请教freedom的dns解析问题

[jiuqianyuan]

如下bing.com域名同时存在于直连和代理规则中，但希望bing.com走国内，
但直连时freedom经过内置dns解析后，bing.com反被8.8.8.8先匹配中了，导致解析得到的是海外IP。

请问APP里是否有可设置的地方，指定freedom的dns解析全为国内。
或者还是要程序上修改下，dns组内 也按路由规则的顺序分开写，不再把直连、代理各自写进一个dns规则里。

配置信息

Details

{
  "dns": {
    "hosts": {
      "geosite:category-ads-all": "127.0.0.1",
      "domain:googleapis.cn": "googleapis.com",
      "dns.alidns.com": [
        "223.5.5.5",
        "223.6.6.6",
        "2400:3200::1",
        "2400:3200:baba::1"
      ],
      "one.one.one.one": [
        "1.1.1.1",
        "1.0.0.1",
        "2606:4700:4700::1111",
        "2606:4700:4700::1001"
      ],
      "dns.cloudflare.com": [
        "104.16.132.229",
        "104.16.133.229",
        "2606:4700::6810:84e5",
        "2606:4700::6810:85e5"
      ],
      "cloudflare-dns.com": [
        "104.16.248.249",
        "104.16.249.249",
        "2606:4700::6810:f8f9",
        "2606:4700::6810:f9f9"
      ],
      "dot.pub": [
        "1.12.12.12",
        "120.53.53.53"
      ],
      "dns.google": [
        "8.8.8.8",
        "8.8.4.4",
        "2001:4860:4860::8888",
        "2001:4860:4860::8844"
      ],
      "dns.quad9.net": [
        "9.9.9.9",
        "149.112.112.112",
        "2620:fe::fe",
        "2620:fe::9"
      ],
      "common.dot.dns.yandex.net": [
        "77.88.8.8",
        "77.88.8.1",
        "2a02:6b8::feed:0ff",
        "2a02:6b8:0:1::feed:0ff"
      ],
      "www.google.com.sg": "74.125.68.94",
      "4c27037c.afliplc-jp.getxlx.com": [
        "36.151.195.70",
        "2409:8c20:26c2:4:c000::240"
      ]
    },
    "servers": [
      {
        "address": "fakedns",
        "domains": [
          "geosite:cn",
          "domain:googleapis.cn",
          "domain:gstatic.com",
          "domain:google.com",
          "domain:googleadservices.com",
          "domain:shareasale.com",
          "domain:cloudflare-dns.com",
          "domain:one.one.one.one",
          "domain:dns.google",
          "domain:adguard-dns.com",
          "domain:opendns.com",
          "domain:umbrella.com",
          "domain:quad9.net",
          "domain:yandex.net",
          "geosite:gfw",
          "geosite:greatfire",
          "geosite:geolocation-!cn",
          "domain:jimuquanyi.com",
          "domain:990599.xyz",
          "domain:qq.com",
          "domain:gtimg.cn",
          "domain:qpic.cn",
          "domain:njmapp.com",
          "domain:bing.com",
          "domain:alidns.com",
          "domain:doh.pub",
          "domain:dot.pub",
          "domain:360.cn",
          "domain:onedns.net",
          "geosite:cn"
        ]
      },
      "tcp://8.8.8.8",
      {
        "address": "tcp://8.8.8.8",
        "domains": [
          "domain:googleapis.cn",
          "domain:gstatic.com",
          "domain:google.com",
          "domain:googleadservices.com",
          "domain:shareasale.com",
          "domain:cloudflare-dns.com",
          "domain:one.one.one.one",
          "domain:dns.google",
          "domain:adguard-dns.com",
          "domain:opendns.com",
          "domain:umbrella.com",
          "domain:quad9.net",
          "domain:yandex.net",
          "geosite:gfw",
          "geosite:greatfire",
          "geosite:geolocation-!cn"
        ]
      },
      {
        "address": "223.5.5.5",
        "domains": [
          "domain:jimuquanyi.com",
          "domain:990599.xyz",
          "domain:qq.com",
          "domain:gtimg.cn",
          "domain:qpic.cn",
          "domain:njmapp.com",
          "domain:bing.com",
          "domain:alidns.com",
          "domain:doh.pub",
          "domain:dot.pub",
          "domain:360.cn",
          "domain:onedns.net",
          "geosite:cn"
        ],
        "expectIPs": [
          "geoip:cn"
        ],
        "skipFallback": true
      }
    ]
  },
