Accesses from UAE are being routed to Europe data centers

What is the name of the domain?

What is the issue you’re encountering

Accesses from UAE are being routed to Europe data centers, instead of UAE data centers

What are the steps to reproduce the issue?

Our websites are massively slow down when being accessed from UAE region, due to requests being routed to Europe, instead of being served by regional data center (e.g Dubai DXB).

Try accessing https://cloudflare.com/cdn-cgi/trace from UAE, and this is the trace:

fl=270f144
h=cloudflare.com
ip=87.200.249.
ts=1727181432.685
visit_scheme=https
uag=Mozilla/5.0 (X11; Linux x86_64; rv:130.0) Gecko/20100101 Firefox/130.0
colo=MXP
sliver=010-tier1
http=http/3
loc=AE
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off
rbi=off
kex=X25519

Note loc=AE but colo=MXP (which is Milan). We would expect it to be DXB instead.

Can you elaborate on this?

  1. What ISP / provider, preferably their AS number?
    The AS number can be found here:
  1. Country UAE, … but is there any specific state/region that this happens in?

Some Asian ISP(s) are known to be taking traffic to other continents, such as e.g. to Europe, and pass it on to Cloudflare there, apparently because bandwidth is cheaper in Europe.

Where you are being routed to, depends on your ISP’s decisions, including their peering arrangements with Cloudflare, and whether these peering arrangements (if they have such) are done locally or far away.

If your provider from Asia does not want to peer with Cloudflare within Asia, and is only peering with Cloudflare in e.g. Europe, then traffic from that ISP will be sent from Asia and to Cloudflare’s PoP in Europe.

You can however contact your ISP, and request that they set up a settlement-free peering with Cloudflare within your own country, or at least, somewhere closer than the other continent, if locally within your own country isn’t an option for them.

  1. What ISP / provider, preferably their AS number?

    Our ISP is “Emirates Integrated Telecommunications Company PJSC”, commonly known here as “Du”, AS15802.

  2. Country UAE, … but is there any specific state/region that this happens in?

    This happens for accesses from Dubai. No idea for other regions.

Both last night when writing the above, as well as right now, I see that specific ISP reaching Cloudflare within 3 ms, which isn’t consistent with being routed all the way to Europe.

Are you still seeing issues?

Cloudflare response headers from our site still having value like these:

cf-ray: 8c894501ec49f8c9-CDG

which I suppose it means the response was from CDG (Paris) data center?

As of now, accessing cloudflare.com/cdn-cgi/trace is still showing colo=MRS.

P/S: appreciated your prompt response and detailed answer before.

Can you share the actual domain name of that site?

True, that CF-Ray would indicate that the visitor (e.g. your browser) reached Cloudflare in Paris (CDG).

Both cloudflare.com, as well as IP addresses/subnets from random websites (using Cloudflare Free plan) are responding within 3 ms when I’m testing.

  1. What plan are you on?

  2. Are you running any sort of VPN? Or perhaps Cloudflare WARP?
    If so, I suggest disabling them, and then trying again.

This is the domain of our site:

What plan are you on?

We are on Free plan

Are you running any sort of VPN? Or perhaps Cloudflare WARP?

We don’t use any VPN or WARP.

All the Cloudflare IP addresses I’m finding in the DNS system for that domain (… regardless where in the world I’m checking from), are all hitting Cloudflare within 3 ms, when the traffic is originating from AS15802 Emirates Integrated Telecommunications Company PJSC.

That said, -

What “colo=” do you see when accessing the following?

  1. https://1.1.1.1/cdn-cgi/trace

  2. https://1.0.0.1/cdn-cgi/trace

  3. https://[2606:4700:4700:0:0:0:0:1111]/cdn-cgi/trace

  4. https://[2606:4700:4700:0:0:0:0:1001]/cdn-cgi/trace

https://1.1.1.1/cdn-cgi/trace

colo=DXB

https://1.0.0.1/cdn-cgi/trace

colo=DXB

https://[2606:4700:4700:0:0:0:0:1111]/cdn-cgi/trace
https://[2606:4700:4700:0:0:0:0:1001]/cdn-cgi/trace

Our ISP still does not provide IPv6 for cable plan (imagine this in 2024).

I can see that trace to those DNS servers show DXB, but trace from our website (https://flowermeister.com/cdn-cgi/trace) is still showing colo=LYS.

What a shame, but seems to be quite the same (e.g. limited) in my country.

(Not only in 2024, but also way back in the previous years!)

You’re seeing these routing issues from a residential Internet connection?

