: exchange failed for fonts.gstatic.com. IN AAAA: Post "https://8.8.8.8/dns-query": context canceled
ERROR[0017] dns: exchange failed for fonts.gstatic.com. IN A: Post "https://8.8.8.8/dns-query": context deadline exceeded
ERROR[0017] dns: exchange failed for www.google.com. IN A: Post "https://8.8.8.8/dns-query": context canceled
ERROR[0017] dns: exchange failed for www.gstatic.com. IN A: Post "https://8.8.8.8/dns-query": context canceled
ERROR[0017] dns: exchange failed for fonts.gstatic.com. IN A: Post "https://8.8.8.8/dns-query": context canceled

My client config:

{
  "dns": {
    "independent_cache": true,
    "rules": [
      {
        "query_type": [
          32,
          33
        ],
        "server": "dns-block"
      },
      {
        "domain_suffix": ".lan",
        "server": "dns-block"
      }
    ],
    "servers": [
      {
        "address": "https://8.8.8.8/dns-query",
        "address_resolver": "dns-local",
        "detour": "proxy",
        "strategy": "",
        "tag": "dns-remote"
      },
      {
        "address": "local",
        "address_resolver": "dns-local",
        "detour": "direct",
        "strategy": "",
        "tag": "dns-direct"
      },
      {
        "address": "rcode://success",
        "tag": "dns-block"
      },
      {
        "address": "local",
        "detour": "direct",
        "tag": "dns-local"
      }
    ]
  },
  "inbounds": [
    {
      "domain_strategy": "",
      "listen": "127.0.0.1",
      "listen_port": 2080,
      "sniff": true,
      "sniff_override_destination": false,
      "tag": "mixed-in",
      "type": "mixed"
    },
    {
      "auto_route": true,
      "domain_strategy": "",
      "endpoint_independent_nat": true,
      "inet4_address": "172.19.0.1/28",
      "interface_name": "tun0",
      "mtu": 9000,
      "sniff": true,
      "sniff_override_destination": false,
      "stack": "gvisor",
      "strict_route": false,
      "tag": "tun-in",
      "type": "tun"
    }
  ],
  "log": {
    "level": "info"
  },
  "outbounds": [
    {
      "domain_strategy": "",
      "flow": "",
      "packet_encoding": "",
      "server": "****",
      "server_port": ****,
      "tag": "proxy",
      "tls": {
        "enabled": true,
        "reality": {
          "enabled": true,
          "public_key": "******",
          "short_id": ""
        },
        "server_name": "discordapp.com",
        "utls": {
          "enabled": true,
          "fingerprint": "chrome"
        }
      },
      "transport": {
        "service_name": "xyz",
        "type": "grpc"
      },
      "type": "vless",
      "uuid": "******"
    },
    {
      "tag": "direct",
      "type": "direct"
    },
    {
      "tag": "bypass",
      "type": "direct"
    },
    {
      "tag": "block",
      "type": "block"
    },
    {
      "tag": "dns-out",
      "type": "dns"
    }
  ],
  "route": {
    "final": "proxy",
    "rules": [
      {
        "outbound": "dns-out",
        "protocol": "dns"
      },
      {
        "network": "udp",
        "outbound": "block",
        "port": [
          135,
          137,
          138,
          139,
          5353
        ]
      },
      {
        "ip_cidr": [
          "224.0.0.0/3",
          "ff00::/8"
        ],
        "outbound": "block"
      },
      {
        "outbound": "block",
        "source_ip_cidr": [
          "224.0.0.0/3",
          "ff00::/8"
        ]
      }
    ]
  }
}

My server config:

  "log": {
    "loglevel": "info"
  },
  "inbounds": [
    {
      "tag": "VMess TCP",
      "listen": "0.0.0.0",
      "port": ***,
      "protocol": "vmess",
      "settings": {
        "clients": []
      },
      "streamSettings": {
        "network": "tcp",
        "tcpSettings": {
          "header": {
            "type": "http",
            "request": {
              "method": "GET",
              "path": [
                "/"
              ],
              "headers": {
                "Host": [
                  "google.com"
                ]
              }
            },
            "response": {}
          }
        },
        "security": "none"
      },
      "sniffing": {
        "enabled": true,
        "destOverride": [
          "http",
          "tls"
        ]
      }
    },
    {
      "tag": "VMess Websocket",
      "listen": "0.0.0.0",
      "port": ***,
      "protocol": "vmess",
      "settings": {
        "clients": []
      },
      "streamSettings": {
        "network": "ws",
        "wsSettings": {
          "path": "/",
          "headers": {
            "Host": "google.com"
          }
        },
        "security": "none"
      },
      "sniffing": {
        "enabled": true,
        "destOverride": [
          "http",
          "tls"
        ]
      }
    },
    {
      "tag": "VLESS TCP REALITY",
      "listen": "0.0.0.0",
      "port": ***,
      "protocol": "vless",
      "settings": {
        "clients": [],
        "decryption": "none"
      },
      "streamSettings": {
        "network": "tcp",
        "tcpSettings": {},
        "security": "reality",
        "realitySettings": {
          "show": false,
          "dest": "discordapp.com:443",
          "xver": 0,
          "serverNames": [
            "cdn.discordapp.com",
            "discordapp.com"
          ],
          "privateKey": "****",
          "shortIds": [
            "",
            "****"
          ]
        }
      },
      "sniffing": {
        "enabled": true,
        "destOverride": [
          "http",
          "tls"
        ]
      }
    },
    {
      "tag": "VLESS GRPC REALITY",
      "listen": "0.0.0.0",
      "port": ****,
      "protocol": "vless",
      "settings": {
        "clients": [],
        "decryption": "none"
      },
      "streamSettings": {
        "network": "grpc",
        "grpcSettings": {
          "serviceName": "xyz"
        },
        "security": "reality",
        "realitySettings": {
          "show": false,
          "dest": "discordapp.com:443",
          "xver": 0,
          "serverNames": [
            "cdn.discordapp.com",
            "discordapp.com"
          ],
          "privateKey": "*****",
          "shortIds": [
            "",
            "*****"
          ]
        }
      },
      "sniffing": {
        "enabled": true,
        "destOverride": [
          "http",
          "tls"
        ]
      }
    },
    {
      "tag": "Trojan Websocket TLS",
      "listen": "0.0.0.0",
      "port": ****,
      "protocol": "trojan",
      "settings": {
        "clients": []
      },
      "streamSettings": {
        "network": "ws",
        "security": "tls",
        "tlsSettings": {
          "certificates": [
            {
              "certificate": [
                **
              ],
              "key": [
                ****
              ]
            }
          ],
          "minVersion": "1.2",
          "cipherSuites": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256:TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256:TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384:TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384:TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256:TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
        }
      },
      "sniffing": {
        "enabled": true,
        "destOverride": [
          "http",
          "tls"
        ]
      }
    },
    {
      "tag": "Shadowsocks TCP",
      "listen": "0.0.0.0",
      "port": 1080,
      "protocol": "shadowsocks",
      "settings": {
        "clients": [],
        "network": "tcp,udp"
      }
    }
  ],
  "outbounds": [
    {
      "protocol": "freedom",
      "tag": "DIRECT"
    },
    {
      "protocol": "blackhole",
      "tag": "BLOCK"
    }
  ],
  "routing": {
    "rules": [
      {
        "ip": [
          "geoip:private"
        ],
        "domain": [
          "geosite:private"
        ],
        "protocol": [
          "bittorrent"
        ],
        "outboundTag": "BLOCK",
        "type": "field"
      }
    ]
  }
}```