  "fakedns": [
    {
      "ipPool": "198.18.0.0/15",
      "poolSize": 10000
    }
  ],
  "inbounds": [
    {
      "listen": "127.0.0.1",
      "port": 10808,
      "protocol": "socks",
      "settings": {
        "auth": "noauth",
        "udp": true,
        "userLevel": 8
      },
      "sniffing": {
        "destOverride": [
          "http",
          "tls",
          "fakedns"
        ],
        "enabled": true,
        "routeOnly": true
      },
      "tag": "socks"
    },
    {
      "listen": "127.0.0.1",
      "port": 10853,
      "protocol": "dokodemo-door",
      "settings": {
        "address": "1.1.1.1",
        "network": "tcp,udp",
        "port": 53
      },
      "tag": "dns-in"
    }
  ],
  "log": {
    "loglevel": "debug"
  },
  "outbounds": [
    {
      "mux": {
        "concurrency": 8,
        "enabled": true,
        "xudpConcurrency": 8,
        "xudpProxyUDP443": "reject"
      },
      "protocol": "vmess",
      "settings": {
        "vnext": [
          {
            "address": "xxx.xxx.com",
            "port": 12345,
            "users": [
              {
                "id": "xxxx-xxxxx-xxxxx-xxxxx",
                "level": 8,
                "security": "auto"
              }
            ]
          }
        ]
      },
      "streamSettings": {
        "network": "tcp",
        "sockopt": {
          "domainStrategy": "UseIPv4v6"
        },
        "tcpSettings": {
          "header": {
            "type": "none"
          }
        }
      },
      "tag": "proxy"
    },
    {
      "protocol": "freedom",
      "settings": {
        "domainStrategy": "UseIP"
      },
      "tag": "direct"
    },
    {
      "protocol": "blackhole",
      "settings": {
        "response": {
          "type": "http"
        }
      },
      "tag": "block"
    },
    {
      "protocol": "dns",
      "tag": "dns-out"
    }
  ],
  "remarks": "香港线路",
  "routing": {
    "domainStrategy": "AsIs",
    "rules": [
      {
        "inboundTag": [
          "dns-in"
        ],
        "outboundTag": "dns-out",
        "type": "field"
      },
      {
        "ip": [
          "223.5.5.5"
        ],
        "outboundTag": "direct",
        "port": "53",
        "type": "field"
      },
      {
        "domain": [
          "geosite:category-ads-all"
        ],
        "outboundTag": "block",
        "type": "field"
      },
      {
        "domain": [
          "domain:jimuquanyi.com",
          "domain:990599.xyz",
          "domain:qq.com",
          "domain:gtimg.cn",
          "domain:qpic.cn",
          "domain:njmapp.com",
          "domain:bing.com"
        ],
        "outboundTag": "direct",
        "type": "field"
      },
      {
        "domain": [
          "domain:googleapis.cn",
          "domain:gstatic.com",
          "domain:google.com",
          "domain:googleadservices.com",
          "domain:shareasale.com"
        ],
        "outboundTag": "proxy",
        "type": "field"
      },
      {
        "outboundTag": "direct",
        "protocol": [
          "bittorrent"
        ],
        "type": "field"
      },
      {
        "network": "udp",
        "outboundTag": "block",
        "port": "443",
        "type": "field"
      },
      {
        "ip": [
          "geoip:private"
        ],
        "outboundTag": "direct",
        "type": "field"
      },
      {
        "domain": [
          "geosite:private"
        ],
        "outboundTag": "direct",
        "type": "field"
      },
      {
        "domain": [
          "domain:alidns.com",
          "domain:doh.pub",
          "domain:dot.pub",
          "domain:360.cn",
          "domain:onedns.net"
        ],
        "outboundTag": "direct",
        "type": "field"
      },
      {
        "ip": [
          "223.5.5.5",
          "223.6.6.6",
          "2400:3200::1",
