Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 
'That VDSL Cat'
9062 posts

Uber Geek
+1 received by user: 1993

Trusted
Spark
Subscriber

  Reply # 1968813 6-Mar-2018 11:37
Send private message

Is this affecting anyone being able to use the site itself?

 

 

 

i agree, it looks to be IDS related.

 

After a fair few pcaps - I'm running out of unused IP's in my collection here!

 

 

 

Process is very repeatable, first connect, TCP RST then it works.

 

In a browser, this seems to resolve itself so may be working as intended.

 

 

 

For me, a browser is still sub 1 second load time. even with this little RST. which is what i'd call, acceptable

 

 





#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.




Mr Snotty
8076 posts

Uber Geek
+1 received by user: 4051

Moderator
Trusted
Lifetime subscriber

  Reply # 1968816 6-Mar-2018 11:42
Send private message

@hio77 Due to how the proxy works at my workplace you're unable to get onto the Spark website:

This Page Cannot Be Displayed

 

The system cannot communicate with the external server ( spark.co.nz ). The Internet server may be busy, may be permanently down, or may be unreachable because of network problems.

 

Please check the spelling of the Internet address entered. If it is correct, try this request later.

 

Even after a refresh it doesn't work. This is where I first noticed a problem. The IDS shouldn't drop the first connection and is a bad look for customers who access the website for the first time since they get an error right off the bat. Never had any other sites that do this.





 
 
 
 


BDFL - Memuneh
61764 posts

Uber Geek
+1 received by user: 12425

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 1968820 6-Mar-2018 11:50
3 people support this post
Send private message

hio77:

 

Is this affecting anyone being able to use the site itself?

 

In a browser, this seems to resolve itself so may be working as intended.

 

 

First time you visit you get an error message "Connection reset". After a second it redirect to the site.

 

You can't say this is "working as intendend"





'That VDSL Cat'
9062 posts

Uber Geek
+1 received by user: 1993

Trusted
Spark
Subscriber

  Reply # 1968835 6-Mar-2018 12:12
One person supports this post
Send private message

Sorry, miss interpretation. as intended i mean, browsers handling a TCP RST in a clean motion.

 

 

 

Proxy situation is one i didn't consider. Depending on configuration yes this would clearly define an issue.

 

Think I've got defined clear examples now to address this.

 

 

 

On an related note, this issue being raised here, directed towards another issue that has since been fixed up :)





#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.


99 posts

Master Geek
+1 received by user: 17

Trusted

  Reply # 1970264 7-Mar-2018 00:23
Send private message

I'm seeing the same from a bigpipe connection. You can lecture me later for running as root, heh.

 

[root@saturn hdd]# curl https://www.spark.co.nz
curl: (35) Network file descriptor is not connected

 

I've been in long live chat sessions where the IDS has decided to kick in and drop the session causing live chat to drop and me having to start over. It's really not a good look to have the IDS drop the first connection.





Hi! I'm TheoM, but you know that already. I run Linux mirrors in NZ together with 2degrees. Like a mirror added? PM me!

 


 

https://theom.co.nz | https://theom.nz | https://mirrorlist.mirrors.theom.nz | Providing Free Mirrors Since Ages Ago™


'That VDSL Cat'
9062 posts

Uber Geek
+1 received by user: 1993

Trusted
Spark
Subscriber

  Reply # 1970265 7-Mar-2018 00:29
One person supports this post
Send private message

Some changes were made today.

Still not quite there. I've got replication of this down to an artform complete with pcaps and logging so its a quick cycle.

I held off on commenting hoping another change came through to completely sort this, but its definately with the right folks.


Thanks for mention of livechat experience for you, That's a tangible secondary issue at play. I'd love to have a bit more detail on the session (might help if i just get a referance number or account to backdrill)




#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.


99 posts

Master Geek
+1 received by user: 17

Trusted

  Reply # 1970266 7-Mar-2018 00:31
Send private message

hio77: Some changes were made today.

Still not quite there. I've got replication of this down to an artform complete with pcaps and logging so its a quick cycle.

I held off on commenting hoping another change came through to completely sort this, but its definately with the right folks.


