мы видим тесты, которые показывают, что BBC (https://www.bbc.com) может быть заблокирована в Туркменистане.
Может кто-нибудь проверить, правильно ли это?
fastly ip addresses are blocked since yesterday (not sure, maybe even earlier)
AGTS & TMTelecom:
# host www.bbc.com
www.bbc.com is an alias for www.bbc.com.pri.bbc.com.
www.bbc.com.pri.bbc.com is an alias for bbc.map.fastly.net.
bbc.map.fastly.net has address 151.101.128.81
bbc.map.fastly.net has address 151.101.192.81
bbc.map.fastly.net has address 151.101.0.81
bbc.map.fastly.net has address 151.101.64.81
bbc.map.fastly.net has address 127.0.0.1
bbc.map.fastly.net has address 127.0.0.1
# curl -v https://www.bbc.com
* Host www.bbc.com:443 was resolved.
* IPv6: (none)
* IPv4: 151.101.192.81, 151.101.0.81, 151.101.64.81, 151.101.128.81
* Trying 151.101.192.81:443...
* connect to 151.101.192.81 port 443 from 192.168.1.100 port 38552 failed: Connection refused
* Trying 151.101.0.81:443...
* connect to 151.101.0.81 port 443 from 192.168.1.100 port 47818 failed: Connection refused
* Trying 151.101.64.81:443...
* connect to 151.101.64.81 port 443 from 192.168.1.100 port 52092 failed: Connection refused
* Trying 151.101.128.81:443...
* connect to 151.101.128.81 port 443 from 192.168.1.100 port 44998 failed: Connection refused
* Failed to connect to www.bbc.com port 443 after 164 ms: Couldn't connect to server
* Closing connection
curl: (7) Failed to connect to www.bbc.com port 443 after 164 ms: Couldn't connect to server
We got in touch with Fastly they asked if we can send them the block of text in the response to this https://www.fastly-debug.com (in the browser). Understandable if you can’t do that.
even if you find a working ip address it won’t last for long, but the situation with the internet is very unclear and everything can change tomorrow.
I saw a post on NTC the other day saying Turkmenistan unblocked millions of IP addresses. I find it strange this is happening. So probably someone unblocked them by mistake and they are now restoring the filtering lists, which included Fastly.
www.fastly-debug.com resolves to other set of IP addresses, some of which are reachable. However, bbc is still not available on these IPs due to SNI block.
# host www.fastly-debug.com
www.fastly-debug.com is an alias for prod.f.ssl.global.fastly.net.
prod.f.ssl.global.fastly.net has address 151.101.0.64
prod.f.ssl.global.fastly.net has address 151.101.192.64
prod.f.ssl.global.fastly.net has address 151.101.128.64
prod.f.ssl.global.fastly.net has address 151.101.64.64
prod.f.ssl.global.fastly.net has address 127.0.0.1
prod.f.ssl.global.fastly.net has address 127.0.0.1
# curl -v https://www.bbc.com --connect-to ::151.101.64.64
* Connecting to hostname: 151.101.64.64
* Trying 151.101.64.64:443...
* Connected to 151.101.64.64 (151.101.64.64) port 443
* mbedTLS: Connecting to www.bbc.com:443
* mbedTLS: Set min SSL version to TLS 1.0
* ALPN: curl offers h2,http/1.1
^C
Check DM.
Hi again, can you please try connecting to 146.75.72.81 on port 443 (another one of our Fastly IPs)? or is the Guardian website accessible (it’s also hosted on Fastly) https://www.theguardian.com
146.75.72.81 is accessible on agts/tmtelecom and doesn’t yet have a sni whitelist so www.bbc.com is accessible.
on tmcell 146.75.72.81 is not accessible
BBC.com использовался для фронтинга на каждом втором школо впн, то, что перестал работать, нечему удивляться
BBC доступен с обоих провайдеров на текущую минуту.
AGTS:
# host www.bbc.com
www.bbc.com is an alias for www.bbc.com.pri.bbc.com.
www.bbc.com.pri.bbc.com is an alias for bbc.map.fastly.net.
bbc.map.fastly.net has address 151.101.0.81
bbc.map.fastly.net has address 151.101.64.81
bbc.map.fastly.net has address 151.101.128.81
bbc.map.fastly.net has address 151.101.192.81
bbc.map.fastly.net has address 127.0.0.1
bbc.map.fastly.net has address 127.0.0.1
# curl https://www.bbc.com -o/dev/null
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 392k 100 392k 0 0 292k 0 0:00:01 0:00:01 --:--:-- 317k
TMTelecom:
# host www.bbc.com
www.bbc.com is an alias for www.bbc.com.pri.bbc.com.
www.bbc.com.pri.bbc.com is an alias for bbc.map.fastly.net.
bbc.map.fastly.net has address 146.75.52.81
bbc.map.fastly.net has address 127.0.0.1
# curl https://www.bbc.com -o/dev/null
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 392k 100 392k 0 0 130k 0 0:00:03 0:00:03 --:--:-- 132k
Hi many thanks!! It looks like the website was unblocked.