felixonmars / dnsmasq-china-list Goto Github PK

View Code? Open in Web Editor NEW

5.3K 214.0 787.0 266.65 MB

Chinese-specific configuration to improve your favorite DNS server. Best partner for chnroutes.

License: Other

Shell 10.98% Makefile 20.13% Ruby 68.89%

dnsmasq-china-list's Introduction

dnsmasq-china-list

Chinese-specific configuration to improve your favorite DNS server. Best partner for chnroutes.

Improve resolve speed for Chinese domains.
Get the best CDN node near you whenever possible, but don't compromise foreign CDN results so you also get best CDN node for your VPN at the same time.
Block ISP ads on NXDOMAIN result (like 114so).

Details

accelerated-domains.china.conf: General domains to be accelerated.

These domains have a better resolving speed and/or result when using a Chinese DNS server.

To determine if a domain is eligible, one of the criteria below must be met:
The domain's NS server is located in China mainland.
The domain will resolve to an IP located in China mainland when using a Chinese DNS server, but not always do when using a foreign DNS server (For example, CDN accelerated sites that have node in China). This however does not include those having node near China mainland, like in Japan, Hong Kong, Taiwan, etc.

Please don't add subdomains if the top domain is already in the list. This includes all .cn domains which are already matched by the /cn/ rule.

google.china.conf: Google domains to be accelerated.

These domains are resolved to Google China servers when using a Chinese DNS. In most conditions this will yield better page load time for sites using Google's web services, e.g. Google Web Fonts and AdSense.

Bear in mind that they are not considered stable. Use at your own risk.
apple.china.conf: Apple domains to be accelerated.

Some ISPs (often smaller ones) have problem accessing Apple's assets using their China mainland CDN servers. Please consider remove this file if that happens to you. See #156 for some more info.
bogus-nxdomain.china.conf: Known addresses that are hijacking NXDOMAIN results returned by DNS servers.

Usage

Automatic Installation (recommended)

Fetch the installer from github (or a mirror): wget https://raw.githubusercontent.com/felixonmars/dnsmasq-china-list/master/install.sh
(Optional) Edit it to use your favorite DNS server and/or another mirror to download the list.
Run it as root: sudo ./install.sh

You can save the installer and run it again to update the list regularly.

Manual Installation

Place accelerated-domains.china.conf, bogus-nxdomain.china.conf (and optionally google.china.conf, apple.china.conf) under /etc/dnsmasq.d/ (Create the folder if it does not exist).
Uncomment "conf-dir=/etc/dnsmasq.d" in /etc/dnsmasq.conf
(Optional) Place dnsmasq-update-china-list into /usr/bin/
(Optional) Make custom DNS server configuration and/or other services' configuration.

# change the default DNS server to 202.96.128.86
make SERVER=202.96.128.86 dnsmasq
# generate unbound's configuration
make unbound
# generate bind's configuration
make bind
# full example of generating dnscrypt-proxy forwarding rules for Windows
make SERVER=101.6.6.6 NEWLINE=DOS dnscrypt-proxy

License

Copyright © 2015 Felix Yan <[email protected]>
This work is free. You can redistribute it and/or modify it under the
terms of the Do What The Fuck You Want To Public License, Version 2,
as published by Sam Hocevar. See the LICENSE file for more details.

dnsmasq-china-list's People

Contributors

Stargazers

Watchers

Forkers

galaxy001 alpha080 liujinsong xuchuanqiu jeffliu eastbarlqz williamfu1989 zelsazgh lilydjwg liyvhg miaomi justzx2011 gfwbreakers zhou13 yukixz nsdown fchypzero zerodream contributegithub leronluo zhrawj showfom ifreedomme lex1973 wuyongx catinred2 mckelvin hedongjie defclass xiaoyangde ezc fqj1994 duffy25 kuyagic solocatz xxhank alsan baininghan bobyangchina cappiewu l2x ayanamist phoenixlzx ferstar deanspring haitao-wang renkai pannilest chztv ihuabing ledudu dotmark kkkgo jiabaolongbuaa snowtank ym yilang0001 sybblow alanljj halfu lifekiller sfilyh shike-me typcn mcforever anandaely tsunli dig5864 jminging chenrenzhen v4n1sh aweyonhub rongdede zlphoenix angusding tjroger fqtools tsukimoe jimmyzhong helinb bygloam exiahan heavnesing zhhwin xfzqz tuhaolam noscripter ghmajx moglxl qianthinking moodoo-sh oberdex zeroly boer0327 yuchuanzhen soitun hongsq tonyshva seymer vigotseng

