偶尔出现如图的情况，无法解析部分域名，求指教

[imnono]

如图，偶尔出现如图的情况，这客户机无法解析部分域名

[imnono]

这个时候，回到paopaodns的服务器上执行下对应的nslookup，再回到客户机就正常了。
目前遇到有些网站的CDN解析失败，导致网站部分图片无法访问，很苦恼！！！

[kkkgo]

配置和debug贴一下

[imnono]

大佬，请问下这个是什么问题呢

[imnono]

没有做任何配置，就是单纯的使用这个脚本进行的安装

#拉取最新的docker镜像
docker pull sliamb/paopaodns:latest
#假设你的数据要放在/home/mydata
docker run -d \
--name paopaodns \
-v /home/mydata:/data \
-e CNAUTO=yes \
--restart always \
-p 53:53/tcp -p 53:53/udp \
sliamb/paopaodns

debug内容如下：

localhost:~# docker exec paopaodns debug.sh
### == debug.sh : docker exec -it paopaodns sh ==
-> debug start `1770093217`
```rust
[INFO] images build time : 2024-08-28 16:12:23 UTC
[OK]DATA_writeable
[OK]DATA_readable
[INFO] NETWORK
*********************************************************************************

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1000
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host
2: eth0@if4: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue state UP
    inet 172.17.0.2/16 brd 172.17.255.255 scope global eth0
default via 172.17.0.1 dev eth0
172.17.0.0/16 dev eth0 scope link  src 172.17.0.2
traceroute to 120.53.53.53 (120.53.53.53), 4 hops max, 46 byte packets
 1  172.17.0.1 (172.17.0.1)  0.004 ms  0.004 ms  0.002 ms
 2  192.168.6.1 (192.168.6.1)  0.312 ms  0.188 ms  0.180 ms
 3  *  *  *
 4  *  *  *
PING 223.5.5.5 (223.5.5.5): 56 data bytes
64 bytes from 223.5.5.5: seq=0 ttl=51 time=11.542 ms

--- 223.5.5.5 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max = 11.542/11.542/11.542 ms
PING 119.29.29.29 (119.29.29.29): 56 data bytes
64 bytes from 119.29.29.29: seq=0 ttl=244 time=13.428 ms

--- 119.29.29.29 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max = 13.428/13.428/13.428 ms
Server:         223.5.5.5
Address:        223.5.5.5#53

www.taobao.com  canonical name = www.taobao.com.danuoyi.tbcache.com.
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 240e:958:31:408:3::2d
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 240e:958:31:408:3::2c

Server:         119.29.29.29
Address:        119.29.29.29#53

www.qq.com      canonical name = ins-r23tsuuf.ias.tencent-cloud.net.
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 240e:e1:a800:120::76
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 240e:e1:a800:120::36

*********************************************************************************

[INFO] ENV
*********************************************************************************

====ENV TEST====
[OK]DATA_writeable-
[OK]DATA_readable-
MEM:50m 100m 200 100mb
prefPC:9
CORES:-1-
POWCORES:-1-
ulimit :-1048576-
FDLIM :-1-
TZ:-Asia/Shanghai-
UPDATE:-weekly-
DNS_SERVERNAME:-PaoPaoDNS,blog.03k.org-
SERVER_IP:-none-
ETHIP:-172.17.0.2-
DNSPORT:-53-
SOCKS5:-IP:PORT-
CNAUTO:-yes-
IPV6:-no-
CNFALL:-yes-
CUSTOM_FORWARD:-IP:PORT-
AUTO_FORWARD:-no-
AUTO_FORWARD_CHECK:-yes-
USE_MARK_DATA:-yes-
RULES_TTL:-0-
CUSTOM_FORWARD_TTL:-0-
SHUFFLE:-no-
EXPIRED_FLUSH:-yes-
CN_TRACKER:-yes-
USE_HOSTS:-no-
HTTP_FILE:-no-
SAFEMODE:--
QUERY_TIME:-2000ms-
ADDINFO:-no-
PLATFORM:-Linux b47a75c62eb1 6.18.5-0-virt #1-Alpine SMP PREEMPT_DYNAMIC 2026-01-13 10:40:40 x86_64 Linux-
====ENV TEST====
mosdns kkkgo/mosdns:240822.1
total 11M
   4.0K drwxrwxrwx    3 0        0           4.0K Feb  3 10:47 .
   4.0K drwxr-xr-x    1 0        0           4.0K Jan 23 21:59 ..
 252.0K -rwxrwxrwx    1 0        0         250.4K Jan 31 03:00 Country-only-cn-private.mmdb
      0 -rwxrwxrwx    1 0        0              0 Jan 23 18:48 custom_cn_mark.txt
   4.0K -rwxrwxrwx    1 0        0            233 Jan 31 03:00 custom_env.ini
   4.0K -rwxrwxrwx    1 0        0            416 Jan 24 09:42 custom_mod.yaml
   4.0K drwxrwxrwx    2 0        0           4.0K Feb  2 22:14 dnscrypt-resolvers
   4.0K -rwxrwxrwx    1 0        0           3.0K Jan 23 21:59 dnscrypt.toml
   4.0K -rwxrwxrwx    1 0        0            670 Jan 23 18:47 force_dnscrypt_list.txt
   4.0K -rwxrwxrwx    1 0        0            325 Jan 23 18:47 force_forward_list.txt
   4.0K -rwxrwxrwx    1 0        0            387 Jan 23 18:47 force_recurse_list.txt
      0 -rwxrwxrwx    1 0        0              0 Jan 23 18:48 force_ttl_rules.txt
   1.4M -rwxrwxrwx    1 0        0           1.4M Jan 31 03:00 global_mark.dat
  12.0K -rwxrwxrwx    1 0        0          10.0K Jan 23 21:59 mosdns.yaml
   8.0K -rwxrwxrwx    1 0        0           5.7K Jan 23 21:59 redis.conf
   8.7M -rw-r--r--    1 0        0           8.7M Feb  3 10:47 redis_dns_v2.rdb
  28.0K -rwxrwxrwx    1 0        0          27.6K Jan 23 22:11 trackerslist.txt
  52.0K -rwxrwxrwx    1 0        0          50.9K Jan 23 21:59 unbound.conf
   4.0K -rwxrwxrwx    1 0        0            289 Jan 23 18:47 unbound_custom.conf
*********************************************************************************

[INFO] PS
*********************************************************************************

PID   USER     TIME  COMMAND
    1 root      0:00 {init.sh} /bin/sh /usr/sbin/init.sh
   13 root      0:01 crond
   46 root     10:56 redis-server unixsocket:/tmp/redis.sock
  155 root      4:36 dnscrypt-proxy -config /data/dnscrypt-resolvers/dnscrypt.toml
  174 root      0:51 unbound -c /tmp/unbound_forward.conf -p
  198 root     13:48 unbound -c /tmp/unbound_raw.conf -p
  199 root      0:00 {watch_list.sh} /bin/sh /usr/sbin/watch_list.sh
  203 root      0:14 tail -f /dev/null
 2473 root      8:59 /usr/sbin/mosdns start -d /data -c /tmp/mosdns.yaml
 2529 root      0:00 inotifywait -e modify,delete /etc/unbound/named.cache /data/Country-only-cn-private.mmdb /data/force_recurse_list.txt /data/force_dnscrypt_list.txt /data/custom_env.ini /data/global_mark.dat /data/custom_cn_mark.txt /data/trackerslist.txt
 3396 root      0:00 {debug.sh} /bin/sh /usr/sbin/debug.sh
 3418 root      0:00 ps -ef
  198 root     13:48 unbound -c /tmp/unbound_raw.conf -p
unbound OK.
  174 root      0:51 unbound -c /tmp/unbound_forward.conf -p
unbound_forward OK.
*********************************************************************************

[INFO] TOP
*********************************************************************************

CPU:   0% usr   0% sys   0% nic  99% idle   0% io   0% irq   0% sirq
  PID  PPID USER     STAT   VSZ %VSZ CPU %CPU COMMAND
 2473   199 root     S    1669m 184%   7   0% /usr/sbin/mosdns start -d /data -c
  155     1 root     S    1214m 134%   6   0% dnscrypt-proxy -config /data/dnscr
  198     1 root     S    48816   5%   4   0% unbound -c /tmp/unbound_raw.conf -
   46     1 root     S    40080   4%   2   0% redis-server unixsocket:/tmp/redis
  174     1 root     S    18252   2%   1   0% unbound -c /tmp/unbound_forward.co
  199     1 root     S     1716   0%   7   0% {watch_list.sh} /bin/sh /usr/sbin/
    1     0 root     S     1656   0%   5   0% {init.sh} /bin/sh /usr/sbin/init.s
 3396     0 root     S     1652   0%   0   0% {debug.sh} /bin/sh /usr/sbin/debug
