Possible Routing Issues?

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › Possible Routing Issues?

CalmStorm

36 posts

Geek
+1 received by user: 4

#294067 3-Mar-2022 12:12

Hi guys,

I wonder if anyone else is experiencing a possible routing issue on some 2degrees and Orcon connections, starting from 1-Mar-2022? One of our customer's website isn't accessible through our office 2degrees connection (Christchurch Central) as well as at least one Orcon connection (Blenheim), but it is accessible through 2degrees/Warehouse Mobile 4G as well as Spark network.

I don't suppose there's anything we can do on our end?

Cheers,
Kelvin

xpd

Geek of Coastguard
14116 posts

Uber Geek
+1 received by user: 4579

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#2878292 3-Mar-2022 12:38

Whats the website you are trying to access ? Im on 2D and can give it a go.

XPD / Gavin

LinkTree

pwner

423 posts

Ultimate Geek
+1 received by user: 96

Trusted

2degrees

#2878300 3-Mar-2022 12:56

as per above please let us know the site your trying to access.

also it is very rarely a routing issue, almost always a DNS issue

Any posts are personal comments and not that of my employer

CalmStorm

36 posts

Geek
+1 received by user: 4

#2878306 3-Mar-2022 13:12

Ah, sorry guys. Should have supplied that in the first place.

One of the URLs is newsletter.nzcextras.co.nz. It's hosted on AWS Sydney (52.62.17.18).

Cheers,
Kelvin

pwner

423 posts

Ultimate Geek
+1 received by user: 96

Trusted

2degrees

#2878310 3-Mar-2022 13:21

I can access the website from my machine in AKL on 2degrees BB

NZCouriers newsletter site?

can't ping or traceroute all the way there but it works

Any posts are personal comments and not that of my employer

xpd

Geek of Coastguard
14116 posts

Uber Geek
+1 received by user: 4579

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#2878311 3-Mar-2022 13:25

All good here as well. 2D gigabit, North Auckland, static IP.

You using 2D DNS ? No VPN etc ?

XPD / Gavin

LinkTree

Linux

12182 posts

Uber Geek
+1 received by user: 8476

Trusted

Lifetime subscriber

#2878312 3-Mar-2022 13:26

I can reach the site on my 2degrees Fibre connection

2d DNS and no VPN

Geekzone

Want to support Geekzone and browse the site without the ads? Subscribe to Geekzone now (monthly, annual and lifetime options).

duffles

102 posts

Master Geek
+1 received by user: 77

Trusted

2degrees

#2878314 3-Mar-2022 13:29

Reachable here. 2degrees UFB in Christchurch.

Cheers

They say he carved that spoon himself.. From a bigger spoon..
Any comment made here is my own and should not be taken as that of my employer. You've seen one of these statements before.

CalmStorm

36 posts

Geek
+1 received by user: 4

#2878317 3-Mar-2022 13:46

Yea it's a strange one.

Yes, 2degrees DNS server as far as I'm aware, no VPN.

At the office here in ChCh Central, we are on a 2degrees connection with a static IP address, and we couldn't reach the site 2 days ago. It worked again yesterday, but today it failed again. Had restarted all the networking equipment but it didn't help.

Below is the traceroute from the office, if that might be useful? The browser isn't able to reach the site and essentially instantly returned the "Unable to connect. An error occurred during a connection to newsletter.nzcextras.co.nz." error.

