dnscrypt localhost@5300 < —— unbound localhost@5335 < —— dnsmasq lovalhost@53 < —— DHCP
现在是这种设置，SSR plus 使用 unbound 解析 DNS，同时 dnsmasq 使用 dnsmasq-chinalist 分流，绕过大陆 ip 模式可以使用，GFW 模式不能 FQ，国内网站正常。
ubound 配置文件如下
```
server:
port: 5335
access-control: 10.0.0.0/8 allow
access-control: 127.0.0.0/8 allow
access-control: 192.168.0.0/16 allow
cache-max-ttl: 14400
cache-min-ttl: 900
do-tcp: yes
do-udp: yes
hide-identity: yes
hide-version: yes
interface: 0.0.0.0
minimal-responses: yes
prefetch: yes
qname-minimisation: yes
rrset-roundrobin: yes
ssl-upstream: yes
tcp-upstream: yes
use-caps-for-id: yes
num-threads: 4
verbosity: 1
do-ip4: yes
do-ip6: no
outgoing-port-permit: "10240-65335"
outgoing-range: 450
num-queries-per-thread: 30
msg-buffer-size: 8192
infra-cache-numhosts: 200
msg-cache-size: 100k
rrset-cache-size: 100k
key-cache-size: 100k
neg-cache-size: 10k
target-fetch-policy: "2 1 0 0 0 0"
harden-large-queries: yes
harden-short-bufsize: yes
forward-zone:
name: "."
forward-addr: 127.0.0.1@5300
forward-addr: 1.1.1.1@853
forward-addr: 8.8.8.8@853
```
现在是这种设置，SSR plus 使用 unbound 解析 DNS，同时 dnsmasq 使用 dnsmasq-chinalist 分流，绕过大陆 ip 模式可以使用，GFW 模式不能 FQ，国内网站正常。
ubound 配置文件如下
```
server:
port: 5335
access-control: 10.0.0.0/8 allow
access-control: 127.0.0.0/8 allow
access-control: 192.168.0.0/16 allow
cache-max-ttl: 14400
cache-min-ttl: 900
do-tcp: yes
do-udp: yes
hide-identity: yes
hide-version: yes
interface: 0.0.0.0
minimal-responses: yes
prefetch: yes
qname-minimisation: yes
rrset-roundrobin: yes
ssl-upstream: yes
tcp-upstream: yes
use-caps-for-id: yes
num-threads: 4
verbosity: 1
do-ip4: yes
do-ip6: no
outgoing-port-permit: "10240-65335"
outgoing-range: 450
num-queries-per-thread: 30
msg-buffer-size: 8192
infra-cache-numhosts: 200
msg-cache-size: 100k
rrset-cache-size: 100k
key-cache-size: 100k
neg-cache-size: 10k
target-fetch-policy: "2 1 0 0 0 0"
harden-large-queries: yes
harden-short-bufsize: yes
forward-zone:
name: "."
forward-addr: 127.0.0.1@5300
forward-addr: 1.1.1.1@853
forward-addr: 8.8.8.8@853
```
Select Language