 3425  3396 root     R     1648   0%   8   0% top -n1
  203     1 root     S     1640   0%  10   0% tail -f /dev/null
 3426  3396 root     S     1636   0%  11   0% grep %
 2529   199 root     S     1096   0%   4   0% inotifywait -e modify,delete /etc/
   13     1 root     S      896   0%   4   0% crond
*********************************************************************************

[INFO] REDIS
*********************************************************************************

used_memory_human:13.81M
used_memory_rss_human:13.46M
used_memory_peak_human:13.81M
total_system_memory_human:904.27M
used_memory_lua_human:31.00K
used_memory_vm_total_human:63.00K
used_memory_scripts_human:181B
maxmemory_human:100.00M
70910
*********************************************************************************

[TEST] IP ROUTE
*********************************************************************************

CN IP URL:
60.168.245.207
-
60.168.245.207
--
CN RAW-IP URL:
------------------
Non-CN IP URL:
60.168.245.207
-
60.168.245.207
--
60.168.245.207
Non-CN RAW-IP URL:
-
60.168.245.207
--
---
60.168.245.207
------------------
IP INFO:
60.168.245.207
CN,Hefei,Anhui
ASN4134/CHINANET anhui province network
HTTP/1.1
Mozilla/5.0 Gecko/20100101 Firefox/120.0 https://github.com/kkkgo/PaoPaoDNS gzip
Asia/Shanghai Time: 2/3/2026, 12:33:58 PM
[INFO] force_recurse_list
domain:whoami.ds.akahelp.net
domain:whoami.03k.org
MOSDNS WHOAMI :
MOSDNS akahelp: "ns" "91.132.94.98"
MOSDNS 03k: 162.158.105.178
UNBOUND WHOAMI:
UNBOUND akahelp: "ns" "60.168.245.207"
UNBOUND 03k: 162.158.105.178
*********************************************************************************

[TEST] HIJACK
*********************************************************************************

ins-r23tsuuf.ias.tencent-cloud.net.
;; communications error to 9.8.7.6#53: timed out
;; no servers could be reached

HIJACK 127.0.0.1 = 127.0.0.208
*********************************************************************************

[TEST] DIG-CN [taobao]
*********************************************************************************

MOSDNS CN:
www.taobao.com.danuoyi.tbcache.com.
117.66.50.205
117.66.50.66
UNBOUND CN:
www.taobao.com.danuoyi.tbcache.com.
117.66.50.66
117.66.50.205
[TEST] DIG-NOCN [youtube]
MOSDNS NOCN:
youtube-ui.l.google.com.
142.251.127.91
142.251.127.93
DNSCRYPT-UNBOUND NOCN:
youtube-ui.l.google.com.
142.250.185.174
142.251.141.142
DNSCRYPT NOCN:
youtube-ui.l.google.com.
172.217.19.14
142.251.38.142
DNSCRYPT-SOCKS5 NOCN:
;; communications error to 127.0.0.1#5303: connection refused
;; no servers could be reached

*********************************************************************************

[TEST] DUAL CN [IPv6=YES will have aaaa,taobao]
*********************************************************************************

[TEST] DUAL NOCN [IPv6=YES will block aaaa,youtube]
[TEST] ONLY6 [IPv6=only6 will block aaaa if a ok]
checkipv6.synology.com : ip6.03k.org : 6.ipw.cn :
*********************************************************************************

[info] ALL TEST FINISH.

-> debug end 1770093242
localhost:~#

[imnono]

之前使用的虚拟机内存限制为1G，为公司使用环境，公司AP+摄像头+手机+电脑等等大概有150客户机在线
目前已经调整虚拟机内存为8G，后续我在关注使用情况，谢谢！！

[imnono]

加了内存后，问题依旧，奇怪了。

[kkkgo]

docker把网络模式改成host试试，另外开启addinfo然后用dig命令看详细返回

[kkkgo]

感觉是网络监听有问题

[imnono]

大概问题找到了，我的主路由是爱快，我在爱快中开启了DNS缓存功能，可能是这个原因导致的，目前已经关掉DNS缓存功能2天了，目前没有遇到类似问题再出现，我在观察2天看看。
有点好奇为什么会出现这样的情况！！！

[kkkgo]

爱快的DNS缓存有很多种模式，有的会劫持DNS查询