dnsmasq-china-list's Issues

整理了一些bogus-nxdomain

http://pastie.org/pastes/8541352/text?key=fr9byz45j1mh7jafqhwg

建议加入github

114dns和google dns解析不同，而且测试之后个人发现114dns解析的能稍微快一些。
下面是vps上的结果

# nslookup github.com 
Server:         8.8.8.8
Address:        8.8.8.8#53

Non-authoritative answer:
Name:   github.com
Address: 192.30.252.130

# nslookup github.com 8.8.8.8
Server:         8.8.8.8
Address:        8.8.8.8#53

Non-authoritative answer:
Name:   github.com
Address: 192.30.252.128

# dig github.com

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6_6.1 <<>> github.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36122
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;github.com.                    IN      A

;; ANSWER SECTION:
github.com.             23      IN      A       192.30.252.130

;; Query time: 8 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Sun Jan 18 01:44:57 2015
;; MSG SIZE  rcvd: 44

# dig github.com @114.114.114.114

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6_6.1 <<>> github.com @114.114.114.114
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27013
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;github.com.                    IN      A

;; ANSWER SECTION:
github.com.             30      IN      A       192.30.252.131

;; Query time: 51 msec
;; SERVER: 114.114.114.114#53(114.114.114.114)
;; WHEN: Sun Jan 18 01:45:17 2015
;; MSG SIZE  rcvd: 44

Tomato路由器+DNScrypt，如何使用该项目？

请教，我使用的是tomato的路由器，开启了DNScrypt。总的来说使用正常，现在想使用这个项目。

我看到tomato路由器已经很强大了，自带了很多功能。里面也有dnsmasq模块，但我一直没用过。

我按照这个项目的usage说明，ssh到路由器（因为我不知道web界面那些模块怎么设置），自建了/etc/dnsmasq.d这个文件夹，scp了那两个关键文件。但问题是，

我重启了下路由器，发现我建的文件夹已经不见了（当初建的时候也是自动把我带到了/tmp/etc下）。

我在想，是不是可以直接在web界面里那个dnsmasq(custom)空白里填些什么就可以达到目的？

如果不是的话，应该怎么用呢？也不知道为什么[email protected]最后新建的dnsmasq.d会无法保存。

感谢。

希望加入 tycdn.net

我做了一些免费的静态文件存放，Gravatar 反代等服务，用了这个域名，但是使用 dnscrypt 解析结果是 Akamai ，无法正确解析到国内的 CDN ，希望可以加入。

因为pull requests失败，没办法只好发到issue里了，两个需求请大神您考虑下能不能提供这样的list：
1）纯域名的list，就是“example.com”格式的列表，因为114那个dns延迟比较高（差不多是我这里的运营商提供的DNS的10倍），每次用这个列表，还得剥离多余的参数再加运营商的DNS。
2）另外还有个需求：能否提供个精简版的域名列表，能涵盖alexa top 500这个级别的国内域名就行，最好加上那些对应的cdn域名控制在1000个以内，因为这基本上能满足绝大多数人使用了，太多用不上反而影响系统运行效率。

对google.china.conf的一点补充

server=/cache.pack.google.com/114.114.114.114

server=/kh.google.com/114.114.114.114

server=/khmdb.google.com/114.114.114.114

server=/safebrowsing-cache.google.com/114.114.114.114

1.Google 下载软件用的具体用途不详
2.3. 为Google Earth 数据读取
4.Googler Earth访问时亦有请求，作用不详，有个与之对应的safebrowsing.google.com(cname:sb.l.google.com)

