prod/AWG2_harness
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 2 Wiki Activity

Документация DNS: динамический deep-check и уточнение критериев

Browse Source
This commit is contained in:
Crimson
2026-05-12 21:12:15 +05:00
parent 8e3e924952
commit c7b5da98f4
3 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/ACCEPTANCE_CHECKLIST.md
+1 -1
View File
@@ -150,7 +150,7 @@
- [ ] Контейнер `amnezia-dns` в состоянии healthy. - [ ] Контейнер `amnezia-dns` в состоянии healthy.
- [ ] `docker inspect amnezia-dns` показывает `"53/tcp":null` и `"53/udp":null`. - [ ] `docker inspect amnezia-dns` показывает `"53/tcp":null` и `"53/udp":null`.
- [ ] `amnezia-dns` и `amnezia-awg2` подключены к одной Amnezia DNS Docker-сети. - [ ] `amnezia-dns` и `amnezia-awg2` подключены к одной Amnezia DNS Docker-сети.
- [ ] Публичный DNS-запрос к `<server-public-ip>:53` не получает ответа. - [ ] Публичный DNS-запрос к `<server-public-ip>:53` не резолвит домены; допустимы `connection refused`, `timeout` или `no servers could be reached`.
- [ ] DNS-резолвинг у VPN-клиента работает при активном подключении. - [ ] DNS-резолвинг у VPN-клиента работает при активном подключении.
- [ ] AWG2 host firewall не открывает `53/tcp` и `53/udp`. - [ ] AWG2 host firewall не открывает `53/tcp` и `53/udp`.
docs/INSTALLATION.md
+3 -1
View File
@@ -189,12 +189,14 @@ Optional deep-check DNS path (если нужна углублённая про
```bash ```bash
apt install -y dnsutils apt install -y dnsutils
DNS_IP="$(docker inspect -f '{{range $n,$v := .NetworkSettings.Networks}}{{if $v.IPAddress}}{{println $v.IPAddress}}{{end}}{{end}}' amnezia-dns | head -n1)"
DNS_PID="$(docker inspect -f '{{.State.Pid}}' amnezia-dns)" DNS_PID="$(docker inspect -f '{{.State.Pid}}' amnezia-dns)"
AWG_PID="$(docker inspect -f '{{.State.Pid}}' amnezia-awg2)" AWG_PID="$(docker inspect -f '{{.State.Pid}}' amnezia-awg2)"
echo "DNS_IP=$DNS_IP"
nsenter -t "$DNS_PID" -n ss -lntup nsenter -t "$DNS_PID" -n ss -lntup
nsenter -t "$AWG_PID" -n ip route nsenter -t "$AWG_PID" -n ip route
nsenter -t "$AWG_PID" -n dig @172.29.172.254 example.com A +short nsenter -t "$AWG_PID" -n dig @"$DNS_IP" example.com A +short
``` ```
## C. Transfer artifacts ## C. Transfer artifacts
docs/PRODUCTION_EXAMPLE.md
+1 -1
View File
@@ -17,7 +17,7 @@ Amnezia:
AmneziaDNS: AmneziaDNS:
container: amnezia-dns container: amnezia-dns
status: healthy status: healthy
internal_ip: 172.29.172.254 internal_ip: 172.29.172.254 # example value; verify with docker inspect
exposed_ports: 53/tcp, 53/udp inside Docker only exposed_ports: 53/tcp, 53/udp inside Docker only
published_ports: none published_ports: none
public_53: closed public_53: closed