redroid can't connect public network, but it can connect to host network

[peilin-liu]

redroid can't connect public network, but it can connect to host network

[zhouziyang]

There are many network probe failures. Did the default DNS server (8.8.8.8) accessible?

[peilin-liu]

There are many network probe failures. Did the default DNS server (8.8.8.8) accessible?

I forgot to mention that Docker uses cgroup v2.

ping 8.8.8.8. It works well on the host。

root@orangepi5pro:~# ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
64 bytes from 8.8.8.8: icmp_seq=1 ttl=55 time=12.8 ms
64 bytes from 8.8.8.8: icmp_seq=2 ttl=55 time=17.0 ms
64 bytes from 8.8.8.8: icmp_seq=3 ttl=55 time=20.0 ms
64 bytes from 8.8.8.8: icmp_seq=4 ttl=55 time=18.4 ms
64 bytes from 8.8.8.8: icmp_seq=5 ttl=55 time=20.0 ms
^C
--- 8.8.8.8 ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 4007ms
rtt min/avg/max/mdev = 12.779/17.619/19.973/2.664 ms

root@orangepi5pro:~# telnet 8.8.8.8 53
Trying 8.8.8.8...
Connected to 8.8.8.8.
Escape character is '^]'.
‘^]
telnet> ls
?Invalid command
telnet>

[peilin-liu]

There are many network probe failures. Did the default DNS server (8.8.8.8) accessible?

Some potentially useful information:

2ce46b870a06:/ # logcat | grep -A 20 'iptables' | head -n 20
06-14 18:05:37.534 177 844 E IptablesRestoreController: iptables error:
06-14 18:05:37.534 177 844 E IptablesRestoreController: ------- COMMAND -------
06-14 18:05:37.534 177 844 E IptablesRestoreController: *filter
06-14 18:05:37.534 177 844 E IptablesRestoreController: -nvx -L tetherctrl_counters
06-14 18:05:37.534 177 844 E IptablesRestoreController: COMMIT
06-14 18:05:37.534 177 844 E IptablesRestoreController: ------- ERROR -------
06-14 18:05:37.534 177 844 E IptablesRestoreController: iptables-restore v1.8.7 (legacy): iptables-restore: unable to initialize table 'filter'
06-14 18:05:37.534 177 844 E IptablesRestoreController:
06-14 18:05:37.534 177 844 E IptablesRestoreController: Error occurred at line: 1
06-14 18:05:37.534 177 844 E IptablesRestoreController: Try `iptables-restore -h' or 'iptables-restore --help' for more information.
06-14 18:05:37.534 177 844 E IptablesRestoreController: ----------------------

[zhouziyang]

From logcat.txt, something wrong with networking.

06-14 09:43:09.285   177  1037 W resolv  : Validating DnsTlsServer 8.8.8.8 with mark 0xf0064                                
06-14 09:43:09.285   237   311 D CompatibilityChangeReporter: Compat change id reported: 161252188; UID 10066; state: DISABL
06-14 09:43:09.285   177  1037 W resolv  : Socket failed to connect: Network is unreachable                                 
06-14 09:43:09.285   177  1037 W resolv  : TCP Handshake failed: 101                                                        
06-14 09:43:09.285   177  1037 W resolv  : query failed                                                                     
06-14 09:43:09.285   177  1037 W resolv  : validateDnsTlsServer returned 0 for 8.8.8.8                                      
06-14 09:43:09.285   177  1037 W resolv  : Validation failed                                                                
...
06-14 09:43:13.311   827  1821 D NetworkMonitor/100: PROBE_HTTP http://connectivitycheck.gstatic.com/ge
to resolve host "connectivitycheck.gstatic.com": No address associated with hostname                   
06-14 09:43:13.311   827  1820 D NetworkMonitor/100: PROBE_HTTPS https://www.google.com/generate_204 Pr
st "www.google.com": No address associated with hostname                                               
06-14 09:43:13.313   237   760 D CompatibilityChangeReporter: Compat change id reported: 229362273; UID
06-14 09:43:13.314   177  1824 I resolv  : GetAddrInfoHandler::run: {100 983140 100 983140 1073 1}     
06-14 09:43:13.314  1686  1761 I BinaryDictionaryFileDumper: reinitializeClientRecordInDictionaryConten
06-14 09:43:13.315   827  1819 D NetworkMonitor/100: PROBE_FALLBACK http://play.googleapis.com/generate
olve host "play.googleapis.com": No address associated with hostname                                   
06-14 09:43:13.316   827  1819 D NetworkMonitor/100: isCaptivePortal: isSuccessful()=false isPortal()=f
06-14 09:43:13.316   237   602 D ConnectivityService: [100 ETHERNET] validation failed                 

and route table for eth0 is empty (check network.txt).

[peilin-liu]

DnsTlsServer

The possible reason is that it is necessary to incorporate some Android kernel code to support iptables quota2.