请问如何生成accelerated-domains.china.conf 文件

Bogus nxdomain for Tianjin Unicom

218.68.250.117
218.68.250.118
218.68.250.119
218.68.250.120
218.68.250.121

Mac App Store

MAS 现在使用的是 *.phobos.apple.com

如果使用 DNSCrypt 或者国外 DNS 解析，下载速度非常慢，使用国内的 dns 会解析到 ovrdvs.com （网宿）的节点上，就可以跑到几十 MB/s

韵达快递

http://www.yundaex.com/

列表里面有一些不是必需的项目

目前列表变得越来越大, 在普通路由器上较难加载了.
简单看了列表里面新增的一些域名, 有一部分是无需添加进本列表的: 例如tbsandbox.com.
其标志为:该域名的DNS请求未区分国籍, 全球任意DNS服务器解析出来的结果都是同一个/同一组.
建议此类型的域名不再添加进列表, 以增强列表质量.

四川移动 bogus nxdomain

183.221.242.172
当我执行 dig 一个不存在的域名时，例如dig askldjssk.com时的响应为：

pi@CTU:~/dnsmasq-china-list $ dig askldjssk.com

; <<>> DiG 9.9.5-9+deb8u4-Raspbian <<>> askldjssk.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36145
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;askldjssk.com. IN A

;; ANSWER SECTION:
askldjssk.com. 0 IN A 183.221.242.172

;; Query time: 10 msec
;; SERVER: 183.221.253.100#53(183.221.253.100)
;; WHEN: Sat Jan 30 16:34:20 CST 2016
;; MSG SIZE rcvd: 58

这会将我带到搜狗的搜索引擎。
可以加在列表中：
#China Mobile Sichuan
bogus-nxdomain=183.221.242.172

GPS之家

www.gpsuu.com

好像 “淘宝” 之类的站点用它自己的 dns 会快很多？

accelerated-domains.china.conf 用的是 114 的?

发现列表太大导致dnsmasq的cpu过高

影响解析速度么？

考虑移除opendns bogus-nxdomain规则

opendns宣布不再劫持，应该可以移除对应的规则了。
详情链接https://www.opendns.com/no-more-ads/

cache对国内域名无效？

no-resolv
no-poll
listen-address=127.0.0.1
cache-size=16384
server=8.8.8.8
server=8.8.4.4
conf-dir=/etc/dnsmasq.d
log-facility=/var/log/dnsmasq.log
log-async=5
log-queries

这是我的dnsmasq.conf，访问国外网站时log不会新增重复条目，会有cached xxxx.com，国内的就会重复query了……

Domain list changes in the google.china.conf.

nslookup redirector.gvt1.com 114.114.114.114
服务器:  public1.114dns.com
Address:  114.114.114.114

非权威应答:
名称:    redirector.gvt1.com
Addresses:  2404:6800:4002:803::100e
          203.208.49.174
          203.208.49.164
          203.208.49.163
          203.208.49.168
          203.208.49.169
          203.208.49.160
          203.208.49.167
          203.208.49.165
          203.208.49.166
          203.208.49.162
          203.208.49.161

Maybe more sub-domains will be discovered.

Some domains like dl.google.com do not point to Google CN servers at this time. But it's still strongly recommended to leave them in the list.

添加芒果TV的CDN

$ dig @8.8.8.8 pcvideocc.imgo.tv

; <<>> DiG 9.8.3-P1 <<>> @8.8.8.8 pcvideocc.imgo.tv
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43556
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;pcvideocc.imgo.tv.     IN  A

;; ANSWER SECTION:
pcvideocc.imgo.tv.  190 IN  CNAME   pcvideocc.ccgslb.net.
pcvideocc.ccgslb.net.   119 IN  A   192.254.92.70

;; Query time: 185 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Sat Jan 31 12:22:05 2015
;; MSG SIZE  rcvd: 85

$ dig @223.5.5.5 pcvideocc.imgo.tv

; <<>> DiG 9.8.3-P1 <<>> @223.5.5.5 pcvideocc.imgo.tv
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 14809
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;pcvideocc.imgo.tv.     IN  A

;; ANSWER SECTION:
pcvideocc.imgo.tv.  70  IN  CNAME   pcvideocc.ccgslb.net.
pcvideocc.ccgslb.net.   70  IN  CNAME   pcvideocc.tel.ccgslb.net.
pcvideocc.tel.ccgslb.net. 70    IN  A   58.215.106.146
pcvideocc.tel.ccgslb.net. 70    IN  A   180.97.183.218

