diff --git a/.dockerignore b/.dockerignore new file mode 100644 index 0000000..1f856e6 --- /dev/null +++ b/.dockerignore @@ -0,0 +1,5 @@ +.git +.gitignore +README.md +compose.yaml +*_test.go diff --git a/Dockerfile b/Dockerfile new file mode 100644 index 0000000..b75cad5 --- /dev/null +++ b/Dockerfile @@ -0,0 +1,12 @@ +FROM golang:1.24-alpine AS build +WORKDIR /src +COPY go.mod ./ +COPY main.go ./ +COPY web ./web +RUN CGO_ENABLED=0 GOOS=linux go build -trimpath -ldflags="-s -w" -o /dns-orbit . + +FROM gcr.io/distroless/static-debian12:nonroot +COPY --from=build /dns-orbit /dns-orbit +EXPOSE 8080 +USER nonroot:nonroot +ENTRYPOINT ["/dns-orbit"] diff --git a/README.md b/README.md index f940a66..451e7de 100644 --- a/README.md +++ b/README.md @@ -1,2 +1,9 @@ -# dnsquery +# DNS Orbit +面向全球公共 DNS 节点的实时解析观测工具。支持 A、AAAA、CNAME、MX、NS、TXT、SOA、CAA，查询结果通过 SSE 流式返回。 + +```bash +docker compose up --build +``` + +打开 `http://localhost:8080`。健康检查：`GET /api/health`。 diff --git a/compose.yaml b/compose.yaml new file mode 100644 index 0000000..da54b4e --- /dev/null +++ b/compose.yaml @@ -0,0 +1,13 @@ +services: + dns-orbit: + build: . + ports: + - "8080:8080" + environment: + PORT: "8080" + restart: unless-stopped + healthcheck: + test: ["CMD", "/dns-orbit", "--healthcheck"] + interval: 30s + timeout: 3s + retries: 3 diff --git a/go.mod b/go.mod new file mode 100644 index 0000000..ea292a5 --- /dev/null +++ b/go.mod @@ -0,0 +1,3 @@ +module dnsquery + +go 1.24 diff --git a/main.go b/main.go new file mode 100644 index 0000000..371abed --- /dev/null +++ b/main.go @@ -0,0 +1,270 @@ +package main + +import ( + "context" + "crypto/rand" + "embed" + "encoding/hex" + "encoding/json" + "errors" + "fmt" + "io" + "io/fs" + "log" + "net" + "net/http" + "net/url" + "os" + "sort" + "strings" + "sync" + "time" +) + +//go:embed web/* +var webFS embed.FS + +type resolver struct{ Name, Country, City, Region, URL string } +type record struct { + Value string `json:"value"` + TTL int `json:"ttl"` +} +type result struct { + Resolver string `json:"resolver"` + Country string `json:"country"` + City string `json:"city"` + Region string `json:"region"` + Status string `json:"status"` + Records []record `json:"records"` + ResponseTime int64 `json:"responseTime"` + Error string `json:"error,omitempty"` +} +type query struct { + ID, Domain, Type string + Created time.Time + Results chan result +} +type app struct { + mu sync.RWMutex + queries map[string]*query + client *http.Client +} + +var resolvers = []resolver{ + {"Cloudflare", "全球", "Anycast", "全球", "https://cloudflare-dns.com/dns-query"}, + {"Google", "全球", "Anycast", "全球", "https://dns.google/resolve"}, + {"Quad9", "瑞士", "Zurich", "欧洲", "https://dns.quad9.net/dns-query"}, + {"AdGuard", "塞浦路斯", "Limassol", "欧洲", "https://dns.adguard-dns.com/resolve"}, + {"AliDNS", "中国", "Hangzhou", "亚洲", "https://dns.alidns.com/resolve"}, + {"DNSPod", "中国", "Shanghai", "亚洲", "https://doh.pub/dns-query"}, + {"360 Secure DNS", "中国", "Beijing", "亚洲", "https://doh.360.cn/dns-query"}, + {"Tencent EdgeOne", "新加坡", "Singapore", "亚洲", "https://public.dns.iij.jp/dns-query"}, + {"IIJ", "日本", "Tokyo", "亚洲", "https://public.dns.iij.jp/dns-query"}, + {"Mullvad", "瑞典", "Gothenburg", "欧洲", "https://doh.mullvad.net/dns-query"}, + {"Control D", "加拿大", "Toronto", "北美", "https://freedns.controld.com/p0"}, + {"CleanBrowsing", "美国", "Virginia", "北美", "https://doh.cleanbrowsing.org/doh/security-filter/"}, + {"OpenDNS", "美国", "San