可以考虑加入cdn-apple和akadns

[felixonmars]

可以考虑加入cdn-apple和akadns

[felixonmars]

最好给出具体的例子. 域名解析的结果若不在境内, 对 VPN 访问会产生减速结果.

[dawncold]

cdn-apple.com的dig结果，默认使用的8.8.8.8：

dig store.storeimages.cdn-apple.com

; <<>> DiG 9.8.3-P1 <<>> store.storeimages.cdn-apple.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 12255
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;store.storeimages.cdn-apple.com. IN    A

;; ANSWER SECTION:
store.storeimages.cdn-apple.com. 1716 IN CNAME  store.storeimages.apple.com.akadns.net.
store.storeimages.apple.com.akadns.net. 179 IN CNAME store.storeimages.cdn-apple.com.edgekey.net.
store.storeimages.cdn-apple.com.edgekey.net. 19769 IN CNAME e5239.e9.akamaiedge.net.
e5239.e9.akamaiedge.net. 19 IN  A   23.42.123.224

;; Query time: 404 msec
;; SERVER: 192.168.2.1#53(192.168.2.1)
;; WHEN: Sat Jan  3 15:09:35 2015
;; MSG SIZE  rcvd: 205

如果用114dns的话

dig @114.114.114.114 store.storeimages.cdn-apple.com

; <<>> DiG 9.8.3-P1 <<>> @114.114.114.114 store.storeimages.cdn-apple.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3275
;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;store.storeimages.cdn-apple.com. IN    A

;; ANSWER SECTION:
store.storeimages.cdn-apple.com. 2676 IN CNAME  store.storeimages.apple.com.akadns.net.
store.storeimages.apple.com.akadns.net. 100 IN CNAME store.storeimages.cdn-apple.ccgslb.com.cn.
store.storeimages.cdn-apple.ccgslb.com.cn. 1025 IN CNAME cc00125.h.cnc.ccgslb.com.cn.
cc00125.h.cnc.ccgslb.com.cn. 53 IN  A   111.202.7.170
cc00125.h.cnc.ccgslb.com.cn. 53 IN  A   111.202.7.165

;; Query time: 85 msec
;; SERVER: 114.114.114.114#53(114.114.114.114)
;; WHEN: Sat Jan  3 15:11:17 2015
;; MSG SIZE  rcvd: 216

app store为例，在国内由蓝汛提供cdn，如果使用8.8.8.8做dns的话：

dig a1253.phobos-apple.com.akadns.net @8.8.8.8

; <<>> DiG 9.8.3-P1 <<>> a1253.phobos-apple.com.akadns.net @8.8.8.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31328
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;a1253.phobos-apple.com.akadns.net. IN  A

;; ANSWER SECTION:
a1253.phobos-apple.com.akadns.net. 119 IN CNAME a1253.phobos.apple.com.edgesuite.net.
a1253.phobos.apple.com.edgesuite.net. 1838 IN CNAME a1253.da1.akamai.net.
a1253.da1.akamai.net.   19  IN  A   23.2.16.88
a1253.da1.akamai.net.   19  IN  A   23.2.16.96

;; Query time: 538 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Sat Jan  3 16:20:50 2015
;; MSG SIZE  rcvd: 161

使用114dns的话：

dig a1253.phobos-apple.com.akadns.net

; <<>> DiG 9.8.3-P1 <<>> a1253.phobos-apple.com.akadns.net
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 971
;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;a1253.phobos-apple.com.akadns.net. IN  A

;; ANSWER SECTION:
a1253.phobos-apple.com.akadns.net. 85 IN CNAME  a1201-a1400.itunes-apple.com.akadns.net.
a1201-a1400.itunes-apple.com.akadns.net. 186 IN CNAME 0gq2p7eckbs26f.mwcname.com.
0gq2p7eckbs26f.mwcname.com. 593 IN  CNAME   app.dlmix.glb0.lxdns.com.
app.dlmix.glb0.lxdns.com. 30    IN  A   118.212.139.36
app.dlmix.glb0.lxdns.com. 30    IN  A   61.179.107.153

;; Query time: 69 msec
;; SERVER: 192.168.2.1#53(192.168.2.1)
;; WHEN: Sat Jan  3 16:20:38 2015
;; MSG SIZE  rcvd: 197

[felixonmars]

好的, 暂定加入下面两个规则:

store.storeimages.cdn-apple.com
phobos-apple.com.akadns.net

发现更多例子欢迎更新 :)

[dawncold]

其实刚刚akadns.net只是举了一个栗子，比如打开app store这个应用会有很多akadns.net的请求，例如：

这样更准确一些：*apple.com.akadns.net，不知道dnsmasq支持吗？

[felixonmars]

不支持哦, 只能发现一个加一个啦 :)

截图里的可以用这一个规则涵盖:

itunes-apple.com.akadns.net

看看还有吗?

[dawncold]

还遇到过*apple.com.akadns.net，其他的出现频率不算高

[felixonmars]

唔... 那以后看到的时候再补充吧~ 多谢!

[lesswest]

Mac 地图加载不出来，不知道是哪一条规则漏掉了，应该怎么查找呢？

[felixonmars]

在网关上抓 DNS 包是相对方便点的办法。

[zizhengwu]

我个人把所有苹果 CDN 的地址都删去了。因为经过实测，Apple Music 还是使用 VPN 显著地更为流畅。

[felixonmars]

这个问题和 ISP 有关。我这里（武汉）长宽删掉苹果 CDN 走 VPN 才能成功访问，而电信则加上后显著访问更顺畅。

[felixonmars]

Ref #156 苹果 CDN 已经拆到一个单独的文件（apple.china.conf）中，可以按需取用 :)
@zizhengwu