linux justhost俄罗斯vps服务器封udp流量，dns53端口不通无法解析域名解决办法，甚至还阶段性失联网络故障

小樱

linux justhost俄罗斯vps服务器封udp流量，dns53端口不通无法解析域名解决办法，甚至还阶段性失联网络故障

/etc/resolv.conf 原有配置

1. nameserver 8.8.8.8
   
2. nameserver 8.8.4.4
   
3. options timeout:1 attempts:1 rotate

复制代码

尾部添加 use-vc 代表启用TCP，重启软件进程生效

1. nameserver 8.8.8.8
   
2. nameserver 8.8.4.4
   
3. options timeout:1 attempts:1 rotate use-vc

复制代码

注意TCP并不是加密，依旧是明文解析，能够解决的就是封udp流量的问题

反正避雷justhost这家毛子机，动不动就封80、443、53端口流量，除非你知道你自己在跑无关紧要的服务
https://justhost.ru/?ref=75001
https://bbs.itzmx.com/thread-95783-1-1.html

想要恢复只有重装系统，这样他家的PVE会重新分配母鸡，也就是CPU型号都会发生变化

7月19日补充
只能自己重装个系统，因为他家重装系统会更换母鸡节点，从cn100迁移到cn87试试，看看能不能修复问题
我不确定是否解决了，因为24小时无人回复我，至少服务器目前是在线的
不过新服务器的cpu从host变成了kvm64，没有了aes指令集，st固定占用50%
参考：https://bbs.itzmx.com/thread-115536-1-1.html

工单内容如下，24小时无人回复
网络问题报告：今天第三次100%丢包（IP： 45.147.201.x)
你好，支持团队，
我写信报告关于我的
VPS（IP：45.147.201.x）的网络反复中断。
这是今天第三次完全断线了。
当前的网络中断已持续1小时50分钟，
服务器外部无法访问。
我通过VNC控制台访问了服务器，并确认
了内部网络配置：
IP地址：45.147.201.x/23在
eth0上已正确配置并激活。
路由：默认网关45.147.200.1在
路由表中正确设置。
症状：ping和MTR都显示100%丢包。虚拟机目前
无法与自己的网关（45.147.200.1）通信。
由于本地操作系统配置保持完整，这似乎是
网络层面的问题或主机节点/交换机端的中断。
你能帮忙检查该IP的主机节点或网络
段的状态吗？
感谢您的帮助。

问题的模式相当特殊：每次停电持续时间呈分级递增——5分钟、15分钟、30分钟、1小时、2小时、4小时和8小时。这些是我迄今为止经历的七次网络中断的持续时间。

7月29日补充
重装系统后这个问题依旧在不断的出现，今天在控制台看到这个显示，原来是被ddos防火墙误报导致这样封禁网络了吗
看来只能发个工单去试试能不能解决了，因为在服务器上并没有任何需要做和调整的地方，网站使用cloudflare cf cdn回源产生的流量，不知道工单会不会有人回复了


反正前几年的测试结果，数据包≥350000 不管进还是出只要超了就会触发封禁
https://bbs.itzmx.com/thread-118095-1-1.html

