windows可以正常上网，linux无法拉取docker镜像

[delete7456]

拉取镜像时一直显示超时
Error response from daemon: Get "https://registry-1.docker.io/v2/": net/http: request canceled (Client.Timeout exceeded while awaiting headers)
但windows上网没有问题
windows使用curl -v https://registry-1.docker.io/v2/

linux使用curl -v https://registry-1.docker.io/v2/

二者nslookup结果一致

因为此openwrt是omv上的虚拟机，而paopaodns是omv上使用macvlan网桥的docker，曾怀疑是omv网络问题，但实测debian物理机与openwrt虚拟机结果一致，遂查找不出原因

这里贴上debug.sh
`

== debug.sh : docker exec -it paopaodns sh ==

-> debug start 1734179818

[INFO] images build time : 2024-08-28 16:12:23 UTC
[OK]DATA_writeable
[OK]DATA_readable
[INFO] NETWORK
*********************************************************************************

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1000
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
90: eth0@if3: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 qdisc noqueue state UP 
    inet 192.168.2.23/24 brd 192.168.2.255 scope global eth0
default via 192.168.2.1 dev eth0 
192.168.2.0/24 dev eth0 scope link  src 192.168.2.23 
traceroute to 120.53.53.53 (120.53.53.53), 4 hops max, 46 byte packets
 1  192.168.2.1 (192.168.2.1)  1.092 ms  1.002 ms  1.009 ms
 2  10.97.64.1 (10.97.64.1)  4.175 ms  4.725 ms  4.201 ms
 3  111.8.2.61 (111.8.2.61)  2.642 ms  2.607 ms  111.8.2.57 (111.8.2.57)  3.163 ms
 4  *  183.214.33.113 (183.214.33.113)  8.101 ms  *
PING 223.5.5.5 (223.5.5.5): 56 data bytes
64 bytes from 223.5.5.5: seq=0 ttl=117 time=29.725 ms

--- 223.5.5.5 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max = 29.725/29.725/29.725 ms
PING 119.29.29.29 (119.29.29.29): 56 data bytes
64 bytes from 119.29.29.29: seq=0 ttl=244 time=28.369 ms

--- 119.29.29.29 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max = 28.369/28.369/28.369 ms
Server:         223.5.5.5
Address:        223.5.5.5#53

Non-authoritative answer:
www.taobao.com  canonical name = www.taobao.com.danuoyi.tbcache.com.
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 120.226.183.210
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 120.226.183.211
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 2409:8c50:a00:206e:3::3e5
Name:   www.taobao.com.danuoyi.tbcache.com
Address: 2409:8c50:a00:206e:3::3e6

Server:         119.29.29.29
Address:        119.29.29.29#53

Non-authoritative answer:
www.qq.com      canonical name = ins-r23tsuuf.ias.tencent-cloud.net.
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 111.30.185.60
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 111.30.185.195
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 111.30.178.240
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 2409:8c54:871:2::34
Name:   ins-r23tsuuf.ias.tencent-cloud.net
Address: 2409:8c54:871:1::73

