连续做两次dig trace第二次就会出现一堆的连接重置的错误提示

[andlink01]

`root@ubuntu ~ # dig +trace youtube.com @10.10.10.10

; <<>> DiG 9.18.28-0ubuntu0.24.04.1-Ubuntu <<>> +trace youtube.com @10.10.10.10
;; global options: +cmd
. 498 IN NS h.root-servers.net.
. 498 IN NS f.root-servers.net.
. 498 IN NS b.root-servers.net.
. 498 IN NS d.root-servers.net.
. 498 IN NS l.root-servers.net.
. 498 IN NS c.root-servers.net.
. 498 IN NS e.root-servers.net.
. 498 IN NS m.root-servers.net.
. 498 IN NS g.root-servers.net.
. 498 IN NS k.root-servers.net.
. 498 IN NS a.root-servers.net.
. 498 IN NS i.root-servers.net.
. 498 IN NS j.root-servers.net.
. 498 IN RRSIG NS 8 0 518400 20241223170000 20241210160000 61050 . H0sM1+3RprBNzOV2cYwCDd0dlCOCDtDWmeQVgZ5X8tHx4zDxul8VHVPT RXcIIxmb4sn0poR+p2bMwmmUFgTT0QmvP8THZeCiG92z5jtv5JL0N0TU tfHMlJSOrHlz54DP0ZeuP56P5jqdzArpfHXZ/aK/caKmpqZdxkHlN/I1 1OtuLfS0F5u0So8vH6OzDe86etNE/AD0nCHNnso7hpJaxG6Ux8kV4mxY d37fXlkDbeMEvPWAM4fG6rN5U7GkjuxWw+TmQ/wSqiLAJAA3m5WpmxXR k12x7ijtDHQFo97a2MID5TloaqjszOnddNi0i4Z6xCFmRJRk4zOTZWTt rRKyEA==
;; Received 1933 bytes from 10.10.10.10#53(10.10.10.10) in 1 ms

;; communications error to 198.97.190.53#53: connection reset
;; communications error to 198.97.190.53#53: connection reset
;; communications error to 198.97.190.53#53: connection reset
;; communications error to 192.112.36.4#53: connection reset
com. 172800 IN NS a.gtld-servers.net.
com. 172800 IN NS b.gtld-servers.net.
com. 172800 IN NS c.gtld-servers.net.
com. 172800 IN NS d.gtld-servers.net.
com. 172800 IN NS e.gtld-servers.net.
com. 172800 IN NS f.gtld-servers.net.
com. 172800 IN NS g.gtld-servers.net.
com. 172800 IN NS h.gtld-servers.net.
com. 172800 IN NS i.gtld-servers.net.
com. 172800 IN NS j.gtld-servers.net.
com. 172800 IN NS k.gtld-servers.net.
com. 172800 IN NS l.gtld-servers.net.
com. 172800 IN NS m.gtld-servers.net.
com. 86400 IN DS 19718 13 2 8ACBB0CD28F41250A80A491389424D341522D946B0DA0C0291F2D3D7 71D7805A
com. 86400 IN RRSIG DS 8 1 86400 20241223170000 20241210160000 61050 . Mx4q+eUEsfunMjRDIOZYGsrRvvdT+G7DUpaad2i1AcJTooygMv+zykHv P3N5m/fldynv+UAj2HJHeJE4+mT5BtYPOIctWRL+Tf0YEnfCex5AsiVm eDRSWmBCbzXvkbUwsmqSuBS5IDH2s6lhSHsq2WQ9/Y12E9kqja8jWHOz lewuaoaC7MS5uXkwrH2jzfMFBoseF9acymF1omQfyt4QzW9nMG2gdvad HbUP4tY3GjNRoZN2JbwxMtZKVuEMuqRFQqJ2ZRtyXhT4DuEP+5MNyGRi Q64ex8nvoE/dzlY36cOnZRk9kWIcRP9bUlqQWtPEWxM/tFEAr3oZzv06 h07h/w==
;; Received 1171 bytes from 192.58.128.30#53(j.root-servers.net) in 22 ms

;; Connection to 2001:503:d2d::30#53(2001:503:d2d::30) for youtube.com failed: network unreachable.
;; communications error to 192.55.83.30#53: connection reset
;; communications error to 192.31.80.30#53: connection reset
;; communications error to 192.43.172.30#53: connection reset
;; communications error to 192.42.93.30#53: connection reset
;; communications error to 192.26.92.30#53: connection reset
;; communications error to 192.54.112.30#53: connection reset
;; Connection to 192.41.162.30#53(192.41.162.30) for youtube.com failed: timed out.
;; communications error to 192.35.51.30#53: connection reset
;; communications error to 192.33.14.30#53: connection reset
;; communications error to 192.12.94.30#53: connection reset
;; communications error to 192.52.178.30#53: connection reset
;; communications error to 192.48.79.30#53: connection reset
;; communications error to 192.5.6.30#53: connection reset
;; no servers could be reached

`

[kkkgo]

dig trace是dig自己模拟递归，和查询的dns服务器无关。

[andlink01]

那么223.5.5.5给你返回正确的ip了吗？都是模拟递归，只是区别于模拟对象不同。

我还有另外一台机器安装的mosdns 上游都是公共dns，使用dig trace也不会报错

[kkkgo]

这里讨论的是返回“正确”的IP，不是有没有返回结果。
我来告诉你发生了什么，以其中一行为例：
;; communications error to 198.97.190.53#53: connection reset
198.97.190.53是DNS根服务器，你可以在这里找到：https://www.iana.org/domains/root/servers
换句话说就是你向DNS根服务器查询的时候失败了。很显然，这和本地DNS服务器本身并没有关系。

[andlink01]

好吧，还是不太懂，谢谢你的解答。就是不清楚是什么原因造成这种失败的。

[kkkgo]

失败才是正常的，成功原因就是223.5.5.5回应抢答了错误的DNS结果，也就是俗称的DNS污染。

[andlink01]

好的，谢谢！属于正常就行了