图片四、国内外分流配置使用dnsmasq-china-list作为大陆域名白名单,定义国内域名使用的上游DNS,不匹配的则走dnsmasq定义的上游DNS,完美利用解析优先级机制。 ln -sf /opt/dnsmasq-china-list/accelerated-domains.china.conf /etc/dnsmasq.d/accelerated-domains.china.conf ln -sf /opt/dnsmasq-china-list/google.china.conf /etc/dnsmasq.d/google.china.confln -sf /opt/dnsmasq-china-list /apple.china.conf /etc/dnsmasq.d/apple.china.confln -sf /opt/dnsmasq-china-list/bogus-nxdomain.china.conf 113.87.49.47,那么替换命令可以这么写:sed -i 's|114.114.114.114|113.87.49.47|g' accelerated-domains.china.conf图片5.定时更新dnsmasq-china-list
/configure --with-libevent make -j12 sudo make install # 安装完成 配置 unbound # 下载 dnsmasq-china-list wget -c https://github.com/felixonmars/dnsmasq-china-list/archive/master.zip # 解压并进入文件夹: unzip master.zip 后者的话,前面 outgoing-interface 可以直接设置隧道本地端的地址,不过要配合 dnsmasq-china-list 的话,还是写路由表比较合适,否则不够灵活。
state NEW --dport 53 -j ACCEPT #重启iptables使修改生效 service iptables restart 因为使用了海外DNS服务,有可能会解析到无法访问的地址,使用dnsmasq-china-list
四、Dnsmasq实现国内外域名智能分流1.修改dnsmasq上游DNS如dnsmasq还没安装配置,可参考上篇文章,直到做到dnsmasq-china-list这一步实现dnsmasq维度的国内外分流 (1)指定国内上游DoH监听地址国内Doh则需修改dnsmasq-china-list里的accelerated-domains.china.conf,将IP替换为国内DoH监听地址:sed -i 's 实现原理也很简单,dnsmasq机器作为入口,使用dnsmasq-china-list大陆域名白名单实现分流转发给上游dnscrypt-proxy处理,dnscrypt-proxy再往对应的DoH/DoT
/bin/bash rm accelerated-domains.china.conf wget https://cdn.jsdelivr.net/gh/felixonmars/dnsmasq-china-list etc/accelerated-domains.china.conf rm apple.china.conf wget https://cdn.jsdelivr.net/gh/felixonmars/dnsmasq-china-list O /usr/local/etc/apple.china.conf rm google.china.conf wget https://cdn.jsdelivr.net/gh/felixonmars/dnsmasq-china-list dnsredir: https://github.com/leiless/dnsredir [8] FelixOnMars的大陆区域名列表: https://github.com/felixonmars/dnsmasq-china-list ] plugins 的介绍: https://coredns.io/plugins/ [12] FelixOnMars的大陆区域名列表: https://github.com/felixonmars/dnsmasq-china-list
/bin/bash rm accelerated-domains.china.conf wget https://cdn.jsdelivr.net/gh/felixonmars/dnsmasq-china-list etc/accelerated-domains.china.conf rm apple.china.conf wget https://cdn.jsdelivr.net/gh/felixonmars/dnsmasq-china-list O /usr/local/etc/apple.china.conf rm google.china.conf wget https://cdn.jsdelivr.net/gh/felixonmars/dnsmasq-china-list dnsredir: https://github.com/leiless/dnsredir [8]FelixOnMars的大陆区域名列表: https://github.com/felixonmars/dnsmasq-china-list 11]plugins 的介绍: https://coredns.io/plugins/ [12]FelixOnMars的大陆区域名列表: https://github.com/felixonmars/dnsmasq-china-list
/bin/bash chinadns=$(curl -sL https://raw.githubusercontent.com/felixonmars/dnsmasq-china-list/master