1.1.1.1 responds slow, 1.0.0.1 responds fast from Philippines

Zero Trust 1.1.1.1
,
1

image

I have a tool that monitors response time to various internet services from my host, including Cloudflare’s DNS servers. I primarily use this to monitor my connection, but every now and then something like this shows up that suggests the problem is not my problem, but rather the remote service’s problem. This chart shows pings to 1.0.0.1 and 1.1.1.1 for the last week from my host in the Philippines. I also ping other hosts, though they are excluded from the attached chart, and they all have been responding fine for the last week.

The issue started around 2019-02-22T12:28:00Z, and has been persistent every since (as seen by the chart above). Prior to that, both 1.1.1.1 and 1.0.0.1 had similar response times. Since then, 1.1.1.1’s response time is just under 200ms while 1.0.0.1 remains low (~21ms from my host).

2

Can you post ‘traceroute’ results for both of those?

Also: dig +short CHAOS TXT id.server @1.1.1.1 (and 1.0.0.1)

2 Likes
3

Ideally, you’ll need to test from several different locations to ensure it’s not some scheduled job or related to the hosting company, your ISP and/or everything in between.

1 Like
4 
  1    <1 ms    <1 ms     2 ms  192.168.5.1
  2    <1 ms    <1 ms    <1 ms  192.168.1.1
  3     7 ms    22 ms     6 ms  100.80.0.1
  4     6 ms     6 ms     7 ms  122.2.175.210
  5    21 ms    21 ms    22 ms  210.213.130.190
  6    20 ms    19 ms    19 ms  210.213.130.166
  7   189 ms   202 ms   187 ms  80.239.161.97
  8   187 ms   187 ms   187 ms  62.115.136.46
  9   188 ms   186 ms   187 ms  62.115.61.149
 10   191 ms   191 ms   191 ms  1.1.1.1

  1    <1 ms    <1 ms    <1 ms  192.168.5.1
  2    <1 ms    <1 ms    <1 ms  192.168.1.1
  3     7 ms     6 ms    14 ms  100.80.0.1
  4     6 ms     6 ms     7 ms  122.2.175.210
  5    51 ms    23 ms    21 ms  210.213.130.194
  6    20 ms    20 ms    20 ms  210.213.130.109
  7    20 ms    20 ms    20 ms  210.14.3.102
  8    20 ms    20 ms    20 ms  117.58.222.128
  9    20 ms    20 ms    20 ms  1.0.0.1

> dig +short CHAOS TXT id.server @1.1.1.1
"LAX"
> dig +short CHAOS TXT id.server @1.0.0.1
"MNL"

The dig seems to be pretty damning. Any idea why 1.1.1.1 is getting sent off to LAX while 1.0.0.1 is routing to Manila?

5

That appears to be an issue you’d need to contact your ISP about. They seem to route these two addresses differently. That either happens at 122.2.175.210 or in their 210.213.128.0/17 network. Instead of keeping it within their network they hand it off to Telia where it eventually goes towards the US.

3 Likes
6

Cloudflare dns and other websites that are using Cloudflare are too high latency in the Philippines since almost 2 years ago. both PLDT fibr and Globe.