彻底修复送中节点 Google Play Store 应用市场卡下载进度条问题

博主：量子涨落
发布时间：2023 年 04 月 22 日
5284 次浏览
17 条评论
38973字数
分类： Android

请自行排除 Play Store 缓存数据、权限问题以及 clash 配置问题，本文不科普送中节点含义，可自行在文章参考资料寻找
也不对 clash 基本配置进行说明，以下仅表示在无其他配置错误干扰的因素的前提下，使用这个规则能够必定正常使用谷歌部署在国内的北上广服务器进行国内直连下载

----------

更新：2025-03-31，有评论说不可以，请自查自身 clash 配置，包括不局限于（DNS 劫持、 允许应用绕过、覆写里面的 DNS 策略）
附使用送中节点最新抓取日志，其中 `192.0.2.1` 表示为节点地址（这是一个 RFC 5737 定义的专门用于文档示例的 IPv4 单播地址）
- 以下测试环境 ：
Clash Meta for Android v2.11.7
Google Play Store v43.6.34-23

# Capture on 2025-03-31 17:08:52.398
    17:08:52.399    Info: [APP] Logcat level: debug
    17:08:57.261   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:57581
    17:08:57.263   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:12666
    17:08:57.267   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:8879
    17:08:57.269   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:60880
    17:08:57.275   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:23809
    17:08:57.279   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:53471
    17:08:57.287   Debug: [Rule] use default rules
    17:08:57.287   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
    17:08:57.327    Info: [TCP] 172.19.0.1:56554 --> play.googleapis.com:443 match DomainSuffix(play.googleapis.com) using 国外[日本送中节点]
    17:08:57.336   Debug: [DNS] resolve play-fe.googleapis.com A from tls://one.one.one.one:853
    17:08:57.336   Debug: [DNS] cache hit one.one.one.one --> [1.0.0.1 1.1.1.1] A, expire at 2025-04-01 16:52:33
    17:08:57.340   Debug: [DNS] resolve play-fe.googleapis.com A from udp://1.0.0.1:53
    17:08:57.342   Debug: [DNS] resolve play-fe.googleapis.com A from tls://dns.adguard.com:853
    17:08:57.342   Debug: [DNS] resolve play-fe.googleapis.com A from udp://8.8.4.4:53
    17:08:57.342   Debug: [Rule] use default rules
    17:08:57.342   Debug: [Rule] use default rules
    17:08:57.342   Debug: [PKG] 172.19.0.1:55790 --> play-fe.googleapis.com:443 by 10161[com.android.vending]
    17:08:57.342   Debug: [PKG] 172.19.0.1:55788 --> play-fe.googleapis.com:443 by 10161[com.android.vending]
    17:08:57.342   Debug: [DNS] cache hit dns.adguard.com --> [94.140.14.14 94.140.15.15] A, expire at 2025-04-01 05:49:14
    17:08:57.342   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
    17:08:57.345   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
    17:08:57.371    Info: [TCP] 172.19.0.1:55788(com.android.vending) --> play-fe.googleapis.com:443 match DomainSuffix(googleapis.com) using 国外[日本送中节点]
    17:08:57.375    Info: [TCP] 172.19.0.1:55790(com.android.vending) --> play-fe.googleapis.com:443 match DomainSuffix(googleapis.com) using 国外[日本送中节点]
    17:08:57.419   Debug: [Rule] use default rules
    17:08:57.423   Debug: [PKG] 172.19.0.1:55804 --> play-fe.googleapis.com:443 by 10161[com.android.vending]
    17:08:57.423   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
    17:08:57.452    Info: [TCP] 172.19.0.1:55804(com.android.vending) --> play-fe.googleapis.com:443 match DomainSuffix(googleapis.com) using 国外[日本送中节点]
    17:08:57.608   Debug: [DNS] play-fe.googleapis.com --> [142.250.217.110] A from udp://8.8.4.4:53
    17:08:57.609   Debug: [Rule] use default rules
    17:08:57.611   Debug: [Rule] use default rules
    17:08:57.612   Debug: [PKG] 172.19.0.1:56628 --> play-fe.googleapis.com:443 by 10161[com.android.vending]
    17:08:57.612   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
    17:08:57.612   Debug: [PKG] 172.19.0.1:60181 --> play-fe.googleapis.com:443 by 10161[com.android.vending]
    17:08:57.613    Info: [UDP] 172.19.0.1:56628(com.android.vending) --> play-fe.googleapis.com:443 match DomainSuffix(googleapis.com) using 国外[日本送中节点]
    17:08:57.617   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
    17:08:57.617    Info: [UDP] 172.19.0.1:60181(com.android.vending) --> play-fe.googleapis.com:443 match DomainSuffix(googleapis.com) using 国外[日本送中节点]
    17:08:58.034   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:24873
    17:08:58.037   Debug: [DNS] resolve play-lh.googleusercontent.com A from udp://119.28.28.28:53
    17:08:58.038   Debug: [DNS] resolve play-lh.googleusercontent.com A from udp://119.29.29.29:53
    17:08:58.039   Debug: [Rule] use default rules
    17:08:58.039   Debug: [Rule] use default rules
    17:08:58.040   Debug: [PKG] 172.19.0.1:48864 --> play-lh.googleusercontent.com:443 by 10161[com.android.vending]
    17:08:58.040   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
    17:08:58.040   Debug: [PKG] 172.19.0.1:48866 --> play-lh.googleusercontent.com:443 by 10161[com.android.vending]
    17:08:58.041   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
    17:08:58.056   Debug: [DNS] play-lh.googleusercontent.com --> [142.250.69.214] A from udp://119.29.29.29:53
    17:08:58.056   Debug: [DNS] resolve play-lh.googleusercontent.com A from tls://one.one.one.one:853
    17:08:58.057   Debug: [DNS] cache hit one.one.one.one --> [1.0.0.1 1.1.1.1] A, expire at 2025-04-01 16:52:33
    17:08:58.057   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:20875
    17:08:58.057   Debug: [DNS] resolve play-lh.googleusercontent.com A from udp://8.8.4.4:53
    17:08:58.057   Debug: [DNS] resolve play-lh.googleusercontent.com A from tls://dns.adguard.com:853
    17:08:58.057   Debug: [DNS] resolve play-lh.googleusercontent.com A from udp://1.0.0.1:53
    17:08:58.058   Debug: [DNS] cache hit dns.adguard.com --> [94.140.14.14 94.140.15.15] A, expire at 2025-04-01 05:49:14
    17:08:58.060   Debug: [Rule] use default rules
    17:08:58.060   Debug: [PKG] 172.19.0.1:49476 --> www.gstatic.com:443 by 10161[com.android.vending]
    17:08:58.061   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
    17:08:58.062   Debug: [Rule] use default rules
    17:08:58.063   Debug: [PKG] 172.19.0.1:48884 --> play-lh.googleusercontent.com:443 by 10161[com.android.vending]
    17:08:58.063   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
    17:08:58.067   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:34729
    17:08:58.069    Info: [TCP] 172.19.0.1:48866(com.android.vending) --> play-lh.googleusercontent.com:443 match DomainSuffix(googleusercontent.com) using 国外[日本送中节点]
    17:08:58.074    Info: [TCP] 172.19.0.1:48864(com.android.vending) --> play-lh.googleusercontent.com:443 match DomainSuffix(googleusercontent.com) using 国外[日本送中节点]
    17:08:58.091    Info: [TCP] 172.19.0.1:48884(com.android.vending) --> play-lh.googleusercontent.com:443 match DomainSuffix(googleusercontent.com) using 国外[日本送中节点]
    17:08:58.093   Debug: [Rule] use default rules
    17:08:58.093    Info: [TCP] 172.19.0.1:49476(com.android.vending) --> www.gstatic.com:443 match DomainSuffix(gstatic.com) using 国外[日本送中节点]
    17:08:58.093   Debug: [PKG] 172.19.0.1:54066 --> i.ytimg.com:443 by 10161[com.android.vending]
    17:08:58.093   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
    17:08:58.127    Info: [TCP] 172.19.0.1:54066(com.android.vending) --> i.ytimg.com:443 match DomainSuffix(ytimg.com) using 国外[日本送中节点]
    17:08:58.349   Debug: [DNS] play-lh.googleusercontent.com --> [142.250.69.214] A from udp://8.8.4.4:53
    17:08:58.350   Debug: [Rule] use default rules
    17:08:58.351   Debug: [PKG] 172.19.0.1:39634 --> play-lh.googleusercontent.com:443 by 10161[com.android.vending]
    17:08:58.352   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
    17:08:58.353    Info: [UDP] 172.19.0.1:39634(com.android.vending) --> play-lh.googleusercontent.com:443 match DomainSuffix(googleusercontent.com) using 国外[日本送中节点]
    17:09:01.546   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:45021
    17:09:01.549   Debug: [DNS] resolve play-apps-features.googleusercontent.com A from udp://119.29.29.29:53
    17:09:01.549   Debug: [DNS] resolve play-apps-features.googleusercontent.com A from udp://119.28.28.28:53
    17:09:01.550   Debug: [Rule] use default rules
    17:09:01.550   Debug: [Rule] use default rules
    17:09:01.551   Debug: [PKG] 172.19.0.1:57760 --> play-apps-features.googleusercontent.com:443 by 10161[com.android.vending]
    17:09:01.551   Debug: [PKG] 172.19.0.1:57758 --> play-apps-features.googleusercontent.com:443 by 10161[com.android.vending]
    17:09:01.551   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
    17:09:01.551   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
    17:09:01.582   Debug: [Rule] use default rules
    17:09:01.582   Debug: [Rule] use default rules
    17:09:01.583   Debug: [PKG] 172.19.0.1:57766 --> play-apps-features.googleusercontent.com:443 by 10161[com.android.vending]
    17:09:01.584   Debug: [PKG] 172.19.0.1:57768 --> play-apps-features.googleusercontent.com:443 by 10161[com.android.vending]
    17:09:01.584   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
    17:09:01.586   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
    17:09:01.587    Info: [TCP] 172.19.0.1:57760(com.android.vending) --> play-apps-features.googleusercontent.com:443 match DomainSuffix(googleusercontent.com) using 国外[日本送中节点]
    17:09:01.590    Info: [TCP] 172.19.0.1:57758(com.android.vending) --> play-apps-features.googleusercontent.com:443 match DomainSuffix(googleusercontent.com) using 国外[日本送中节点]
    17:09:01.612    Info: [TCP] 172.19.0.1:57766(com.android.vending) --> play-apps-features.googleusercontent.com:443 match DomainSuffix(googleusercontent.com) using 国外[日本送中节点]
    17:09:01.619    Info: [TCP] 172.19.0.1:57768(com.android.vending) --> play-apps-features.googleusercontent.com:443 match DomainSuffix(googleusercontent.com) using 国外[日本送中节点]
    17:09:01.948   Debug: [DNS] play-apps-features.googleusercontent.com --> [172.217.14.193] A from udp://119.29.29.29:53
    17:09:01.951   Debug: [DNS] resolve play-apps-features.googleusercontent.com A from tls://one.one.one.one:853
    17:09:01.953   Debug: [DNS] resolve play-apps-features.googleusercontent.com A from udp://8.8.4.4:53
    17:09:01.955   Debug: [DNS] resolve play-apps-features.googleusercontent.com A from udp://1.0.0.1:53
    17:09:01.956   Debug: [DNS] resolve play-apps-features.googleusercontent.com A from tls://dns.adguard.com:853
    17:09:01.957   Debug: [DNS] cache hit one.one.one.one --> [1.0.0.1 1.1.1.1] A, expire at 2025-04-01 16:52:33
    17:09:01.957   Debug: [DNS] cache hit dns.adguard.com --> [94.140.14.14 94.140.15.15] A, expire at 2025-04-01 05:49:14
    17:09:02.222   Debug: [DNS] play-apps-features.googleusercontent.com --> [142.250.217.97] A from udp://8.8.4.4:53
    17:09:02.223   Debug: [Rule] use default rules
    17:09:02.225   Debug: [PKG] 172.19.0.1:49130 --> play-apps-features.googleusercontent.com:443 by 10161[com.android.vending]
    17:09:02.227   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
    17:09:02.228    Info: [UDP] 172.19.0.1:49130(com.android.vending) --> play-apps-features.googleusercontent.com:443 match DomainSuffix(googleusercontent.com) using 国外[日本送中节点]
    17:09:04.544   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:5497
    17:09:04.546   Debug: [Rule] use default rules
    17:09:04.547   Debug: [Rule] use default rules
    17:09:04.547   Debug: [PKG] 172.19.0.1:38414 --> www.google.com:443 by 10161[com.android.vending]
    17:09:04.548   Debug: [PKG] 172.19.0.1:38416 --> www.google.com:443 by 10161[com.android.vending]
    17:09:04.548   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
    17:09:04.549   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
    17:09:04.580    Info: [TCP] 172.19.0.1:38416(com.android.vending) --> www.google.com:443 match DomainSuffix(google.com) using 国外[日本送中节点]
    17:09:04.595    Info: [TCP] 172.19.0.1:38414(com.android.vending) --> www.google.com:443 match DomainSuffix(google.com) using 国外[日本送中节点]
    17:09:05.526   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:22258
    17:09:05.528   Debug: [Rule] use default rules
    17:09:05.529   Debug: [DNS] resolve connectivitycheck.gstatic.com A from udp://119.28.28.28:53
    17:09:05.529   Debug: [DNS] resolve connectivitycheck.gstatic.com A from udp://119.29.29.29:53
    17:09:05.529   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:9369
    17:09:05.533   Debug: [DNS] cache hit play-lh.googleusercontent.com --> [142.250.69.214] A, expire at 2025-03-31 17:13:58
    17:09:05.533   Debug: [Rule] use default rules
    17:09:05.534   Debug: [PKG] 172.19.0.1:36122 --> play-lh.googleusercontent.com:443 by 10161[com.android.vending]
    17:09:05.534   Debug: [Rule] use default rules
    17:09:05.534   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
    17:09:05.534    Info: [UDP] 172.19.0.1:36122(com.android.vending) --> play-lh.googleusercontent.com:443 match DomainSuffix(googleusercontent.com) using 国外[日本送中节点]
    17:09:05.535   Debug: [PKG] 172.19.0.1:48926 --> play-lh.googleusercontent.com:443 by 10161[com.android.vending]
    17:09:05.535   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
    17:09:05.546   Debug: [DNS] connectivitycheck.gstatic.com --> [203.208.41.98] A from udp://119.29.29.29:53
    17:09:05.582    Info: [TCP] 172.19.0.1:48926(com.android.vending) --> play-lh.googleusercontent.com:443 match DomainSuffix(googleusercontent.com) using 国外[日本送中节点]
    17:09:05.584    Info: [TCP] 172.19.0.1:33882 --> connectivitycheck.gstatic.com:443 match Domain(connectivitycheck.gstatic.com) using DIRECT
    17:09:05.800   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:30108
    17:09:05.802   Debug: [DNS] cache hit play-fe.googleapis.com --> [142.250.217.110] A, expire at 2025-03-31 17:13:57
    17:09:05.803   Debug: [Rule] use default rules
    17:09:05.803   Debug: [PKG] 172.19.0.1:48883 --> play-fe.googleapis.com:443 by 10161[com.android.vending]
    17:09:05.803   Debug: [Rule] use default rules
    17:09:05.804   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
    17:09:05.804    Info: [UDP] 172.19.0.1:48883(com.android.vending) --> play-fe.googleapis.com:443 match DomainSuffix(googleapis.com) using 国外[日本送中节点]
    17:09:05.804   Debug: [PKG] 172.19.0.1:55880 --> play-fe.googleapis.com:443 by 10161[com.android.vending]
    17:09:05.804   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
    17:09:05.833    Info: [TCP] 172.19.0.1:55880(com.android.vending) --> play-fe.googleapis.com:443 match DomainSuffix(googleapis.com) using 国外[日本送中节点]
    17:09:06.412   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:44423
    17:09:06.415   Debug: [DNS] resolve services.googleapis.cn A from udp://119.28.28.28:53
    17:09:06.415   Debug: [DNS] resolve services.googleapis.cn A from udp://119.29.29.29:53
    17:09:06.415   Debug: [Rule] use default rules
    17:09:06.429   Debug: [DNS] services.googleapis.cn --> [113.108.239.226] A from udp://119.29.29.29:53
    17:09:06.430   Debug: [Rule] use default rules
    17:09:06.430    Info: [UDP] 172.19.0.1:44279 --> services.googleapis.cn:443 match DomainSuffix(services.googleapis.cn) using DIRECT
    17:09:06.439    Info: [TCP] 172.19.0.1:59534 --> services.googleapis.cn:443 match DomainSuffix(services.googleapis.cn) using DIRECT
    17:09:06.514   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:8277
    17:09:06.539   Debug: [DNS] resolve rr1---sn-j5o7dn7e.xn--ngstr-lra8j.com A from udp://119.28.28.28:53
    17:09:06.540   Debug: [DNS] resolve rr1---sn-j5o7dn7e.xn--ngstr-lra8j.com A from udp://119.29.29.29:53
    17:09:06.540   Debug: [Rule] use default rules
    17:09:06.541   Debug: [PKG] 172.19.0.1:34852 --> rr1---sn-j5o7dn7e.xn--ngstr-lra8j.com:443 by 10161[com.android.vending]
    17:09:06.557   Debug: [DNS] rr1---sn-j5o7dn7e.xn--ngstr-lra8j.com --> [113.108.239.194] A from udp://119.29.29.29:53
    17:09:06.557   Debug: [DNS] rr1---sn-j5o7dn7e.xn--ngstr-lra8j.com --> 113.108.239.194
    17:09:06.558   Debug: [Rule] use default rules
    17:09:06.558   Debug: [DNS] cache hit rr1---sn-j5o7dn7e.xn--ngstr-lra8j.com --> [113.108.239.194] A, expire at 2025-03-31 17:16:06
    17:09:06.558   Debug: [PKG] 172.19.0.1:33313 --> rr1---sn-j5o7dn7e.xn--ngstr-lra8j.com:443 by 10161[com.android.vending]
    17:09:06.559    Info: [UDP] 172.19.0.1:33313(com.android.vending) --> rr1---sn-j5o7dn7e.xn--ngstr-lra8j.com:443 match IPCIDR(113.64.0.0/10) using 国内[DIRECT]
    17:09:06.570    Info: [TCP] 172.19.0.1:34852(com.android.vending) --> rr1---sn-j5o7dn7e.xn--ngstr-lra8j.com:443 match IPCIDR(113.64.0.0/10) using 国内[DIRECT]

