[{"data":1,"prerenderedAt":230},["ShallowReactive",2],{"article-openwrt-http-connect-timeout":3},{"title":4,"article":5,"hot_article":16,"month_arch":79,"cover":227},"软路由http连接超时问题排查 - 独孤影的博客",{"id":6,"title":7,"uri":8,"author":9,"tags":10,"created_at":13,"view_count":14,"content":15},71,"软路由http连接超时问题排查","openwrt-http-connect-timeout","duguying",[11,12],"openwrt","连接超时","2022-09-05 13:28:37",768,"\u003Cp>用软路由有一段时间的，最近家人经常跟我吐槽，家里网络差。后来我发现确实存在网络差的问题，有时候刷抖音视频加载不出来，刷微博图片加载不出来。一开始以为是天威宽带运营商的问题，后面发现同一时间直接链接运营商的光猫路由无线网络不会有问题。这么说来，问题是出在软路由上了。\n一开始我以为富强网的问题，因为访问国外没问题，访问国内有问题，各种找解决方案，\u003Ca href=\"https:\u002F\u002Fisdiy.net\u002Fopenwrt-guo-nei-wang-zhan-wu-fa-fang-wen\u002F\">有人说\u003C\u002Fa>需要设置这条防火墙规则就可以了\u003C\u002Fp>\n\n\u003Cpre style=\"color:#e6edf3;background-color:#0d1117;white-space:pre-wrap;word-break:break-word;\">\u003Ccode>\u003Cspan style=\"display:flex;\">\u003Cspan>iptables -t nat -I POSTROUTING -o eth0 -j MASQUERADE\n\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fpre>\n\n\u003Cp>但是，我测试了没有效果。而且还比较符合别人的描述，重启防火墙就恢复正常了，然后在不确定长度的一段时间后，又会出现这个问题。这里肯定是防火墙的问题了。但是想尽一切办法都没法解决，于是我关闭了富强网。\u003C\u002Fp>\n\n\u003Cp>第二天，我发现访问csdn的资源链接依然会有问题，通常会卡个1分钟以上，才有响应。这很不正常。看样子跟富强网没关系。我先后确认了DNS解析正常，关闭了“Turbo ACC网络加速”，设置调小了lan口MTU，但是都没有结果。头发都要薅光了。\u003C\u002Fp>\n\n\u003Cp>先dig一下域名\u003C\u002Fp>\n\n\u003Cpre style=\"color:#e6edf3;background-color:#0d1117;white-space:pre-wrap;word-break:break-word;\">\u003Ccode>\u003Cspan style=\"display:flex;\">\u003Cspan>➜  ttt dig csdnimg.cn\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>; <<>> DiG 9.11.5-P4-5.1+deb10u7-Debian <<>> csdnimg.cn\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; global options: +cmd\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; Got answer:\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63181\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; flags: qr rd ra; QUERY: 1, ANSWER: 9, AUTHORITY: 0, ADDITIONAL: 1\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; OPT PSEUDOSECTION:\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>; EDNS: version: 0, flags:; udp: 1232\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; QUESTION SECTION:\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;csdnimg.cn.                    IN      A\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; ANSWER SECTION:\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>csdnimg.cn.             57      IN      CNAME   csdnimg.cn.trpcdn.net.\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>csdnimg.cn.trpcdn.net.  1717    IN      CNAME   uz95.v.trpcdn.net.\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>uz95.v.trpcdn.net.      95      IN      A       116.77.73.215\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>uz95.v.trpcdn.net.      95      IN      A       116.77.73.214\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>uz95.v.trpcdn.net.      95      IN      A       116.77.73.211\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>uz95.v.trpcdn.net.      95      IN      A       116.77.73.213\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>uz95.v.trpcdn.net.      95      IN      A       116.77.73.218\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>uz95.v.trpcdn.net.      95      IN      A       116.77.73.217\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>uz95.v.trpcdn.net.      95      IN      A       116.77.73.212\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; Query time: 20 msec\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; SERVER: 192.168.1.1#53(192.168.1.1)\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; WHEN: 一 9月 05 13:45:27 CST 2022\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>;; MSG SIZE  rcvd: 217\n\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fpre>\n\n\u003Cp>解析出来的是cname到网宿CDN，A记录为天威宽带的节点。