kelvinang@thinkpad:~$ traceroute newsletter.nzcextras.co.nz
traceroute to newsletter.nzcextras.co.nz (52.62.17.18), 30 hops max, 60 byte packets
1 _gateway (192.168.1.1) 1.459 ms 1.573 ms 1.793 ms
2 12.7.69.111.static.snap.net.nz (111.69.7.12) 11.016 ms 12.181 ms 12.144 ms
3 99.83.67.197 (99.83.67.197) 21.671 ms 21.911 ms 21.872 ms
4 99.83.67.196 (99.83.67.196) 23.201 ms 23.581 ms 23.544 ms
5 150.222.119.52 (150.222.119.52) 26.221 ms 150.222.119.50 (150.222.119.50) 26.135 ms 150.222.119.52 (15
0.222.119.52) 26.576 ms
6 150.222.119.155 (150.222.119.155) 26.539 ms 150.222.119.151 (150.222.119.151) 21.009 ms 150.222.119.39
(150.222.119.39) 21.033 ms
7 * * *
8 * * 52.95.36.174 (52.95.36.174) 53.600 ms
9 * * *
10 150.222.112.222 (150.222.112.222) 47.513 ms 150.222.112.188 (150.222.112.188) 51.754 ms 150.222.112.16
2 (150.222.112.162) 52.129 ms
11 52.95.37.31 (52.95.37.31) 56.920 ms 52.95.36.31 (52.95.36.31) 52.745 ms 52.95.36.143 (52.95.36.143) 5
3.685 ms
12 52.95.38.17 (52.95.38.17) 57.099 ms 57.128 ms 57.409 ms
13 * * *
14 * * *
15 * * *
16 * * *
17 * * *
18 * * *
19 * * *
20 * * *
21 * * *
22 * * *
23 * * *
24 * * *
25 * * *
26 * * *
27 * * *
28 * * *
29 * * *
30 * * *

Colleague in Blenheim on Orcon has experienced the same thing. Fine when I VPN through my home (Bigpipe/Spark). Also fine through another residential 2degrees connection in Merivale, Christchurch (but apparently, with a 66% packet loss). Odd.

stocksp

721 posts

Ultimate Geek
+1 received by user: 355

ID Verified

Lifetime subscriber

#2878318 3-Mar-2022 13:46

fine for me on 2d BB in wgtn

xpd

Geek of Coastguard
14116 posts

Uber Geek
+1 received by user: 4579

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#2878320 3-Mar-2022 13:57

Tracing route to newsletter.nzcextras.co.nz [52.62.17.18]
over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms fritz.box [192.168.1.1]
2 3 ms 17 ms 5 ms 43.7.69.111.static.snap.net.nz [111.69.7.43]
3 5 ms 4 ms 6 ms 99.83.67.197
4 7 ms 4 ms 5 ms 99.83.67.196
5 5 ms 5 ms 5 ms 150.222.119.52
6 7 ms 4 ms 4 ms 150.222.119.151
7 * * * Request timed out.
8 * * * Request timed out.
9 39 ms 41 ms 39 ms 150.222.112.175
10 35 ms 34 ms 37 ms 150.222.112.168
11 35 ms 34 ms 32 ms 52.95.36.95
12 34 ms 35 ms 37 ms 52.95.38.17
13 * * * Request timed out.
14 * * * Request timed out.
15 * * * Request timed out.

XPD / Gavin

LinkTree

CalmStorm

36 posts

Geek
+1 received by user: 4

#2878340 3-Mar-2022 14:22

😅

Sorry guys, after a bit of troubleshooting with someone at AWS, we found that general reachability isn't an issue, but rather the server has blocked some IP addresses including a few of ours used by the team at various locations... Removing the office IP address from the block list makes the site reachable again. That's embarrassing...

Thanks guys for helping me test this.

Cheers,
Kelvin

HP

Shop now for HP laptops and other devices (affiliate link).

Lias

5655 posts

Uber Geek
+1 received by user: 3978

ID Verified

Trusted

Lifetime subscriber

#2878533 3-Mar-2022 22:13

CalmStorm:

😅

Sorry guys, after a bit of troubleshooting with someone at AWS, we found that general reachability isn't an issue, but rather the server has blocked some IP addresses including a few of ours used by the team at various locations... Removing the office IP address from the block list makes the site reachable again. That's embarrassing...

Thanks guys for helping me test this.

Cheers,
Kelvin

Put a WAF in front without a whitelist?

I'm a geek, a gamer, a dad, a Quic user, and an IT Professional. I have a full rack home lab, size 15 feet, an epic beard and Asperger's. I'm a bit of a Cypherpunk, who believes information wants to be free and the Net interprets censorship as damage and routes around it. If you use my Quic signup you can also use the code R570394EKGIZ8 for free setup. Opinions are my own and not the views of my employer.