dns解釋 raw.githubusercontent.com 返回0.0.0.0，ipv6解釋正常

[reply2future]

問題

dns解釋 raw.githubusercontent.com 返回 0.0.0.0的 ip，ipv6的解釋正常，其他的牆外域名正常解釋。

拓扑圖

客戶端配置

{
  "log": {
    "loglevel": "debug",
    "error": "/var/log/xray/error.log",
    "access": "/var/log/xray/access.log"
  },
  "inbounds": [
    {
      "tag": "all-in",
      "port": 12345,
      "protocol": "dokodemo-door",
      "settings": {
        "network": "tcp,udp",
        "followRedirect": true
      },
      "sniffing": {
        "enabled": true,
        "destOverride": ["http", "tls"]
      },
      "streamSettings": {
        "sockopt": {
          "tproxy": "tproxy"
        }
      }
    }
  ],
  "outbounds": [
    {
      "tag": "direct",
      "protocol": "freedom",
      "settings": {
        "domainStrategy": "UseIPv4"
      },
      "streamSettings": {
        "sockopt": {
          "mark": 2
        }
      }
    },
    {
      "tag": "proxy",
      "protocol": "vmess",
      "settings": {
        "vnext": [
          {
            "address": "Domain",
            "port": 443,
            "users": [
              {
                "id": "xxxx-xxx-xxx-xxx-xxx",
		"alterId": 0,
                "encryption": "auto"
              }
            ]
          }
        ]
      },
      "streamSettings": {
        "network": "tcp",
        "security": "none",
        "sockopt": {
          "mark": 2
        }
      }
    },
    {
      "tag": "block",
      "protocol": "blackhole",
      "settings": {
        "response": {
          "type": "http"
        }
      }
    },
    {
      "tag": "dns-out",
      "protocol": "dns",
      "settings": {
        "address": "8.8.8.8"
      },
      "proxySettings": {
        "tag": "proxy"
      },
      "streamSettings": {
        "sockopt": {
          "mark": 2
        }
      }
    }
  ],
  "dns": {
    "servers": [
      {
        "address": "119.29.29.29",
        "port": 53,
        "domains": ["geosite:cn"],
        "expectIPs": ["geoip:cn"]
      },
      {
        "address": "223.5.5.5",
        "port": 53,
        "domains": ["geosite:cn"],
        "expectIPs": ["geoip:cn"]
      },
      "8.8.8.8",
      "1.1.1.1",
      "https+local://doh.dns.sb/dns-query"
    ]
  },
  "routing": {
    "domainStrategy": "IPIfNonMatch",
    "rules": [
      {
        "type": "field",
        "inboundTag": ["all-in"],
        "port": 53,
        "outboundTag": "dns-out"
      },
      {
        "type": "field",
        "domain": ["geosite:category-ads-all"],
        "outboundTag": "block"
      },
      {
        "type": "field",
        "ip": ["8.8.8.8", "1.1.1.1"],
        "outboundTag": "proxy"
      },
      {
        "type": "field",
        "domain": ["geosite:geolocation-!cn"],
        "outboundTag": "proxy"
      },
      {
        "type": "field",
        "ip": ["geoip:telegram"],
        "outboundTag": "proxy"
      },
      {
        "type": "field",
        "outboundTag": "direct",
        "protocol": ["bittorrent"]
      }
    ]
  }
}

基本按照 透明代理（TProxy）配置教程 操作，使用 nftables

已做排查

1. 在router上使用 nslookup -q=A raw.githubusercontent.com 8.8.8.8 可以返回正确ip
2. 在樹莓派上執行上面命令會返回 0.0.0.0， 用nslookup -q=AAAA raw.githubusercontent.com會正常返回ipv6地址

4. 在客戶端上也是如此
5. 所有操作都清理了dns cache，在客戶端和router，樹莓派上
6. 改debug日志也看不到有raw.githubusercontent.com dns 查詢日志

[reply2future]

嘗試過這個設置也沒有作用。

[reply2future]

上面的router固件有問題，還是有請求沒有流進xray，切成openwrt官方包就沒有問題了