Possible Routing Issues?

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › Possible Routing Issues?

CalmStorm

36 posts

Geek

#294067 3-Mar-2022 12:12

Hi guys,

I wonder if anyone else is experiencing a possible routing issue on some 2degrees and Orcon connections, starting from 1-Mar-2022? One of our customer's website isn't accessible through our office 2degrees connection (Christchurch Central) as well as at least one Orcon connection (Blenheim), but it is accessible through 2degrees/Warehouse Mobile 4G as well as Spark network.

I don't suppose there's anything we can do on our end?

Cheers,
Kelvin

xpd

Geek @ Coastguard NZ
13769 posts

Uber Geek

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#2878292 3-Mar-2022 12:38

Whats the website you are trying to access ? Im on 2D and can give it a go.

Gavin / xpd / FastRaccoon / Geek of Coastguard New Zealand

LinkTree

pwner

423 posts

Ultimate Geek

Trusted

2degrees

#2878300 3-Mar-2022 12:56

as per above please let us know the site your trying to access.

also it is very rarely a routing issue, almost always a DNS issue

Any posts are personal comments and not that of my employer

CalmStorm

36 posts

Geek

#2878306 3-Mar-2022 13:12

Ah, sorry guys. Should have supplied that in the first place.

One of the URLs is newsletter.nzcextras.co.nz. It's hosted on AWS Sydney (52.62.17.18).

Cheers,
Kelvin

pwner

423 posts

Ultimate Geek

Trusted

2degrees

#2878310 3-Mar-2022 13:21

I can access the website from my machine in AKL on 2degrees BB

NZCouriers newsletter site?

can't ping or traceroute all the way there but it works

Any posts are personal comments and not that of my employer

xpd

Geek @ Coastguard NZ
13769 posts

Uber Geek

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#2878311 3-Mar-2022 13:25

All good here as well. 2D gigabit, North Auckland, static IP.

You using 2D DNS ? No VPN etc ?

Gavin / xpd / FastRaccoon / Geek of Coastguard New Zealand

LinkTree

Linux

11433 posts

Uber Geek

Trusted

Lifetime subscriber

#2878312 3-Mar-2022 13:26

I can reach the site on my 2degrees Fibre connection

2d DNS and no VPN

duffles

100 posts

Master Geek

Trusted

2degrees

#2878314 3-Mar-2022 13:29

Reachable here. 2degrees UFB in Christchurch.

Cheers

They say he carved that spoon himself.. From a bigger spoon..
Any comment made here is my own and should not be taken as that of my employer. You've seen one of these statements before.

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.

CalmStorm

36 posts

Geek

#2878317 3-Mar-2022 13:46

Yea it's a strange one.

Yes, 2degrees DNS server as far as I'm aware, no VPN.

At the office here in ChCh Central, we are on a 2degrees connection with a static IP address, and we couldn't reach the site 2 days ago. It worked again yesterday, but today it failed again. Had restarted all the networking equipment but it didn't help.

Below is the traceroute from the office, if that might be useful? The browser isn't able to reach the site and essentially instantly returned the "Unable to connect. An error occurred during a connection to newsletter.nzcextras.co.nz." error.

