Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 | 3 | 4
1259 posts

Uber Geek
+1 received by user: 64


  Reply # 1628823 13-Sep-2016 19:06
Send private message

zespri:

 

Detruire:

 

 What do those addresses resolve to for you (using nslookup and tracert)?

 

 

Sorry, which addresses? Of these sites?

 

Like this:

 

 

 

PS C:\WINDOWS\system32> nslookup stackoverflow.com
Server: router
Address: 192.168.88.1

 

Non-authoritative answer:
Name: stackoverflow.com
Addresses: 151.101.193.69
151.101.65.69
151.101.129.69
151.101.1.69

 

PS C:\WINDOWS\system32> nslookup www.trademe.co.nz
Server: router
Address: 192.168.88.1

 

Non-authoritative answer:
Name: www.trademe.co.nz
Address: 202.162.73.2

 

PS C:\WINDOWS\system32> tracert stackoverflow.com

 

Tracing route to stackoverflow.com [151.101.65.69]
over a maximum of 30 hops:

 

1 1 ms <1 ms <1 ms router [192.168.88.1]
2 23 ms 22 ms 22 ms 210.54.34.1
3 23 ms 23 ms 23 ms 122.56.60.68
4 23 ms 23 ms 24 ms 122.56.60.69
5 23 ms 21 ms 22 ms x1-1-1-200.akcr11.global-gateway.net.nz [122.56.118.89]
6 * * * Request timed out.

PS C:\WINDOWS\system32> tracert www.trademe.co.nz

 

Tracing route to www.trademe.co.nz [202.162.73.2]
over a maximum of 30 hops:

 

1 323 ms 226 ms 4 ms router [192.168.88.1]
2 194 ms 87 ms 76 ms 210.54.34.1
3 23 ms 23 ms 23 ms 122.56.60.68
4 23 ms 24 ms 23 ms 122.56.60.69
5 29 ms 22 ms 25 ms x1-1-1-200.akcr11.global-gateway.net.nz [122.56.118.89]
6 * * * Request timed out.

 

 

 

 

 

 

Yes. When I read Slingshot, my first thought was the broken DNS proxying in some of the routers they supply. I'd get some weird or missing DNS results, and ended up having to set the nameservers on each device to get around it. This doesn't look like the same thing, but that might be worth trying anyway (if you haven't already.)





rm *


dan

967 posts

Ultimate Geek
+1 received by user: 88


  Reply # 1628825 13-Sep-2016 19:10
Send private message

what is your Router you are using, and what is your current VDSL line stats?

 

 

 

when i asked if you tried changing the router, and you said it would be a coincidence - not really, since you didn't use that on VDSL previously, you had it on ADSL, (it would have been

 

one of the first things i would have done to rule out the router as the issue in this type of scenario)

 

 

 

 


1274 posts

Uber Geek
+1 received by user: 291


  Reply # 1628830 13-Sep-2016 19:26
Send private message

Maybe they have black holed the CGNAT IP but forgot to remove it from the pool?

dan

967 posts

Ultimate Geek
+1 received by user: 88


  Reply # 1628832 13-Sep-2016 19:28
Send private message

yitz: Maybe they have black holed the CGNAT IP but forgot to remove it from the pool?

 

 

 

whom?




294 posts

Ultimate Geek
+1 received by user: 44

Lifetime subscriber

  Reply # 1628836 13-Sep-2016 19:31
Send private message

dan:

 

what is your Router you are using, and what is your current VDSL line stats?  

 

 

The line stats are here:

 

http://www.geekzone.co.nz/forums.asp?forumid=158&topicid=201738&page_no=2#1624742

 

The one that I got on ADSL with slingshot is earlier in that same thread.

 

I have DrayTek Vigor 130 in PPPoE pass-through mode + Mikrotik hAP ac lite.

 

When I told you that I factory reset the router I meant Mikrotik.

 

As far as DrayTek goes, I tried to downgrade to 3.75 firmware after the switch, because I came across some reports of broken VDSL on the latest firmware, but that did not help, so I flashed back the current 3.79. This was also with reset.

