Slow Speeds In China

Hello,

We bought a server from Azure for our operations in China, which I believe is located in Hong Kong. We redirected one of the subdomains to this server, but we saw that it is extremely slow when we tested this subdomain from a computer in China.

What are the steps you’d recommend us to follow at this point?

There is no good way. Direct access to Hong Kong hosts from China will be very fast.

Well, that is the issue, it is slow, But direct IP connection is fine. What else needs to be done?

Cloudflare is probably serving your China customers from the LA PoP instead of Hong Kong, this means that there is extra latency for all requests, the path a request will take will now be: China -> Los Angeles -> Hong Kong -> Los Angeles -> China

I could be wrong, about this, could you please confirm from the computer in China, the output of the following page for your site:

https://yoursite.com/cdn-cgi/trace

Thank you, I am waiting for them to be online again so I can test. If that is the case, what is best course of action? We’re using Pro package at the moment.

In order to unlock access to the China PoPs you need to be on the Enterprise plan, if that’s too expensive then I suggest setting up your origin server in Los Angeles (if that is where your Chinese users are being served from) to reduce the round-time trip.

I see, well there is no info about enterprise pricing, so I can’t exactly tell. We already have a server in LA and also in Europe. EU was pretty slow. Almost no data. I haven’t checked US servers. But when I send a file through team viewer from LA It wasn’t bad at all, although I’m not sure if this is can be considered as a good sign.

I’ll test and write my findings.

If you know the ASN of the majority of your Chinese customers you may be able to optimize a geographic location for your origin. In the image I have ran some tests to https://cloudflare.com/cdn-cgi/trace from China from various ASNs to see which PoP they are served from

The enterprise plan needs your domain name to have ICP filing in China. In fact, it is better to use the Hong Kong server directly.

Hey,

So I was able to run /cdn-cgi/trace for Hong Kong which resulted as
fl=98f36
h=live-cn.juralive.io
ip=117.184.195.94
ts=1595325373.677
visit_scheme=http
uag=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36
colo=DEN
http=http/1.1
loc=CN
tls=off
sni=off
warp=off

But this is my second test, on the first test colo was LAX If I recall correctly.
But I can’t understand the logic here if the server is located in China why would it go to the US then go back to China?

This is for NY Server
fl=28f131
h=live-us.juralive.io
ip=117.184.195.94
ts=1595325495.694
visit_scheme=http
uag=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36
colo=SEA
http=http/1.1
loc=CN
tls=off
sni=off
warp=off

And this is LA server
fl=98f27
h=live-us2.juralive.io
ip=117.184.195.94
ts=1595325504.511
visit_scheme=http
uag=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36
colo=DEN
http=http/1.1
loc=CN
tls=off
sni=off
warp=off

Unfortunately, I have no idea about possible ASNs, this is a WebRTC Chat Server which users can be anywhere in China. Not a location that I’ve knowledge of. We can comply with regulations but just for this going to Enterprise plan makes a tremendous amount of price diff.

We can comply with regulations, ICP filing etc. But we’re using reverse proxy in the server which hosts 2 node applications. The reason we use cloudflare is to keep servers safe from attacks. If we use server directly there would be no point of using cloudflare.

Using US servers returns pings around 2 seconds, which does not seems to be feasible.
China server through cloudflare around 2 to 5 seconds.

I think Enterprise plans are around $5K

If your domain name has a Chinese ICP record, you can use a security service provider in China.
The price will be cheaper.

So is it going to work like this?
Domain => Cloudflare (Non proxied record) => Security Service Provider => Server?
Because we’re using a subdomain or should we use a new China only domain?

Are there any guides / for non - Chinese speakers?

This can be done. As long as your main domain name has an icp record, the subdomain can be added to the security vendor service (using cname) to serve users in China.
skype: xinyingyin_1

https://cloud.tencent.com/act/cps/redirect?redirect=33385&cps_key=e13a24941d2ca9b7a8079c76a22d1bf5
There are many CDN that provide cache in the direction of China. For Chinese users, they provide Hong Kong and do not need to receive ICP.

epicgames chose China Tencent as the CDN. Proved his reliability.


In China, cloudflare will only provide access to the Los Angeles queue

http://ping.pe/www.cloudflare.com