Ник Пост Дата
abbi(abbi)

мы видим тесты, которые показывают, что BBC (https://www.bbc.com) может быть заблокирована в Туркменистане.

Может кто-нибудь проверить, правильно ли это?

2024-07-17T13:46:50.587Z
0ka(0ka)

fastly ip addresses are blocked since yesterday (not sure, maybe even earlier)

2024-07-17T13:54:31.243Z
ValdikSS

AGTS & TMTelecom:

# host www.bbc.com
www.bbc.com is an alias for www.bbc.com.pri.bbc.com.
www.bbc.com.pri.bbc.com is an alias for bbc.map.fastly.net.
bbc.map.fastly.net has address 151.101.128.81
bbc.map.fastly.net has address 151.101.192.81
bbc.map.fastly.net has address 151.101.0.81
bbc.map.fastly.net has address 151.101.64.81
bbc.map.fastly.net has address 127.0.0.1
bbc.map.fastly.net has address 127.0.0.1

# curl -v https://www.bbc.com
* Host www.bbc.com:443 was resolved.
* IPv6: (none)
* IPv4: 151.101.192.81, 151.101.0.81, 151.101.64.81, 151.101.128.81
*   Trying 151.101.192.81:443...
* connect to 151.101.192.81 port 443 from 192.168.1.100 port 38552 failed: Connection refused
*   Trying 151.101.0.81:443...
* connect to 151.101.0.81 port 443 from 192.168.1.100 port 47818 failed: Connection refused
*   Trying 151.101.64.81:443...
* connect to 151.101.64.81 port 443 from 192.168.1.100 port 52092 failed: Connection refused
*   Trying 151.101.128.81:443...
* connect to 151.101.128.81 port 443 from 192.168.1.100 port 44998 failed: Connection refused
* Failed to connect to www.bbc.com port 443 after 164 ms: Couldn't connect to server
* Closing connection
curl: (7) Failed to connect to www.bbc.com port 443 after 164 ms: Couldn't connect to server
2024-07-17T16:33:48.122Z
abbi(abbi)

@0ka @ValdikSS thank you!

We got in touch with Fastly they asked if we can send them the block of text in the response to this https://www.fastly-debug.com (in the browser). Understandable if you can’t do that.

2024-07-17T16:44:49.375Z
0ka(0ka)

even if you find a working ip address it won’t last for long, but the situation with the internet is very unclear and everything can change tomorrow.

2024-07-17T17:11:25.889Z
abbi(abbi)

I saw a post on NTC the other day saying Turkmenistan unblocked millions of IP addresses. I find it strange this is happening. So probably someone unblocked them by mistake and they are now restoring the filtering lists, which included Fastly.

2024-07-17T17:15:49.877Z
ValdikSS

www.fastly-debug.com resolves to other set of IP addresses, some of which are reachable. However, bbc is still not available on these IPs due to SNI block.

# host www.fastly-debug.com                                                                                                                                                                     
www.fastly-debug.com is an alias for prod.f.ssl.global.fastly.net.                                                                                                                                             
prod.f.ssl.global.fastly.net has address 151.101.0.64                                                                                                                                                          
prod.f.ssl.global.fastly.net has address 151.101.192.64                                                                                                                                                        
prod.f.ssl.global.fastly.net has address 151.101.128.64                                                                                                                                                        
prod.f.ssl.global.fastly.net has address 151.101.64.64                                                                                                                                                         
prod.f.ssl.global.fastly.net has address 127.0.0.1                                                                                                                                                             
prod.f.ssl.global.fastly.net has address 127.0.0.1


# curl -v https://www.bbc.com --connect-to ::151.101.64.64
* Connecting to hostname: 151.101.64.64
*   Trying 151.101.64.64:443...
* Connected to 151.101.64.64 (151.101.64.64) port 443
* mbedTLS: Connecting to www.bbc.com:443
* mbedTLS: Set min SSL version to TLS 1.0
* ALPN: curl offers h2,http/1.1
^C
2024-07-17T17:22:07.177Z
ValdikSS

Check DM.

2024-07-17T17:23:41.271Z
abbi(abbi)

Hi again, can you please try connecting to 146.75.72.81 on port 443 (another one of our Fastly IPs)? or is the Guardian website accessible (it’s also hosted on Fastly) https://www.theguardian.com

2024-07-18T08:18:53.809Z
0ka(0ka)

146.75.72.81 is accessible on agts/tmtelecom and doesn’t yet have a sni whitelist so www.bbc.com is accessible.
on tmcell 146.75.72.81 is not accessible

2024-07-18T09:52:47.730Z
soulja(Serano)

BBC.com использовался для фронтинга на каждом втором школо впн, то, что перестал работать, нечему удивляться

2024-07-18T14:28:20.717Z
ValdikSS

BBC доступен с обоих провайдеров на текущую минуту.

AGTS:

# host www.bbc.com
www.bbc.com is an alias for www.bbc.com.pri.bbc.com.
www.bbc.com.pri.bbc.com is an alias for bbc.map.fastly.net.
bbc.map.fastly.net has address 151.101.0.81
bbc.map.fastly.net has address 151.101.64.81
bbc.map.fastly.net has address 151.101.128.81
bbc.map.fastly.net has address 151.101.192.81
bbc.map.fastly.net has address 127.0.0.1
bbc.map.fastly.net has address 127.0.0.1

# curl https://www.bbc.com -o/dev/null
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  392k  100  392k    0     0   292k      0  0:00:01  0:00:01 --:--:--  317k

TMTelecom:

# host www.bbc.com
www.bbc.com is an alias for www.bbc.com.pri.bbc.com.
www.bbc.com.pri.bbc.com is an alias for bbc.map.fastly.net.
bbc.map.fastly.net has address 146.75.52.81
bbc.map.fastly.net has address 127.0.0.1

# curl https://www.bbc.com -o/dev/null
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  392k  100  392k    0     0   130k      0  0:00:03  0:00:03 --:--:--  132k
2024-07-20T15:58:17.063Z
abbi(abbi)

Hi many thanks!! It looks like the website was unblocked.

2024-07-22T18:20:51.966Z