*********************************************************************************

[INFO] ENV
*********************************************************************************

====ENV TEST====
[OK]DATA_writeable-
[OK]DATA_readable-
MEM:800m 1600m 1000000 1800mb
prefPC:100
CORES:-4-
POWCORES:-4-
ulimit :-1048576-
FDLIM :-4096-
TZ:-Asia/Shanghai-
UPDATE:-weekly-
DNS_SERVERNAME:-PaoPaoDNS,blog.03k.org-
SERVER_IP:-192.168.2.23-
ETHIP:-192.168.2.23-
DNSPORT:-53-
SOCKS5:-192.168.2.3:1080-
CNAUTO:-yes-
IPV6:-yes-
CNFALL:-yes-
CUSTOM_FORWARD:-192.168.2.3:53-
AUTO_FORWARD:-yes-
AUTO_FORWARD_CHECK:-yes-
USE_MARK_DATA:-yes-
RULES_TTL:-0-
CUSTOM_FORWARD_TTL:-0-
SHUFFLE:-no-
EXPIRED_FLUSH:-yes-
CN_TRACKER:-yes-
USE_HOSTS:-no-
HTTP_FILE:-yes-
SAFEMODE:--
QUERY_TIME:-2000ms-
ADDINFO:-yes-
PLATFORM:-Linux 3ea63100f52f 6.1.0-28-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.119-1 (2024-11-22) x86_64 Linux-
====ENV TEST====
mosdns kkkgo/mosdns:240822.1
total 18M    
   4.0K drwxrwxrwx    3 0        100         4.0K Dec 14 19:15 .
   4.0K drwxr-xr-x    1 0        0           4.0K Dec 14 19:15 ..
 252.0K -rwxrwxrwx    1 0        0         248.3K Dec 14 19:23 Country-only-cn-private.mmdb
  44.0K -rwxrwxrwx    1 0        0          42.9K Nov 29 23:38 custom.yaml
      0 -rwxrwxrwx    1 0        0              0 Dec  6 23:05 custom_cn_mark.txt
   4.0K -rwxrwxrwx    1 0        100          233 Dec 14 19:46 custom_env.ini
   4.0K -rwxrwxrwx    1 0        100          416 Dec 14 20:15 custom_mod.yaml
   4.0K drwxrwxrwx    2 0        0           4.0K Dec 14 20:15 dnscrypt-resolvers
   4.0K -rwxrwxrwx    1 0        0           3.0K Dec 14 19:15 dnscrypt.toml
   4.0K -rwxrwxrwx    1 0        100          390 Dec 14 17:51 force_cn_list.txt
   4.0K -rwxrwxrwx    1 0        0            571 Jun 16 00:57 force_dnscrypt_list.txt
   4.0K -rwxrwxrwx    1 0        100          353 Dec 14 19:46 force_forward_list.txt
   4.0K -rwxrwxrwx    1 0        100          537 Dec 14 17:51 force_nocn_list.txt
   4.0K -rwxrwxrwx    1 0        0            387 Jun 16 00:57 force_recurse_list.txt
   1.2M -rwxrwxrwx    1 0        0           1.2M Dec 14 20:22 global_mark.dat
  12.0K -rwxrwxrwx    1 0        0          10.0K Dec 14 19:15 mosdns.yaml
   4.0K -rwxrwxrwx    1 0        100         1.4K Dec 14 20:19 ppgw.ini
   8.0K -rwxrwxrwx    1 0        0           5.7K Dec 14 19:15 redis.conf
  16.3M -rwxrwxrwx    1 0        0          16.3M Dec 14 17:18 redis_dns_v2.rdb
  20.0K -rwxrwxrwx    1 0        100        17.1K Dec 14 19:23 trackerslist.txt
  52.0K -rwxrwxrwx    1 0        0          50.9K Dec 14 19:15 unbound.conf
   4.0K -rwxrwxrwx    1 0        100          289 Mar  4  2024 unbound_custom.conf
*********************************************************************************