Francisco", "北美", "https://doh.opendns.com/dns-query"}, + {"NextDNS", "美国", "Anycast", "北美", "https://dns.nextdns.io"}, + {"LibreDNS", "德国", "Frankfurt", "欧洲", "https://doh.libredns.gr/dns-query"}, + {"Digitale Gesellschaft", "瑞士", "Zurich", "欧洲", "https://dns.digitale-gesellschaft.ch/dns-query"}, + {"Foundation RESTENA", "卢森堡", "Luxembourg", "欧洲", "https://kaitain.restena.lu/dns-query"}, + {"CIRA Canadian Shield", "加拿大", "Ottawa", "北美", "https://private.canadianshield.cira.ca/dns-query"}, + {"Australian DNS", "澳大利亚", "Sydney", "大洋洲", "https://dns0.eu/dns-query"}, + {"DNS0.eu", "法国", "Paris", "欧洲", "https://dns0.eu/dns-query"}, +} + +var allowed = map[string]bool{"A": true, "AAAA": true, "CNAME": true, "MX": true, "NS": true, "TXT": true, "SOA": true, "CAA": true} + +func main() { + if len(os.Args) > 1 && os.Args[1] == "--healthcheck" { + resp, err := (&http.Client{Timeout: 2 * time.Second}).Get("http://127.0.0.1:" + env("PORT", "8080") + "/api/health") + if err != nil || resp.StatusCode != http.StatusOK { + os.Exit(1) + } + resp.Body.Close() + return + } + a := &app{queries: map[string]*query{}, client: &http.Client{Timeout: 6 * time.Second}} + mux := http.NewServeMux() + mux.HandleFunc("POST /api/dns/query", a.start) + mux.HandleFunc("GET /api/dns/query/{id}/events", a.events) + mux.HandleFunc("GET /api/health", func(w http.ResponseWriter, _ *http.Request) { + json.NewEncoder(w).Encode(map[string]string{"status": "ok"}) + }) + assets, _ := fs.Sub(webFS, "web") + mux.Handle("/", http.FileServer(http.FS(assets))) + addr := ":" + env("PORT", "8080") + log.Printf("DNS Orbit listening on %s", addr) + log.Fatal(http.ListenAndServe(addr, securityHeaders(mux))) +} + +func env(k, v string) string { + if x := os.Getenv(k); x != "" { + return x + } + return v +} + +func securityHeaders(next http.Handler) http.Handler { + return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { + w.Header().Set("X-Content-Type-Options", "nosniff") + w.Header().Set("X-Frame-Options", "DENY") + w.Header().Set("Referrer-Policy", "no-referrer") + next.ServeHTTP(w, r) + }) +} + +func normalizeDomain(raw string) (string, error) { + raw = strings.TrimSpace(raw) + if raw == "" { + return "", errors.New("请输入域名") + } + if !strings.Contains(raw, "://") { + raw = "https://" + raw + } + u, err := url.Parse(raw) + if err != nil || u.Hostname() == "" { + return "", errors.New("域名格式无效") + } + d := strings.TrimSuffix(strings.ToLower(u.Hostname()), ".") + if len(d) > 253 || strings.Contains(d, "_") || net.ParseIP(d) != nil { + return "", errors.New("仅支持公共域名") + } + parts := strings.Split(d, ".") + if len(parts) < 2 { + return "", errors.New("请输入完整公共域名") + } + for _, p := range parts { + if p == "" || len(p) > 63 || p[0] == '-' || p[len(p)-1] == '-' { + return "", errors.New("域名格式无效") + } + for _, c := range p { + if !