Replies: 2 comments
-
|
已解决，关闭…… |
Beta Was this translation helpful? Give feedback.
0 replies
-
|
感觉你的配置也太复杂了，既然已经用fakedns了，那我分享我的配置把，以下是路由器，v2rayn只需要dns部分就差不多了 {
"log": {
"loglevel": "warning",
"access": "none",
"error": "/var/log/xray/error.log"
},
"inbounds": [
{
"protocol": "dokodemo-door",
"port": 53,
"tag": "dns-in",
"settings": {
"address": "127.0.0.1",
"network": "udp"
}
},
{
"protocol": "dokodemo-door",
"port": 1080,
"tag": "tproxy-in",
"settings": {
"network": "tcp,udp",
"followRedirect": true
},
"sniffing": {
"enabled": true,
"destOverride": "fakedns",
"metadataOnly": true
},
"streamSettings": {
"sockopt": {
"tproxy": "tproxy"
}
}
}
],
"outbounds": [
{
"protocol": "direct",
"tag": "direct-out",
"streamSettings": {
"sockopt": {
"mark": 2
}
}
},
{
"protocol": "dns",
"tag": "dns-out",
"streamSettings": {
"sockopt": {
"mark": 2
}
}
},
{
"protocol": "block",
"tag": "block",
"settings": {
"response": {
"type": "http"
}
}
}
],
"dns": {
"hosts": {
"dns.pub": "119.29.29.29",
"dns.alidns.com": "223.5.5.5",
"geosite:category-ads-all": "#3"
},
"servers": [
{
"tag": "dns-direct",
"address": "223.6.6.6",
"domains": [
"geosite:cn",
"geosite:google-cn",
"geosite:apple-cn"
],
"skipFallback": true,
"expectIPs": ["geoip:cn"]
},
{
"tag": "dns-direct",
"address": "119.29.29.29",
"domains": [
"geosite:cn",
"geosite:google-cn",
"geosite:apple-cn"
],
"skipFallback": true,
"expectIPs": ["geoip:cn"]
},
{
"address": "fakedns",
"domains": [
"geosite:geolocation-!cn"
],
"skipFallback": true,
"queryStrategy": "UseIPv4"
},
{
"tag": "dns-direct",
"address": "223.6.6.6",
"expectIPs": ["geoip:cn"]
},
{
"tag": "dns-direct",
"address": "119.29.29.29",
"expectIPs": ["geoip:cn"]
},
{
"address": "fakedns",
"queryStrategy": "UseIPv4",
"finalQuery": true
}
],
"enableParallelQuery": true,
"serveStale": true,
"serveExpiredTTL": 604800
},
"fakedns": {
"ipPool": "198.18.0.0/16",
"poolSize": 65534
},
"routing": {
"rules": [
{
"inboundTag": [
"dns-direct"
],
"outboundTag": "direct-out"
},
{
"inboundTag": [
"dns-in"
],
"outboundTag": "dns-out"
},
{
"network": "udp",
"port": 443,
"outboundTag": "block"
},
{
"network": "tcp,udp",
"outboundTag": "proxy"
}
]
},
"policy": {
"levels": {
"0": {
"uplinkOnly": 0,
"downlinkOnly": 0
}
}
}
} |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
目前遇到的问题
目前
IPv4已经可以正常代理了，但是IPv6不行，如果配置网络为IPv6优先，那么所有支持IPv6且流量需要走透明带里的网站均无法访问。网络拓补介绍
假设有下面的网络配置：
问题现象
那么在
br-server这个子网下的一个节点上使用IPv6访问google是无法成功的， 但是同一套配置使用IPv4可以访问(已经确认代理服务端支持IPv6协议栈)。在
IPv6下，访问不需要代理的站点可以正常访问。下面是br-server子网下的一个设备, 复现上面说的问题：
下面是在路由器上的抓包结果：
注意，上面的抓包结果，
11:27:19.558119这一时刻pppoe-wan的握手包是通过2408:8207:7884:af90::1发送除去的（？），也就是br-guest网络，而原始请求的网段是br-server下的2408:8207:7884:af92:11:32ff:fe25:5e77，这个行为经过我这边测试是因为openwrt开了IPv6 Source based routing导致的, 关闭之后发包源地址会变成PPPOE-WAN的公网地址，但是问题依旧。然后我想着， 既然公网发出的包源地址是
br-guest，我试图将br-guest添加到需要透明带里的控制列表中， 也无法解决问题。没什么思路了，请求各位大佬看下可能是什么问题。
xray配置文件
Beta Was this translation helpful? Give feedback.
All reactions