          "2400:3200:baba::1",
          "119.29.29.29",
          "1.12.12.12",
          "120.53.53.53",
          "2402:4e00::",
          "2402:4e00:1::",
          "180.76.76.76",
          "2400:da00::6666",
          "114.114.114.114",
          "114.114.115.115",
          "114.114.114.119",
          "114.114.115.119",
          "114.114.114.110",
          "114.114.115.110",
          "180.184.1.1",
          "180.184.2.2",
          "101.226.4.6",
          "218.30.118.6",
          "123.125.81.6",
          "140.207.198.6",
          "1.2.4.8",
          "210.2.4.8",
          "52.80.66.66",
          "117.50.22.22",
          "2400:7fc0:849e:200::4",
          "2404:c2c0:85d8:901::4",
          "117.50.10.10",
          "52.80.52.52",
          "2400:7fc0:849e:200::8",
          "2404:c2c0:85d8:901::8",
          "117.50.60.30",
          "52.80.60.30"
        ],
        "outboundTag": "direct",
        "type": "field"
      },
      {
        "domain": [
          "geosite:cn"
        ],
        "outboundTag": "direct",
        "type": "field"
      },
      {
        "ip": [
          "geoip:cn"
        ],
        "outboundTag": "direct",
        "type": "field"
      },
      {
        "domain": [
          "domain:cloudflare-dns.com",
          "domain:one.one.one.one",
          "domain:dns.google",
          "domain:adguard-dns.com",
          "domain:opendns.com",
          "domain:umbrella.com",
          "domain:quad9.net",
          "domain:yandex.net"
        ],
        "outboundTag": "proxy",
        "type": "field"
      },
      {
        "ip": [
          "1.1.1.1",
          "1.0.0.1",
          "2606:4700:4700::1111",
          "2606:4700:4700::1001",
          "1.1.1.2",
          "1.0.0.2",
          "2606:4700:4700::1112",
          "2606:4700:4700::1002",
          "1.1.1.3",
          "1.0.0.3",
          "2606:4700:4700::1113",
          "2606:4700:4700::1003",
          "8.8.8.8",
          "8.8.4.4",
          "2001:4860:4860::8888",
          "2001:4860:4860::8844",
          "94.140.14.14",
          "94.140.15.15",
          "2a10:50c0::ad1:ff",
          "2a10:50c0::ad2:ff",
          "94.140.14.15",
          "94.140.15.16",
          "2a10:50c0::bad1:ff",
          "2a10:50c0::bad2:ff",
          "94.140.14.140",
          "94.140.14.141",
          "2a10:50c0::1:ff",
          "2a10:50c0::2:ff",
          "208.67.222.222",
          "208.67.220.220",
          "2620:119:35::35",
          "2620:119:53::53",
          "208.67.222.123",
          "208.67.220.123",
          "2620:119:35::123",
          "2620:119:53::123",
          "9.9.9.9",
          "149.112.112.112",
          "2620:fe::9",
          "2620:fe::fe",
          "9.9.9.11",
          "149.112.112.11",
          "2620:fe::11",
          "2620:fe::fe:11",
          "9.9.9.10",
          "149.112.112.10",
          "2620:fe::10",
          "2620:fe::fe:10",
          "77.88.8.8",
          "77.88.8.1",
          "2a02:6b8::feed:0ff",
          "2a02:6b8:0:1::feed:0ff",
          "77.88.8.88",
          "77.88.8.2",
          "2a02:6b8::feed:bad",
          "2a02:6b8:0:1::feed:bad",
          "77.88.8.7",
          "77.88.8.3",
          "2a02:6b8::feed:a11",
          "2a02:6b8:0:1::feed:a11"
        ],
        "outboundTag": "proxy",
        "type": "field"
      },
      {
        "domain": [
          "geosite:gfw",
          "geosite:greatfire",
          "geosite:geolocation-!cn"
        ],
        "outboundTag": "proxy",
        "type": "field"
      },
      {
        "ip": [
          "geoip:facebook",
          "geoip:fastly",
          "geoip:google",
          "geoip:netflix",
          "geoip:telegram",
          "geoip:twitter"
        ],
        "outboundTag": "proxy",
        "type": "field"
      }
    ]
  }
}