(c >= 'a' && c <= 'z' || c >= '0' && c <= '9' || c == '-') { + return "", errors.New("域名格式无效") + } + } + } + return d, nil +} + +func (a *app) start(w http.ResponseWriter, r *http.Request) { + var in struct{ Domain, Type string } + if json.NewDecoder(io.LimitReader(r.Body, 4096)).Decode(&in) != nil { + http.Error(w, "invalid json", 400) + return + } + d, err := normalizeDomain(in.Domain) + t := strings.ToUpper(in.Type) + if err != nil || !allowed[t] { + if err == nil { + err = errors.New("不支持该记录类型") + } + http.Error(w, err.Error(), 400) + return + } + b := make([]byte, 6) + rand.Read(b) + q := &query{ID: "dns_" + hex.EncodeToString(b), Domain: d, Type: t, Created: time.Now(), Results: make(chan result, len(resolvers))} + a.mu.Lock() + a.queries[q.ID] = q + a.mu.Unlock() + go a.run(q) + w.Header().Set("Content-Type", "application/json") + json.NewEncoder(w).Encode(map[string]string{"queryId": q.ID, "domain": d, "type": t, "status": "running"}) +} + +func (a *app) run(q *query) { + var wg sync.WaitGroup + for _, res := range resolvers { + wg.Add(1) + go func(rs resolver) { defer wg.Done(); q.Results <- a.lookup(q, rs) }(res) + } + wg.Wait() + close(q.Results) + time.AfterFunc(5*time.Minute, func() { a.mu.Lock(); delete(a.queries, q.ID); a.mu.Unlock() }) +} + +func (a *app) lookup(q *query, rs resolver) result { + started := time.Now() + out := result{Resolver: rs.Name, Country: rs.Country, City: rs.City, Region: rs.Region, Status: "error", Records: []record{}} + u, err := url.Parse(rs.URL) + if err != nil { + out.Error = err.Error() + return out + } + params := u.Query() + params.Set("name", q.Domain) + params.Set("type", q.Type) + u.RawQuery = params.Encode() + ctx, cancel := context.WithTimeout(context.Background(), 6*time.Second) + defer cancel() + req, _ := http.NewRequestWithContext(ctx, "GET", u.String(), nil) + req.Header.Set("Accept", "application/dns-json") + resp, err := a.client.Do(req) + out.ResponseTime = time.Since(started).Milliseconds() + if err != nil { + if errors.Is(ctx.Err(), context.DeadlineExceeded) { + out.Status = "timeout" + } + out.Error = "查询失败" + return out + } + defer resp.Body.Close() + if resp.StatusCode/100 != 2 { + out.Error = fmt.Sprintf("HTTP %d", resp.StatusCode) + return out + } + var body struct { + Status int `json:"Status"` + Answer []struct { + Name string `json:"name"` + Type int `json:"type"` + TTL int `json:"TTL"` + Data string `json:"data"` + } `json:"Answer"` + } + if json.NewDecoder(io.LimitReader(resp.Body, 1<<20)).Decode(&body) != nil { + out.Error = "响应格式无效" + return out + } + if body.Status != 0 { + out.Status = "error" + out.Error = fmt.Sprintf("DNS RCODE %d", body.Status) + return out + } + if len(body.Answer) == 0 { + out.Status = "empty" + return out + } + for _, v := range body.Answer { + out.Records = append(out.Records, record{strings.Trim(v.Data, "\""), v.TTL}) + } + sort.Slice(out.Records, func(i, j int) bool { return out.Records[i].Value < out.Records[j].Value }) + out.Status = "success" + return out +} + +func (a *app) events(w http.ResponseWriter, r *http.Request) { + a.mu.RLock() + q := a.queries[r.PathValue("id")] + a.mu.RUnlock() + if q == nil { + http.Error(w, "query not found", 404) + return + } + w.Header().Set("Content-Type", "text/event-stream") + w.Header().Set("Cache-Control", "no-cache") + w.Header().Set("Connection", "keep-alive") + flusher, ok := w.(http.Flusher) + if !ok { + http.Error(w, "stream unsupported", 500) + return + } + for x := range q.Results { + b, _ := json.Marshal(x) + fmt.Fprintf(w, "event: result\ndata: %s\n\n", b) + flusher.Flush() + } + fmt.Fprint(w, "event: complete\ndata: {}\n\n") + flusher.Flush() +} diff --git a/main_test.go b/main_test.go new file mode 100644 index 0000000..8a581af --- /dev/null +++ b/main_test.go @@ -0,0 +1,18 @@ +package main + +import "testing" + +func TestNormalizeDomain(t *testing.T) { + cases := map[string]string{"example.com": "example.com", "https://WWW.Example.com/a": "www.example.com", "example.com/": "example.com"} + for in, want := range cases { + got, err := normalizeDomain(in) + if err != nil || got != want { + t.Fatalf("%q: got %q, %v", in, got, err) + } + } + for _, in := range []string{"localhost", "127.0.0.1", "bad_domain.com", "-bad.com"} { + if _, err := normalizeDomain(in); err == nil { + t.Fatalf("expected %q invalid", in) + } + } +} diff --git a/web/app.js b/web/app.js new file mode 100644 index 0000000..1320037 --- /dev/null +++ b/web/app.js @@ -0,0 +1,6 @@ +const $=s=>document.querySelector(s), state={results:[],filter:'all',domain:'',type:''}; +$('#theme').onclick=()=>{document.body.classList.toggle('light');localStorage.theme=document.body.classList.contains('light')?'light':'dark'};if(localStorage.theme==='light')document.body.classList.add('light'); +$('#form').onsubmit=async e=>{e.preventDefault();$('#error').textContent='';$('#submit').disabled=true;state.results=[];render();try{const res=await fetch('/api/dns/query',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({domain:$('#domain').value,type:$('#type').value})});if(!res.ok)throw new Error(await res.text());const q=await res.json();state.domain=q.domain;state.type=q.type;$('#queryTitle').textContent=`${q.domain} / ${q.type}`;$('#dashboard').hidden=false;$('#empty').hidden=true;const es=new EventSource(`/api/dns/query/${q.queryId}/events`);es.addEventListener('result',x=>{state.results.push(JSON.parse(x.data));render()});es.addEventListener('complete',()=>{es.close();$('#submit').disabled=false;$('#finished').textContent='COMPLETED '+new Date().toLocaleTimeString()})}catch(err){$('#error').textContent=err.message.trim();$('#submit').disabled=false}}; +function render(){const rs=state.results,ok=rs.filter(x=>x.status==='success'),bad=rs.filter(x=>x.status!=='success');$('#progress').textContent=`${rs.length} / 20`;$('#bar').style.width=`${rs.length*5}%`;$('#success').textContent=ok.length;$('#failed').textContent=bad.length;const signatures=new Set(ok.map(x=>x.records.map(r=>r.value).sort().join('|')));$('#consistent').textContent=!ok.length?'分析中':signatures.size===1?'一致':'不一致';$('#consistent').style.color=signatures.size>1?'var(--amber)':'var(--green)';let shown=rs.filter(x=>state.filter==='all'||state.filter==='success'&&x.status==='success'||state.filter==='issue'&&x.status!=='success');$('#rows').innerHTML=shown.map((x,i)=>`${esc(x.country)} · ${esc(x.city)}${esc(x.region)} / ${esc(x.resolver)}${label(x.status)}${x.records.length?x.records.map(r=>`${esc(r.value)}`).join('
'):'—'}${x.records[0]?.ttl??'—'}${x.responseTime?x.responseTime+' ms':'—'}`).join('');document.querySelectorAll('.copy').forEach(b=>b.onclick=()=>copyResult(state.results[+b.dataset.i]))} +function label(s){return({success:'成功',timeout:'超时',empty:'无记录',error:'失败'})[s]||s}function esc(s){return String(s).replace(/[&<>"']/g,c=>({'&':'&','<':'<','>':'>','"':'"',"'":'''}[c]))}function copyResult(x){navigator.clipboard.writeText(`${x.resolver}\t${x.status}\t${x.records.map(r=>r.value).join(', ')}`)} +$('#filters').onclick=e=>{if(!e.target.dataset.filter)return;document.querySelectorAll('#filters button').forEach(x=>x.classList.remove('active'));e.target.classList.add('active');state.filter=e.target.dataset.filter;render()};$('#copyAll').onclick=()=>navigator.clipboard.writeText(state.results.map(x=>`${x.country}/${x.city}\t${x.resolver}\t${label(x.status)}\t${x.records.map(r=>r.value).join(', ')}\t${x.responseTime}ms`).join('\n')); diff --git a/web/index.html b/web/index.html new file mode 100644 index 0000000..171e041 --- /dev/null +++ b/web/index.html @@ -0,0 +1,10 @@ +DNS Orbit · 全球解析观测站 +
