Can someone on bigpipe tracert trademe for me please?

Forums › Spark New Zealand (including Skinny and BigPipe) › Can someone on bigpipe tracert trademe for me please?

1 | 2 | 3 | 4

1788 posts

Uber Geek
+1 received by user: 84

#1628823 13-Sep-2016 19:06

zespri:

Detruire:

What do those addresses resolve to for you (using nslookup and tracert)?

Sorry, which addresses? Of these sites?

Like this:

PS C:\WINDOWS\system32> nslookup stackoverflow.com
Server: router
Address: 192.168.88.1

Non-authoritative answer:
Name: stackoverflow.com
Addresses: 151.101.193.69
151.101.65.69
151.101.129.69
151.101.1.69

PS C:\WINDOWS\system32> nslookup www.trademe.co.nz
Server: router
Address: 192.168.88.1

Non-authoritative answer:
Name: www.trademe.co.nz
Address: 202.162.73.2

PS C:\WINDOWS\system32> tracert stackoverflow.com

Tracing route to stackoverflow.com [151.101.65.69]
over a maximum of 30 hops:

1 1 ms <1 ms <1 ms router [192.168.88.1]
2 23 ms 22 ms 22 ms 210.54.34.1
3 23 ms 23 ms 23 ms 122.56.60.68
4 23 ms 23 ms 24 ms 122.56.60.69
5 23 ms 21 ms 22 ms x1-1-1-200.akcr11.global-gateway.net.nz [122.56.118.89]
6 * * * Request timed out.

PS C:\WINDOWS\system32> tracert www.trademe.co.nz

Tracing route to www.trademe.co.nz [202.162.73.2]
over a maximum of 30 hops:

1 323 ms 226 ms 4 ms router [192.168.88.1]
2 194 ms 87 ms 76 ms 210.54.34.1
3 23 ms 23 ms 23 ms 122.56.60.68
4 23 ms 24 ms 23 ms 122.56.60.69
5 29 ms 22 ms 25 ms x1-1-1-200.akcr11.global-gateway.net.nz [122.56.118.89]
6 * * * Request timed out.

Yes. When I read Slingshot, my first thought was the broken DNS proxying in some of the routers they supply. I'd get some weird or missing DNS results, and ended up having to set the nameservers on each device to get around it. This doesn't look like the same thing, but that might be worth trying anyway (if you haven't already.)

rm *

dan

1134 posts

Uber Geek
+1 received by user: 105

Lifetime subscriber

#1628825 13-Sep-2016 19:10

what is your Router you are using, and what is your current VDSL line stats?

when i asked if you tried changing the router, and you said it would be a coincidence - not really, since you didn't use that on VDSL previously, you had it on ADSL, (it would have been

one of the first things i would have done to rule out the router as the issue in this type of scenario)

yitz

2239 posts

Uber Geek
+1 received by user: 594

#1628830 13-Sep-2016 19:26

Maybe they have black holed the CGNAT IP but forgot to remove it from the pool?

dan

1134 posts

Uber Geek
+1 received by user: 105

Lifetime subscriber

#1628832 13-Sep-2016 19:28

yitz: Maybe they have black holed the CGNAT IP but forgot to remove it from the pool?

whom?

zespri

424 posts

Ultimate Geek
+1 received by user: 94

Lifetime subscriber

#1628836 13-Sep-2016 19:31

dan:

what is your Router you are using, and what is your current VDSL line stats?

The line stats are here:

http://www.geekzone.co.nz/forums.asp?forumid=158&topicid=201738&page_no=2#1624742

The one that I got on ADSL with slingshot is earlier in that same thread.

I have DrayTek Vigor 130 in PPPoE pass-through mode + Mikrotik hAP ac lite.

When I told you that I factory reset the router I meant Mikrotik.