 

dan:

 

when i asked if you tried changing the router, and you said it would be a coincidence - not really, since you didn't use that on VDSL previously, you had it on ADSL, (it would have been

 

one of the first things i would have done to rule out the router as the issue in this type of scenario)

 

 

The Vigor 130 is new. I bought it just a couple of month ago to replace the previous Vigor 120. Unfortunately, Vigor 120 does not support VDSL. I do not have another VDSL modem and I cannot really justify buying another copy. I also don't have anyone to borrow from.

 

As far as the Mikrotik goes... it should not have anything to do with ADSL/VDSL, right? It should not even notice the change...

 

 

 

dan:

 

it would have been one of the first things i would have done to rule out the router as the issue in this type of scenario

 

 

In the spirit of brainstorming, do you have a plausible scenario in mind how the router could be the issue? The dns resolves. Most of the internet works. A few sites do not, they do not ping and they cannot be tracert'd. It really smells like a routing issue. But it also possible that the issue is on my end. Any idea, what type of malfunction can manifest this way? The router randomly discards packets from the addresses it does not like?


1274 posts

Uber Geek
+1 received by user: 291


  Reply # 1628841 13-Sep-2016 19:39
One person supports this post
Send private message

dan: whom? 
BigPipe I guess?

 

Btw the sites listed are not random (trademe, stackoverflow, bbc, disqus etc..) they all resolve to the Fastly CDN behind TradeMe's AS 9834 so very likely routing related.


dan

967 posts

Ultimate Geek
+1 received by user: 88


  Reply # 1628842 13-Sep-2016 19:46
Send private message

its not impossible its something like that, but sometimes its just more simple than that. i haven't heard anyone else complain about these issues

 

 

 

i suspect if you take out those 2 routers, and put it 1 standard router like a fritzbox or similar to test, your problems will be resolved in regarding not been able to access various sites and its really been caused by your setup/config.

 

i think you should take this step before you keep hassling bigpipe support about routing issues etc, atleast to rule it out. maybe you have a MTU issue or something wrong on your config

 

 

 

if your in west auckland i could borrow you my test fritzbox to rule it out a problem with your setup

 

 

 

 

 

 

 

 

 

 

 

 

 

 




294 posts

Ultimate Geek
+1 received by user: 44

Lifetime subscriber

  Reply # 1628845 13-Sep-2016 19:48
Send private message

yitz:

 

dan: whom? 
BigPipe I guess?

 

Btw the sites listed are not random (trademe, stackoverflow, bbc, disqus etc..) they all resolve to the Fastly CDN behind TradeMe's AS 9834 so very likely routing related.

 

 

Yep, that's what I think as well. The only issue is that it seems that I'm the only one with this problem, nobody else... Hence, I'd like to know what can be screwed up on the client side (here) that would screw the routing.

 

I ordered and was assigned a fixed IP address. It is not supposed to get CGNAT'ed and I can reach my home network on this IP externally.

 

I'm currently using a VPN to reach these sites. Not something I'm looking forward to continuing doing.


544 posts

Ultimate Geek
+1 received by user: 127

Subscriber

  Reply # 1628847 13-Sep-2016 19:54
Send private message

Do you get the same result for?:

 

ping -f -l 1 www.trademe.co.nz




294 posts

Ultimate Geek
+1 received by user: 44

Lifetime subscriber

  Reply # 1628850 13-Sep-2016 19:57
Send private message

dan:

 

i suspect if you take out those 2 routers, and put it 1 standard router like a fritzbox or similar to test, your problems will be resolved in regarding not been able to access various sites and its really been caused by your setup/config.

 

i think you should take this step before you keep hassling bigpipe support about routing issues etc, atleast to rule it out. maybe you have a MTU issue or something wrong on your config

 

 

Dan, thank you. Now tell me, assume I tried that and it indeed works. Are you sure that it means that there is a problem with my setup? If yes, then why? Remember, it used to work with slingshot, and I have not done any configuration changes apart from switching from ADSL to VDSL in the modem. If I don't hassle bigpipe, I might never get an answer to this question. (Of course if I do keep hassling them the outcome can be about the same). The issue is very selective. I would LOVE to find out the real reason for it. I would love to be able to troubleshoot similar stuff in future.