DNS ORBITGLOBAL RESOLUTION GRID
20 NODES ONLINE
+
/ GLOBAL DNS INTELLIGENCE

看见域名解析
穿越全球的轨迹

连接 20 个公共 DNS 解析节点，实时检测记录传播、一致性与响应延迟。

+
⌁
+ +
◎

等待扫描指令

AWAITING TARGET DOMAIN
+ diff --git a/web/style.css b/web/style.css new file mode 100644 index 0000000..260d4eb --- /dev/null +++ b/web/style.css @@ -0,0 +1 @@ +:root{--bg:#06090f;--panel:#0c111b;--line:#1c2737;--text:#eaf4ff;--muted:#718198;--cyan:#42e8e0;--green:#60f5a5;--red:#ff6577;--amber:#ffc857}*{box-sizing:border-box}body.light{--bg:#eef4f7;--panel:#fff;--line:#d4e0e7;--text:#0c1d2c;--muted:#637789}*{margin:0}body{background:var(--bg);color:var(--text);font-family:Inter,ui-sans-serif,system-ui,sans-serif;min-height:100vh;transition:.25s}.grid{position:fixed;inset:0;pointer-events:none;opacity:.38;background-image:linear-gradient(var(--line) 1px,transparent 1px),linear-gradient(90deg,var(--line) 1px,transparent 1px);background-size:60px 60px;mask-image:linear-gradient(to bottom,#000,transparent 78%)}header,main,footer{position:relative;max-width:1240px;margin:auto}header{height:84px;display:flex;align-items:center;border-bottom:1px solid var(--line);padding:0 24px}.brand{color:var(--text);text-decoration:none;display:flex;align-items:center;gap:13px;font-weight:800;letter-spacing:2px}.brand small{display:block;color:var(--muted);font-size:8px;letter-spacing:2.6px;margin-top:4px}.logo{display:grid;place-items:center;width:38px;height:38px;border:1px solid var(--cyan);color:var(--cyan);box-shadow:inset 0 0 15px #42e8e022}.live{margin-left:auto;color:var(--muted);font:11px ui-monospace,monospace;letter-spacing:1px}.live i{display:inline-block;width:7px;height:7px;border-radius:50%;background:var(--green);box-shadow:0 0 10px var(--green);margin-right:8px}#theme{margin-left:25px;background:none;border:1px solid var(--line);color:var(--text);width:38px;height:38px;cursor:pointer}.hero{padding:76px 24px 62px;border-bottom:1px solid var(--line)}.eyebrow{color:var(--cyan);font:11px ui-monospace,monospace;letter-spacing:2px;margin-bottom:18px}.hero h1{font-size:clamp(42px,6vw,76px);line-height:1.04;letter-spacing:-4px;max-width:850px}.hero h1 em{font-style:normal;color:transparent;-webkit-text-stroke:1px var(--cyan)}.hero>p{color:var(--muted);font-size:15px;margin:24px 0 34px}form{display:flex;max-width:890px;gap:10px}.input{height:58px;background:var(--panel);border:1px solid var(--line);display:flex;align-items:center;flex:1}.input:focus-within{border-color:var(--cyan);box-shadow:0 0 0 3px #42e8e010}.input span{color:var(--cyan);font-size:22px;margin:0 14px}.input input{font:16px ui-monospace,monospace;min-width:0;flex:1;background:none;border:0;outline:0;color:var(--text)}select{height:100%;border:0;border-left:1px solid var(--line);background:var(--panel);color:var(--text);padding:0 20px;font-weight:700}form>button{border:0;background:var(--cyan);color:#041111;padding:0 25px;font-weight:800;letter-spacing:.5px;cursor:pointer}form>button:hover{filter:brightness(1.12)}form>button:disabled{opacity:.5}.error{color:var(--red);font-size:13px;margin-top:12px}.query-head{padding:42px 24px 