[Snap] Has Snap started caching HTTP?

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › [Snap] Has Snap started caching HTTP?

1 | 2

mercutio

1392 posts

Uber Geek

#712507 5-Nov-2012 19:03

Lorenceo: Where am I testing to, and with what parameters with tcptraceroute?

anywhere, try tcptraceroute www.google.com 80
then tcptraceroute <that africa server> 80

mercutio

1392 posts

Uber Geek

#712508 5-Nov-2012 19:04

btw whoever was testing from snap IP with a mismatched reverse lookup, your TCP/IP window settings are too small to get maximum performance. effectively limited you to around 750k/sec maximum speed. (tcp window scaling factor of 2, looked like windows client) - I'd say what the name is, but it's someone who requested their reverse lookup changed, so they may be trying to be private...

and it seems the IP address isn't being fudged at least. some transparent proxies keep the IP intact though.

IP address starts with 123.

Lorenceo

904 posts

Ultimate Geek

Trusted

#712510 5-Nov-2012 19:08

Oh Snap. :/

mercutio

1392 posts

Uber Geek

#712511 5-Nov-2012 19:11

Lorenceo:
Oh Snap. :/

that looks like a transparent proxy, indeed. it may be based on your source address. the thing is speed tests aren't usually cached.

that testfile.zip on port 80 should be cached... so if you try again it should go fast.

the other thing you can do is something like curl -x 4.2.2.2:80 http://www.google.co.nz .. and if you see what looks like google then there's a transparent proxy :)

mercutio

1392 posts

Uber Geek

#712513 5-Nov-2012 19:15

You can go to: http://netalyzr.icsi.berkeley.edu/ to see if the cache screws with traffic badly.

I'm not actually against caching fwiw.

freitasm

BDFL - Memuneh
79289 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#712521 5-Nov-2012 19:26

JAVA PLUGIN. The damnation of the Internet.

mercutio

1392 posts

Uber Geek

#712522 5-Nov-2012 19:27

freitasm: JAVA PLUGIN. The damnation of the Internet.

it's no worse than flash. And it's needed to do the low level network tests.

Sharesies

Trade NZ and US shares and funds with Sharesies (affiliate link).

SCM

459 posts

Ultimate Geek

#712527 5-Nov-2012 19:38

mercutio:
IP address starts with 123.

Ending in .177, Likely me...

I don't have a *nix box up and running here atm to test tcptraceroute on

http://netalyzr.icsi.berkeley.edu result

HTTP Tests + ?
Address-based HTTP proxy detection (?): OK ?
We detected no explicit sign of HTTP proxy via IP address changes.

Content-based HTTP proxy detection (?): OK ?
No HTTP header or content changes hint at the presence of a proxy.

HTTP proxy detection via malformed requests (?): OK ?
Deliberately malformed HTTP requests arrive at our server unchanged. We are not able to detect a proxy along the path to our server using this method.

Filetype-based filtering (?): OK ?
We did not detect file-content filtering.

HTTP caching behavior (?): OK ?
We detected no signs of a transparent HTTP cache in your network path.

JavaScript-based tests (?): OK ?
The applet did not execute within a frame.

Your web browser reports the following cookies for our web page:
netAlizEd = BaR (set by our server)
netalyzrStatus = running (set by our server)
Your web browser was unable to fetch an image using IPv6.

mercutio

1392 posts

Uber Geek

#712529 5-Nov-2012 19:45

SCM:
mercutio:
IP address starts with 123.

Ending in .177, Likely me...

I don't have a *nix box up and running here atm to test tcptraceroute on

Don't think you're being proxied.

18:52:20.715126 IP SCM.56137 > 37.77.82.128.24: Flags [S], seq 2196604161, win 8192, options [mss 1460,nop,wscale 2,nop,nop,sackOK], length 0
18:52:20.715179 IP 37.77.82.128.24 > SCM.56137: Flags [S.], seq 1437017000, ack 2196604162, win 23360, options [mss 1460,nop,nop,sackOK,nop,wscale 6], length 0
18:52:21.016182 IP SCM.56137 > 37.77.82.128.24: Flags [.], ack 1, win 16425, length 0

Blanked out your IP, it was you... see how it says "win 8192" and "wscale 2" ...

window size can be between 0 and 65535 bytes, wscale tells it to do << on it

so with python:

>>> 65535 << 2
262140

Which gives you nearly 256k. Your destination is blocking ping, but hop before is 300 msec. so assuming your ping is like 33 msec. that's give you aproximately 768k/sec (your ping is slightly lower probably, and there can be momentary delays - but 750k/sec is about what you're likely to hit if you don't get hit by congestion.

You can determine the ping of the initial connection by:
>>> 21.016182 - 20.715179
0.30100300000000146
And curiously enough you're 301 msec, so hop before is basically accurate. Maybe you're on fibre.

18:52:39.442991 IP SCM.56137 > 37.77.82.128.24: Flags [.], ack 6540801, win 65335, length 0
18:52:39.445777 IP SCM.56137 > 37.77.82.128.24: Flags [.], ack 6543721, win 65335, length 0

So you're advertising the maximum window size for every two packets. The [.] means acknowledge data up this point, send me more.

Lorenceo

904 posts

Ultimate Geek

Trusted

#712565 5-Nov-2012 20:35

mercutio: I'm not actually against caching fwiw.

I'm against it if it starts causing problems.
First problem is it has broken speedtest.net. :(

mercutio

1392 posts

Uber Geek

#712567 5-Nov-2012 20:41

Lorenceo:
mercutio: I'm not actually against caching fwiw.

I'm against it if it starts causing problems.
First problem is it has broken speedtest.net. :(

speedtest.net has always been broken.

test http downloads work better.

quakeguy

111 posts

Master Geek

Trusted

#712581 5-Nov-2012 21:23

SCM: Not sure if it will help but here's my trace to dagga.yoafrica.com. I see there is a new hop in mine, mdr.core.snap.net.nz never seen that one before.

This is me, cleaning up the reverse-dns to make things nicer to look at :-)

“I do not think there is any thrill that can go through the human heart like that felt by the inventor as he sees some creation of the brain unfolding to success... Such emotions make a man forget food, sleep, friends, love, everything.” - Nikola Tesla

Disclaimer: Views expressed in my posts do not necessarily reflect those views of my employer.

mercutio

1392 posts

Uber Geek

#712588 5-Nov-2012 21:31

quakeguy:
SCM: Not sure if it will help but here's my trace to dagga.yoafrica.com. I see there is a new hop in mine, mdr.core.snap.net.nz never seen that one before.

This is me, cleaning up the reverse-dns to make things nicer to look at :-)

so any information on the transparent proxying? what kind etc

Klipspringer

2385 posts

Uber Geek
Inactive user

#713068 6-Nov-2012 17:56

dagga lol. what u up to mate?

1 | 2