项目重构

1-代理Xray/旁路由-透明代理/HomeProxy/自建CoreDNS服务器/1-docker-redis-bitnami.sh

@@ -0,0 +1,9 @@
+#!/usr/bin/env bash
+
+
+docker run \
+  -d \
+  --name redis \
+  -p 16379:6379 \
+  -e ALLOW_EMPTY_PASSWORD=yes \
+  bitnami/redis:6.2.7

1-代理Xray/旁路由-透明代理/HomeProxy/自建CoreDNS服务器/2-CoreDNS Config Corefile.sh

@@ -0,0 +1,72 @@
+#!/usr/bin/env bash
+
+cat > /etc/coredns/Corefile <<EOF
+# https://coredns.io/plugins/cache/
+(global_cache) {
+    cache {
+        # [5, 60]
+        success 65536 7200 900
+        # [1, 10]
+        denial 8192 600 60
+        prefetch 1 60m 10%
+    }
+}
+
+.:5353  {
+
+  ads {
+      default-lists
+      blacklist https://raw.githubusercontent.com/privacy-protection-tools/anti-AD/master/anti-ad-domains.txt
+      whitelist https://files.krnl.eu/whitelist.txt
+      log
+      auto-update-interval 24h
+      list-store ads-cache
+  }
+
+  errors
+
+#  health
+#  prometheus :9153
+
+  import global_cache
+
+  template ANY AAAA {
+      rcode NXDOMAIN
+  }
+
+  dnsredir accelerated-domains.china.conf google.china.conf apple.china.conf mydns.conf {
+      expire 15s
+      max_fails 3
+      health_check 3s
+      policy round_robin
+      path_reload 2s
+
+      to 223.5.5.5 119.29.29.29 114.114.114.114
+      no_ipv6
+  }
+
+  hosts {
+    fallthrough
+  }
+
+  dnsredir . {
+      expire 60s
+      max_fails 5
+      health_check 5s
+      policy random
+      spray
+
+      to tls://8.8.8.8@dns.google tls://8.8.4.4@dns.google
+      to tls://1.1.1.1:853 tls://1.0.0.1:853
+#      to tcp://8.8.8.8
+
+      # Global TLS server name
+      # tls_servername cloudflare-dns.com
+  }
+
+  log
+  loop
+  reload 6s
+}
+
+EOF

1-代理Xray/旁路由-透明代理/HomeProxy/自建CoreDNS服务器/3-coredns-daemon-service.sh

@@ -0,0 +1,24 @@
+#!bin/bash
+
+cat > /etc/systemd/system/coredns.service << EOF
+[Unit]
+Description=CoreDNS DNS - Custom Build Plugins server
+Documentation=https://coredns.minidump.info/
+After=network.target
+
+[Service]
+PermissionsStartOnly=true
+LimitNOFILE=1048576
+LimitNPROC=512
+CapabilityBoundingSet=CAP_NET_BIND_SERVICE
+AmbientCapabilities=CAP_NET_BIND_SERVICE
+NoNewPrivileges=true
+User=coredns
+WorkingDirectory=~
+ExecStart=/usr/local/bin/coredns -conf=/etc/coredns/Corefile
+ExecReload=/bin/kill -SIGUSR1 $MAINPID
+Restart=on-failure
+
+[Install]
+WantedBy=multi-user.target
+EOF

1-代理Xray/旁路由-透明代理/HomeProxy/自建CoreDNS服务器/3-update-coredns.sh

@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+
+cat > /usr/local/bin/update_coredns.sh <<EOF
+#!/bin/bash
+
+cd /usr/local/etc/
+
+rm accelerated-domains.china.conf
+wget https://jsdelivr.icloudnative.io/gh/felixonmars/dnsmasq-china-list/accelerated-domains.china.conf -O /usr/local/etc/accelerated-domains.china.conf
+rm apple.china.conf
+wget https://jsdelivr.icloudnative.io/gh/felixonmars/dnsmasq-china-list/apple.china.conf -O /usr/local/etc/apple.china.conf
+rm google.china.conf
+wget https://jsdelivr.icloudnative.io/gh/felixonmars/dnsmasq-china-list/google.china.conf -O /usr/local/etc/google.china.conf
+EOF
+
+sudo chmod +x /usr/local/bin/update_coredns.sh

1-代理Xray/旁路由-透明代理/HomeProxy/自建CoreDNS服务器/Corefile-GitHub

@@ -0,0 +1,30 @@
+.:5353 {
+    ads {
+        strict-default-lists
+        blacklist https://raw.githubusercontent.com/privacy-protection-tools/anti-AD/master/anti-ad-domains.txt
+        whitelist https://files.krnl.eu/whitelist.txt
+        log
+        auto-update-interval 48h
+        list-store ads-cache
+    }
+    hosts {
+            fallthrough
+    }
+    forward .  tcp://8.8.8.8 127.0.0.1:53001 {
+
+    log
+    cache
+    redisc {
+            endpoint 16379
+    }
+    health
+    reload
+}
+
+.:53001 {
+    bind 127.0.0.1
+    forward . tls://1.1.1.1:853 {
+        tls_servername cloudflare-dns.com
+    }
+    cache
+}