**可以看到下载域名 `rr1---sn-j5o7dn7e.xn--ngstr-lra8j.com:443` 最终进行了国内直连**

----------

开箱即用版：使用这个订阅地址转换 https://api-sub.0z.gs/
选择 **基础模式** 或者 进阶模式里面的 **标准** 远程配置文件
转换订阅后，可以使用送中节点测试效果

测试环境：
Android 12（MIUI v13.0.11）
Clash for Android v2.5.12、Clash Meta for Android v2.10.1 Alpha、Clash Meta for Android v2.11.1
Google Play 商店 v39.8.19-29 
Google Play 服务 v24.16.16

----------

更新：2024-10-08
话还是说的太绝对了，被教育了，不是所有送中节点必定能下载的，经测试某些机场落地的 IP 被谷歌拉黑了，不仅仅是被标记送中这么简单......，反正被谷歌风控拉黑了，可能是爆破、攻击、扫描，IP 风险值极高的那种
这种情况下强制代理没用的，依然是下载不下来，表现为所有请求都正常发起和连接，没有任何 timeout，但是就是永远 0 速度，将相关的域名全部强制代理无效

这次再次改成强制使用谷歌国内服务器下载 Play 应用

需强制代理域名
    # 修复 Google Play Store 送中节点下载 
    DOMAIN-SUFFIX,play.googleapis.com
    DOMAIN-SUFFIX,android.clients.google.com

需强制直连域名
    # 修复 Google Play Store 送中节点下载 
    DOMAIN,connectivitycheck.gstatic.com
    DOMAIN-SUFFIX,services.googleapis.cn

**然后 xn--ngstr-lra8j.com 这个域名不要进行基于域名的规则处理**，让谷歌自己返回的子域名进行解析，得到是国外的或者国内的IP，再进行匹配

测试效果

# Capture on 2024-10-08 08:50:31.349
    08:50:31.350    Info: [APP] Logcat level: info
    08:50:33.831    Info: [APP] request force GC
    08:50:35.581    Info: [UDP] 172.19.0.1:40208(com.android.vending) --> play-fe.googleapis.com:443 match DomainSuffix(googleapis.com) using 国外[🇭🇰 深港-IEPL]
    08:50:36.018    Info: [TCP] 172.19.0.1:59946(com.android.vending) --> rr1---sn-j5o7dn7s.xn--ngstr-lra8j.com:443 match IPCIDR(58.240.0.0/12) using 国内[DIRECT]
    08:50:36.924    Info: [TCP] 172.19.0.1:40294(com.android.vending) --> rr3---sn-j5o7dn7s.xn--ngstr-lra8j.com:443 match IPCIDR(58.240.0.0/12) using 国内[DIRECT]
    08:50:43.021    Info: [TCP] 172.19.0.1:59978(com.android.vending) --> rr1---sn-j5o7dn7s.xn--ngstr-lra8j.com:443 match IPCIDR(58.240.0.0/12) using 国内[DIRECT]
    08:50:43.780    Info: [TCP] 172.19.0.1:44558(com.android.vending) --> rr3---sn-j5o7dn7z.xn--ngstr-lra8j.com:443 match IPCIDR(58.240.0.0/12) using 国内[DIRECT]

----------

!!!
<span style="font-weight:900;color:#ff4500">更新：2024-05-12</span>
!!!

