Cyclical problems and packet losses.

Website, Application, Performance DNS & Network
1

Hey
Every now and then we have a problem with all Cloudflare services in our network.
It works well for an hour and later there are packet losses. And for a few days. Then for a week is everything OK and then again problems.
We do not make any changes on the bgp routers.
All other google, akamai, facebook etc. services work OK.
I am asking for help because I do not know where to look for the cause of the problem.

  1. 42.59.126.176.ip4.epix.net.pl 0.0% 108 13.1 13.0 12.9 13.6 0.0

  2. ae2-595.RT.QTL.KTW.PL.retn.net 0.0% 108 13.2 16.1 13.0 75.4 11.4

  3. ae19-9.RT.LIM.WAW.PL.retn.net 0.0% 108 19.0 19.2 18.9 28.6 0.9

  4. 162.158.100.252 97.2% 107 11.7 11.8 11.7 11.9 0.0

  5. one.one.one.one 73.8% 107 11.7 11.7 11.6 12.0 0.0

  6. 185.48.8.174 0.0% 17 5.0 4.5 4.3 5.3 0.0

  7. 62.115.171.86 0.0% 17 4.8 9.7 4.6 64.0 14.8

  8. 62.115.115.107 0.0% 17 4.8 6.0 4.5 21.0 3.9

  9. 62.115.147.181 93.8% 17 9.2 9.2 9.2 9.2 0.0

  10. ???

  11. 176.126.59.42 0.0% 22 13.0 13.2 13.0 14.5 0.2

  12. 87.245.248.56 0.0% 22 13.4 18.2 13.1 68.2 16.1

  13. 87.245.232.119 0.0% 22 19.1 20.2 18.9 30.1 2.4

  14. 162.158.100.252 95.2% 22 14.8 14.8 14.8 14.8 0.0

  15. ???

2

What was the destination of this MTR? According to the whois records it’s hitting the CF nettwork, leaving it, hits it again… It’s possible that you get re-routed to different locations but it wouldn’t look like this. :thinking:

Could be a possible BGP leak or hijack. Intended or not.

3

Thank you for your help.

We receive Cloudflare in 2 IX via RETN and TELIA. Unfortunately, we can not block RETN in one of the IX. Do not announce communities for RETN does not work. We currently do not have any BGP-mon alerts to be leaked or hijack. Below MTR to 1.1.1.1 and CDNJS. Now it’s ok. The problem does not occur all the time just temporarily.

  1. 176.126.59.42 0.0% 2 13.1 13.1 13.1 13.2 0.0

  2. 87.245.248.56 0.0% 2 13.2 13.2 13.2 13.3 0.0

  3. 87.245.232.119 0.0% 2 19.1 19.0 19.0 19.1 0.0

  4. 162.158.100.252 0.0% 2 11.8 11.8 11.8 11.8 0.0

  5. 1.1.1.1 0.0% 1 11.8 11.8 11.8 11.8 0.0

  6. 185.48.8.174 0.0% 2 4.3 4.4 4.3 4.5 0.0

  7. 62.115.171.86 0.0% 2 4.8 4.7 4.7 4.8 0.0

  8. 62.115.115.107 0.0% 1 4.8 4.8 4.8 4.8 0.0

  9. 62.115.147.181 0.0% 1 4.8 4.8 4.8 4.8 0.0

  10. 104.19.198.151 0.0% 1 4.6 4.6 4.6 4.6 0.0

4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.