从openwrt的ptty终端访问正常，说明ip是通的没问题，\n但是在路由下我的电脑上访问，也是偶现超时卡顿。\u003C\u002Fp>\n\n\u003Cp>然后想办法稳定重现，写个shell脚本，用curl循环访问问题链接\u003C\u002Fp>\n\n\u003Cpre style=\"color:#e6edf3;background-color:#0d1117;white-space:pre-wrap;word-break:break-word;\">\u003Ccode>\u003Cspan style=\"display:flex;\">\u003Cspan>\u003Cspan style=\"color:#8b949e;font-weight:bold;font-style:italic\">#!\u002Fbin\u002Fbash\n\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\u003Cspan style=\"color:#8b949e;font-weight:bold;font-style:italic\">\u003C\u002Fspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\u003Cspan style=\"color:#ff7b72\">for\u003C\u002Fspan> \u003Cspan style=\"color:#ff7b72;font-weight:bold\">(\u003C\u002Fspan>\u003Cspan style=\"color:#ff7b72;font-weight:bold\">(\u003C\u002Fspan>\u003Cspan style=\"color:#79c0ff\">i\u003C\u002Fspan>\u003Cspan style=\"color:#ff7b72;font-weight:bold\">=\u003C\u002Fspan>1;i<\u003Cspan style=\"color:#ff7b72;font-weight:bold\">=\u003C\u002Fspan>100;i++\u003Cspan style=\"color:#ff7b72;font-weight:bold\">)\u003C\u002Fspan>\u003Cspan style=\"color:#ff7b72;font-weight:bold\">)\u003C\u002Fspan>; \u003Cspan style=\"color:#ff7b72\">do\u003C\u002Fspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>  curl --no-tcp-nodelay \u003Cspan style=\"color:#a5d6ff\">'https:\u002F\u002Fcsdnimg.cn\u002Frelease\u002Fblogv2\u002Fdist\u002Fpc\u002Fimg\u002Fpay-time-out.png'\u003C\u002Fspan>\u003Cspan style=\"color:#79c0ff\">$i\u003C\u002Fspan> -w \u003Cspan style=\"color:#a5d6ff\">"@fmt"\u003C\u002Fspan> -o \u002Fdev\u002Fnull -s;\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>\u003Cspan style=\"color:#ff7b72\">done\u003C\u002Fspan>\n\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fpre>\n\n\u003Cp>其中fmt耗时输出格式文件\u003C\u002Fp>\n\n\u003Cpre style=\"color:#e6edf3;background-color:#0d1117;white-space:pre-wrap;word-break:break-word;\">\u003Ccode>\u003Cspan style=\"display:flex;\">\u003Cspan>time_namelookup:  %{time_namelookup}\\n\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>       time_connect:  %{time_connect}\\n\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    time_appconnect:  %{time_appconnect}\\n\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>      time_redirect:  %{time_redirect}\\n\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>   time_pretransfer:  %{time_pretransfer}\\n\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan> time_starttransfer:  %{time_starttransfer}\\n\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>                    ----------\\n\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>         time_total:  %{time_total}\\n\n\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fpre>\n\n\u003Cp>调用shell文件，结果中间卡了很久\u003C\u002Fp>\n\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fimage.duguying.net\u002F2022\u002F09\u002Fvjgy55fs.png\" alt=\"vjgy55fs\" \u002F>\u003C\u002Fp>\n\n\u003Cp>可以看到中间有个异常耗时\u003C\u002Fp>\n\n\u003Cpre style=\"color:#e6edf3;background-color:#0d1117;white-space:pre-wrap;word-break:break-word;\">\u003Ccode>\u003Cspan style=\"display:flex;\">\u003Cspan>time_namelookup:  0.031654\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>       time_connect:  129.203610\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>    time_appconnect:  129.222947\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>      time_redirect:  0.000000\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>   time_pretransfer:  129.223397\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan> time_starttransfer:  129.359648\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>                    ----------\n\u003C\u002Fspan>\u003C\u002Fspan>\u003Cspan style=\"display:flex;\">\u003Cspan>         time_total:  129.359827\n\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fpre>\n\n\u003Cp>可以看到，dns解析耗时0.031654，没问题，问题主要在time_connect，说明是到该ip的链接超时。