重新修复送中节点无法下载问题，此次修复后，无论节点是否送中，全部 Google Play Store 的流量均被代理，不再走谷歌国内服务器，请注意这些规则不要被部分、全部覆盖，确保生效优先级最高

不再尝试使用谷歌部署在国内的服务器进行下载，即使谷歌以后将此类行为改回去，国外服务应该考虑在已退出中国的服务器上面使用，这本身也是一种侥幸、赌博的想法

既然修复，要么不做，要么做绝，杜绝谷歌时不时修改国内服务器的域名解析逻辑的改动，所以直接代理所有 play 商店流量，无视节点是否送中，全部按标准的谷歌国外下载行为逻辑进行

况且，真的会缺这么点梯子流量吗，如果真缺的话，可以自行按照文章以前的更新内容进行尝试

当前修复效果：所有 play 商店流量全部强制代理，无视节点送中，任意节点都能下载

需强制代理域名

# 修复 Google Play Store 送中节点下载 
    DOMAIN-SUFFIX,services.googleapis.cn
    DOMAIN-SUFFIX,play.googleapis.com
    DOMAIN,connectivitycheck.gstatic.com
    DOMAIN-SUFFIX,android.clients.google.com
    DOMAIN-SUFFIX,xn--ngstr-lra8j.com

效果：

# Capture on 2024-05-12 08:01:35.538
    08:01:35.539    Info: [APP] Logcat level: info
    08:01:40.066    Info: [APP] request force GC
    08:01:41.236    Info: [APP] request force GC
    08:01:41.282    Info: [APP] request force GC
    08:01:41.437    Info: [UDP] 172.19.0.1:60242(com.android.vending) --> play-fe.googleapis.com:443 match DomainSuffix(googleapis.com) using 国外[🇭🇰 深港]
    08:01:41.510    Info: [TCP] 172.19.0.1:46986(com.android.vending) --> play-fe.googleapis.com:443 match DomainSuffix(googleapis.com) using 国外[🇭🇰 深港]
    08:01:48.970    Info: [TCP] 172.19.0.1:37464 --> connectivitycheck.gstatic.com:443 match Domain(connectivitycheck.gstatic.com) using 国外[🇭🇰 深港]
    08:01:49.788    Info: [TCP] 172.19.0.1:37260 --> play.googleapis.com:443 match DomainSuffix(play.googleapis.com) using 国外[🇭🇰 深港]
    08:01:49.882    Info: [UDP] 172.19.0.1:40088 --> services.googleapis.cn:443 match DomainSuffix(services.googleapis.cn) using 国外[🇭🇰 深港]
    08:01:49.953    Info: [TCP] 172.19.0.1:53348 --> services.googleapis.cn:443 match DomainSuffix(services.googleapis.cn) using 国外[🇭🇰 深港]
    08:01:50.429    Info: [UDP] 172.19.0.1:41453(com.android.vending) --> rr2---sn-i3belnl6.xn--ngstr-lra8j.com:443 match IPCIDR(173.194.0.0/16) using 国外[🇭🇰 深港]
    08:01:50.507    Info: [TCP] 172.19.0.1:47880(com.android.vending) --> rr2---sn-i3belnl6.xn--ngstr-lra8j.com:443 match IPCIDR(173.194.0.0/16) using 国外[🇭🇰 深港]
    08:01:51.420    Info: [TCP] 172.19.0.1:49530(com.android.vending) --> rr1---sn-i3belnlz.xn--ngstr-lra8j.com:443 match IPCIDR(173.194.0.0/16) using 国外[🇭🇰 深港]
    08:01:53.421    Info: [TCP] 172.19.0.1:54394(com.android.vending) --> rr4---sn-i3belnl7.xn--ngstr-lra8j.com:443 match IPCIDR(74.125.0.0/16) using 国外[🇭🇰 深港]
    08:01:54.112    Info: [UDP] 172.19.0.1:54338 --> android.clients.google.com:443 match DomainSuffix(android.clients.google.com) using 国外[🇭🇰 深港]
    08:01:54.184    Info: [TCP] 172.19.0.1:47570 --> android.clients.google.com:443 match DomainSuffix(android.clients.google.com) using 国外[🇭🇰 深港]
    08:01:55.140    Info: [TCP] 172.19.0.1:40120(com.android.vending) --> rr3---sn-i3belney.xn--ngstr-lra8j.com:443 match IPCIDR(74.125.0.0/16) using 国外[🇭🇰 深港]
    08:01:56.230    Info: [UDP] 172.19.0.1:40686(com.android.vending) --> rr3---sn-i3b7knsd.xn--ngstr-lra8j.com:443 match IPCIDR(74.125.0.0/16) using 国外[🇭🇰 深港]
    08:01:56.306    Info: [TCP] 172.19.0.1:50924(com.android.vending) --> rr3---sn-i3b7knsd.xn--ngstr-lra8j.com:443 match IPCIDR(74.125.0.0/16) using 国外[🇭🇰 深港]
    08:02:20.428    Info: [TCP] 172.19.0.1:37836(com.android.vending) --> rr4---sn-i3b7knld.xn--ngstr-lra8j.com:443 match IPCIDR(173.194.0.0/16) using 国外[🇭🇰 深港]
    08:02:21.718    Info: [TCP] 172.19.0.1:55958(com.android.vending) --> rr3---sn-i3b7knld.xn--ngstr-lra8j.com:443 match IPCIDR(173.194.0.0/16) using 国外[🇭🇰 深港]
    08:02:25.672    Info: [APP] request force GC

![请输入图片描述][1]
![请输入图片描述][2]

----------

更新：2023-7-22 ，没有什么好的解决办法，等待谷歌完成一些变更再说，即使是强制将 services.googleapis.cn(com)用境外 DNS 解析，很多得到的IP也是被墙的，并且只要是被墙的IP，都是会直接使用 play 中国特供域名（基于前者的结果给你分配，与 DNS 解析无关，强制境外解析没用的），并且因为谷歌还没变更完，子域名都是没有解析记录

目前来说，香港送中节点大概率能通过 将 services.googleapis.cn 使用 境外 DNS 解析方式，重新获得国际版 play 的域名正常下载，其他地区 VPS 几率渺茫了，我测试样本数量较少，只有 4 个，网友们可以自行用机场送中节点测试

更新：2023-7-21，之前只是简单使用香港送中节点测试，今天有人留言测试，我才发现没有彻底修复，部分国家/地区的送中节点仍然无法下载，因样本数量有限，经测试，中国香港送中节点能正常下载，日本的不行的，其他国家没有样本，未知

此次检查日志，发现谷歌应该是更新了策略，新增了中国特供的解析域名：`xn--ngstr-cn-8za9o.com`，原来是只有 `xn--ngstr-lra8j.com`，该域名看起来是 IDN 域名，解码后好像有拉丁字符或者其他非常规字符 `ångströ-cn.com`，并且无一例外，所分配的中国特供域名全部解析失败，是没有 IP 地址的，不知道是不是谷歌特意为之

应该是谷歌彻底封堵走谷歌国内服务器下载的渠道了，对比 10 号那天，其实已经初现端倪了，这次持续测试送中节点，所有 DNS 解析，无论是境内外，在日本送中节点的测试全程， `xn--ngstr-lra8j.com` 彻底消失取而代之的是 `xn--ngstr-cn-8za9o.com`

该域名解析到北京电信，AS23724，并且被墙了，而且目前测试结果来看，该域名的分配的子域全部解析不到 IP，就是谷歌并没有做 DNS 记录，这感觉是谷歌要有什么动作了

然后有幸搜索这个新域名时看到这个博主的博文，大家可以参考下

> https://loukky.com/archives/2340

临时解决办法，使用送中的香港节点仍然可以正常下载并走代理，或者使用没送中的任意节点下载

直接 Clash 全局是没用的，这个 `xn--ngstr-cn-8za9o.com`是预置的域名，先于 DNS 请求阶段，无需网络请求，谷歌硬编码到国内特供版 GMS 文件，具体说明见文章内容，但是香港送中节点测试结果还是很迷，根据日志，它直接获得的是 `xn--ngstr-lra8j.com` 这个域名，此时我就去查这个中国特供的 play 域名资料。发现早在 22 年就有了，我手机也是 22 年 9 月买的，可能已经硬编码进去了

最新解决办法

将 `services.googleapis.cn` 从 强制直连 改成 强制代理 ，其他保持不变即可

![请输入图片描述][4]

![请输入图片描述][5]

