Skip to content

Update README.md#328

Closed
ghost wants to merge 1 commit intomasterfrom
unknown repository
Closed

Update README.md#328
ghost wants to merge 1 commit intomasterfrom
unknown repository

Conversation

@ghost
Copy link
Copy Markdown

@ghost ghost commented Nov 9, 2023

海外大公司在国内有CDN节点的都被纳入geosite:cn了
README中逻辑完全说反了

海外大公司在国内有CDN节点的都被纳入geosite:cn了
README中逻辑完全说反了
@ghost
Copy link
Copy Markdown
Author

ghost commented Nov 9, 2023

另外我认为对于此类域名,直接将其纳入 geosite:cn 是非常不合适的
它们应同时属于 geosite:!cngeosite:geolocation-cn

不仅如此,为了尽可能地消除歧义,似乎我们应该拥有一个新的标签 geosite:oversea-in-cn

因为目前这种强行将其纳入cn的操作容易送中,不谈大企业节操问题
单就谷歌PKI的OCSP在国内有节点,就会带来非常大的安全隐患

@Loyalsoldier
Copy link
Copy Markdown
Owner

geosite:apple-cngeosite:google-cn 中的域名已存在于 geosite:geolocation-!cn 中。跟你的期望是一样的,为啥要改?

@ghost
Copy link
Copy Markdown
Author

ghost commented Nov 9, 2023

实测最新版的geosite中:

apple.com、microsoft.com、dl.google.com全部属于geosite:cn
不存在于geosite:geolocation-!cn

下面这个xray配置文件,解析www.apple.com预期ip应该是Akamai,结果却是国内ip

{
  "dns": {
    "hosts": {
    },
    "servers": [
      {
        "address": "1.1.1.1",
        "port": 53,
        "skipFallback": true,
        "domains": ["geosite:geolocation-!cn"]
      },
      {
        "address": "114.114.114.114",
        "port": 53,
        "skipFallback": true,
        "domains": ["geosite:cn"],
        "expectIPs": ["geoip:cn"]
      },
      "1.1.1.1"
    ]
  }
}
      {                                                                                                       
        "type": "field",                                                                                      
        "ip": ["8.8.8.8", "1.1.1.1"],                                                                         
        "outboundTag": "proxy"                                                                                
      },     
      {                                                                                                       
        "type": "field",                                                                                      
        "ip": ["114.114.114.114", "114.114.115.115"],                                                                         
        "outboundTag": "direct"                                                                                
      },     

@ghost ghost deleted the patch-1 branch October 20, 2024 17:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant