docker 容器内部可以ping通ip地址，但是dns解析提示refused

root@0b550909f7b9:/# ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8): 56 data bytes
64 bytes from 8.8.8.8: seq=0 ttl=113 time=48.173 ms
64 bytes from 8.8.8.8: seq=1 ttl=113 time=46.984 ms
^C
--- 8.8.8.8 ping statistics ---
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max = 46.984/47.578/48.173 ms
root@0b550909f7b9:/# curl baidu.com
curl: (6) Could not resolve host: baidu.com
root@0b550909f7b9:/# nslookup baidu.com
Server:         8.8.8.8
Address:        8.8.8.8:53

Non-authoritative answer:
Name:   baidu.com
Address: 39.156.66.10
Name:   baidu.com
Address: 110.242.68.66

** server can't find baidu.com: REFUSED