Cloudflareportal.com IP is blocked in Russia, unable to connect WARP VPN

DNS & Network 1.1.1.1
#1

image
image2186×1348 191 KB

Screenshot 2021-08-23 at 04.02.05
Screenshot 2021-08-23 at 04.02.05620×704 37.3 KB

Logs 
[2021-08-20T13:25:15Z DEBUG warp::firewall] Firewall allow DNS for Captive Portal login: true
[2021-08-20T13:25:15Z DEBUG warp::firewall] Firewall allow HTTP for Captive Portal login: true
[2021-08-20T13:25:15Z INFO  warp::warp::captive_portal] Checking for captive portal
[2021-08-20T13:25:15Z INFO  warp::warp::captive_portal] Successfully resolved DNS queries
[2021-08-20T13:25:15Z DEBUG rustls::client::hs] No cached session for DNSNameRef("cloudflareportal.com")
[2021-08-20T13:25:15Z DEBUG rustls::client::hs] Not resuming any session
[2021-08-20T13:25:15Z DEBUG warp::warp_service::ipc_handlers] Ipc request: 74; GetNetworkInfo
[2021-08-20T13:25:15Z DEBUG warp::warp_service::ipc_handlers] Ipc response: 74; {"v4_iface":{"name":"en0","addr":"192.168.8.112","kind":{"WiFi":{"ssid":[72,85,65,87,69,73,45,66,53,51,53,45,50,56,69,68]}}},"v6_iface":null,"dns_servers":[{"address":"1.1.1.1"},{"address":"8.8.8.8"}],"setup_dns":[]}
[2021-08-20T13:25:15Z DEBUG rustls::client::hs] No cached session for DNSNameRef("cloudflareok.com")
[2021-08-20T13:25:15Z DEBUG rustls::client::hs] Not resuming any session
[2021-08-20T13:25:15Z DEBUG rustls::client::hs] No cached session for DNSNameRef("cloudflarecp.com")
[2021-08-20T13:25:15Z DEBUG rustls::client::hs] Not resuming any session
[2021-08-20T13:25:15Z DEBUG rustls::client::hs] Using ciphersuite TLS13_CHACHA20_POLY1305_SHA256
[2021-08-20T13:25:15Z DEBUG rustls::client::tls13] Not resuming
[2021-08-20T13:25:15Z DEBUG rustls::client::tls13] TLS1.3 encrypted extensions: [ServerNameAck]
[2021-08-20T13:25:15Z DEBUG rustls::client::hs] ALPN protocol is None
[2021-08-20T13:25:15Z DEBUG rustls::client::hs] Using ciphersuite TLS13_CHACHA20_POLY1305_SHA256
[2021-08-20T13:25:15Z DEBUG rustls::client::tls13] Not resuming
[2021-08-20T13:25:15Z DEBUG rustls::client::tls13] TLS1.3 encrypted extensions: [ServerNameAck]
[2021-08-20T13:25:15Z DEBUG rustls::client::hs] ALPN protocol is None
[2021-08-20T13:25:15Z DEBUG rustls::client::hs] Using ciphersuite TLS13_CHACHA20_POLY1305_SHA256
[2021-08-20T13:25:15Z DEBUG rustls::client::tls13] Not resuming
[2021-08-20T13:25:15Z DEBUG rustls::client::tls13] TLS1.3 encrypted extensions: [ServerNameAck]
[2021-08-20T13:25:15Z DEBUG rustls::client::hs] ALPN protocol is None
[2021-08-20T13:25:15Z DEBUG rustls::client::tls13] Ticket saved
[2021-08-20T13:25:15Z DEBUG rustls::client::tls13] Ticket saved
[2021-08-20T13:25:15Z DEBUG warp::http] Headers received Some(204); 0;
[2021-08-20T13:25:15Z INFO  warp::warp::captive_portal] Successfully retrieved HTTPs page
[2021-08-20T13:25:15Z INFO  warp::warp] No Captive Portal detected
[2021-08-20T13:25:15Z DEBUG warp::firewall] Firewall allow DNS for Captive Portal login: false
[2021-08-20T13:25:15Z DEBUG warp::firewall] Firewall allow HTTP for Captive Portal login: false
[2021-08-20T13:25:15Z DEBUG warp::warp] WARP status: Connection attempt timed out
[2021-08-20T13:25:15Z DEBUG warp::warp] Connect finished Err(Custom { kind: TimedOut, error: "" })
[2021-08-20T13:25:15Z DEBUG warp::warp_service::ipc_handlers] Sending IPC status update: Connection attempt timed out
[2021-08-20T13:25:15Z DEBUG warp::firewall] Firewall reset to defaults
[2021-08-20T13:25:15Z DEBUG warp::warp] WARP status: Disconnecting
[2021-08-20T13:25:15Z DEBUG warp::warp] WARP status: Disconnected
#2

so… what do you want?

cloudflare warp is not designed for bypass vpn/government blocks, so nothing Cloudflare can do, in this case.

#3

VPN is not blocked, current dynamic IP is blocked

#4

I can confirm that WARP service doesn’t work in Russia since last week.
Cloudflare WARP VPN service is not officially blocked in Russia.
cloudflareportal.com is now resolving for me to IP 104.19.153.125, which is now in Russia’s communication watchdog blocklist since 2019 because of hosted gambling site.

Screen Shot 2021-08-24 at 11.42.55
Screen Shot 2021-08-24 at 11.42.551330×848 127 KB

Source: https://eais.rkn.gov.ru/en/#form

So, I request some Cloudflare team member like cloonan to simply change that IP manually and check it for blocking to make happy all the russian customers of this amazing service.

Thanks in advance

#5

Right now I’m using WARP, but yeah - sometimes I got connectivity problems for minutes.

UPD: Now I’m connecting to HEL (Helsinki, Finland) instead of DME (Moscow, Russia). Looks like something happened with Cloudflare’s PoP in Russia.

#6

Now cloudflareportal.com resolves to another IP, but service still doesn’t work.

#7

I can confirm message above.
I’ve send debug files via ticket ID: 213964

#8

1.1.1.1 (and 1.0.0.1) was been banned on 8th September from 21:00 to 22:00 (UTC+3), according to GlobalCheck.

#9

I m not aware too if any VPN restrictions are in place in Russia. Neither I m aware of any governmental restriction to CF services. WARP is using anycast routing, so your ISP will decide which colo to choose from CF’s advertised BGP alternate routes. Usually it chooses the shortest path (less hops), but takes into account other measurements too. Certain IP(ranges) might be blocked by your ISP that are in the alternate route list in the BGP advertisement. 1.1.1.1 is just one of the DNS resolvers of CF. It has nothing to do with establishment of Wireguard tunnel between your WARP client and the colo. Right now, I m connected to the neighbor country’s CF colo.
In a nutshell: until CF keeps on anycast routing instead of unicast, such issues will/might happen.

#10

Cloudflare WARP now is blocked in Russia (looks like they just blocked 1.1.1.1 DNS altogether).

However, you can just change DNS to “Malware Blocking” in settings and it’ll work again.

#11

(post deleted by author)

#13

Some russian providers allow to use 1.1.1.1 WARP only with DNS protocol: WARP in Settings instead of DoH and DoT which can be not operational.

Also, you can use this service in some (other) networks just switching to Zero Trust. It’s more complicated but reachable for most users.
As a bonus you get a centralized family device management and more perks.