VF and Cloudflare

Forums › One NZ (including Farmside) › VF and Cloudflare

bigalow

570 posts

Ultimate Geek
+1 received by user: 112

#258615 13-Oct-2019 01:01

any one notice any site that uses Cloudflare is now going oversea ?

eg: tracert to geekzone.co.nz

1 <1 ms <1 ms <1 ms
2 2 ms 2 ms 1 ms
3 3 ms 3 ms 3 ms 10.200.12.17
4 11 ms 11 ms 11 ms unknown.telstraglobal.net [134.159.174.38]
5 15 ms 13 ms 13 ms unknown.telstraglobal.net [134.159.174.41]
6 16 ms 15 ms 15 ms i-0-0-0-1.hptw-core02.telstraglobal.net [202.84.223.42]
7 17 ms 15 ms 15 ms i-0-4-0-0.tauc-core02.telstraglobal.net [202.84.219.126]
8 138 ms 137 ms 139 ms i-10520.tlot-core02.telstraglobal.net [202.84.138.82]
9 139 ms 140 ms 151 ms i-0-3-0-2.1wlt-core02.telstraglobal.net [202.84.143.202]
10 233 ms 236 ms 234 ms i-15706.siko-core01.telstraglobal.net [202.84.140.225]
11 191 ms 191 ms 191 ms i-93.jtha01.telstraglobal.net [202.84.148.70]
12 192 ms 191 ms 195 ms i-95.jtha-core02.telstraglobal.net [202.47.216.145]
13 194 ms 191 ms 191 ms i-0-7-0-7.siko11.telstraglobal.net [202.47.216.250]
14 242 ms 242 ms 252 ms unknown.telstraglobal.net [202.127.69.58]
15 239 ms 239 ms 239 ms 104.24.3.14

tracert to cloudflare.com

1 <1 ms <1 ms <1 ms
2 1ms 2 ms 2 ms
3 3 ms 3 ms 4 ms 203.167.245.102
4 3 ms 3 ms 3 ms 203.167.245.101
5 11 ms 11 ms 11 ms 198.41.236.254
6 12 ms 11 ms 10 ms 198.41.236.253
7 11 ms 11 ms 11 ms 198.41.215.162

gaddman

224 posts

Master Geek
+1 received by user: 98

Trusted

#2336168 13-Oct-2019 07:37

Yeah, seeing the same for IPv4, although IPv6 is good. I'll flag it with the team tomorrow.

bigalow

570 posts

Ultimate Geek
+1 received by user: 112

#2337829 16-Oct-2019 00:31

any fix yet ?

looks ok on https://www.cloudflarestatus.com/

ipv6 is ok but ipv4 goes to hong kong

gaddman

224 posts

Master Geek
+1 received by user: 98

Trusted

#2338003 16-Oct-2019 10:35

Not yet, but there's a ticket working it's way through the team.

bigalow

570 posts

Ultimate Geek
+1 received by user: 112

#2341993 22-Oct-2019 18:38

Still not fixed !!

cloudflare peers on APE and AKL-IX and DataCentre220 in auckland

NickMack

977 posts

Ultimate Geek
+1 received by user: 831

Trusted

In memoriam

Lifetime subscriber

#2343329 24-Oct-2019 22:15

biggal:

any one notice any site that uses Cloudflare is now going oversea ?

eg: tracert to geekzone.co.nz

1 <1 ms <1 ms <1 ms
2 2 ms 2 ms 1 ms
3 3 ms 3 ms 3 ms 10.200.12.17
4 11 ms 11 ms 11 ms unknown.telstraglobal.net [134.159.174.38]
5 15 ms 13 ms 13 ms unknown.telstraglobal.net [134.159.174.41]
6 16 ms 15 ms 15 ms i-0-0-0-1.hptw-core02.telstraglobal.net [202.84.223.42]
7 17 ms 15 ms 15 ms i-0-4-0-0.tauc-core02.telstraglobal.net [202.84.219.126]
8 138 ms 137 ms 139 ms i-10520.tlot-core02.telstraglobal.net [202.84.138.82]
9 139 ms 140 ms 151 ms i-0-3-0-2.1wlt-core02.telstraglobal.net [202.84.143.202]
10 233 ms 236 ms 234 ms i-15706.siko-core01.telstraglobal.net [202.84.140.225]
11 191 ms 191 ms 191 ms i-93.jtha01.telstraglobal.net [202.84.148.70]
12 192 ms 191 ms 195 ms i-95.jtha-core02.telstraglobal.net [202.47.216.145]
13 194 ms 191 ms 191 ms i-0-7-0-7.siko11.telstraglobal.net [202.47.216.250]
14 242 ms 242 ms 252 ms unknown.telstraglobal.net [202.127.69.58]
15 239 ms 239 ms 239 ms 104.24.3.14

tracert to cloudflare.com

1 <1 ms <1 ms <1 ms
2 1ms 2 ms 2 ms
3 3 ms 3 ms 4 ms 203.167.245.102
4 3 ms 3 ms 3 ms 203.167.245.101
5 11 ms 11 ms 11 ms 198.41.236.254
6 12 ms 11 ms 10 ms 198.41.236.253
7 11 ms 11 ms 11 ms 198.41.215.162

Should look similar to this (2d) as VF is peering with AKL Peering Exchange.. must be some routes not being accepting/advertised etc....