# Capture on 2023-07-10 18:48:52.600
    18:48:52.601    Info: [APP] Logcat level: info
    18:48:52.603    Info: [APP] request force GC
    18:48:55.365    Info: [UDP] 172.19.0.1:54915 --> android.clients.google.com:443 match DomainSuffix(android.clients.google.com) using DIRECT
    18:48:57.659    Info: [TCP] 172.19.0.1:60704 --> connectivitycheck.gstatic.com:443 match DomainSuffix(connectivitycheck.gstatic.com) using DIRECT
    18:48:58.011    Info: [TCP] 172.19.0.1:54440 --> play-fe.googleapis.com:443 match DomainSuffix(googleapis.com) using 国外[🇭🇰 深港-IEPL-2]
    18:48:58.533    Info: [TCP] 172.19.0.1:35864 --> services.googleapis.cn:443 match DomainSuffix(services.googleapis.cn) using 国外[🇭🇰 深港-IEPL-2]
    18:49:00.365 Warning: [TCP] dial DIRECT (match DomainSuffix/android.clients.google.com) to android.clients.google.com:443 error: dial tcp4 142.251.43.14:443: i/o timeout
    18:49:00.652    Info: [TCP] 172.19.0.1:35874 --> services.googleapis.cn:443 match DomainSuffix(services.googleapis.cn) using 国外[🇭🇰 深港-IEPL-2]
    18:49:00.881    Info: [TCP] 172.19.0.1:41396 --> rr4---sn-i3belnll.xn--ngstr-lra8j.com:443 match IPCIDR(74.125.0.0/16) using 国外[🇭🇰 深港-IEPL-2]
    18:49:01.117    Info: [UDP] 172.19.0.1:58046 --> services.googleapis.cn:443 match DomainSuffix(services.googleapis.cn) using 国外[🇭🇰 深港-IEPL-2]
    18:49:01.193    Info: [TCP] 172.19.0.1:33532 --> rr2---sn-i3belnll.xn--ngstr-lra8j.com:443 match IPCIDR(74.125.0.0/16) using 国外[🇭🇰 深港-IEPL-2]
    18:49:01.806    Info: [TCP] 172.19.0.1:33082 --> rr1---sn-i3belnl7.xn--ngstr-lra8j.com:443 match IPCIDR(74.125.0.0/16) using 国外[🇭🇰 深港-IEPL-2]
    18:49:02.201    Info: [TCP] 172.19.0.1:34736 --> rr2---sn-i3b7kn6s.xn--ngstr-lra8j.com:443 match IPCIDR(74.125.0.0/16) using 国外[🇭🇰 深港-IEPL-2]
    18:49:02.526    Info: [TCP] 172.19.0.1:43444 --> rr1---sn-i3belnll.xn--ngstr-lra8j.com:443 match IPCIDR(74.125.0.0/16) using 国外[🇭🇰 深港-IEPL-2]
    18:49:02.876    Info: [APP] request force GC
    18:49:02.980    Info: [TCP] 172.19.0.1:59074 --> rr1---sn-i3belne6.xn--ngstr-lra8j.com:443 match IPCIDR(173.194.0.0/16) using 国外[🇭🇰 深港-IEPL-2]
    18:49:03.397    Info: [TCP] 172.19.0.1:49678 --> rr4---sn-i3belnl7.xn--ngstr-lra8j.com:443 match IPCIDR(74.125.0.0/16) using 国外[🇭🇰 深港-IEPL-2]
    18:49:03.930    Info: [TCP] 172.19.0.1:41050 --> rr2---sn-i3belnls.xn--ngstr-lra8j.com:443 match IPCIDR(173.194.0.0/16) using 国外[🇭🇰 深港-IEPL-2]
    18:49:04.318    Info: [UDP] 172.19.0.1:52830 --> rr2---sn-i3belnls.xn--ngstr-lra8j.com:443 match IPCIDR(173.194.0.0/16) using 国外[🇭🇰 深港-IEPL-2]
    18:49:04.346    Info: [TCP] 172.19.0.1:41054 --> rr2---sn-i3belnls.xn--ngstr-lra8j.com:443 match IPCIDR(173.194.0.0/16) using 国外[🇭🇰 深港-IEPL-2]
    18:49:05.331    Info: [TCP] 172.19.0.1:44548 --> rr4---sn-i3b7knld.xn--ngstr-lra8j.com:443 match IPCIDR(173.194.0.0/16) using 国外[🇭🇰 深港-IEPL-2]
    18:49:05.368 Warning: [TCP] dial DIRECT (match DomainSuffix/android.clients.google.com) to android.clients.google.com:443 error: dial tcp4 172.217.163.46:443: i/o timeout
    18:49:05.376    Info: [UDP] 172.19.0.1:57687 --> android.clients.google.com:443 match DomainSuffix(android.clients.google.com) using DIRECT
    18:49:05.420    Info: [TCP] 172.19.0.1:43234 --> beacons.gvt2.com:443 match DomainSuffix(beacons.gvt2.com) using DIRECT
    18:49:05.932    Info: [TCP] 172.19.0.1:44614 --> rr3---sn-i3b7knzs.xn--ngstr-lra8j.com:443 match Match() using 国外[🇭🇰 深港-IEPL-2]
    18:49:08.331    Info: [APP] request force GC
    18:49:09.393    Info: [APP] request force GC
    18:49:10.378 Warning: [TCP] dial DIRECT (match DomainSuffix/android.clients.google.com) to android.clients.google.com:443 error: dial tcp4 142.251.43.14:443: i/o timeout
    18:49:13.713    Info: [APP] request force GC
    18:49:14.770    Info: [APP] request force GC
    18:49:15.382 Warning: [TCP] dial DIRECT (match DomainSuffix/android.clients.google.com) to android.clients.google.com:443 error: dial tcp4 142.251.42.238:443: i/o timeout

云端更新修复了规则，已经在使用订阅转换 API 处理过的订阅，只需要客户端更新一次订阅即可修复 play 下载问题

https://api-sub.0z.gs，使用基础模式，或者高级模式的标准分流规则即可

----------

测试环境：小米国行手机，MIUI 13，Clash for android v2.5.12 premium 使用的是国内特供版 GMS

Clash 仅代理 Google Play Store

本文只针对如下场景，使用被谷歌 IP 数据库标记为中国大陆的节点下载 Play 商店应用，会长时间无反应，无法下载、卡进度条问题

换一个没送中的节点就能正常下载
或者使用送中节点卡进度条后，断开梯子，使用本地网络直连就能下载的情况

原因是国内产商装的 GMS 有些限制，详见：https://github.com/fei-ke/unlock-cn-gms

国行 GMS 手机，使用送中节点下载会向 xxxx.xn--ngstr-lra8j.com 这个域名请求下载
做了如下测试

1、使用送中香港 IP 节点
Clash  全局，分应用代理 Google Play Store，无法正常下载
请求，rr2---sn-ni57rn7k.xn--ngstr-lra8j.com
分配 IP 
180.163.150.131

查询这个域名，发现子域名太多了，IP 也是乱七八糟的

![https://cdn.0z.gs/2023/04/22/644352e936da4.jpg][6]

测试 DNS 解析，境内外均指向了 上海电信的 IP

![https://cdn.0z.gs/2023/04/22/6443536db2e7b.jpg][7]

2、另一个送中香港 IP，全局代理，下载，卡下载进度条后，切到直连，能恢复正常下载，并且走国内网络直连，速率 500 Mbps+，抓取日志
恢复到本地直连网络后，发现请求 rr4---sn-j5o76n7l.xn--ngstr-lra8j.com:443
58.63.223.69 广州电信 AS4134

3、使用没送中节点下载，则能正常代理并使用节点进行下载

请求 rr3---sn-i3b7kn6s.xn--ngstr-lra8j.com

该域名解析的 IP 已被墙

![请输入图片描述][8]

根据测试结果，还有一些参考到的资料：

> https://www.v2ex.com/t/696735
> https://www.v2ex.com/t/838835
> https://www.v2ex.com/t/831254

推断出谷歌行为，送中节点下载应用，因为被谷歌 IP 数据标记为中国大陆，谷歌会给你分配中国大陆上面的谷歌服务器，但因为谷歌退出了中国，可能长时间无人维护，在具体的真正下载域名  xxxxxx.xn--ngstr-lra8j.com 时，前面还有一些的其他请求数据交互，前面的那些请求中，部分域名是需要被代理，数据交互认证之类，才能真正的使用本地网络直连下载，

这也与送中节点进到应用下载界面，直接关掉梯子使用本地网络下载会失败相符合
必须开着梯子去开始下载，完成一些其他需要被代理的域名的请求，才能开始使用本地网络直连下载，具体表现为

开着送中节点去下载，卡进度体后，断开梯子，秒恢复正常下载 相符合

这时就有了解决方案

把谷歌前置的需要被代理域名提取出来，将其放入 clash 的代理策略，并把需要直连的域名也提取出来

这样就实现了任意节点（无论是否送中），只要能访问浏览 Google Play 商店，就能下载应用（高速，实测谷歌大陆的服务器能跑满 500 Mbps +），还不用浪费梯子流量

需要保证强制直连的域名：

DOMAIN-SUFFIX,265.com
    DOMAIN-SUFFIX,2mdn.net
    DOMAIN-SUFFIX,alt1-mtalk.google.com
    DOMAIN-SUFFIX,alt2-mtalk.google.com
    DOMAIN-SUFFIX,alt3-mtalk.google.com
    DOMAIN-SUFFIX,alt4-mtalk.google.com
    DOMAIN-SUFFIX,alt5-mtalk.google.com
    DOMAIN-SUFFIX,alt6-mtalk.google.com
    DOMAIN-SUFFIX,alt7-mtalk.google.com
    DOMAIN-SUFFIX,alt8-mtalk.google.com
    DOMAIN-SUFFIX,app-measurement.com
    DOMAIN-SUFFIX,beacons.gcp.gvt2.com
    DOMAIN-SUFFIX,beacons.gvt2.com
    DOMAIN-SUFFIX,beacons3.gvt2.com
    DOMAIN-SUFFIX,android.clients.google.com
    DOMAIN-SUFFIX,checkin.gstatic.com
    DOMAIN-SUFFIX,clientservices.googleapis.com
    DOMAIN-SUFFIX,connectivitycheck.gstatic.com
    DOMAIN-SUFFIX,imasdk.googleapis.com
    DOMAIN-SUFFIX,redirector.gvt1.com
    DOMAIN-SUFFIX,cache.pack.google.com
    DOMAIN-SUFFIX,clickserve.dartsearch.net
    DOMAIN-SUFFIX,crl.pki.goog
    DOMAIN-SUFFIX,dl.google.com
    DOMAIN-SUFFIX,dl.l.google.com
    DOMAIN-SUFFIX,googletagmanager.com
    DOMAIN-SUFFIX,googletagservices.com
    DOMAIN-SUFFIX,gtm.oasisfeng.com
    DOMAIN-SUFFIX,mtalk.google.com
    DOMAIN-SUFFIX,ocsp.pki.goog
    DOMAIN-SUFFIX,recaptcha.net
    DOMAIN-SUFFIX,safebrowsing-cache.google.com
    DOMAIN-SUFFIX,settings.crashlytics.com
    DOMAIN-SUFFIX,ssl-google-analytics.l.google.com
    DOMAIN-SUFFIX,toolbarqueries.google.com
    DOMAIN-SUFFIX,tools.l.google.com
    DOMAIN-SUFFIX,www-googletagmanager.l.google.com
    DOMAIN-SUFFIX,ssl.gstatic.com
    DOMAIN-SUFFIX,update.googleapis.com
    DOMAIN-SUFFIX,www.gstatic.com

需要保证强制代理的域名：

# Google
    # 内容：Google
    # 数量：24条
    DOMAIN-KEYWORD,gmail
    #DOMAIN-KEYWORD,google
    DOMAIN-SUFFIX,1e100.net
    DOMAIN-SUFFIX,2mdn.net
    DOMAIN-SUFFIX,app-measurement.net
    DOMAIN-SUFFIX,g.co
    DOMAIN-SUFFIX,ggpht.com
    DOMAIN-SUFFIX,goo.gl
    DOMAIN-SUFFIX,googleapis.cn
    DOMAIN-SUFFIX,googleapis.com
    DOMAIN-SUFFIX,gstatic.cn
    DOMAIN-SUFFIX,gstatic.com
    DOMAIN-SUFFIX,gvt0.com
    DOMAIN-SUFFIX,gvt1.com
    DOMAIN-SUFFIX,gvt2.com
    DOMAIN-SUFFIX,gvt3.com
    #DOMAIN-SUFFIX,xn--ngstr-lra8j.com
    DOMAIN-SUFFIX,youtu.be
    DOMAIN-SUFFIX,youtube-nocookie.com
    DOMAIN-SUFFIX,youtube.com
    DOMAIN-SUFFIX,yt.be
    DOMAIN-SUFFIX,ytimg.com
    IP-CIDR,74.125.0.0/16,no-resolve
    IP-CIDR,173.194.0.0/16,no-resolve