Thanks for mention of livechat experience for you, That's a tangible secondary issue at play. I'd love to have a bit more detail on the session (might help if i just get a referance number or account to backdrill)

 

Sure. Account number coming your way via PM

 

Edit: I would, but...

 





Hi! I'm TheoM, but you know that already. I run Linux mirrors in NZ together with 2degrees. Like a mirror added? PM me!

 


 

https://theom.co.nz | https://theom.nz | https://mirrorlist.mirrors.theom.nz | Providing Free Mirrors Since Ages Ago™


6362 posts

Uber Geek
+1 received by user: 317

Trusted
Subscriber

  Reply # 1970283 7-Mar-2018 06:28
One person supports this post
Send private message

Hi, just to say I too have had chat sessions drop out, sometimes returning, other times not, so yes something the backend guys need to look at.

 

That said, getting service via chat (not just with Spark but with other organisations) works far far better then on the phone, its sometimes easier to get technical detail across and removes a layer of english as a 2nd language related issues.

 

Cyril


'That VDSL Cat'
9062 posts

Uber Geek
+1 received by user: 1993

Trusted
Spark
Subscriber

  Reply # 1973801 13-Mar-2018 10:08
Send private message

Hey guys,

 

 

 

How's this looking now? We have worked on a solution and tested heavily on our end (my poor servers have never pcapped and curled nearly as much!)

 

 

 

it Should be all sorted now!

 

 

 

 

 

 

 

Particularly interested in how long chat sessions go (last test i did landed with all the pokes to my lines that i didnt want done! - my perfect world! T_T )





#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.




Mr Snotty
8076 posts

Uber Geek
+1 received by user: 4051

Moderator
Trusted
Lifetime subscriber

  Reply # 1978358 15-Mar-2018 23:54
Send private message

@hio77 - still not fixed :(

:~$ curl spark.co.nz
curl: (56) Recv failure: Connection reset by peer





'That VDSL Cat'
9062 posts

Uber Geek
+1 received by user: 1993

Trusted
Spark
Subscriber

  Reply # 1978362 16-Mar-2018 04:59
Send private message

michaelmurfy:

@hio77 - still not fixed :(

:~$ curl spark.co.nz
curl: (56) Recv failure: Connection reset by peer



Knock on effect was causing an influx of issues with the site elsewhere unfortunately.
This got roled back as such.

New solution in the works.




#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.


350 posts

Ultimate Geek
+1 received by user: 84


  Reply # 1978471 16-Mar-2018 10:23
Send private message

TheoM:

 

I'm seeing the same from a bigpipe connection. You can lecture me later for running as root, heh.

 

[root@saturn hdd]# curl https://www.spark.co.nz
curl: (35) Network file descriptor is not connected

 

I've been in long live chat sessions where the IDS has decided to kick in and drop the session causing live chat to drop and me having to start over. It's really not a good look to have the IDS drop the first connection.

 

 

 

 

IDS (D stands for Detection) doesn't do that. IPS might, but then it would just keep resetting every connection attempt. Could be SSL/Proxy/Certificate related, like a certain cipher suite / encryption method refused (or blocked by an IPS falsing a heartbleed signature).

 

I've also seen the issue for a while (on 2D).


18735 posts

Uber Geek
+1 received by user: 5373

Trusted
Lifetime subscriber

  Reply # 1978645 16-Mar-2018 13:58
Send private message

Unrelated to original fault, but the text in the chat is the same colour as the background!

 

 


2895 posts

Uber Geek
+1 received by user: 311


  Reply # 1981410 22-Mar-2018 12:03
One person supports this post
Send private message

FYI you can demonstrate using previously promoted xtramail.co.nz

 

Get the similar connection reset before redirect to spark domain


'That VDSL Cat'
9062 posts

Uber Geek
+1 received by user: 1993

Trusted
Spark
Subscriber

  Reply # 1981433 22-Mar-2018 12:29
Send private message

Oblivian:

 

FYI you can demonstrate using previously promoted xtramail.co.nz

 

Get the similar connection reset before redirect to spark domain

 

 

 

 

Yep. fix fixed that, however caused a few other random errors in webmail among other places.

 

 

 

further work is inprogress on this.





#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.


1 | 2 
View this topic in a long page with up to 500 replies per page Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.