[INFO] PS
*********************************************************************************

PID   USER     TIME  COMMAND
    1 root      0:00 {init.sh} /bin/sh /usr/sbin/init.sh
   13 root      0:00 crond
   46 root      0:01 redis-server unixsocket:/tmp/redis.sock
  232 root      0:01 dnscrypt-proxy -config /data/dnscrypt-resolvers/dnscrypt.toml
  233 root      0:02 dnscrypt-proxy -config /data/dnscrypt-resolvers/dnscrypt_socks.toml
  257 root      0:00 unbound -c /tmp/unbound_forward.conf -p
  260 root      0:01 mosdns start -d /tmp -c /tmp/mosdns.yaml
  272 root      0:00 {watch_list.sh} /bin/sh /usr/sbin/watch_list.sh
  275 root      0:00 tail -f /dev/null
  276 root      0:02 unbound -c /tmp/unbound_raw.conf -p
  314 root      0:00 inotifywait -e modify,delete /etc/unbound/named.cache /data/Country-only-cn-private.mmdb /data/force_recurse_list.txt /data/force_dnscrypt_list.txt /data/custom_env.ini /data/force_cn_list.txt /data/force_nocn_list.txt /data/global_mark.dat /data/custom_cn_mark.txt /data/trackerslist.txt /data/force_forward_list.txt
  539 root      0:00 {debug.sh} /bin/sh /usr/sbin/debug.sh
  623 root      0:00 mosdns curl https://v4.ident.me/
  624 root      0:00 grep -Eo ([0-9]{1,2}|1[0-9][0-9]|2[0-4][0-9]|25[0-5])\.([0-9]{1,2}|1[0-9][0-9]|2[0-4][0-9]|25[0-5])\.([0-9]{1,2}|1[0-9][0-9]|2[0-4][0-9]|25[0-5])\.([0-9]{1,2}|1[0-9][0-9]|2[0-4][0-9]|25[0-5])
  625 root      0:00 tail -1
  725 root      0:00 {debug.sh} /bin/sh /usr/sbin/debug.sh
  747 root      0:00 ps -ef
  276 root      0:02 unbound -c /tmp/unbound_raw.conf -p
unbound OK.
  257 root      0:00 unbound -c /tmp/unbound_forward.conf -p
unbound_forward OK.
*********************************************************************************

[INFO] TOP
*********************************************************************************

CPU:   5% usr   5% sys   0% nic  89% idle   0% io   0% irq   0% sirq
  PID  PPID USER     STAT   VSZ %VSZ CPU %CPU COMMAND
  276     1 root     S    2431m  15%   3   0% unbound -c /tmp/unbound_raw.conf -
  260     1 root     S    1211m   8%   0   0% mosdns start -d /tmp -c /tmp/mosdn
  233     1 root     S    1211m   8%   1   0% dnscrypt-proxy -config /data/dnscr
  232     1 root     S    1211m   8%   0   0% dnscrypt-proxy -config /data/dnscr
  623   539 root     S    1209m   8%   3   0% mosdns curl https://v4.ident.me/
  257     1 root     S     613m   4%   0   0% unbound -c /tmp/unbound_forward.co
   46     1 root     S    44172   0%   3   0% redis-server unixsocket:/tmp/redis
  272     1 root     S     1700   0%   3   0% {watch_list.sh} /bin/sh /usr/sbin/
    1     0 root     S     1644   0%   0   0% {init.sh} /bin/sh /usr/sbin/init.s
  725     0 root     S     1640   0%   0   0% {debug.sh} /bin/sh /usr/sbin/debug
  539     0 root     S     1640   0%   3   0% {debug.sh} /bin/sh /usr/sbin/debug
  754   725 root     R     1636   0%   1   0% top -n1
  275     1 root     S     1628   0%   3   0% tail -f /dev/null
  625   539 root     S     1628   0%   1   0% tail -1
  624   539 root     S     1624   0%   0   0% grep -Eo ([0-9]{1,2}|1[0-9][0-9]|2
  755   725 root     S     1624   0%   3   0% grep %
  314   272 root     S     1084   0%   3   0% inotifywait -e modify,delete /etc/
   13     1 root     S      872   0%   2   0% crond
*********************************************************************************

[INFO] REDIS
*********************************************************************************

used_memory_human:18.91M
used_memory_rss_human:24.95M
used_memory_peak_human:18.94M
total_system_memory_human:15.04G
used_memory_lua_human:31.00K
used_memory_vm_total_human:63.00K
used_memory_scripts_human:181B
maxmemory_human:1.76G
18799
*********************************************************************************