请自行排查注意这些分流规则的优先级，不要被其他分流规则覆盖、影响到

这样就能使用所有节点去访问 Google Play 商店，并还能通过国内网络高速下载应用

成功效果，使用送中节点测试：

# Capture on 2023-04-22 12:20:21.133
    12:20:21.138    Info: [APP] Logcat level: debug
    12:20:25.717    Info: [TCP] 172.19.0.1:59806 --> connectivitycheck.gstatic.com:443 match DomainSuffix(connectivitycheck.gstatic.com) using DIRECT
    12:20:26.824   Debug: [DNS] services.googleapis.cn --> 58.254.137.162
    12:20:26.824   Debug: [DNS] services.googleapis.cn --> 58.254.137.162
    12:20:26.825    Info: [UDP] 172.19.0.1:36493 --> services.googleapis.cn:443 match DomainSuffix(cn) using 国内[DIRECT]
    12:20:26.841    Info: [TCP] 172.19.0.1:42774 --> services.googleapis.cn:443 match DomainSuffix(cn) using 国内[DIRECT]
    12:20:27.244   Debug: [DNS] rr4---sn-j5o76n7z.xn--ngstr-lra8j.com --> 58.254.149.197
    12:20:27.244   Debug: [DNS] rr4---sn-j5o76n7z.xn--ngstr-lra8j.com --> 58.254.149.197
    12:20:27.245    Info: [UDP] 172.19.0.1:45282 --> rr4---sn-j5o76n7z.xn--ngstr-lra8j.com:443 match IPCIDR(58.240.0.0/12) using 国内[DIRECT]
    12:20:27.262    Info: [TCP] 172.19.0.1:36968 --> rr4---sn-j5o76n7z.xn--ngstr-lra8j.com:443 match IPCIDR(58.240.0.0/12) using 国内[DIRECT]
    12:20:27.743   Debug: [DNS] rr3---sn-j5o7dn7s.xn--ngstr-lra8j.com --> 58.254.137.196
    12:20:27.744   Debug: [DNS] rr3---sn-j5o7dn7s.xn--ngstr-lra8j.com --> 58.254.137.196
    12:20:27.744    Info: [UDP] 172.19.0.1:37841 --> rr3---sn-j5o7dn7s.xn--ngstr-lra8j.com:443 match IPCIDR(58.240.0.0/12) using 国内[DIRECT]
    12:20:27.764    Info: [TCP] 172.19.0.1:52628 --> rr3---sn-j5o7dn7s.xn--ngstr-lra8j.com:443 match IPCIDR(58.240.0.0/12) using 国内[DIRECT]
    12:20:28.706   Debug: [DNS] rr1---sn-j5o76n7s.xn--ngstr-lra8j.com --> 58.254.137.130
    12:20:28.732    Info: [TCP] 172.19.0.1:59552 --> rr1---sn-j5o76n7s.xn--ngstr-lra8j.com:443 match IPCIDR(58.240.0.0/12) using 国内[DIRECT]
    12:20:29.260   Debug: [DNS] rr2---sn-j5o76n7z.xn--ngstr-lra8j.com --> 58.254.149.195
    12:20:29.261   Debug: [DNS] rr2---sn-j5o76n7z.xn--ngstr-lra8j.com --> 58.254.149.195
    12:20:29.261    Info: [UDP] 172.19.0.1:38239 --> rr2---sn-j5o76n7z.xn--ngstr-lra8j.com:443 match IPCIDR(58.240.0.0/12) using 国内[DIRECT]
    12:20:29.281    Info: [TCP] 172.19.0.1:60214 --> rr2---sn-j5o76n7z.xn--ngstr-lra8j.com:443 match IPCIDR(58.240.0.0/12) using 国内[DIRECT]
    12:20:29.496   Debug: [DNS] rr1---sn-j5o76n7s.xn--ngstr-lra8j.com --> 58.254.137.130
    12:20:29.496   Debug: [DNS] rr1---sn-j5o76n7s.xn--ngstr-lra8j.com --> 58.254.137.130
    12:20:29.496    Info: [UDP] 172.19.0.1:52591 --> rr1---sn-j5o76n7s.xn--ngstr-lra8j.com:443 match IPCIDR(58.240.0.0/12) using 国内[DIRECT]
    12:20:29.522    Info: [TCP] 172.19.0.1:59584 --> rr1---sn-j5o76n7s.xn--ngstr-lra8j.com:443 match IPCIDR(58.240.0.0/12) using 国内[DIRECT]
    12:20:29.854   Debug: [DNS] rr1---sn-j5o76n7s.xn--ngstr-lra8j.com --> 58.254.137.130
    12:20:29.872    Info: [TCP] 172.19.0.1:59590 --> rr1---sn-j5o76n7s.xn--ngstr-lra8j.com:443 match IPCIDR(58.240.0.0/12) using 国内[DIRECT]
    12:20:30.150   Debug: [DNS] play.googleapis.com --> 172.217.14.74
    12:20:30.179    Info: [TCP] 172.19.0.1:38840 --> play.googleapis.com:443 match DomainSuffix(googleapis.com) using 国外[🇭🇰 广港-IEPL]
    12:20:30.372   Debug: [DNS] rr1---sn-j5o76n7z.xn--ngstr-lra8j.com --> 58.254.149.194
    12:20:30.372   Debug: [DNS] rr1---sn-j5o76n7z.xn--ngstr-lra8j.com --> 58.254.149.194
    12:20:30.373    Info: [UDP] 172.19.0.1:45520 --> rr1---sn-j5o76n7z.xn--ngstr-lra8j.com:443 match IPCIDR(58.240.0.0/12) using 国内[DIRECT]
    12:20:30.391    Info: [TCP] 172.19.0.1:33680 --> rr1---sn-j5o76n7z.xn--ngstr-lra8j.com:443 match IPCIDR(58.240.0.0/12) using 国内[DIRECT]
    12:20:30.451   Debug: [DNS] play.googleapis.com --> 142.250.72.234
    12:20:30.479    Info: [TCP] 172.19.0.1:38866 --> play.googleapis.com:443 match DomainSuffix(googleapis.com) using 国外[🇭🇰 广港-IEPL]
    12:20:30.959   Debug: [DNS] rr3---sn-j5o76n7s.xn--ngstr-lra8j.com --> 58.254.137.132
    12:20:30.978    Info: [TCP] 172.19.0.1:35092 --> rr3---sn-j5o76n7s.xn--ngstr-lra8j.com:443 match IPCIDR(58.240.0.0/12) using 国内[DIRECT]
    12:20:31.484   Debug: [DNS] rr4---sn-j5o7dn7z.xn--ngstr-lra8j.com --> 58.254.149.133
    12:20:31.484   Debug: [DNS] rr4---sn-j5o7dn7z.xn--ngstr-lra8j.com --> 58.254.149.133
    12:20:31.485    Info: [UDP] 172.19.0.1:33278 --> rr4---sn-j5o7dn7z.xn--ngstr-lra8j.com:443 match IPCIDR(58.240.0.0/12) using 国内[DIRECT]
    12:20:31.511    Info: [TCP] 172.19.0.1:60494 --> rr4---sn-j5o7dn7z.xn--ngstr-lra8j.com:443 match IPCIDR(58.240.0.0/12) using 国内[DIRECT]
    12:20:32.760   Debug: [DNS] rr2---sn-j5o7dn7z.xn--ngstr-lra8j.com --> 58.254.149.131
    12:20:32.761   Debug: [DNS] rr2---sn-j5o7dn7z.xn--ngstr-lra8j.com --> 58.254.149.131
    12:20:32.762    Info: [UDP] 172.19.0.1:40878 --> rr2---sn-j5o7dn7z.xn--ngstr-lra8j.com:443 match IPCIDR(58.240.0.0/12) using 国内[DIRECT]
    12:20:32.782    Info: [TCP] 172.19.0.1:51764 --> rr2---sn-j5o7dn7z.xn--ngstr-lra8j.com:443 match IPCIDR(58.240.0.0/12) using 国内[DIRECT]
    12:20:33.253   Debug: [DNS] rr3---sn-j5o76n7s.xn--ngstr-lra8j.com --> 58.254.137.132
    12:20:33.254   Debug: [DNS] rr3---sn-j5o76n7s.xn--ngstr-lra8j.com --> 58.254.137.132
    12:20:33.254    Info: [UDP] 172.19.0.1:40162 --> rr3---sn-j5o76n7s.xn--ngstr-lra8j.com:443 match IPCIDR(58.240.0.0/12) using 国内[DIRECT]
    12:20:33.276    Info: [TCP] 172.19.0.1:35146 --> rr3---sn-j5o76n7s.xn--ngstr-lra8j.com:443 match IPCIDR(58.240.0.0/12) using 国内[DIRECT]
    12:20:34.960    Info: [APP] request force GC

根据初步测试成功的日志，我上面写的分流规则还是范围大了一点，应该可以优化成

代理

DOMAIN,play.googleapis.com

直连

DOMAIN,services.googleapis.cn
DOMAIN,connectivitycheck.gstatic.com

**然后 xn--ngstr-lra8j.com 这个域名不要进行基于域名的规则处理**，让谷歌自己返回的子域名进行解析，得到是国外的或者国内的IP，再进行匹配

具体懒得测试了，反正目前是没问题了

鸣谢 ACL4SSR 项目组收集的谷歌中国大陆、国际相关域名和 IP

> https://github.com/ACL4SSR/ACL4SSR
> https://loukky.com/archives/2340#gsc.tab=0

[1]: https://cdn.0z.gs/2024/05/12/664009fa88b6b.jpg
  [2]: https://cdn.0z.gs/2024/05/12/664009fa81c99.jpg
  [3]: https://cdn.0z.gs/2023/07/21/64ba564c6b18d.jpg
  [4]: https://cdn.0z.gs/2023/07/10/64abd05155f80.jpg
  [5]: https://cdn.0z.gs/2023/07/10/64abe362d2faf.jpg
  [6]: https://cdn.0z.gs/2023/04/22/644352e936da4.jpg
  [7]: https://cdn.0z.gs/2023/04/22/6443536db2e7b.jpg
  [8]: https://cdn.0z.gs/2023/04/22/64435605b98b5.jpg