;; Query time: 36 msec
;; SERVER: 223.5.5.5#53(223.5.5.5)
;; WHEN: Sat Jan 31 12:22:28 2015
;; MSG SIZE  rcvd: 129

AMO 有** CDN 了

>>> curl "ip.cn?ip=$(dig +short addons.mozilla.org | tail -1)"
IP：223.202.6.17 来自：北京市 蓝汛通信

dl.google.com no longer resolved to Google China IP

root@WNDR4300:~# nslookup dl.google.com 114.114.115.119
Server: 114.114.115.119
Address 1: 114.114.115.119 anti-malware-2.114dns.com

Name: dl.google.com
Address 1: 2404:6800:4005:800::200e hkg07s21-in-x0e.1e100.net
Address 2: 216.58.221.46 hkg08s13-in-f14.1e100.net

root@WNDR4300:~# ping dl.google.com
PING dl.google.com (216.58.199.14): 56 data bytes
♥
--- dl.google.com ping statistics ---
5 packets transmitted, 0 packets received, 100% packet loss

Remove www.bing.com ?

国内 DNS 解析出的 www.bing.com 指向 bing **版 (必应), 里面的搜索结果是经过审查的, 建议移除. 列表里已经包含 "cn.bing.com", 需要使用必应的用户可以使用这个地址.

我觉得这个列表里不应该包含哪些在**大陆和国外解析到的IP提供的是不同的服务(经过审查的 / 未经审查的)的网站域名.

Produce too much log

Dnsmasq logs every entry in the list every time it starts/reloads, thus created an /var/log/syslog as large as 0.5GiB on my router.

Users should be warned of this problem.

There is unfortunately no easy fix. Maybe we should contact
dnsmasq-discuss.

addons.cdn.mozilla.net

>>> dig addons.cdn.mozilla.net | ipmarkup
...
;; ANSWER SECTION:
addons.cdn.mozilla.net. 50      IN      CNAME   addons-cdn-geo.prod.mozaws.net.
addons-cdn-geo.prod.mozaws.net. 194 IN  CNAME   addons.cdn.mozilla.net.mwcname.com.
addons.cdn.mozilla.net.mwcname.com. 1099 IN CNAME sni1st.dtwscache.ourwebcdn.com.
sni1st.dtwscache.ourwebcdn.com. 71 IN   A       221.193.246.61(河北省邯郸市联通)
sni1st.dtwscache.ourwebcdn.com. 71 IN   A       121.18.230.160(河北省保定市网宿科技联通CDN节点)
sni1st.dtwscache.ourwebcdn.com. 71 IN   A       101.23.128.36(河北省邯郸市网宿科技联通CDN节点)
sni1st.dtwscache.ourwebcdn.com. 71 IN   A       60.10.3.47(河北省廊坊市联通)

建议暂时移除yyets.com

大家都懂的嘛……走海外DNS返回的地址是可以下片的说

114DNS's `edns-client-subnet` is broken.

; «» DiG 9.9.3 «» @8.8.8.8 115.com +client=59.172.176.0/24
; (1 server found)
;; global options: +cmd
;; Got answer:
;; -»HEADER«- opcode: QUERY, status: NOERROR, id: 12931
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
; CLIENT-SUBNET: 59.172.176.0/24/0
;; QUESTION SECTION:
;115.com.                       IN      A

;; ANSWER SECTION:
115.com.                287     IN      A       119.147.156.111
115.com.                287     IN      A       119.147.156.108

;; Query time: 107 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Nov 16 23:37:36 CST 2015
;; MSG SIZE  rcvd: 79

AND we have

; «» DiG 9.9.3 «» @114.114.114.114 115.com +client=59.172.176.0/24
; (1 server found)
;; global options: +cmd
;; Got answer:
;; -»HEADER«- opcode: QUERY, status: NOERROR, id: 40924
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; CLIENT-SUBNET: 59.172.176.0/24/0
;; QUESTION SECTION:
;115.com.                       IN      A

;; ANSWER SECTION:
115.com.                30      IN      A       58.253.94.246
115.com.                30      IN      A       58.253.94.249

;; Query time: 48 msec
;; SERVER: 114.114.114.114#53(114.114.114.114)
;; WHEN: Mon Nov 16 23:42:47 CST 2015
;; MSG SIZE  rcvd: 79

114DNS does support CLIENT-SUBNET header. However, it only returns with answers judged by requestor's IP rather than specified CLIENT-SUBNET IP. This would give bad routes from internal CDNs, which mainly limits U/D speed from various media streaming providers. At the same time, AliDNS is okay.