kelvinang@thinkpad:~$ traceroute newsletter.nzcextras.co.nz
traceroute to newsletter.nzcextras.co.nz (52.62.17.18), 30 hops max, 60 byte packets
1 _gateway (192.168.1.1) 1.459 ms 1.573 ms 1.793 ms
2 12.7.69.111.static.snap.net.nz (111.69.7.12) 11.016 ms 12.181 ms 12.144 ms
3 99.83.67.197 (99.83.67.197) 21.671 ms 21.911 ms 21.872 ms
4 99.83.67.196 (99.83.67.196) 23.201 ms 23.581 ms 23.544 ms
5 150.222.119.52 (150.222.119.52) 26.221 ms 150.222.119.50 (150.222.119.50) 26.135 ms 150.222.119.52 (15
0.222.119.52) 26.576 ms
6 150.222.119.155 (150.222.119.155) 26.539 ms 150.222.119.151 (150.222.119.151) 21.009 ms 150.222.119.39
(150.222.119.39) 21.033 ms
7 * * *
8 * * 52.95.36.174 (52.95.36.174) 53.600 ms
9 * * *
10 150.222.112.222 (150.222.112.222) 47.513 ms 150.222.112.188 (150.222.112.188) 51.754 ms 150.222.112.16
2 (150.222.112.162) 52.129 ms
11 52.95.37.31 (52.95.37.31) 56.920 ms 52.95.36.31 (52.95.36.31) 52.745 ms 52.95.36.143 (52.95.36.143) 5
3.685 ms
12 52.95.38.17 (52.95.38.17) 57.099 ms 57.128 ms 57.409 ms
13 * * *
14 * * *
15 * * *
16 * * *
17 * * *
18 * * *
19 * * *
20 * * *
21 * * *
22 * * *
23 * * *
24 * * *
25 * * *
26 * * *
27 * * *
28 * * *
29 * * *
30 * * *

Colleague in Blenheim on Orcon has experienced the same thing. Fine when I VPN through my home (Bigpipe/Spark). Also fine through another residential 2degrees connection in Merivale, Christchurch (but apparently, with a 66% packet loss). Odd.

stocksp

709 posts

Ultimate Geek

ID Verified

Lifetime subscriber

#2878318 3-Mar-2022 13:46

fine for me on 2d BB in wgtn

xpd

Geek @ Coastguard NZ
13769 posts

Uber Geek

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#2878320 3-Mar-2022 13:57

Tracing route to newsletter.nzcextras.co.nz [52.62.17.18]
over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms fritz.box [192.168.1.1]
2 3 ms 17 ms 5 ms 43.7.69.111.static.snap.net.nz [111.69.7.43]
3 5 ms 4 ms 6 ms 99.83.67.197
4 7 ms 4 ms 5 ms 99.83.67.196
5 5 ms 5 ms 5 ms 150.222.119.52
6 7 ms 4 ms 4 ms 150.222.119.151
7 * * * Request timed out.
8 * * * Request timed out.
9 39 ms 41 ms 39 ms 150.222.112.175
10 35 ms 34 ms 37 ms 150.222.112.168
11 35 ms 34 ms 32 ms 52.95.36.95
12 34 ms 35 ms 37 ms 52.95.38.17
13 * * * Request timed out.
14 * * * Request timed out.
15 * * * Request timed out.

Gavin / xpd / FastRaccoon / Geek of Coastguard New Zealand

LinkTree

CalmStorm

36 posts

Geek

#2878340 3-Mar-2022 14:22

😅

Sorry guys, after a bit of troubleshooting with someone at AWS, we found that general reachability isn't an issue, but rather the server has blocked some IP addresses including a few of ours used by the team at various locations... Removing the office IP address from the block list makes the site reachable again. That's embarrassing...

Thanks guys for helping me test this.

Cheers,
Kelvin

Lias

5589 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2878533 3-Mar-2022 22:13

CalmStorm:

😅

Sorry guys, after a bit of troubleshooting with someone at AWS, we found that general reachability isn't an issue, but rather the server has blocked some IP addresses including a few of ours used by the team at various locations... Removing the office IP address from the block list makes the site reachable again. That's embarrassing...

Thanks guys for helping me test this.

Cheers,
Kelvin

Put a WAF in front without a whitelist?

I'm a geek, a gamer, a dad, a Quic user, and an IT Professional. I have a full rack home lab, size 15 feet, an epic beard and Asperger's. I'm a bit of a Cypherpunk, who believes information wants to be free and the Net interprets censorship as damage and routes around it. If you use my Quic signup you can also use the code R570394EKGIZ8 for free setup.