更新：2025-03-31，有评论说不可以，请自查自身 clash 配置，包括不局限于（DNS 劫持、允许应用绕过、覆写里面的 DNS 策略）
附使用送中节点最新抓取日志，其中 192.0.2.1 表示为节点地址（这是一个 RFC 5737 定义的专门用于文档示例的 IPv4 单播地址）

以下测试环境：
Clash Meta for Android v2.11.7
Google Play Store v43.6.34-23

# Capture on 2025-03-31 17:08:52.398
17:08:52.399    Info: [APP] Logcat level: debug
17:08:57.261   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:57581
17:08:57.263   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:12666
17:08:57.267   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:8879
17:08:57.269   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:60880
17:08:57.275   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:23809
17:08:57.279   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:53471
17:08:57.287   Debug: [Rule] use default rules
17:08:57.287   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
17:08:57.327    Info: [TCP] 172.19.0.1:56554 --> play.googleapis.com:443 match DomainSuffix(play.googleapis.com) using 国外[日本送中节点]
17:08:57.336   Debug: [DNS] resolve play-fe.googleapis.com A from tls://one.one.one.one:853
17:08:57.336   Debug: [DNS] cache hit one.one.one.one --> [1.0.0.1 1.1.1.1] A, expire at 2025-04-01 16:52:33
17:08:57.340   Debug: [DNS] resolve play-fe.googleapis.com A from udp://1.0.0.1:53
17:08:57.342   Debug: [DNS] resolve play-fe.googleapis.com A from tls://dns.adguard.com:853
17:08:57.342   Debug: [DNS] resolve play-fe.googleapis.com A from udp://8.8.4.4:53
17:08:57.342   Debug: [Rule] use default rules
17:08:57.342   Debug: [Rule] use default rules
17:08:57.342   Debug: [PKG] 172.19.0.1:55790 --> play-fe.googleapis.com:443 by 10161[com.android.vending]
17:08:57.342   Debug: [PKG] 172.19.0.1:55788 --> play-fe.googleapis.com:443 by 10161[com.android.vending]
17:08:57.342   Debug: [DNS] cache hit dns.adguard.com --> [94.140.14.14 94.140.15.15] A, expire at 2025-04-01 05:49:14
17:08:57.342   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
17:08:57.345   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
17:08:57.371    Info: [TCP] 172.19.0.1:55788(com.android.vending) --> play-fe.googleapis.com:443 match DomainSuffix(googleapis.com) using 国外[日本送中节点]
17:08:57.375    Info: [TCP] 172.19.0.1:55790(com.android.vending) --> play-fe.googleapis.com:443 match DomainSuffix(googleapis.com) using 国外[日本送中节点]
17:08:57.419   Debug: [Rule] use default rules
17:08:57.423   Debug: [PKG] 172.19.0.1:55804 --> play-fe.googleapis.com:443 by 10161[com.android.vending]
17:08:57.423   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
17:08:57.452    Info: [TCP] 172.19.0.1:55804(com.android.vending) --> play-fe.googleapis.com:443 match DomainSuffix(googleapis.com) using 国外[日本送中节点]
17:08:57.608   Debug: [DNS] play-fe.googleapis.com --> [142.250.217.110] A from udp://8.8.4.4:53
17:08:57.609   Debug: [Rule] use default rules
17:08:57.611   Debug: [Rule] use default rules
17:08:57.612   Debug: [PKG] 172.19.0.1:56628 --> play-fe.googleapis.com:443 by 10161[com.android.vending]
17:08:57.612   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
17:08:57.612   Debug: [PKG] 172.19.0.1:60181 --> play-fe.googleapis.com:443 by 10161[com.android.vending]
17:08:57.613    Info: [UDP] 172.19.0.1:56628(com.android.vending) --> play-fe.googleapis.com:443 match DomainSuffix(googleapis.com) using 国外[日本送中节点]
17:08:57.617   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
17:08:57.617    Info: [UDP] 172.19.0.1:60181(com.android.vending) --> play-fe.googleapis.com:443 match DomainSuffix(googleapis.com) using 国外[日本送中节点]
17:08:58.034   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:24873
17:08:58.037   Debug: [DNS] resolve play-lh.googleusercontent.com A from udp://119.28.28.28:53
17:08:58.038   Debug: [DNS] resolve play-lh.googleusercontent.com A from udp://119.29.29.29:53
17:08:58.039   Debug: [Rule] use default rules
17:08:58.039   Debug: [Rule] use default rules
17:08:58.040   Debug: [PKG] 172.19.0.1:48864 --> play-lh.googleusercontent.com:443 by 10161[com.android.vending]
17:08:58.040   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
17:08:58.040   Debug: [PKG] 172.19.0.1:48866 --> play-lh.googleusercontent.com:443 by 10161[com.android.vending]
17:08:58.041   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
17:08:58.056   Debug: [DNS] play-lh.googleusercontent.com --> [142.250.69.214] A from udp://119.29.29.29:53
17:08:58.056   Debug: [DNS] resolve play-lh.googleusercontent.com A from tls://one.one.one.one:853
17:08:58.057   Debug: [DNS] cache hit one.one.one.one --> [1.0.0.1 1.1.1.1] A, expire at 2025-04-01 16:52:33
17:08:58.057   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:20875
17:08:58.057   Debug: [DNS] resolve play-lh.googleusercontent.com A from udp://8.8.4.4:53
17:08:58.057   Debug: [DNS] resolve play-lh.googleusercontent.com A from tls://dns.adguard.com:853
17:08:58.057   Debug: [DNS] resolve play-lh.googleusercontent.com A from udp://1.0.0.1:53
17:08:58.058   Debug: [DNS] cache hit dns.adguard.com --> [94.140.14.14 94.140.15.15] A, expire at 2025-04-01 05:49:14
17:08:58.060   Debug: [Rule] use default rules
17:08:58.060   Debug: [PKG] 172.19.0.1:49476 --> www.gstatic.com:443 by 10161[com.android.vending]
17:08:58.061   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
17:08:58.062   Debug: [Rule] use default rules
17:08:58.063   Debug: [PKG] 172.19.0.1:48884 --> play-lh.googleusercontent.com:443 by 10161[com.android.vending]
17:08:58.063   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
17:08:58.067   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:34729
17:08:58.069    Info: [TCP] 172.19.0.1:48866(com.android.vending) --> play-lh.googleusercontent.com:443 match DomainSuffix(googleusercontent.com) using 国外[日本送中节点]
17:08:58.074    Info: [TCP] 172.19.0.1:48864(com.android.vending) --> play-lh.googleusercontent.com:443 match DomainSuffix(googleusercontent.com) using 国外[日本送中节点]
17:08:58.091    Info: [TCP] 172.19.0.1:48884(com.android.vending) --> play-lh.googleusercontent.com:443 match DomainSuffix(googleusercontent.com) using 国外[日本送中节点]
17:08:58.093   Debug: [Rule] use default rules
17:08:58.093    Info: [TCP] 172.19.0.1:49476(com.android.vending) --> www.gstatic.com:443 match DomainSuffix(gstatic.com) using 国外[日本送中节点]
17:08:58.093   Debug: [PKG] 172.19.0.1:54066 --> i.ytimg.com:443 by 10161[com.android.vending]
17:08:58.093   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
17:08:58.127    Info: [TCP] 172.19.0.1:54066(com.android.vending) --> i.ytimg.com:443 match DomainSuffix(ytimg.com) using 国外[日本送中节点]
17:08:58.349   Debug: [DNS] play-lh.googleusercontent.com --> [142.250.69.214] A from udp://8.8.4.4:53
17:08:58.350   Debug: [Rule] use default rules
17:08:58.351   Debug: [PKG] 172.19.0.1:39634 --> play-lh.googleusercontent.com:443 by 10161[com.android.vending]
17:08:58.352   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
17:08:58.353    Info: [UDP] 172.19.0.1:39634(com.android.vending) --> play-lh.googleusercontent.com:443 match DomainSuffix(googleusercontent.com) using 国外[日本送中节点]
17:09:01.546   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:45021
17:09:01.549   Debug: [DNS] resolve play-apps-features.googleusercontent.com A from udp://119.29.29.29:53
17:09:01.549   Debug: [DNS] resolve play-apps-features.googleusercontent.com A from udp://119.28.28.28:53
17:09:01.550   Debug: [Rule] use default rules
17:09:01.550   Debug: [Rule] use default rules
17:09:01.551   Debug: [PKG] 172.19.0.1:57760 --> play-apps-features.googleusercontent.com:443 by 10161[com.android.vending]
17:09:01.551   Debug: [PKG] 172.19.0.1:57758 --> play-apps-features.googleusercontent.com:443 by 10161[com.android.vending]
17:09:01.551   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
17:09:01.551   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
17:09:01.582   Debug: [Rule] use default rules
17:09:01.582   Debug: [Rule] use default rules
17:09:01.583   Debug: [PKG] 172.19.0.1:57766 --> play-apps-features.googleusercontent.com:443 by 10161[com.android.vending]
17:09:01.584   Debug: [PKG] 172.19.0.1:57768 --> play-apps-features.googleusercontent.com:443 by 10161[com.android.vending]
17:09:01.584   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
17:09:01.586   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
17:09:01.587    Info: [TCP] 172.19.0.1:57760(com.android.vending) --> play-apps-features.googleusercontent.com:443 match DomainSuffix(googleusercontent.com) using 国外[日本送中节点]
17:09:01.590    Info: [TCP] 172.19.0.1:57758(com.android.vending) --> play-apps-features.googleusercontent.com:443 match DomainSuffix(googleusercontent.com) using 国外[日本送中节点]
17:09:01.612    Info: [TCP] 172.19.0.1:57766(com.android.vending) --> play-apps-features.googleusercontent.com:443 match DomainSuffix(googleusercontent.com) using 国外[日本送中节点]
17:09:01.619    Info: [TCP] 172.19.0.1:57768(com.android.vending) --> play-apps-features.googleusercontent.com:443 match DomainSuffix(googleusercontent.com) using 国外[日本送中节点]
17:09:01.948   Debug: [DNS] play-apps-features.googleusercontent.com --> [172.217.14.193] A from udp://119.29.29.29:53
17:09:01.951   Debug: [DNS] resolve play-apps-features.googleusercontent.com A from tls://one.one.one.one:853
17:09:01.953   Debug: [DNS] resolve play-apps-features.googleusercontent.com A from udp://8.8.4.4:53
17:09:01.955   Debug: [DNS] resolve play-apps-features.googleusercontent.com A from udp://1.0.0.1:53
17:09:01.956   Debug: [DNS] resolve play-apps-features.googleusercontent.com A from tls://dns.adguard.com:853
17:09:01.957   Debug: [DNS] cache hit one.one.one.one --> [1.0.0.1 1.1.1.1] A, expire at 2025-04-01 16:52:33
17:09:01.957   Debug: [DNS] cache hit dns.adguard.com --> [94.140.14.14 94.140.15.15] A, expire at 2025-04-01 05:49:14
17:09:02.222   Debug: [DNS] play-apps-features.googleusercontent.com --> [142.250.217.97] A from udp://8.8.4.4:53
17:09:02.223   Debug: [Rule] use default rules
17:09:02.225   Debug: [PKG] 172.19.0.1:49130 --> play-apps-features.googleusercontent.com:443 by 10161[com.android.vending]
17:09:02.227   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
17:09:02.228    Info: [UDP] 172.19.0.1:49130(com.android.vending) --> play-apps-features.googleusercontent.com:443 match DomainSuffix(googleusercontent.com) using 国外[日本送中节点]
17:09:04.544   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:5497
17:09:04.546   Debug: [Rule] use default rules
17:09:04.547   Debug: [Rule] use default rules
17:09:04.547   Debug: [PKG] 172.19.0.1:38414 --> www.google.com:443 by 10161[com.android.vending]
17:09:04.548   Debug: [PKG] 172.19.0.1:38416 --> www.google.com:443 by 10161[com.android.vending]
17:09:04.548   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
17:09:04.549   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
17:09:04.580    Info: [TCP] 172.19.0.1:38416(com.android.vending) --> www.google.com:443 match DomainSuffix(google.com) using 国外[日本送中节点]
17:09:04.595    Info: [TCP] 172.19.0.1:38414(com.android.vending) --> www.google.com:443 match DomainSuffix(google.com) using 国外[日本送中节点]
17:09:05.526   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:22258
17:09:05.528   Debug: [Rule] use default rules
17:09:05.529   Debug: [DNS] resolve connectivitycheck.gstatic.com A from udp://119.28.28.28:53
17:09:05.529   Debug: [DNS] resolve connectivitycheck.gstatic.com A from udp://119.29.29.29:53
17:09:05.529   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:9369
17:09:05.533   Debug: [DNS] cache hit play-lh.googleusercontent.com --> [142.250.69.214] A, expire at 2025-03-31 17:13:58
17:09:05.533   Debug: [Rule] use default rules
17:09:05.534   Debug: [PKG] 172.19.0.1:36122 --> play-lh.googleusercontent.com:443 by 10161[com.android.vending]
17:09:05.534   Debug: [Rule] use default rules
17:09:05.534   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
17:09:05.534    Info: [UDP] 172.19.0.1:36122(com.android.vending) --> play-lh.googleusercontent.com:443 match DomainSuffix(googleusercontent.com) using 国外[日本送中节点]
17:09:05.535   Debug: [PKG] 172.19.0.1:48926 --> play-lh.googleusercontent.com:443 by 10161[com.android.vending]
17:09:05.535   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
17:09:05.546   Debug: [DNS] connectivitycheck.gstatic.com --> [203.208.41.98] A from udp://119.29.29.29:53
17:09:05.582    Info: [TCP] 172.19.0.1:48926(com.android.vending) --> play-lh.googleusercontent.com:443 match DomainSuffix(googleusercontent.com) using 国外[日本送中节点]
17:09:05.584    Info: [TCP] 172.19.0.1:33882 --> connectivitycheck.gstatic.com:443 match Domain(connectivitycheck.gstatic.com) using DIRECT
17:09:05.800   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:30108
17:09:05.802   Debug: [DNS] cache hit play-fe.googleapis.com --> [142.250.217.110] A, expire at 2025-03-31 17:13:57
17:09:05.803   Debug: [Rule] use default rules
17:09:05.803   Debug: [PKG] 172.19.0.1:48883 --> play-fe.googleapis.com:443 by 10161[com.android.vending]
17:09:05.803   Debug: [Rule] use default rules
17:09:05.804   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
17:09:05.804    Info: [UDP] 172.19.0.1:48883(com.android.vending) --> play-fe.googleapis.com:443 match DomainSuffix(googleapis.com) using 国外[日本送中节点]
17:09:05.804   Debug: [PKG] 172.19.0.1:55880 --> play-fe.googleapis.com:443 by 10161[com.android.vending]
17:09:05.804   Debug: [DNS] cache hit example.com --> [192.0.2.1] A, expire at 2025-03-31 17:15:41
17:09:05.833    Info: [TCP] 172.19.0.1:55880(com.android.vending) --> play-fe.googleapis.com:443 match DomainSuffix(googleapis.com) using 国外[日本送中节点]
17:09:06.412   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:44423
17:09:06.415   Debug: [DNS] resolve services.googleapis.cn A from udp://119.28.28.28:53
17:09:06.415   Debug: [DNS] resolve services.googleapis.cn A from udp://119.29.29.29:53
17:09:06.415   Debug: [Rule] use default rules
17:09:06.429   Debug: [DNS] services.googleapis.cn --> [113.108.239.226] A from udp://119.29.29.29:53
17:09:06.430   Debug: [Rule] use default rules
17:09:06.430    Info: [UDP] 172.19.0.1:44279 --> services.googleapis.cn:443 match DomainSuffix(services.googleapis.cn) using DIRECT
17:09:06.439    Info: [TCP] 172.19.0.1:59534 --> services.googleapis.cn:443 match DomainSuffix(services.googleapis.cn) using DIRECT
17:09:06.514   Debug: [DNS] hijack udp:172.19.0.2:53 from 172.19.0.1:8277
17:09:06.539   Debug: [DNS] resolve rr1---sn-j5o7dn7e.xn--ngstr-lra8j.com A from udp://119.28.28.28:53
17:09:06.540   Debug: [DNS] resolve rr1---sn-j5o7dn7e.xn--ngstr-lra8j.com A from udp://119.29.29.29:53
17:09:06.540   Debug: [Rule] use default rules
17:09:06.541   Debug: [PKG] 172.19.0.1:34852 --> rr1---sn-j5o7dn7e.xn--ngstr-lra8j.com:443 by 10161[com.android.vending]
17:09:06.557   Debug: [DNS] rr1---sn-j5o7dn7e.xn--ngstr-lra8j.com --> [113.108.239.194] A from udp://119.29.29.29:53
17:09:06.557   Debug: [DNS] rr1---sn-j5o7dn7e.xn--ngstr-lra8j.com --> 113.108.239.194
17:09:06.558   Debug: [Rule] use default rules
17:09:06.558   Debug: [DNS] cache hit rr1---sn-j5o7dn7e.xn--ngstr-lra8j.com --> [113.108.239.194] A, expire at 2025-03-31 17:16:06
17:09:06.558   Debug: [PKG] 172.19.0.1:33313 --> rr1---sn-j5o7dn7e.xn--ngstr-lra8j.com:443 by 10161[com.android.vending]
17:09:06.559    Info: [UDP] 172.19.0.1:33313(com.android.vending) --> rr1---sn-j5o7dn7e.xn--ngstr-lra8j.com:443 match IPCIDR(113.64.0.0/10) using 国内[DIRECT]
17:09:06.570    Info: [TCP] 172.19.0.1:34852(com.android.vending) --> rr1---sn-j5o7dn7e.xn--ngstr-lra8j.com:443 match IPCIDR(113.64.0.0/10) using 国内[DIRECT]