You can do some more tests by specifying different ISP's IP though. Consider replacing default 114DNS.

usage of dnsmasq-china-list & pdnsq

Hi! It seems that the GFW was upgrading yesterday! It is really difficult to resolve websites abroad from dns server abroad by udp querying!

So I try to use pdnsq+dnsmasq to resolve the websites abroad by tcp querying! So I use dnsmasq-china-list to help me resolving from China!

I set the /etc/dnsmasq.conf and move this project file to /etc/dnsmasq.d
"conf-dir=/etc/dnsmasq.d" &
"server=127.0.0.1#1053"(which is pdnsq server)

but It cannot resolve the websites from home and abroad!

but using "no-resolve" and "server=127.0.0.1#1053" it does well, but it may be a little slower for Chinese websites resolving.

How to fix it?

又拍云 CDN

添加并排序。补丁预览：http://p.vim-cn.com/cbyf/diff

应用：

curl http://p.vim-cn.com/cbyf | git apply

Most of domains listed in `google.china.conf`are being polluted.

As is said in title, 114DNS is over, other DNS providers seemed fine.

P.S. China Telecom, WH

**科学院开源软件协会

www.opencas.org
forum.opencas.org

; <<>> DiG 9.9.2-P2 <<>> www.opencas.org @114.114.114.114
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 25893
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;www.opencas.org. IN A

;; ANSWER SECTION:
www.opencas.org. 3600 IN A 159.226.11.160 // 北京市

; <<>> DiG 9.9.2-P2 <<>> forum.opencas.org @114.114.114.114
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17465
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;forum.opencas.org. IN A

;; ANSWER SECTION:
forum.opencas.org. 3600 IN A 159.226.11.161

沪江英语学习网站

hjenglish.com
还有一些诸如fr.hjenglish.com这样的子站

C:\windows\system32>nslookup www.hjenglish.com 114.114.114.114
服务器: public1.114dns.com
Address: 114.114.114.114

非权威应答:
名称: www.hjenglish.com.hjdns.net
Address: 180.235.66.150
Aliases: www.hjenglish.com
www.hjenglish.com.wscdns.com

steam相关的几个cdn域名

Steam相关

server=/store.akamai.steamstatic.com/114.114.114.114
server=/cdn.akamai.steamstatic.com/114.114.114.114
server=/cdn.steamcommunity.com/114.114.114.114
server=/cdn.store.steampowered.com/114.114.114.114
server=/clientconfig.akamai.steamstatic.com/114.114.114.114
server=/steamusercontent.com/114.114.114.114 #这个不是特别确定
server=/static-cdn.jtvnw.net/114.114.114.114

域名是开steam的时候从Fiddler抓出来的

可以考虑加入cdn-apple和akadns

server=/cdn-apple.com/114.114.114.114
server=/akadns.net/114.114.114.114

苹果的一些服务：appstore, itunes, push等大多用akamai的dns

把你的国内域名列表转成unbound用的格式了，特来感谢:)

https://github.com/CNMan/unbound.conf

add api.ruisky.com

深圳交通在手.

inexus.co( Nexus中文网 )

Retrieving DNS records for inexus.co...
DNS servers
ns1.mydnspod.com [122.225.217.193]
ns2.mydnspod.com [119.167.195.7]

Answer records
dnspod-free.mydnspod.net A 119.28.4.30 30s
dnspod-free.mydnspod.net A 119.28.2.45 30s
dnspod-free.mydnspod.net A 119.28.3.96 300s

Authority records
mydnspod.net NS ns4.dnsv2.com 600s
mydnspod.net NS ns3.dnsv2.com 600s

Additional records
(null)