Can you open a command prompt / terminal?

On Linux and similar systems, where you have dig, you can run:

  1. dig flowermeister.com

For each IP address you see, e.g. if you see 192.0.2.34 and 198.51.100.200, you run a traceroute to them:

  1. traceroute 192.0.2.34

  2. traceroute 198.51.100.200

  3. traceroute 1.1.1.1

On Windows, - it’ll be like this:

  1. nslookup flowermeister.com

For each IP address you see, e.g. if you see 192.0.2.34 and 198.51.100.200, you run a traceroute to them:

  1. tracert 192.0.2.34

  2. tracert 198.51.100.200

  3. tracert 1.1.1.1

After you have collected these traceroutes (for the IP addresses you see with the dig/nslookup DNS lookup, as well as for 1.1.1.1), please share them.

Putting the output in a code block (e.g. “````”, new line, traceroute output, new line, “```”) may work the best.

Note: 192.0.2.34 and 198.51.100.200 are examples / placeholders, as your ISP could be replying with different IP addresses than the ones that I see from my end.

You’re seeing these routing issues from a residential Internet connection?

Yes, that’s correct.

On Linux and similar systems, where you have dig, you can run: dig flowermeister.com

As you requested:

; <<>> DiG 9.18.28 <<>> flowermeister.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39659
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;flowermeister.com.             IN      A

;; ANSWER SECTION:
flowermeister.com.      190     IN      A       172.67.133.229
flowermeister.com.      190     IN      A       104.21.25.87

;; Query time: 1 msec
;; SERVER: 127.0.0.53#53(127.0.0.53) (UDP)
;; WHEN: Mon Sep 30 08:38:29 +04 2024
;; MSG SIZE  rcvd: 78
traceroute to 172.67.133.229 (172.67.133.229), 30 hops max, 60 byte packets
 1  _gateway (192.168.100.1)  3.425 ms  4.770 ms  4.760 ms
 2  192.168.70.1 (192.168.70.1)  4.755 ms  4.745 ms  4.735 ms
 3  * * *
 4  10.100.136.66 (10.100.136.66)  9.846 ms  9.838 ms  9.830 ms
 5  10.100.137.86 (10.100.137.86)  12.041 ms  12.034 ms  12.026 ms
 6  10.141.79.170 (10.141.79.170)  132.809 ms  125.672 ms  125.840 ms
 7  * ams-ix.as13335.net (80.249.211.140)  131.854 ms *
 8  141.101.65.93 (141.101.65.93)  124.754 ms 141.101.65.113 (141.101.65.113)  129.365 ms  128.461 ms
 9  172.67.133.229 (172.67.133.229)  118.102 ms  115.009 ms *
traceroute to 104.21.25.87 (104.21.25.87), 30 hops max, 60 byte packets
 1  _gateway (192.168.100.1)  2.369 ms  2.318 ms  2.310 ms
 2  192.168.70.1 (192.168.70.1)  2.303 ms  2.295 ms  3.006 ms
 3  * * *
 4  10.100.136.58 (10.100.136.58)  7.816 ms  7.806 ms  7.799 ms
 5  10.100.136.86 (10.100.136.86)  9.113 ms  9.774 ms  9.766 ms
 6  10.229.200.177 (10.229.200.177)  125.691 ms  123.284 ms 10.141.79.194 (10.141.79.194)  111.582 ms
 7  * * ams-ix.as13335.net (80.249.211.140)  147.076 ms
 8  141.101.65.2 (141.101.65.2)  114.324 ms 141.101.65.107 (141.101.65.107)  121.325 ms 141.101.65.103 (141.101.65.103)  130.322 ms
 9  104.21.25.87 (104.21.25.87)  111.625 ms  111.618 ms  111.611 ms

As can be seen around hop 5 ↔ 6 in your traces, your ISP takes you all the way to Amsterdam on that trace, to pass the traffic over to Cloudflare at AMS-IX.

However, the same two IP addresses, 172.67.133.229 and 104.21.25.87, when running through RIPE Atlas probes (e.g. triggered via Hurricane Electric’s website), you’re currently reaching the same two IP addresses locally, within 4 ms, from multiple different probes.

RIPE Atlas - Measurement Detail - 79612243
RIPE Atlas - Measurement Detail - 79612270
RIPE Atlas - Measurement Detail - 79612613
RIPE Atlas - Measurement Detail - 79612398

I will suggest you to contact your ISP, and ask them to look in to the weird routing for you, and provide an explanation about what happens with their network.

This topic was automatically closed after 15 days. New replies are no longer allowed.