可以看到下载域名 rr1---sn-j5o7dn7e.xn--ngstr-lra8j.com:443 最终进行了国内直连

开箱即用版：使用这个订阅地址转换 https://api-sub.0z.gs/
选择 基础模式 或者进阶模式里面的标准远程配置文件
转换订阅后，可以使用送中节点测试效果

这次再次改成强制使用谷歌国内服务器下载 Play 应用

需强制代理域名
# 修复 Google Play Store 送中节点下载 
DOMAIN-SUFFIX,play.googleapis.com
DOMAIN-SUFFIX,android.clients.google.com

需强制直连域名
# 修复 Google Play Store 送中节点下载 
DOMAIN,connectivitycheck.gstatic.com
DOMAIN-SUFFIX,services.googleapis.cn

然后 xn--ngstr-lra8j.com 这个域名不要进行基于域名的规则处理，让谷歌自己返回的子域名进行解析，得到是国外的或者国内的IP，再进行匹配

测试效果

# Capture on 2024-10-08 08:50:31.349
08:50:31.350    Info: [APP] Logcat level: info
08:50:33.831    Info: [APP] request force GC
08:50:35.581    Info: [UDP] 172.19.0.1:40208(com.android.vending) --> play-fe.googleapis.com:443 match DomainSuffix(googleapis.com) using 国外[🇭🇰 深港-IEPL]
08:50:36.018    Info: [TCP] 172.19.0.1:59946(com.android.vending) --> rr1---sn-j5o7dn7s.xn--ngstr-lra8j.com:443 match IPCIDR(58.240.0.0/12) using 国内[DIRECT]
08:50:36.924    Info: [TCP] 172.19.0.1:40294(com.android.vending) --> rr3---sn-j5o7dn7s.xn--ngstr-lra8j.com:443 match IPCIDR(58.240.0.0/12) using 国内[DIRECT]
08:50:43.021    Info: [TCP] 172.19.0.1:59978(com.android.vending) --> rr1---sn-j5o7dn7s.xn--ngstr-lra8j.com:443 match IPCIDR(58.240.0.0/12) using 国内[DIRECT]
08:50:43.780    Info: [TCP] 172.19.0.1:44558(com.android.vending) --> rr3---sn-j5o7dn7z.xn--ngstr-lra8j.com:443 match IPCIDR(58.240.0.0/12) using 国内[DIRECT]

更新：2024-05-12

况且，真的会缺这么点梯子流量吗，如果真缺的话，可以自行按照文章以前的更新内容进行尝试

当前修复效果：所有 play 商店流量全部强制代理，无视节点送中，任意节点都能下载

需强制代理域名

# 修复 Google Play Store 送中节点下载 
DOMAIN-SUFFIX,services.googleapis.cn
DOMAIN-SUFFIX,play.googleapis.com
DOMAIN,connectivitycheck.gstatic.com
DOMAIN-SUFFIX,android.clients.google.com
DOMAIN-SUFFIX,xn--ngstr-lra8j.com