能否把那些有国外cdn的国内域名做个表，不需要全部**域名

正如他人所说，现在的**域名列表越来越大，实际很多没必要，因为国外dns解析很多国内域名和国内dns解析这些国内域名是一样的。

只有新浪淘宝网易腾讯等大型网站才会因为国外cdn的关系导致国内和国外dns解析的结果不一样。
实际上整理这部分域名给国内dns用就可以了。

其他大多数就算用国外dns解析花费的时间相对载入网站页面等等也可以忽略吧。何况如果加上pdnsd这样的本地缓存。

ubuntukylin系列

www.ubuntukylin.com A 119.254.229.70 300s
archive.ubuntukylin.com A 61.144.43.73 300s
第一个是网页服务器，第二个从搜狗输入法更新source.list中找出，应该是更新服务器，二者均在**

搜狗拼音
deb http://archive.ubuntukylin.com:10006/ubuntukylin trusty main

ubuntukylin.com A 119.40.56.136 300s
裸域名地址不同，貌似不能直接转到网页服务器，应该没有加入的必要

附上traceroute

TraceRoute from Network-Tools.com to 119.40.56.136
Hop (ms) (ms) (ms) IP Address Host name
1 Timed out Timed out Timed out -
2 4 3 3 4.68.62.230 att
3 35 35 35 12.123.16.110 cr2.dlstx.ip.att.net
4 40 41 37 12.122.28.178 cr2.la2ca.ip.att.net
5 37 39 40 12.123.30.249 cr84.la2ca.ip.att.net
6 36 36 36 12.122.129.49 gar2.lsrca.ip.att.net
7 196 196 196 12.118.130.6 -
8 195 195 195 210.52.132.233 -
9 195 195 196 218.105.5.109 -
10 460 439 350 210.53.129.250 -
11 Timed out Timed out Timed out -
12 Timed out Timed out Timed out -
13 Timed out Timed out Timed out -
14 Timed out Timed out Timed out -
15 Timed out Timed out Timed out -
16 Timed out Timed out Timed out -
17 Timed out Timed out Timed out -
18 Timed out Timed out Timed out -
19 Timed out Timed out Timed out -
20 Destination network unreachable Timed out Timed out -
21 Timed out Timed out Timed out -
22 Timed out Timed out Timed out -
23 Timed out Timed out Timed out -
24 Timed out Timed out Timed out -
Trace aborted.

在使用自动检测机制添加域名？

注意到近期在accelerated-domains.china.conf添加了一大批比较冷门的域名，我猜似乎在使用自动的脚本批量添加？

对此我有一些疑虑，我猜不是所有的国内外DNS返回不同结果的域名都是国内访问质量更好的，甚至有些站内容都会不一样，还是需要手动添加比较科学？

另外，请问这些域名都是从哪里得到的呢？

thx~

将 dl.google.com 移出列表

dl.google.com 大陆服务器下载速度很差 ... 还不如直连快

http://alibench.com/rp/4a30d2874161ea726d041e51c2f289bf

考虑加入虎扑的CDN

$ nslookup img1.hupucdn.com 8.8.8.8
Server:     8.8.8.8
Address:    8.8.8.8#53

Non-authoritative answer:
img1.hupucdn.com    canonical name = v2.com.z0.glb.qiniudns.com.
v2.com.z0.glb.qiniudns.com  canonical name = wsall.qiniucdn.com.wscdns.com.
wsall.qiniucdn.com.wscdns.com   canonical name = opthw.xdwscache.speedcdns.com.
Name:   opthw.xdwscache.speedcdns.com
Address: 61.221.181.4

$  nslookup img1.hupucdn.com 114.114.114.114 
Server:     114.114.114.114
Address:    114.114.114.114#53

Non-authoritative answer:
img1.hupucdn.com    canonical name = v2.com.z0.glb.qiniudns.com.
v2.com.z0.glb.qiniudns.com  canonical name = wsall.qiniucdn.com.wscdns.com.
wsall.qiniucdn.com.wscdns.com   canonical name = qiniunor.xdwscache.glb0.lxdns.com.
Name:   qiniunor.xdwscache.glb0.lxdns.com
Address: 58.216.21.93
Name:   qiniunor.xdwscache.glb0.lxdns.com
Address: 222.186.132.79
Name:   qiniunor.xdwscache.glb0.lxdns.com
Address: 58.221.78.105
Name:   qiniunor.xdwscache.glb0.lxdns.com
Address: 218.92.227.121
Name:   qiniunor.xdwscache.glb0.lxdns.com
Address: 58.222.19.61