As far as DrayTek goes, I tried to downgrade to 3.75 firmware after the switch, because I came across some reports of broken VDSL on the latest firmware, but that did not help, so I flashed back the current 3.79. This was also with reset.

dan:

when i asked if you tried changing the router, and you said it would be a coincidence - not really, since you didn't use that on VDSL previously, you had it on ADSL, (it would have been

one of the first things i would have done to rule out the router as the issue in this type of scenario)

The Vigor 130 is new. I bought it just a couple of month ago to replace the previous Vigor 120. Unfortunately, Vigor 120 does not support VDSL. I do not have another VDSL modem and I cannot really justify buying another copy. I also don't have anyone to borrow from.

As far as the Mikrotik goes... it should not have anything to do with ADSL/VDSL, right? It should not even notice the change...

dan:

it would have been one of the first things i would have done to rule out the router as the issue in this type of scenario

In the spirit of brainstorming, do you have a plausible scenario in mind how the router could be the issue? The dns resolves. Most of the internet works. A few sites do not, they do not ping and they cannot be tracert'd. It really smells like a routing issue. But it also possible that the issue is on my end. Any idea, what type of malfunction can manifest this way? The router randomly discards packets from the addresses it does not like?

yitz

2239 posts

Uber Geek
+1 received by user: 594

#1628841 13-Sep-2016 19:39

dan: whom?

BigPipe I guess?

Btw the sites listed are not random (trademe, stackoverflow, bbc, disqus etc..) they all resolve to the Fastly CDN behind TradeMe's AS 9834 so very likely routing related.

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.

dan

1134 posts

Uber Geek
+1 received by user: 105

Lifetime subscriber

#1628842 13-Sep-2016 19:46

its not impossible its something like that, but sometimes its just more simple than that. i haven't heard anyone else complain about these issues

i suspect if you take out those 2 routers, and put it 1 standard router like a fritzbox or similar to test, your problems will be resolved in regarding not been able to access various sites and its really been caused by your setup/config.

i think you should take this step before you keep hassling bigpipe support about routing issues etc, atleast to rule it out. maybe you have a MTU issue or something wrong on your config

if your in west auckland i could borrow you my test fritzbox to rule it out a problem with your setup

zespri

424 posts

Ultimate Geek
+1 received by user: 94

Lifetime subscriber

#1628845 13-Sep-2016 19:48

yitz:

dan: whom?
BigPipe I guess?

Btw the sites listed are not random (trademe, stackoverflow, bbc, disqus etc..) they all resolve to the Fastly CDN behind TradeMe's AS 9834 so very likely routing related.

Yep, that's what I think as well. The only issue is that it seems that I'm the only one with this problem, nobody else... Hence, I'd like to know what can be screwed up on the client side (here) that would screw the routing.

I ordered and was assigned a fixed IP address. It is not supposed to get CGNAT'ed and I can reach my home network on this IP externally.

I'm currently using a VPN to reach these sites. Not something I'm looking forward to continuing doing.

solutionz

589 posts

Ultimate Geek
+1 received by user: 164
Inactive user

#1628847 13-Sep-2016 19:54

Do you get the same result for?:

ping -f -l 1 www.trademe.co.nz

zespri

424 posts

Ultimate Geek
+1 received by user: 94

Lifetime subscriber

#1628850 13-Sep-2016 19:57

dan:

i suspect if you take out those 2 routers, and put it 1 standard router like a fritzbox or similar to test, your problems will be resolved in regarding not been able to access various sites and its really been caused by your setup/config.

i think you should take this step before you keep hassling bigpipe support about routing issues etc, atleast to rule it out. maybe you have a MTU issue or something wrong on your config

Dan, thank you. Now tell me, assume I tried that and it indeed works. Are you sure that it means that there is a problem with my setup? If yes, then why? Remember, it used to work with slingshot, and I have not done any configuration changes apart from switching from ADSL to VDSL in the modem. If I don't hassle bigpipe, I might never get an answer to this question. (Of course if I do keep hassling them the outcome can be about the same). The issue is very selective. I would LOVE to find out the real reason for it. I would love to be able to troubleshoot similar stuff in future.

solutionz:

Do you get the same result for?:

ping -f -l 1 www.trademe.co.nz

Yes. The ip is the same, and it does not ping.

