Tokyo Proxy

Hi there,

My site has been using Cloudflare for a while and never had any issue.
3 days ago I started receiving emails from my customers saying they cannot access my website.

From what I’ve seen, some of my customers are being redirected to the Tokyo Cloudflare zone, and my hosting does not allow connections from there.

My question is: Why is Cloudflare sending users to my website through Tokyo? Both my hosting and my customers are from Spain. Shouldn’t they be accessing my site through the Madrid proxy, or at least, some nearer proxy?

I had to disable the proxy so all the customers can access my website.

Thanks

1 Like

Because this is the fundamental concept of Cloudflare. It routes users to the nearest PoP.

Your host will need to make sure Cloudflare’s Japanese datacentre can send requests.

I’m not sure what does PoP stands for, but anyway:
Both I and my friend are from Barcelona. He can access the website, I can’t. The server is in Madrid.

How do you explain that a user from Barcelona is routed through Tokyo?

A user from Spain should not be routed via Tokyo. Why do you think you are?

Because Cloudflare returns a 522 because couldn’t reach the server, and then I see he is trying to route me via Tokyo. I’m attaching a screenshot.

He or you? You said you cannot access it. In that case there will be most likely an Asian VPN involved. You’d need to post an uncensored full page screenshot for details.

Does the involved domain name matter? I’ve disabled Cloudflare proxy, so there’s no way to reproduce it right now.

When it was enabled, I was the one who couldn’t access the website (as some of my customers). But my friend was able to access perfectly.
Obviously I know that if a client tries to connect from near Tokyo, he won’t be able to access the website. There’s no problem with that.
But not sure why there’s some people from Spain being redirected through Tokyo.
The screenshots from our customers also reveal the same, that they are being routed through Tokyo.

I can’t ensure my customers are not using a VPN, but I can confirm that I’m not.
Already double checked my public IP: it is from Barcelona.

A lot of customers reported this, so that’s why I’m posting it here. May this be an undetected Cloudflare issue?

1 Like

The domain name does not matter. The location of the user does and that is the fundamental concept of Cloudflare, routing to the nearest datacentre. It is very unlikely that a Spanish IP address would ever get routed via Asia, so that will most likely have been a VPN. But again, you’d need to post a full page screenshot for that.

Assuming I got the right domain, re-enable proxying and post the exact output of https://www.planteaenverde.es/cdn-cgi/trace here.

Nonetheless, your host should fix that as otherwise nobody from Japan can access your site.

That’s the right domain. I’ve re-enabled proxying, but now I can access the website.
This also happened to me some days ago: When customers began to say he couldn’t access the website, I was able to access it without problems. Today it was the first day I started seeing the issue they were reporting… So maybe in a while, I’ll be able to reproduce it.

I guess you’ll be interested in the output of cdn-cgi/trace when I get the Cloudflare error, but I’m attaching it anyway since maybe it can also be helpful:

fl=16f531
h=www.planteaenverde.es
ip=139.47.120.130
ts=1606494431.72
visit_scheme=https
uag=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.66 Safari/537.36
colo=IAD
http=http/2
loc=ES
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off

Regarding the Japan issue, yes, I’m already talking with the hosting to see if they can fix that.

All right, that is a Spanish IP address and in this case it was actually routed outside of Spain (which wouldn’t be that much of an issue) but even outside of Europe, via a US datacentre. That is rather unusual routing.

Typically I’d refer to Peering - Why don't I reach the closest datacenter to me? and usually this is up to the ISP, however European connections really shouldn’t leave Europe.

I’d suggest you open a support ticket and have them have a look at why such an unusual routing takes place from your IP address. Provide them with the connection of the original request 5f7c1a746aaa06b9 as well as with the output from the “cdn-cgi/trace” request.

1 Like

To your proxy address of 104.28.16.161.

I am sure not all requests will be routed outside of Europe. You can check that too at https://cloudflare-test.judge.sh

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.