My Flip outgoing web (HTTP) traffic is spread across multiple "client" IPs, causing problems at the "host" end

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › My Flip outgoing web (HTTP) traffic is spread across multiple "client" IPs, causing problems at the "host" end

deepsix

9 posts

Wannabe Geek

#191372 2-Feb-2016 14:56

Hi,

I just switched to Flip and discovered that my outgoing web traffic (http requests) now arrive at the remote server with multiple different IPv4 addresses.

This causes me to be logged out of my web hosting server cPanel backend - presumably because the random IPs that arrive at the server have not been authenticated on that IP.

Also Notepad++ FTP errored out why trying to save a file back to my same web hosting presumably for the same reason.

I don't care so much about not being able to access inward to my home office from the internet because of (CG)NAT but having my outgoing traffic spread across several outgoing IPs is messing things up!

Is this normal? Should I tell my hosting provider to get with the CGNAT program? Or is they some way to limit my outgoing IP address to only 1 at a time?

Regards,

richms

29098 posts

Uber Geek
+1 received by user: 10208

Trusted

Lifetime subscriber

#1483598 2-Feb-2016 14:58

Tell your hosting provider to stop being idiots. This would also break most people being able to use it on mobile data or any business with a load balanced network.

Richard rich.ms

noroad

1025 posts

Uber Geek
+1 received by user: 675

Trusted

#1483600 2-Feb-2016 15:00

Your outgoing IP will only change IF the TCP session is closed or left idle for an extended period.

deepsix

9 posts

Wannabe Geek

#1483629 2-Feb-2016 15:07

richms:

Tell your hosting provider to stop being idiots. This would also break most people being able to use it on mobile data or any business with a load balanced network.

Ok thanks I'll quote you on that :)

I'm not sure if that will fix the NPPFTP problem since FTP does use cookies to track authentication...?

deepsix

9 posts

Wannabe Geek

#1483630 2-Feb-2016 15:09

noroad:

Your outgoing IP will only change IF the TCP session is closed or left idle for an extended period.

Hi - no that's not the case. In a single page load from me on my website I am seeing up to 3 different client IPs being used.

richms

29098 posts

Uber Geek
+1 received by user: 10208

Trusted

Lifetime subscriber

#1483637 2-Feb-2016 15:24

passive mode FTP should work fine. Active mode will never work properly behind nat without silly kludges in the nat devices.

Besides, you shouldn't be using insecure FTP over the internet. SCP ideally.

Richard rich.ms

noroad

1025 posts

Uber Geek
+1 received by user: 675

Trusted

#1483639 2-Feb-2016 15:28

deepsix:

noroad:

Your outgoing IP will only change IF the TCP session is closed or left idle for an extended period.

Hi - no that's not the case. In a single page load from me on my website I am seeing up to 3 different client IPs being used.

Is it three different destination IP's ? I do recall someone talking about an issue with CPannel a year or two ago.

HP

Shop now for HP laptops and other devices (affiliate link).

deepsix

9 posts

Wannabe Geek

#1483649 2-Feb-2016 15:34

richms:

passive mode FTP should work fine. Active mode will never work properly behind nat without silly kludges in the nat devices.

Besides, you shouldn't be using insecure FTP over the internet. SCP ideally.

Thanks - Filezilla seemed to work but not NPPFTP. Yes I know. I tried SCP some time ago but it failed to connect. Maybe I need to get them to fix that too !!!

deepsix

9 posts

Wannabe Geek

#1483655 2-Feb-2016 15:39

noroad:

deepsix:

noroad:

Your outgoing IP will only change IF the TCP session is closed or left idle for an extended period.

Hi - no that's not the case. In a single page load from me on my website I am seeing up to 3 different client IPs being used.

Is it three different destination IP's ? I do recall someone talking about an issue with CPannel a year or two ago.

Just to clarify - I'm at home using say Chrome and going to a page on my website http://www.example.co.nz/ . It loads OK, HTML, CSS, Images. Then I look in the apache access log of the www.example.co.nz and there's a bunch of hits from me from various different IP addresses (admittedly from a small subset of IPs nnn.nnn.nnn.[0-9] ).

jmh

458 posts

Ultimate Geek
+1 received by user: 141

#1483659 2-Feb-2016 15:44

deepsix:

noroad:

Your outgoing IP will only change IF the TCP session is closed or left idle for an extended period.

Hi - no that's not the case. In a single page load from me on my website I am seeing up to 3 different client IPs being used.

I had a similar problem with flip and they don't have static ip's. I had to leave them in the end.

deepsix

9 posts

Wannabe Geek

#1483685 2-Feb-2016 16:02

jmh:

deepsix:

noroad:

Your outgoing IP will only change IF the TCP session is closed or left idle for an extended period.

Hi - no that's not the case. In a single page load from me on my website I am seeing up to 3 different client IPs being used.

I had a similar problem with flip and they don't have static ip's. I had to leave them in the end.

Any recommendations? I don't want a contract or early exit fees :(

richms

29098 posts

Uber Geek
+1 received by user: 10208

Trusted

Lifetime subscriber

#1483699 2-Feb-2016 16:20

Big pipe and pay them $45 or whatever for a static IP.

Or find a VPN provider you can use that has a consistant IP address.

Richard rich.ms

Apple TV

Stream your favourite shows now on Apple TV (affiliate link).

jmh

458 posts

Ultimate Geek
+1 received by user: 141

#1485689 5-Feb-2016 10:14

deepsix:

jmh:

deepsix:

noroad:

Your outgoing IP will only change IF the TCP session is closed or left idle for an extended period.

Hi - no that's not the case. In a single page load from me on my website I am seeing up to 3 different client IPs being used.

I had a similar problem with flip and they don't have static ip's. I had to leave them in the end.

Any recommendations? I don't want a contract or early exit fees :(

I went to My Republic but it comes with exit fees, so probably not for you - I was looking for unlimited fibre, which may not be your requirement. I would find a provider that offers a static ip - MR did it for a reasonable one-off fee, but there are others out there.

gareth41

742 posts

Ultimate Geek
+1 received by user: 79

#1500774 28-Feb-2016 14:47

Spreading http traffic or any traffic for that matter across multiple public ip's *will* create adverse effects on many servers. PHP sessions for example (depending on configuration) are sometimes dropped and regenerated as a security measure if an ip change is detected, hence forcing the user to login again or start over again with whatever they were doing on given website.

Edit: Though I would also mention, we've got a customer with flip who logs into one of our servers over http and i've noticed in the logs the ip is changing every couple minutes almost. Jumping around between 163.47.107.1 - 163.47.107.9

michaelmurfy

meow
13579 posts

Uber Geek
+1 received by user: 10910

Moderator

ID Verified

Trusted

Lifetime subscriber

#1500777 28-Feb-2016 14:59

It just sounds like your ISP is not suited for your needs...

BigPipe + the $49 static IP sounds like it'll suit you better and it is the same price assuming you're on ADSL. If you sign up using this link you'll give both you and I a $20 credit. Well worth it.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.