这是一个创建于 2395 天前的主题，其中的信息可能已经有所发展或是发生改变。
lean 的源码编译的固件，加入了 Ubound 和$$R，Unbound 本地监听 5335，$$R 里和 dnsmasq 设置的 DNS 转发是 127.0.0.1#5335，但是一开启 tcp-upstream 和 ssl-upstream 就不能上网，是我的使用姿势不对吗？ Ubound 配置文件如下：
```
server:
port: 5335
access-control: 10.0.0.0/8 allow
access-control: 127.0.0.0/8 allow
access-control: 192.168.0.0/16 allow
cache-max-ttl: 14400
cache-min-ttl: 900
do-tcp: yes
do-udp: yes
hide-identity: yes
hide-version: yes
interface: 0.0.0.0
minimal-responses: yes
prefetch: yes
qname-minimisation: yes
rrset-roundrobin: yes
ssl-upstream: no
tcp-upstream: yes
use-caps-for-id: yes
verbosity: 1
do-ip4: yes
do-ip6: yes
outgoing-port-permit: "10240-65335"
outgoing-range: 60
num-queries-per-thread: 30
msg-buffer-size: 8192
infra-cache-numhosts: 200
msg-cache-size: 100k
rrset-cache-size: 100k
key-cache-size: 100k
neg-cache-size: 10k
target-fetch-policy: "2 1 0 0 0 0"
harden-large-queries: yes
harden-short-bufsize: yes
include: "/etc/unbound/accelerated-domains.china.unbound.conf"
include: "/etc/unbound/apple.china.unbound.conf"
include: "/etc/unbound/google.china.unbound.conf"
forward-zone:
name: "."
forward-addr: 1.1.1.1@853
forward-addr: 8.8.8.8@853
forward-addr: 114.114.114.114
```
```
server:
port: 5335
access-control: 10.0.0.0/8 allow
access-control: 127.0.0.0/8 allow
access-control: 192.168.0.0/16 allow
cache-max-ttl: 14400
cache-min-ttl: 900
do-tcp: yes
do-udp: yes
hide-identity: yes
hide-version: yes
interface: 0.0.0.0
minimal-responses: yes
prefetch: yes
qname-minimisation: yes
rrset-roundrobin: yes
ssl-upstream: no
tcp-upstream: yes
use-caps-for-id: yes
verbosity: 1
do-ip4: yes
do-ip6: yes
outgoing-port-permit: "10240-65335"
outgoing-range: 60
num-queries-per-thread: 30
msg-buffer-size: 8192
infra-cache-numhosts: 200
msg-cache-size: 100k
rrset-cache-size: 100k
key-cache-size: 100k
neg-cache-size: 10k
target-fetch-policy: "2 1 0 0 0 0"
harden-large-queries: yes
harden-short-bufsize: yes
include: "/etc/unbound/accelerated-domains.china.unbound.conf"
include: "/etc/unbound/apple.china.unbound.conf"
include: "/etc/unbound/google.china.unbound.conf"
forward-zone:
name: "."
forward-addr: 1.1.1.1@853
forward-addr: 8.8.8.8@853
forward-addr: 114.114.114.114
```
 | 1 Alozxy 2019 年 6 月 22 日 via Android 114dns 不支持 doh，换 cloudflare 地址 |
| 2 Alozxy 2019 年 6 月 22 日 via Android 还有，853 是 dot 的端口，443 才是 doh 的 |
 | 5 qcts33 2019 年 6 月 22 日 unbound 支持 doh 了吗？我记得是只支持 dot 的，doh 似乎是还在弄 https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=1200 |
 | 6 love4taylor PRO forward-ssl-upstream: yes 哪去了.... 以及 DoT 为啥和普通 DNS 混用... |
| 7 love4taylor PRO  1 |
 | 8 imswing OP @Love4Taylor 谢谢，我是看着网上的配置，太老了。 |
 | 9 zimonianhua 2019 年 6 月 23 日 via Android |
| 10 love4taylor PRO @zimonianhua 这种方案还是别了吧, 题主不向外提供服务, 要用 DoH 直接一个 https_dns_proxy 就行. |
| 11 imswing OP @Love4Taylor ``` server: port: 5335 hide-version: yes interface: 127.0.0.1 prefetch: yes tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt tls-upstream: yes forward-zone: name: "." forward-tls-upstream: yes forward-addr: 8.8.4.4@853 forward-addr: 1.0.0.1@853 ``` 这样改了还是不行 |
 | 12 johnjiang85 2019 年 6 月 24 日 interface:127.0.0.1@5335 interface:127.0.0.1@853 |
| 13 johnjiang85 2019 年 6 月 24 日 @johnjiang85 忽略 |
Select Language