众所周知，tcp连接需要握手，其中会传输ACK,SYN这些数据包，用于确认握手状态。会不会是这些包存在被路由器防火墙丢弃的情况？打开openwrt“状态->防火墙”，搜索DROP，有这么一条规则被我看到了\u003C\u002Fp>\n\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fimage.duguying.net\u002F2022\u002F09\u002F75ura4is.png\" alt=\"75ura4is\" \u002F>\u003C\u002Fp>\n\n\u003Cp>查了一下\u003Ccode class=\"inline-code\">223.252.199.10\u003C\u002Fcode>，是网易云的，这让我突然想起来，openwrt上有个“解锁网易云灰色歌曲”的功能，曾经被我打开了。\u003C\u002Fp>\n\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Fimage.duguying.net\u002F2022\u002F09\u002F91tw7d76.png\" alt=\"91tw7d76\" \u002F>\u003C\u002Fp>\n\n\u003Cp>\u003Cstrong>关闭。网络恢复正常了\u003C\u002Fstrong>\u003C\u002Fp>\n\n\u003Cp>最终结论：\u003Cstrong>这次网络故障是由“解锁网易云灰色歌曲”这个功能导致的故障，其原理是劫持所有到网易云的流量到腾讯云，从而实现网易云音乐被封禁的音乐从腾讯云下载。中间的规则应该是出了什么问题，影响到正常链路了。\u003C\u002Fstrong> 关闭之后就正常了，openwrt上各种功能的确丰富，但是坑也多，很多功能都需要基于防火墙实现流量劫持与转发，一旦出现问题，就可能影响正常上网。\u003C\u002Fp>\n",{"title":17,"list":18},"最热文章",[19,25,31,37,43,49,55,61,67,73],{"id":20,"title":21,"uri":22,"author":9,"created_at":23,"view_count":24},28,"docker容器目录与主机目录同步","\u002Farticle\u002Fdocker容器目录与主机目录同步","2014-12-31 12:34:08",15570,{"id":26,"title":27,"uri":28,"author":9,"created_at":29,"view_count":30},21,"beego中使用fis","\u002Farticle\u002Fbeego中使用fis","2014-12-03 10:47:56",9250,{"id":32,"title":33,"uri":34,"author":9,"created_at":35,"view_count":36},20,"用github登录，oauth开发","\u002Farticle\u002F用github登录，oauth开发","2014-11-23 13:33:37",9113,{"id":38,"title":39,"uri":40,"author":9,"created_at":41,"view_count":42},18,"windows服务注册工具nssm","\u002Farticle\u002Fwindows服务注册工具nssm","2014-10-31 21:34:39",9047,{"id":44,"title":45,"uri":46,"author":9,"created_at":47,"view_count":48},49,"用latex排版中文书籍","\u002Farticle\u002F用latex排版中文书籍","2016-10-31 11:12:02",8634,{"id":50,"title":51,"uri":52,"author":9,"created_at":53,"view_count":54},19,"texlive中文书签乱码","\u002Farticle\u002Ftexlive中文书签乱码","2014-11-15 02:54:01",8461,{"id":56,"title":57,"uri":58,"author":9,"created_at":59,"view_count":60},6,"Windows上的软件包管理器chocolatey","\u002Farticle\u002FWindows上的软件包管理器chocolatey","2014-08-10 15:55:22",8009,{"id":62,"title":63,"uri":64,"author":9,"created_at":65,"view_count":66},3,"利用开源和免费资源搭建CI环境","\u002Farticle\u002F利用开源和免费资源搭建CI环境","2014-07-04 16:54:58",7732,{"id":68,"title":69,"uri":70,"author":9,"created_at":71,"view_count":72},16,"php-fpm网站目录权限配置","\u002Farticle\u002Fphp-fpm网站目录权限配置","2014-10-18 01:36:10",7274,{"id":74,"title":75,"uri":76,"author":9,"created_at":77,"view_count":78},27,"sublime text 2插件开发，外部修改文件无法重新加载","\u002Farticle\u002Fsublime text 2插件开发，外部修改文件无法重新加载","2014-12-26 20:24:13",7054,{"title":80,"list":81},"按月归档",[82,86,89,92,95,98,101,105,109,112,115,118,122,125,128,132,135,138,141,145,148,151,154,157,160,163,166,169,172,175,178,181,184,187,190,193,196,199,202,205,209,212,215,218,221,224],{"title":83,"uri":84,"view_count":85},"2026年7月","\u002Farchive\u002F2026\u002F7\u002F1","[1]",{"title":87,"uri":88,"view_count":85},"2026年1月","\u002Farchive\u002F2026\u002F1\u002F1",{"title":90,"uri":91,"view_count":85},"2025年4月","\u002Farchive\u002F2025\u002F4\u002F1",{"title":93,"uri":94,"view_count":85},"2024年6月","\u002Farchive\u002F2024\u002F6\u002F1",{"title":96,"uri":97,"view_count":85},"2024年5月","\u002Farchive\u002F2024\u002F5\u002F1",{"title":99,"uri":100,"view_count":85},"2024年4月","\u002Farchive\u002F2024\u002F4\u002F1",{"title":102,"uri":103,"view_count":104},"2023年12月","\u002Farchive\u002F2023\u002F12\u002F1","[6]",{"title":106,