Regular periodic network interruption

Good afternoon.

Problem
I’m suffering an extremely regular service interruption to the IP address 172.65.201.188. The periodicity of the interruption is about every 61 minutes and lasts for 2-5 minutes. During the interruption packets sent to the owner of 172.65.201.188 (remote Cloudflare IP address) instead go to a host through 206.53.139.188 (you, local Cloudflare IP address).

If you perform a continuous ping test to the above host from within your network you should see identical behavior.

My ISP (Ninestar Connect) reports other customers also reported this problem but neither the customers nor Ninestar were able to determine the cause. I will attempt to goad Ninestar into reporting this issue to Cloudflare too.

Assistance
I can give you an estimate of the next outage (typically runs 61-62 minutes after the last). My last outage started at 2/21/2022 @1919 EST.

Guesses
I believe that during this outage a host or router under your control is misreporting its IP address and that due to its proximity all packets routed to Cloudflare are instead routed to the misreporting host/router.

The periodicity makes me think this is a software issue on a timer (a malfunctioning cron job?).

I’ve seen analogous problems with misconfigured multi ethernet port computers when the hardware and software settings conflicted, except they never exhibited this regular behavior.

Evidence
Evidence collected to related sites (e.g., alternate server IP address, 87.237.38.2, and another Cloudflare IP address, 172.72.40.2) do not suffer from this issue.

I’ve switched my DNS servers to 5 different DNS servers and flushed my DNS cache including Google’s

I’ve tried performing similar tests from a different local ISP (SBC Global), and did not experience this issue.

Alternate IP Addresses:
· 87.237.38.2 (different server for owner of 172.65.201.188)
· 172.70.40.2 (guessing this is the external IP address to Cloudflare)

Continuous ping to the first address shows no interruption in service. I will test the second ip address during my next outage.

Good tracert

C:\Users\Jim>tracert tranquility.servers.eveonline.com

Tracing route to d638e439e07f413c97200d057e5ebd05.pacloudflare.com [172.65.201.188]

over a maximum of 30 hops:

  1    <1 ms    <1 ms    <1 ms  Thor [192.168.2.1]
  2     2 ms     2 ms     2 ms  204-8-11-161.bb.hrtc.net [204.8.11.161]
  3     2 ms     2 ms     2 ms  10.101.180.101
  4     2 ms     4 ms     2 ms  10.101.180.2
  5     3 ms     3 ms     3 ms  208-103-3-145.static.indianafiber.net [208.103.3.145] 
  6    23 ms    23 ms    23 ms  32703-dc4-ix.equinix.com [206.126.238.85] 
  7     *       38 ms     *     13335.ash.equinix.com [206.126.237.30]
  8    21 ms    26 ms    28 ms  172.70.40.2
  9    21 ms    21 ms    21 ms  172.65.201.188

Trace complete.

Bad tracert

C:\Users\Jim>tracert tranquility.servers.eveonline.com

Tracing route to d638e439e07f413c97200d057e5ebd05.pacloudflare.com [172.65.201.188]

over a maximum of 30 hops:

  1    <1 ms    <1 ms    <1 ms  Thor [192.168.2.1]
  2     2 ms     2 ms     2 ms  204-8-11-161.bb.hrtc.net [204.8.11.161]
  3     2 ms     2 ms     2 ms  10.101.180.101
  4     2 ms     2 ms     2 ms  10.102.0.5
  5     3 ms     3 ms     3 ms  206.53.139.34 (this is a local Cloudflare IP address)
  6     3 ms     2 ms     3 ms  172.65.201.188
Trace complete.

NOTE: during the service interruption, all packets sent to Cloudflare end up going to PCH instead.

Continuous ping
Reply from 172.65.201.188: bytes=32 time=21ms TTL=56
Reply from 172.65.201.188: bytes=32 time=21ms TTL=56
Reply from 172.65.201.188: bytes=32 time=21ms TTL=56
Reply from 172.65.201.188: bytes=32 time=21ms TTL=56
Reply from 172.65.201.188: bytes=32 time=20ms TTL=56
Reply from 172.65.201.188: bytes=32 time=20ms TTL=56
Reply from 172.65.201.188: bytes=32 time=2ms TTL=58 Interruption of service, begins routing through local Cloudflare
Reply from 172.65.201.188: bytes=32 time=2ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=2ms TTL=58
Reply from 172.65.201.188: bytes=32 time=2ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=2ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=2ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=2ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=2ms TTL=58
Reply from 172.65.201.188: bytes=32 time=2ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=2ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=2ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=2ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=2ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=2ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=2ms TTL=58
Reply from 172.65.201.188: bytes=32 time=3ms TTL=58
Reply from 172.65.201.188: bytes=32 time=21ms TTL=56 Resumes normal routing, connection restored
Reply from 172.65.201.188: bytes=32 time=21ms TTL=56
Reply from 172.65.201.188: bytes=32 time=20ms TTL=56
Reply from 172.65.201.188: bytes=32 time=22ms TTL=56
Reply from 172.65.201.188: bytes=32 time=21ms TTL=56
Reply from 172.65.201.188: bytes=32 time=21ms TTL=56

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.