日志

Details

06-11 10:23:15.156 I/GoLog   (24354): [Info] [3949119613] proxy: CopyRawConn splice
06-11 10:23:15.155 I/GoLog   (24354): [Info] [3949119613] proxy/freedom: connection opened to tcp:23.192.45.240:443, local endpoint 192.168.1.101:40840, remote endpoint 23.192.45.240:443
06-11 10:23:15.082 I/GoLog   (24354): from tcp:127.0.0.1:39400 accepted tcp:23.192.45.240:443 [socks -> direct]
06-11 10:23:15.082 I/GoLog   (24354): [Debug] [3949119613] transport/internet: dialing to tcp:23.192.45.240:443
06-11 10:23:15.082 I/GoLog   (24354): [Info] [3949119613] transport/internet/tcp: dialing TCP to tcp:23.192.45.240:443
06-11 10:23:15.082 I/GoLog   (24354): [Info] [3949119613] app/dispatcher: taking detour [direct] for [tcp:www.bing.com:443]
06-11 10:23:15.082 I/GoLog   (24354): [Info] [3949119613] app/dispatcher: sniffed domain: www.bing.com
06-11 10:23:15.081 I/GoLog   (24354): [Info] [3949119613] proxy/socks: TCP Connect request to tcp:23.192.45.240:443
06-11 10:23:14.755 I/GoLog   (24354): from tcp:127.0.0.1:39396 accepted tcp:8.8.8.8:443 [socks -> proxy]
06-11 10:23:14.755 I/GoLog   (24354): [Info] [2248487694] common/mux: dispatching request to tcp:8.8.8.8:443
06-11 10:23:14.755 I/GoLog   (24354): [Info] [2248487694] app/dispatcher: taking detour [proxy] for [tcp:dns.google:443]
06-11 10:23:14.754 I/GoLog   (24354): [Info] [2248487694] app/dispatcher: sniffed domain: dns.google
06-11 10:23:14.754 I/GoLog   (24354): [Info] [2248487694] proxy/socks: TCP Connect request to tcp:8.8.8.8:443
06-11 10:23:14.460 I/GoLog   (24354): [Info] [1862509862] common/mux: dispatching request to tcp:8.8.8.8:443
06-11 10:23:14.460 I/GoLog   (24354): from tcp:127.0.0.1:39392 accepted tcp:8.8.8.8:443 [socks -> proxy]
06-11 10:23:14.460 I/GoLog   (24354): [Info] [1862509862] app/dispatcher: taking detour [proxy] for [tcp:dns.google:443]
06-11 10:23:14.460 I/GoLog   (24354): [Info] [1862509862] app/dispatcher: sniffed domain: dns.google
06-11 10:23:14.458 I/GoLog   (24354): [Info] [1862509862] proxy/socks: TCP Connect request to tcp:8.8.8.8:443
06-11 10:23:10.515 I/com.v2ray.ang(14347): This is non sticky GC, maxfree is 33554432 minfree is 8388608
06-11 10:23:08.714 I/GoLog   (24354): [Info] app/dns: returning 1 IP(s) for domain api.sec.miui.com -> [127.0.0.1]
06-11 10:23:08.714 I/GoLog   (24354): from 127.0.0.1:49189 accepted udp:1.1.1.1:53 [dns-in -> dns-out]
06-11 10:23:08.714 I/GoLog   (24354): [Info] [2807352126] proxy/dns: handling DNS traffic to udp:1.1.1.1:53
06-11 10:23:08.714 I/GoLog   (24354): [Info] [2807352126] app/dispatcher: taking detour [dns-out] for [udp:1.1.1.1:53]
06-11 10:23:08.714 I/GoLog   (24354): [Info] [2807352126] proxy/dokodemo: received request for 127.0.0.1:49189
06-11 10:23:08.714 I/GoLog   (24354): [Debug] [2807352126] proxy/dokodemo: processing connection from: 127.0.0.1:49189
06-11 10:23:06.948 I/GoLog   (24354): from tcp:127.0.0.1:39380 accepted tcp:140.82.112.26:443 [socks -> proxy]
06-11 10:23:06.948 I/GoLog   (24354): [Info] [792719446] common/mux: dispatching request to tcp:140.82.112.26:443
06-11 10:23:06.948 I/GoLog   (24354): [Info] [792719446] app/dispatcher: taking detour [proxy] for [tcp:alive.github.com:443]
06-11 10:23:06.948 I/GoLog   (24354): [Info] [792719446] app/dispatcher: sniffed domain: alive.github.com
06-11 10:23:06.947 I/GoLog   (24354): [Info] [792719446] proxy/socks: TCP Connect request to tcp:140.82.112.26:443
06-11 10:23:04.730 I/GoLog   (24354): [Info] [151263301] app/proxyman/inbound: connection ends > proxy/socks: connection ends > context canceled
06-11 10:23:04.730 I/GoLog   (24354): [Info] [1494882437] app/proxyman/inbound: connection ends > proxy/socks: connection ends > context canceled
--------- beginning of main

额外信息（可选）

[DHR60]

你用的 AsIs 的话，geoip:cn 后面的规则没用吧，没匹配到就是默认走 outbounds 第一个出站

如果用 IPIfNonMatch 或 IPOnDemand 还可以理解为减少一次 dns 查询

[DHR60]

或者还是要程序上修改下，dns组内 也按路由规则的顺序分开写，不再把直连、代理各自写进一个dns规则里。

如果要改的话，感觉按 domain 和 geosite 分可能更优雅

domain 在上，先匹配，skipFallback = true

geosite 在下，也 skipFallback = true

最后拿 remoteDns 兜底

[jiuqianyuan]

你用的 AsIs 的话，geoip:cn 后面的规则没用吧，没匹配到就是默认走 outbounds 第一个出站

如果用 IPIfNonMatch 或 IPOnDemand 还可以理解为减少一次 dns 查询

之前是设的IPIfNonMatch ，因为一个问题 #4639 改成AsIs，路由规则是锁定的就没动。

[dianxin623]

bing.com这个问题确实，电脑上用edge，bing.com会匹配代理，cn.bing.com又匹配到直连，导致重定向，我现在是加了一条规则让domain:bing.com走直连；
另外NG上我没发现有问题啊，我访问www.bing.com直接给我定向到cn.bing.com了，那应该就是geoip:cn匹配到，freedom出站了？