[TEST] IP ROUTE
*********************************************************************************

CN IP URL:
36.158.118.169
-
36.158.118.169
--
CN RAW-IP URL:
36.158.118.169
------------------
Non-CN IP URL:
-
108.165.144.205
--
Non-CN RAW-IP URL:
-
--
36.158.118.169
---
36.158.118.169
------------------
IP INFO:
36.158.118.169
CN,undefined,Hunan
ASN56047/China Mobile
HTTP/1.1 
Mozilla/5.0 Gecko/20100101 Firefox/120.0 https://github.com/kkkgo/PaoPaoDNS
Asia/Shanghai Time: 12/14/2024, 8:38:46 PM
[INFO] force_recurse_list
domain:whoami.ds.akahelp.net
domain:whoami.03k.org
MOSDNS WHOAMI :
MOSDNS akahelp: "ns" "36.158.118.169"
MOSDNS 03k: 120.227.98.103
UNBOUND WHOAMI:
UNBOUND akahelp: "ns" "36.158.118.169"
UNBOUND 03k: 120.227.98.103
*********************************************************************************

[TEST] HIJACK
*********************************************************************************

;; communications error to 9.8.7.5#53: timed out
;; no servers could be reached

;; communications error to 9.8.7.6#53: timed out
;; no servers could be reached

HIJACK 127.0.0.1 = 112.25.12.178
*********************************************************************************

[TEST] DIG-CN [taobao]
*********************************************************************************

MOSDNS CN:
www.taobao.com.danuoyi.tbcache.com.
120.226.183.211
120.226.183.210
UNBOUND CN:
www.taobao.com.danuoyi.tbcache.com.
120.226.183.211
120.226.183.210
[TEST] DIG-NOCN [youtube]
MOSDNS NOCN:
7.0.0.10
DNSCRYPT-UNBOUND NOCN:
youtube-ui.l.google.com.
142.250.69.14
192.178.49.174
DNSCRYPT NOCN:
youtube-ui.l.google.com.
142.250.198.142
142.250.198.174
DNSCRYPT-SOCKS5 NOCN:
youtube-ui.l.google.com.
142.250.69.14
192.178.49.206
*********************************************************************************

CUSTOM_FORWARD TEST [youtube]:
7.0.0.10
CUSTOM_FORWARD TEST [taobao]:
7.0.0.55
*********************************************************************************

[TEST] DUAL CN [IPv6=YES will have aaaa,taobao]
*********************************************************************************

www.taobao.com.danuoyi.tbcache.com.
2409:8c50:a00:206e:3::3e6
2409:8c50:a00:206e:3::3e5
[TEST] DUAL NOCN [IPv6=YES will block aaaa,youtube]
[TEST] ONLY6 [IPv6=only6 will block aaaa if a ok]
checkipv6.synology.com : ip6.03k.org : 2606:4700:3034::6815:15ef
2606:4700:3037::ac43:c96c
6.ipw.cn : 2400:8905::f03c:94ff:fe1c:a95e

*********************************************************************************

[info] ALL TEST FINISH.

-> debug end 1734179928
`

[kkkgo]

没细看，你用了macvlan的话先看看 #200

[kkkgo]

先跟踪一下路由对比差异，

windows: tracert registry-1.docker.io
linux: traceroute registry-1.docker.io

[delete7456]

在windows上使用tracert

在linux上使用traceroute

依旧只能在windows上运行成功

[delete7456]

也参考过这个 https://github.com/kkkgo/PaoPaoGateWay/discussions/137的回答，尝试将宿主不经过ap交换机，但问题仍然相同

令人奇怪的是，主路由无论使用中兴路由器还是openwrt软路由，在设置好静态路由后，在路由器上traceroute 7.0.0.8都无法达到

[delete7456]

中兴路由器在将协议由udp修改成icmp后成功达到。。。这是什么意思

[delete7456]

很玄学的是再一次换成openwrt，设备均能正常上网了。。。但traceroute依旧无法跟踪，无论是在主路由上traceroute 7.0.0.8还是在设备上使用traceroute youtube.com,唯独在windows上使用tracert youtube.com可以追踪到路由