dan

1134 posts

Uber Geek
+1 received by user: 105

Lifetime subscriber

#1628867 13-Sep-2016 20:07

zespri:

Dan, thank you. Now tell me, assume I tried that and it indeed works. Are you sure that it means that there is a problem with my setup?

yes. if you take out your 2 router config and replace with 1 standard VDSL router to test, and it now works, then the issue is your config and has nothing to do with bigpipe, nor should they spend time

helping you resolve it in that scenario.

if you do that, it works normally with a different router, you now know its time to start tinkering with your configs.

givin the fact you had the problem on CGNat, then still have the problem with a static IP, i would bet money its on your side, not bigpipe.

HP

Shop now for HP laptops and other devices (affiliate link).

zespri

424 posts

Ultimate Geek
+1 received by user: 94

Lifetime subscriber

#1628887 13-Sep-2016 20:36

dan:

givin the fact you had the problem on CGNat, then still have the problem with a static IP, i would bet money its on your side, not bigpipe.

I've never had CGNat, but that's beside the point. I hear what you are saying, thank you for taking time to talk to me today ;)

yitz

2239 posts

Uber Geek
+1 received by user: 594

#1628918 13-Sep-2016 20:44

Even with static IP, I still think it's to do with your IP being blacklisted somewhere on BigPipe's end.

Does your modem/router have a ping facility in its web admin you can try?

What does a successful tracert look like? What about to 202.162.72.2 or a site you able to access.

solutionz

589 posts

Ultimate Geek
+1 received by user: 164
Inactive user

#1628924 13-Sep-2016 21:03

This:

yitz:

dan: whom?
BigPipe I guess?

Btw the sites listed are not random (trademe, stackoverflow, bbc, disqus etc..) they all resolve to the Fastly CDN behind TradeMe's AS 9834 so very likely routing related.

See: http://stackoverflow.com/questions/20080577/cant-access-cloudfront-and-fastly-files-web-sites-not-loading

I think it's because of LSN (or NAT444, CGN) that installed in ISP network.
(ISP don't want customers to notice this change.)

My ISP recently deploy LSN short before this problem arise.
I think IP address pool in LSN is too small (poorly deploy by ISP) so too many users share the same IP address.

this cause CDN networks to think they got DOS attack from particular IP address.
then CDN networks will temporary block (or null route) the LSN IP address.

zespri:

dan:

i suspect if you take out those 2 routers, and put it 1 standard router like a fritzbox or similar to test, your problems will be resolved in regarding not been able to access various sites and its really been caused by your setup/config.

i think you should take this step before you keep hassling bigpipe support about routing issues etc, atleast to rule it out. maybe you have a MTU issue or something wrong on your config

Dan, thank you. Now tell me, assume I tried that and it indeed works. Are you sure that it means that there is a problem with my setup? If yes, then why? Remember, it used to work with slingshot, and I have not done any configuration changes apart from switching from ADSL to VDSL in the modem. If I don't hassle bigpipe, I might never get an answer to this question. (Of course if I do keep hassling them the outcome can be about the same). The issue is very selective. I would LOVE to find out the real reason for it. I would love to be able to troubleshoot similar stuff in future.

solutionz:

Do you get the same result for?:

ping -f -l 1 www.trademe.co.nz

Yes. The ip is the same, and it does not ping.

This would suggest it's not an MTU issue.

Talkiet

4819 posts

Uber Geek
+1 received by user: 3934

Trusted

#1628965 13-Sep-2016 22:26

I can think of 4 instances in the last 3-4 months where the problem with spotty performance/site availability/VPN function was traced to a Mikrotik issue... They can be nightmares to setup.

If you haven't already, please try going back to just a single VDSL router setup with simple NAT and seeing if the sites start working. Perhaps you have already, and I see someone else suggested this. If you haven't, it's the next thing you should try.

Cheers - N

Please note all comments are from my own brain and don't necessarily represent the position or opinions of my employer, previous employers, colleagues, friends or pets.

1 | 2 | 3 | 4