FLOOD-tcp.1-eno1 detected! VPS is limited. Metric: 372090

VM: kvm.centos-6-amd64-r2
MAC: 4a:f1:39:c4:23:60

4a:f1:39:c4:23:60 > 00:3a:9c:46:da:c1, ethertype IPv4 (0x0800), length 66: 45.147.201.x.49358 > 172.66.40.10.443: Flags [.], ack 868727142, win 1921, options [nop,nop,TS val 1770332469 ecr 1957175326], length 0
4a:f1:39:c4:23:60 > 00:3a:9c:46:da:c1, ethertype IPv4 (0x0800), length 66: 45.147.201.x.46766 > 172.66.40.10.443: Flags [.], ack 1169599566, win 9044, options [nop,nop,TS val 1770332371 ecr 194011496], length 0
4a:f1:39:c4:23:60 > 00:3a:9c:46:da:c1, ethertype IPv4 (0x0800), length 66: 45.147.201.x.49364 > 172.66.40.10.443: Flags [.], ack 4041113948, win 11156, options [nop,nop,TS val 1770332459 ecr 2856425521], length 0
4a:f1:39:c4:23:60 > 00:3a:9c:46:da:c1, ethertype IPv4 (0x0800), length 66: 45.147.201.x.49358 > 172.66.40.10.443: Flags [.], ack 1449, win 1921, options [nop,nop,TS val 1770332469 ecr 1957175326], length 0
4a:f1:39:c4:23:60 > 00:3a:9c:46:da:c1, ethertype IPv4 (0x0800), length 66: 45.147.201.x.46766 > 172.66.40.10.443: Flags [.], ack 1449, win 9044, options [nop,nop,TS val 1770332371 ecr 194011496], length 0
4a:f1:39:c4:23:60 > 00:3a:9c:46:da:c1, ethertype IPv4 (0x0800), length 66: 45.147.201.x.49358 > 172.66.40.10.443: Flags [.], ack 2897, win 1921, options [nop,nop,TS val 1770332469 ecr 1957175326], length 0
4a:f1:39:c4:23:60 > 00:3a:9c:46:da:c1, ethertype IPv4 (0x0800), length 66: 45.147.201.x.46766 > 172.66.40.10.443: Flags [.], ack 2897, win 9044, options [nop,nop,TS val 1770332371 ecr 194011496], length 0
4a:f1:39:c4:23:60 > 00:3a:9c:46:da:c1, ethertype IPv4 (0x0800), length 66: 45.147.201.x.49358 > 172.66.40.10.443: Flags [.], ack 4345, win 1921, options [nop,nop,TS val 1770332469 ecr 1957175326], length 0
4a:f1:39:c4:23:60 > 00:3a:9c:46:da:c1, ethertype IPv4 (0x0800), length 66: 45.147.201.x.46766 > 172.66.40.10.443: Flags [.], ack 4345, win 9044, options [nop,nop,TS val 1770332371 ecr 194011496], length 0
4a:f1:39:c4:23:60 > 00:3a:9c:46:da:c1, ethertype IPv4 (0x0800), length 66: 45.147.201.x.49358 > 172.66.40.10.443: Flags [.], ack 5793, win 1921, options [nop,nop,TS val 1770332469 ecr 1957175326], length 0
4a:f1:39:c4:23:60 > 00:3a:9c:46:da:c1, ethertype IPv4 (0x0800), length 66: 45.147.201.x.46766 > 172.66.40.10.443: Flags [.], ack 5793, win 9044, options [nop,nop,TS val 1770332371 ecr 194011496], length 0
4a:f1:39:c4:23:60 > 00:3a:9c:46:da:c1, ethertype IPv4 (0x0800), length 66: 45.147.201.x.49358 > 172.66.40.10.443: Flags [.], ack 7241, win 1921, options [nop,nop,TS val 1770332469 ecr 1957175326], length 0
4a:f1:39:c4:23:60 > 00:3a:9c:46:da:c1, ethertype IPv4 (0x0800), length 66: 45.147.201.x.46766 > 172.66.40.10.443: Flags [.], ack 7241, win 9044, options [nop,nop,TS val 1770332371 ecr 194011496], length 0
4a:f1:39:c4:23:60 > 00:3a:9c:46:da:c1, ethertype IPv4 (0x0800), length 66: 45.147.201.x.49358 > 172.66.40.10.443: Flags [.], ack 8689, win 1921, options [nop,nop,TS val 1770332469 ecr 1957175326], length 0
4a:f1:39:c4:23:60 > 00:3a:9c:46:da:c1, ethertype IPv4 (0x0800), length 66: 45.147.201.x.46766 > 172.66.40.10.443: Flags [.], ack 8689, win 9044, options [nop,nop,TS val 1770332371 ecr 194011496], length 0
4a:f1:39:c4:23:60 > 00:3a:9c:46:da:c1, ethertype IPv4 (0x0800), length 66: 45.147.201.x.49358 > 172.66.40.10.443: Flags [.], ack 10137, win 1921, options [nop,nop,TS val 1770332469 ecr 1957175326], length 0
4a:f1:39:c4:23:60 > 00:3a:9c:46:da:c1, ethertype IPv4 (0x0800), length 66: 45.147.201.x.46766 > 172.66.40.10.443: Flags [.], ack 10137, win 9044, options [nop,nop,TS val 1770332371 ecr 194011496], length 0
4a:f1:39:c4:23:60 > 00:3a:9c:46:da:c1, ethertype IPv4 (0x0800), length 66: 45.147.201.x.49358 > 172.66.40.10.443: Flags [.], ack 11585, win 1921, options [nop,nop,TS val 1770332469 ecr 1957175326], length 0
4a:f1:39:c4:23:60 > 00:3a:9c:46:da:c1, ethertype IPv4 (0x0800), length 66: 45.147.201.x.46766 > 172.66.40.10.443: Flags [.], ack 11585, win 9044, options [nop,nop,TS val 1770332371 ecr 194011496], length 0
4a:f1:39:c4:23:60 > 00:3a:9c:46:da:c1, ethertype IPv4 (0x0800), length 66: 45.147.201.x.49358 > 172.66.40.10.443: Flags [.], ack 13033, win 1921, options [nop,nop,TS val 1770332469 ecr 1957175326], length 0
4a:f1:39:c4:23:60 > 00:3a:9c:46:da:c1, ethertype IPv4 (0x0800), length 66: 45.147.201.x.46766 > 172.66.40.10.443: Flags [.], ack 13033, win 9044, options [nop,nop,TS val 1770332371 ecr 194011496], length 0
4a:f1:39:c4:23:60 > 00:3a:9c:46:da:c1, ethertype IPv4 (0x0800), length 66: 45.147.201.x.49358 > 172.66.40.10.443: Flags [.], ack 14481, win 1921, options [nop,nop,TS val 1770332469 ecr 1957175326], length 0
4a:f1:39:c4:23:60 > 00:3a:9c:46:da:c1, ethertype IPv4 (0x0800), length 66: 45.147.201.x.46766 > 172.66.40.10.443: Flags [.], ack 14481, win 9044, options [nop,nop,TS val 1770332371 ecr 194011496], length 0
4a:f1:39:c4:23:60 > 00:3a:9c:46:da:c1, ethertype IPv4 (0x0800), length 66: 45.147.201.x.49358 > 172.66.40.10.443: Flags [.], ack 15929, win 1921, options [nop,nop,TS val 1770332469 ecr 1957175326], length 0
4a:f1:39:c4:23:60 > 00:3a:9c:46:da:c1, ethertype IPv4 (0x0800), length 66: 45.147.201.x.46766 > 172.66.40.10.443: Flags [.], ack 15929, win 9044, options [nop,nop,TS val 1770332371 ecr 194011496], length 0