Tracing route to geekzone.co.nz [104.24.3.14]
over a maximum of 30 hops:

1 3 ms 1 ms 1 ms thenet01.thenet.gen.nz [192.168.0.1]
2 5 ms 7 ms 19 ms 12.7.69.111.static.snap.net.nz [111.69.7.12]
3 * * * Request timed out.
4 45 ms 42 ms 43 ms as23655.sydney.megaport.com [103.26.68.14]
5 43 ms 43 ms 42 ms as13335.sydney.megaport.com [103.26.68.78]
6 42 ms 42 ms 42 ms 104.24.3.14

Trace complete.

U:\>tracert cloudflare.com

Tracing route to cloudflare.com [198.41.214.162]
over a maximum of 30 hops:

1 1 ms 1 ms 1 ms thenet01.thenet.gen.nz [192.168.0.1]
2 3 ms 2 ms 6 ms 12.7.69.111.static.snap.net.nz [111.69.7.12]
3 22 ms 19 ms 19 ms snap1.ape.nzix.net [192.203.154.120]
4 19 ms 19 ms 19 ms cloudflare.ape.nzix.net [192.203.154.51]
5 19 ms 19 ms 19 ms 198.41.214.162

Trace complete.

AKL Peering Exchange (APE) peering shows as up for VF from my monitoring at home :-)

https://smokeping.thenet.gen.nz/smokeping/smokeping.cgi?target=peering.pvfnz.aklpe

Nick.

https://nick.mackechnie.co.nz | NZ ISP latency monitoring - https://smokeping.thenet.gen.nz

hio77

'That VDSL Cat'
13044 posts

Uber Geek
+1 received by user: 3901

ID Verified

Trusted

Lizard Networks

Subscriber

#2343331 24-Oct-2019 22:21

NickMack:

AKL Peering Exchange (APE) peering shows as up for VF from my monitoring at home :-)

https://smokeping.thenet.gen.nz/smokeping/smokeping.cgi?target=peering.pvfnz.aklpe

Nick.

All that smoke though.

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

Mighty Ape

Shop now at Mighty Ape (affiliate link).

NickMack

977 posts

Ultimate Geek
+1 received by user: 831

Trusted

In memoriam

Lifetime subscriber

#2343337 24-Oct-2019 22:41

hio77:

NickMack:

AKL Peering Exchange (APE) peering shows as up for VF from my monitoring at home :-)

https://smokeping.thenet.gen.nz/smokeping/smokeping.cgi?target=peering.pvfnz.aklpe

Nick.

All that smoke though.

Well you do live in Auckland :-) #skycity

https://nick.mackechnie.co.nz | NZ ISP latency monitoring - https://smokeping.thenet.gen.nz

hio77

'That VDSL Cat'
13044 posts

Uber Geek
+1 received by user: 3901

ID Verified

Trusted

Lizard Networks

Subscriber

#2343338 24-Oct-2019 22:58

NickMack:

hio77:

NickMack:

AKL Peering Exchange (APE) peering shows as up for VF from my monitoring at home :-)

https://smokeping.thenet.gen.nz/smokeping/smokeping.cgi?target=peering.pvfnz.aklpe

Nick.

All that smoke though.

Well you do live in Auckland :-) #skycity

and here i was thinking it was just you peering APE in skycity ;)

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

yitz

2277 posts

Uber Geek
+1 received by user: 608

#2343340 24-Oct-2019 23:48

Last week's news but I envisage routing to Cloudflare may get worse if the government proceeds to expand the DIA filter to include extremist content.

https://www.newsroom.co.nz/@technology/2019/10/16/860705/isps-react-cautiously-to-extremism-internet-filter

Their policy is to filter individual /32 IPv4 addresses and I have to say empirically I haven't come across two sites hosted on the same Cloudflare virtual IP.

bigalow

570 posts

Ultimate Geek
+1 received by user: 112

#2344280 27-Oct-2019 23:49

yitz:

Last week's news but I envisage routing to Cloudflare may get worse if the government proceeds to expand the DIA filter to include extremist content.

https://www.newsroom.co.nz/@technology/2019/10/16/860705/isps-react-cautiously-to-extremism-internet-filter

Their policy is to filter individual /32 IPv4 addresses and I have to say empirically I haven't come across two sites hosted on the same Cloudflare virtual IP.

most of the free plans have more than one site on the same IP and shared SSL cert

freitasm

BDFL - Memuneh
80944 posts

Uber Geek
+1 received by user: 41697

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2346741 31-Oct-2019 12:23

I am on a paid plan and our edge SSL certificate (on server we obviously have our own) is shared...

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

Dell

Shop now for Dell laptops and other devices (affiliate link).

bigalow

570 posts

Ultimate Geek
+1 received by user: 112

#2346897 31-Oct-2019 16:48

this problem is still not fix

wonder if its a VF problem or a Cloudflare problem

gaddman

224 posts

Master Geek
+1 received by user: 98

Trusted

#2347609 2-Nov-2019 14:19

Cloudflare's not advertising some ranges on our peering link apparently. I'll chase up the guy who was looking at it when I'm back in the office, see what's happening.

bigalow

570 posts

Ultimate Geek
+1 received by user: 112

#2351901 11-Nov-2019 21:36

looks like it is fixed

Tracing route to geekzone.co.nz [104.24.2.14]
over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms x-x-x-x
2 3 ms 3 ms 3 ms x-x-x-x
3 2 ms 3 ms 3 ms 203.167.245.102
4 4 ms 2 ms 3 ms 203.167.245.101
5 13 ms 11 ms 11 ms 198.41.236.254
6 11 ms 11 ms 11 ms 198.41.236.253
7 10 ms 11 ms 11 ms 104.24.2.14