 

 

solutionz:

 

Do you get the same result for?:

 

ping -f -l 1 www.trademe.co.nz

 

 

Yes. The ip is the same, and it does not ping.


dan

967 posts

Ultimate Geek
+1 received by user: 88


  Reply # 1628867 13-Sep-2016 20:07
Send private message

zespri:

 

 

 

Dan, thank you. Now tell me, assume I tried that and it indeed works. Are you sure that it means that there is a problem with my setup?

 

 

 

 

yes. if you take out your 2 router config and replace with 1 standard VDSL router to test, and it now works, then the issue is your config and has nothing to do with bigpipe, nor should they spend time

 

helping you resolve it in that scenario.

 

 

 

if you do that, it works normally with a different router, you now know its time to start tinkering with your configs.

 

 

 

givin the fact you had the problem on CGNat, then still have the problem with a static IP, i would bet money its on your side, not bigpipe.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 




294 posts

Ultimate Geek
+1 received by user: 44

Lifetime subscriber

  Reply # 1628887 13-Sep-2016 20:36
Send private message

dan:

 

givin the fact you had the problem on CGNat, then still have the problem with a static IP, i would bet money its on your side, not bigpipe.

 

 

I've never had CGNat, but that's beside the point. I hear what you are saying, thank you for taking time to talk to me today ;)


1274 posts

Uber Geek
+1 received by user: 291


  Reply # 1628918 13-Sep-2016 20:44
Send private message

Even with static IP, I still think it's to do with your IP being blacklisted somewhere on BigPipe's end.

 

 

Does your modem/router have a ping facility in its web admin you can try?

 

 

What does a successful tracert look like? What about to 202.162.72.2 or a site you able to access.

544 posts

Ultimate Geek
+1 received by user: 127

Subscriber

  Reply # 1628924 13-Sep-2016 21:03
Send private message

This:

 

yitz:

 

dan: whom? 
BigPipe I guess?

 

Btw the sites listed are not random (trademe, stackoverflow, bbc, disqus etc..) they all resolve to the Fastly CDN behind TradeMe's AS 9834 so very likely routing related.

 

 

 

 

See: http://stackoverflow.com/questions/20080577/cant-access-cloudfront-and-fastly-files-web-sites-not-loading

 

I think it's because of LSN (or NAT444, CGN) that installed in ISP network.
(ISP don't want customers to notice this change.)

 

My ISP recently deploy LSN short before this problem arise.
I think IP address pool in LSN is too small (poorly deploy by ISP) so too many users share the same IP address.

 

this cause CDN networks to think they got DOS attack from particular IP address.
then CDN networks will temporary block (or null route) the LSN IP address.

 

 

 

 

zespri:

 

dan:

 

i suspect if you take out those 2 routers, and put it 1 standard router like a fritzbox or similar to test, your problems will be resolved in regarding not been able to access various sites and its really been caused by your setup/config.

 

i think you should take this step before you keep hassling bigpipe support about routing issues etc, atleast to rule it out. maybe you have a MTU issue or something wrong on your config

 

 

Dan, thank you. Now tell me, assume I tried that and it indeed works. Are you sure that it means that there is a problem with my setup? If yes, then why? Remember, it used to work with slingshot, and I have not done any configuration changes apart from switching from ADSL to VDSL in the modem. If I don't hassle bigpipe, I might never get an answer to this question. (Of course if I do keep hassling them the outcome can be about the same). The issue is very selective. I would LOVE to find out the real reason for it. I would love to be able to troubleshoot similar stuff in future.

 

 

solutionz:

 

Do you get the same result for?:

 

ping -f -l 1 www.trademe.co.nz

 

 

Yes. The ip is the same, and it does not ping.

 

 

This would suggest it's not an MTU issue.


3741 posts

Uber Geek
+1 received by user: 2271

Trusted
Spark NZ

  Reply # 1628965 13-Sep-2016 22:26
Send private message

I can think of 4 instances in the last 3-4 months where the problem with spotty performance/site availability/VPN function was traced to a Mikrotik issue... They can be nightmares to setup.

 

 

 

If you haven't already, please try going back to just a single VDSL router setup with simple NAT and seeing if the sites start working. Perhaps you have already, and I see someone else suggested this. If you haven't, it's the next thing you should try.

 

 

 

Cheers - N

 

 


1 | 2 | 3 | 4
View this topic in a long page with up to 500 replies per page Create new topic

Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.