另外一个常维护的国内域名列表

这里有另外一个高手常维护的国内域名列表，如果综合在一起的话，就更全了
https://github.com/lifetyper/FreeRouter_V2/blob/master/Data/LocalDomains.conf

对于cname在cdn加速应用上的疑问

记得在#38 的issue里你提到过如果域名解析出来的是cname，那么必须要同时添加原域名和cname域名，否则只加cname起不到加速效果。现在很多网站都用了cdn加速，如果只需要关注实际的cname域名的话我相信会大大减少域名列表数目，不过经过测试貌似的确不行。请问这是什么原理？有相关的资料吗？

kenengba.com (早)已被污染

; <<>> DiG 9.10.3 <<>> @114.114.114.114 kenengba.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57336
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;kenengba.com.                  IN      A

;; ANSWER SECTION:
kenengba.com.           1870    IN      A       78.16.49.15

;; Query time: 68 msec
;; SERVER: 114.114.114.114#53(114.114.114.114)
;; WHEN: Mon Feb 08 20:20:23 ?D1ú±ê×?ê±?? 2016
;; MSG SIZE  rcvd: 57

真 IP 应该是 106.186.119.105

添加tlgslb.com域名

这个CDN加速域名是帝联科技的，kaspersky杀毒软件的更新地址都依赖了这个CDN，例如dnl-09.geo.kaspersky.com
另外，kaspersky.com用114解析出来的ip和google dns的也不一样

solidot.org 电信DNS解析不到IP

貌似是墙了

C:\Windows\system32>dig www.solidot.org @x.30.19.40

; <<>> DiG 9.10.3 <<>> www.solidot.org @x.30.19.40
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 206
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4000
;; QUESTION SECTION:
;www.solidot.org.               IN      A

;; Query time: 2616 msec
;; SERVER: x.30.19.40#53(x.30.19.40)
;; WHEN: Sun Dec 13 22:48:16 ?D1ú±ê×?ê±?? 2015
;; MSG SIZE  rcvd: 44


C:\Windows\system32>dig www.solidot.org @x.30.19.50

; <<>> DiG 9.10.3 <<>> www.solidot.org @x.30.19.50
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 58971
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4000
;; QUESTION SECTION:
;www.solidot.org.               IN      A

;; Query time: 2242 msec
;; SERVER: x.30.19.50#53(x.30.19.50)
;; WHEN: Sun Dec 13 22:48:24 ?D1ú±ê×?ê±?? 2015
;; MSG SIZE  rcvd: 44


C:\Windows\system32>dig www.solidot.org @x.134.1.4

; <<>> DiG 9.10.3 <<>> www.solidot.org @x.134.1.4
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 45642
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4000
;; QUESTION SECTION:
;www.solidot.org.               IN      A

;; Query time: 3331 msec
;; SERVER: x.134.1.4#53(x.134.1.4)
;; WHEN: Sun Dec 13 22:48:41 ?D1ú±ê×?ê±?? 2015
;; MSG SIZE  rcvd: 44


C:\Windows\system32>dig www.solidot.org @x.134.1.5

; <<>> DiG 9.10.3 <<>> www.solidot.org @x.134.1.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 40929
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4000
;; QUESTION SECTION:
;www.solidot.org.               IN      A

;; Query time: 4 msec
;; SERVER: x.134.1.5#53(x.134.1.5)
;; WHEN: Sun Dec 13 22:48:45 ?D1ú±ê×?ê±?? 2015
;; MSG SIZE  rcvd: 44

对目前列表的补充

我不太确定怎样才是比较合适的提交更新的方式。

这是我对目前列表的补充，检测的方式是根据是否使用了**的dns
accelerated-domains-20160203.china.conf.zip

我使用的检测代码： https://github.com/tomasen/dnsmasq-china-list