"uri":107,"view_count":108},"2023年11月","\u002Farchive\u002F2023\u002F11\u002F1","[2]",{"title":110,"uri":111,"view_count":85},"2023年10月","\u002Farchive\u002F2023\u002F10\u002F1",{"title":113,"uri":114,"view_count":85},"2023年7月","\u002Farchive\u002F2023\u002F7\u002F1",{"title":116,"uri":117,"view_count":108},"2023年6月","\u002Farchive\u002F2023\u002F6\u002F1",{"title":119,"uri":120,"view_count":121},"2023年5月","\u002Farchive\u002F2023\u002F5\u002F1","[3]",{"title":123,"uri":124,"view_count":108},"2023年4月","\u002Farchive\u002F2023\u002F4\u002F1",{"title":126,"uri":127,"view_count":108},"2023年3月","\u002Farchive\u002F2023\u002F3\u002F1",{"title":129,"uri":130,"view_count":131},"2023年2月","\u002Farchive\u002F2023\u002F2\u002F1","[5]",{"title":133,"uri":134,"view_count":85},"2023年1月","\u002Farchive\u002F2023\u002F1\u002F1",{"title":136,"uri":137,"view_count":108},"2022年12月","\u002Farchive\u002F2022\u002F12\u002F1",{"title":139,"uri":140,"view_count":131},"2022年11月","\u002Farchive\u002F2022\u002F11\u002F1",{"title":142,"uri":143,"view_count":144},"2022年10月","\u002Farchive\u002F2022\u002F10\u002F1","[4]",{"title":146,"uri":147,"view_count":104},"2022年9月","\u002Farchive\u002F2022\u002F9\u002F1",{"title":149,"uri":150,"view_count":131},"2022年8月","\u002Farchive\u002F2022\u002F8\u002F1",{"title":152,"uri":153,"view_count":85},"2019年7月","\u002Farchive\u002F2019\u002F7\u002F1",{"title":155,"uri":156,"view_count":85},"2019年2月","\u002Farchive\u002F2019\u002F2\u002F1",{"title":158,"uri":159,"view_count":85},"2018年9月","\u002Farchive\u002F2018\u002F9\u002F1",{"title":161,"uri":162,"view_count":85},"2018年8月","\u002Farchive\u002F2018\u002F8\u002F1",{"title":164,"uri":165,"view_count":85},"2017年11月","\u002Farchive\u002F2017\u002F11\u002F1",{"title":167,"uri":168,"view_count":85},"2017年8月","\u002Farchive\u002F2017\u002F8\u002F1",{"title":170,"uri":171,"view_count":85},"2017年5月","\u002Farchive\u002F2017\u002F5\u002F1",{"title":173,"uri":174,"view_count":85},"2017年4月","\u002Farchive\u002F2017\u002F4\u002F1",{"title":176,"uri":177,"view_count":85},"2016年11月","\u002Farchive\u002F2016\u002F11\u002F1",{"title":179,"uri":180,"view_count":85},"2016年10月","\u002Farchive\u002F2016\u002F10\u002F1",{"title":182,"uri":183,"view_count":108},"2016年9月","\u002Farchive\u002F2016\u002F9\u002F1",{"title":185,"uri":186,"view_count":85},"2016年8月","\u002Farchive\u002F2016\u002F8\u002F1",{"title":188,"uri":189,"view_count":108},"2016年7月","\u002Farchive\u002F2016\u002F7\u002F1",{"title":191,"uri":192,"view_count":131},"2016年6月","\u002Farchive\u002F2016\u002F6\u002F1",{"title":194,"uri":195,"view_count":85},"2015年12月","\u002Farchive\u002F2015\u002F12\u002F1",{"title":197,"uri":198,"view_count":85},"2015年10月","\u002Farchive\u002F2015\u002F10\u002F1",{"title":200,"uri":201,"view_count":108},"2015年2月","\u002Farchive\u002F2015\u002F2\u002F1",{"title":203,"uri":204,"view_count":85},"2015年1月","\u002Farchive\u002F2015\u002F1\u002F1",{"title":206,"uri":207,"view_count":208},"2014年12月","\u002Farchive\u002F2014\u002F12\u002F1","[8]",{"title":210,"uri":211,"view_count":108},"2014年11月","\u002Farchive\u002F2014\u002F11\u002F1",{"title":213,"uri":214,"view_count":131},"2014年10月","\u002Farchive\u002F2014\u002F10\u002F1",{"title":216,"uri":217,"view_count":121},"2014年9月","\u002Farchive\u002F2014\u002F9\u002F1",{"title":219,"uri":220,"view_count":121},"2014年8月","\u002Farchive\u002F2014\u002F8\u002F1",{"title":222,"uri":223,"view_count":121},"2014年7月","\u002Farchive\u002F2014\u002F7\u002F1",{"title":225,"uri":226,"view_count":108},"2013年9月","\u002Farchive\u002F2013\u002F9\u002F1",{"url":228,"title":229},"https:\u002F\u002Fimage.duguying.net\u002F2022\u002F09\u002Fij6x8o4s.webp","老家 摄于2020年秋",1790062265774]