效果：

# Capture on 2024-05-12 08:01:35.538
08:01:35.539    Info: [APP] Logcat level: info
08:01:40.066    Info: [APP] request force GC
08:01:41.236    Info: [APP] request force GC
08:01:41.282    Info: [APP] request force GC
08:01:41.437    Info: [UDP] 172.19.0.1:60242(com.android.vending) --> play-fe.googleapis.com:443 match DomainSuffix(googleapis.com) using 国外[🇭🇰 深港]
08:01:41.510    Info: [TCP] 172.19.0.1:46986(com.android.vending) --> play-fe.googleapis.com:443 match DomainSuffix(googleapis.com) using 国外[🇭🇰 深港]
08:01:48.970    Info: [TCP] 172.19.0.1:37464 --> connectivitycheck.gstatic.com:443 match Domain(connectivitycheck.gstatic.com) using 国外[🇭🇰 深港]
08:01:49.788    Info: [TCP] 172.19.0.1:37260 --> play.googleapis.com:443 match DomainSuffix(play.googleapis.com) using 国外[🇭🇰 深港]
08:01:49.882    Info: [UDP] 172.19.0.1:40088 --> services.googleapis.cn:443 match DomainSuffix(services.googleapis.cn) using 国外[🇭🇰 深港]
08:01:49.953    Info: [TCP] 172.19.0.1:53348 --> services.googleapis.cn:443 match DomainSuffix(services.googleapis.cn) using 国外[🇭🇰 深港]
08:01:50.429    Info: [UDP] 172.19.0.1:41453(com.android.vending) --> rr2---sn-i3belnl6.xn--ngstr-lra8j.com:443 match IPCIDR(173.194.0.0/16) using 国外[🇭🇰 深港]
08:01:50.507    Info: [TCP] 172.19.0.1:47880(com.android.vending) --> rr2---sn-i3belnl6.xn--ngstr-lra8j.com:443 match IPCIDR(173.194.0.0/16) using 国外[🇭🇰 深港]
08:01:51.420    Info: [TCP] 172.19.0.1:49530(com.android.vending) --> rr1---sn-i3belnlz.xn--ngstr-lra8j.com:443 match IPCIDR(173.194.0.0/16) using 国外[🇭🇰 深港]
08:01:53.421    Info: [TCP] 172.19.0.1:54394(com.android.vending) --> rr4---sn-i3belnl7.xn--ngstr-lra8j.com:443 match IPCIDR(74.125.0.0/16) using 国外[🇭🇰 深港]
08:01:54.112    Info: [UDP] 172.19.0.1:54338 --> android.clients.google.com:443 match DomainSuffix(android.clients.google.com) using 国外[🇭🇰 深港]
08:01:54.184    Info: [TCP] 172.19.0.1:47570 --> android.clients.google.com:443 match DomainSuffix(android.clients.google.com) using 国外[🇭🇰 深港]
08:01:55.140    Info: [TCP] 172.19.0.1:40120(com.android.vending) --> rr3---sn-i3belney.xn--ngstr-lra8j.com:443 match IPCIDR(74.125.0.0/16) using 国外[🇭🇰 深港]
08:01:56.230    Info: [UDP] 172.19.0.1:40686(com.android.vending) --> rr3---sn-i3b7knsd.xn--ngstr-lra8j.com:443 match IPCIDR(74.125.0.0/16) using 国外[🇭🇰 深港]
08:01:56.306    Info: [TCP] 172.19.0.1:50924(com.android.vending) --> rr3---sn-i3b7knsd.xn--ngstr-lra8j.com:443 match IPCIDR(74.125.0.0/16) using 国外[🇭🇰 深港]
08:02:20.428    Info: [TCP] 172.19.0.1:37836(com.android.vending) --> rr4---sn-i3b7knld.xn--ngstr-lra8j.com:443 match IPCIDR(173.194.0.0/16) using 国外[🇭🇰 深港]
08:02:21.718    Info: [TCP] 172.19.0.1:55958(com.android.vending) --> rr3---sn-i3b7knld.xn--ngstr-lra8j.com:443 match IPCIDR(173.194.0.0/16) using 国外[🇭🇰 深港]
08:02:25.672    Info: [APP] request force GC

请输入图片描述

目前来说，香港送中节点大概率能通过将 services.googleapis.cn 使用境外 DNS 解析方式，重新获得国际版 play 的域名正常下载，其他地区 VPS 几率渺茫了，我测试样本数量较少，只有 4 个，网友们可以自行用机场送中节点测试

此次检查日志，发现谷歌应该是更新了策略，新增了中国特供的解析域名：xn--ngstr-cn-8za9o.com，原来是只有 xn--ngstr-lra8j.com，该域名看起来是 IDN 域名，解码后好像有拉丁字符或者其他非常规字符 ångströ-cn.com，并且无一例外，所分配的中国特供域名全部解析失败，是没有 IP 地址的，不知道是不是谷歌特意为之

应该是谷歌彻底封堵走谷歌国内服务器下载的渠道了，对比 10 号那天，其实已经初现端倪了，这次持续测试送中节点，所有 DNS 解析，无论是境内外，在日本送中节点的测试全程， xn--ngstr-lra8j.com 彻底消失取而代之的是 xn--ngstr-cn-8za9o.com

然后有幸搜索这个新域名时看到这个博主的博文，大家可以参考下

https://loukky.com/archives/2340

临时解决办法，使用送中的香港节点仍然可以正常下载并走代理，或者使用没送中的任意节点下载

直接 Clash 全局是没用的，这个 xn--ngstr-cn-8za9o.com是预置的域名，先于 DNS 请求阶段，无需网络请求，谷歌硬编码到国内特供版 GMS 文件，具体说明见文章内容，但是香港送中节点测试结果还是很迷，根据日志，它直接获得的是 xn--ngstr-lra8j.com 这个域名，此时我就去查这个中国特供的 play 域名资料。发现早在 22 年就有了，我手机也是 22 年 9 月买的，可能已经硬编码进去了

17 条评论

菜狗🐕
2025-04-19 18:50:32

实地测试了一下，首先由于我一定要开绕过大陆功能（否则内网太多流量要进内核了，遭不住），services.googleapis.cn的域名/IP都在CN，导致锁死直连，无法采用强制代理方案，我只能选择直连方案。
于是我依照文章说明将GFW域名“connectivitycheck.gstatic.com”写进了直连策略，同时由于我无法抛弃GFW规则，因此只能再加了一条GFW域名“xn--ngstr-lra8j.com”也强制直连（没能做到最新要求的这个域名随IP规则处理）。
实验结果是下载非常顺畅，按照博主经验来看，我这样是不是只有一个节点本身是风控的隐患了？因为我的理解是如果节点不是送中节点，那么我可以正常代理下载，如果是送中节点，那么根据以上规则则会直连下载

回复
ww
2025-03-31 14:23:08

没搞定，最后通过手机设置wifi代理，使用pc局域网代理，点击google play 更新或者安装，在pc cfw verge 上循环直连和代理之间切换，每次切到代理后，查看cfw verge上的连接，看见有“ngstr-lra8j.com”就切换到直连，等下载好后再切回去

回复
1. 量子涨落
  2025-03-31 17:13:45
  
  @ww
  
  我测试没问题，请自查自己设置的正确性，如 DNS 策略是否被强制覆盖、是否正确代理、被绕过、DNS 劫持失败等其他因素，或者方便的话留个联系方式，是否需要协助排查
  
  回复
  1. 菜狗🐕
    2025-04-19 18:35:22
    
    @量子涨落
    
    佬，我总结了一下就是两种方案（不考虑节点本身被风控的话）
    强制代理，需要代理本来为中国域名的“services.googleapis.cn”（其他域名本身属于GFW无需额外声明）强制直连，需要直连本来为GFW域名的“connectivitycheck.gstatic.com”，并且让xn--ngstr-lra8j.com不被域名规则处理而是IP规则
    对于方案1如果开启绕过大陆则将无法使用，因为流量并未进入内核，无法处理；对于方案2又不能使用GFW规则，因为xn--ngstr-lra8j.com就在其中。这实在是难以抉择，不知我的理解是否正确以及大佬有无其他高见😫
    
    回复
w123g
2024-11-27 15:22:03

我不开绕过就可以，但是我想开着怎么半
u.0z.gs/PuuIioD

回复
1. 量子涨落
  2024-11-27 15:50:31
  
  @w123g
  
  绕过就好了，机场落地IP直接代理还可能有风控不能下载
  
  回复
wnnnb
2024-06-12 11:42:18

原本因为一些问题就查了为什么谷歌商店下载一直在等待，然后就把两个域名改为直连了能用了也就没管，直到一天油管不能用会员了就来找了解决办法，使用最新方法，第二天ip就正常了也能正常谷歌商店下载东西，牛逼。

回复
ronaldinho
2023-07-09 23:42:58

[TCP] dial DIRECT (match DomainSuffix/xn--ngstr-lra8j.com) 172.19.0.1:37358 --> rr3---sn-j5o7dn7l.xn--ngstr-lra8j.com:443 error: connect failed: dial tcp 58.63.233.4:443: i/o timeout | connect failed: no ip address
解析出来的 ip 似乎连接不了了

回复
1. ronaldinho
  2023-07-10 13:58:11
  
  @ronaldinho
  
  使用 CN 应该不行了，当前解决方案，强制 services.googleapis.cn 用国外的 dns 解析
  
  回复
  1. 量子涨落
    2023-07-10 18:40:00
    
    @ronaldinho
    
    经过测试，的确没办法了，使用境外 DNS 解析之后，能下载了，并且是送中节点能稳定下载，但这就看节点的自身质量网速了
    那个找不到 IP 问题，我也复现了，不知道是不是我这个方法公布之后，用的人太多了，把谷歌的羊毛薅光了，经过大量测试，反复重下迫使重新分配子域名，还是有几率某些子域名能解析到谷歌在国内服务器的 IP 上面，能使用国内网络下载，并且能跑到 30 ~ 40 MB/s，但是大量测试也表明，已经有很多分配的子域名是无法解析的
    以前方法公布时没这个问题，每个分配的子域名均能解析并且满速下载（移动、联通千兆环境稳定达到 60M/s +）
    
    回复
2. 量子涨落
  2023-07-10 09:36:22
  
  @ronaldinho
  
  是使用了订阅转换 https://api-sub.0z.gs 处理过的订阅吗？
  且选的是基础模式，或者是高级模式的标准分流规则？
  
  回复
  1. ronaldinho
    2023-07-10 13:59:51
    
    @量子涨落
    
    没有用订阅转换，自己写的规则，昨晚上测试了很久，最后放弃从cn的服务器下载了
    
    回复
    
    量子涨落
    2023-07-10 16:53:28
    
    @ronaldinho
    
    只要自己能解决，方法随意
    
    回复
huluobo
2023-05-18 10:36:44

有没有可用的Clash配置链接推荐想用GPT

回复
1. lala33
  2023-07-21 14:24:04
  
  @huluobo
  
  日本美国节点都可以，香港新加坡不行
  
  回复
  1. 量子涨落
    2023-07-21 17:31:39
    
    @lala33
    
    巧了，我只有香港和日本的送中节点，测试只有香港能用，日本的不行
    
    回复