22px;display:flex;align-items:end;justify-content:space-between}.query-head h2{font:28px ui-monospace,monospace}.query-head button,#copyAll{border:1px solid var(--line);background:var(--panel);color:var(--muted);padding:10px 15px;cursor:pointer}.stats{display:grid;grid-template-columns:2fr repeat(3,1fr);border:1px solid var(--line);margin:0 24px}.stats article{padding:20px;border-right:1px solid var(--line);background:#0c111b88}.light .stats article{background:#ffffffbb}.stats article:last-child{border:0}.stats label,.stats small{display:block;color:var(--muted);font:10px ui-monospace,monospace;letter-spacing:1.5px}.stats strong{display:block;font:28px ui-monospace,monospace;margin:10px 0 5px}.bar{height:2px;background:var(--line);margin-top:10px}.bar i{height:100%;display:block;width:0;background:var(--cyan);box-shadow:0 0 8px var(--cyan);transition:.25s}.toolbar{margin:22px 24px 10px;display:flex;justify-content:space-between;align-items:center;color:var(--muted);font:11px ui-monospace,monospace}.toolbar button{color:var(--muted);background:none;border:0;border-bottom:1px solid transparent;padding:9px 14px;cursor:pointer}.toolbar button.active{color:var(--cyan);border-color:var(--cyan)}.table-wrap{margin:0 24px 70px;border:1px solid var(--line);overflow:auto}table{border-collapse:collapse;width:100%;min-width:800px;background:var(--panel)}th{text-align:left;color:var(--muted);font:10px ui-monospace,monospace;letter-spacing:1px;padding:13px 16px;border-bottom:1px solid var(--line)}td{padding:15px 16px;border-bottom:1px solid var(--line);font-size:13px}td small{display:block;color:var(--muted);margin-top:4px}.status{font:10px ui-monospace,monospace;text-transform:uppercase}.status:before{content:'';display:inline-block;width:6px;height:6px;border-radius:50%;margin-right:7px}.success{color:var(--green)}.success:before{background:var(--green)}.timeout,.error-s{color:var(--red)}.timeout:before,.error-s:before{background:var(--red)}.empty-s{color:var(--amber)}.empty-s:before{background:var(--amber)}.copy{background:none;border:0;color:var(--muted);cursor:pointer}.empty{text-align:center;padding:70px 20px;color:var(--muted)}.radar{width:110px;height:110px;border:1px solid var(--line);border-radius:50%;margin:0 auto 22px;display:grid;place-items:center;position:relative}.radar i{position:absolute;border:1px solid var(--line);border-radius:50%;inset:15px}.radar i:nth-child(2){inset:35px}.radar i:nth-child(3){inset:54px;background:var(--cyan);box-shadow:0 0 14px var(--cyan)}.radar b{animation:spin 3s linear infinite;width:50%;height:1px;background:linear-gradient(90deg,var(--cyan),transparent);transform-origin:right}@keyframes spin{to{transform:rotate(360deg)}}.empty small{font:9px ui-monospace,monospace;letter-spacing:2px}.empty p{margin-bottom:8px}footer{border-top:1px solid var(--line);padding:22px 24px;display:flex;justify-content:space-between;color:var(--muted);font:9px ui-monospace,monospace;letter-spacing:1px}@media(max-width:700px){header{height:68px}.live{display:none}.hero{padding-top:52px}.hero h1{letter-spacing:-2px}form{display:block}.input{width:100%}form>button{height:52px;width:100%;margin-top:10px}.stats{grid-template-columns:1fr 1fr}.stats article:nth-child(2){border-right:0}.stats article{border-bottom:1px solid var(--line)}.query-head{align-items:start;gap:20px}.query-head h2{font-size:20px}footer{display:block;line-height:2}}