Akamai Geolocation Concerns
We are seeing some geolocation oddities with a couple of websites hosted at, or resolved by, Akamai. Two hostnames I'm looking at include: business.officedepot.com www.teacherspayteachers.com 'A' records for both have a TTL of 20 seconds, and randomly resolve to IPs in the US, and Europe (we are in the US/Oklahoma). For example, business.officedepot.com is resolving to both 96.17.32.230 and 88.221.37.87 (at different times). I've verified the same inconsistent behavior against 8.8.8.8 and 1.1.1.1. This is causing issues for an educational customer of ours. Is anyone aware of issues within Akamai that may be causing them to source content from Europe? -- Dan White BTC Broadband Network Admin Lead Ph 918.366.0248 (direct) main: (918)366-8000 Fax 918.366.6610 email: dwhite@mybtc.com http://www.btcbroadband.com
The IPs you're coming from, look what they say at the various geolocation services here: http://thebrotherswisp.com/index.php/geo-and-vpn/ Also, have you tried a local DNS server and not Google/Cloudflare Anycast ones? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Fri, Jan 17, 2020 at 2:13 PM Dan White via Outages <outages@outages.org> wrote:
We are seeing some geolocation oddities with a couple of websites hosted at, or resolved by, Akamai.
Two hostnames I'm looking at include:
business.officedepot.com www.teacherspayteachers.com
'A' records for both have a TTL of 20 seconds, and randomly resolve to IPs in the US, and Europe (we are in the US/Oklahoma).
For example, business.officedepot.com is resolving to both 96.17.32.230 and 88.221.37.87 (at different times). I've verified the same inconsistent behavior against 8.8.8.8 and 1.1.1.1.
This is causing issues for an educational customer of ours. Is anyone aware of issues within Akamai that may be causing them to source content from Europe?
-- Dan White BTC Broadband Network Admin Lead Ph 918.366.0248 (direct) main: (918)366-8000 Fax 918.366.6610 email: dwhite@mybtc.com http://www.btcbroadband.com _______________________________________________ Outages mailing list Outages@outages.org https://puck.nether.net/mailman/listinfo/outages
I recommend against using 1.1.1.1 as that may direct you to far away locations. I can help you off-list further. - Jared
On Jan 17, 2020, at 2:20 PM, Josh Luthman via Outages <outages@outages.org> wrote:
The IPs you're coming from, look what they say at the various geolocation services here:
http://thebrotherswisp.com/index.php/geo-and-vpn/
Also, have you tried a local DNS server and not Google/Cloudflare Anycast ones?
Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373
On Fri, Jan 17, 2020 at 2:13 PM Dan White via Outages <outages@outages.org> wrote: We are seeing some geolocation oddities with a couple of websites hosted at, or resolved by, Akamai.
Two hostnames I'm looking at include:
business.officedepot.com www.teacherspayteachers.com
'A' records for both have a TTL of 20 seconds, and randomly resolve to IPs in the US, and Europe (we are in the US/Oklahoma).
For example, business.officedepot.com is resolving to both 96.17.32.230 and 88.221.37.87 (at different times). I've verified the same inconsistent behavior against 8.8.8.8 and 1.1.1.1.
This is causing issues for an educational customer of ours. Is anyone aware of issues within Akamai that may be causing them to source content from Europe?
-- Dan White BTC Broadband Network Admin Lead Ph 918.366.0248 (direct) main: (918)366-8000 Fax 918.366.6610 email: dwhite@mybtc.com http://www.btcbroadband.com _______________________________________________ Outages mailing list Outages@outages.org https://puck.nether.net/mailman/listinfo/outages _______________________________________________ Outages mailing list Outages@outages.org https://puck.nether.net/mailman/listinfo/outages
Thanks Jared. We operate our own DNS resolvers, which are seeing the same behavior. I wanted to test against a couple of public servers to, presumably, rule out a geolocation database problem. Josh, All looks good with regards to the data provided at http://thebrotherswisp.com/index.php/geo-and-vpn with the exception of https://www.ipligence.com/geolocation which seems to be junk serving junk data. So far, Akamai is the only provider we are seeing issues with. Thanks for the feedback. On 01/17/20 14:24 -0500, Jared Mauch wrote:
I recommend against using 1.1.1.1 as that may direct you to far away locations. I can help you off-list further.
- Jared
On Jan 17, 2020, at 2:20 PM, Josh Luthman via Outages <outages@outages.org> wrote:
The IPs you're coming from, look what they say at the various geolocation services here:
http://thebrotherswisp.com/index.php/geo-and-vpn/
Also, have you tried a local DNS server and not Google/Cloudflare Anycast ones?
Josh Luthman
On Fri, Jan 17, 2020 at 2:13 PM Dan White via Outages <outages@outages.org> wrote: We are seeing some geolocation oddities with a couple of websites hosted at, or resolved by, Akamai.
Two hostnames I'm looking at include:
business.officedepot.com www.teacherspayteachers.com
'A' records for both have a TTL of 20 seconds, and randomly resolve to IPs in the US, and Europe (we are in the US/Oklahoma).
For example, business.officedepot.com is resolving to both 96.17.32.230 and 88.221.37.87 (at different times). I've verified the same inconsistent behavior against 8.8.8.8 and 1.1.1.1.
This is causing issues for an educational customer of ours. Is anyone aware of issues within Akamai that may be causing them to source content from Europe?
-- Dan White BTC Broadband Network Admin Lead Ph 918.366.0248 (direct) main: (918)366-8000 Fax 918.366.6610 email: dwhite@mybtc.com http://www.btcbroadband.com
Round robin is a configurable fallback for Akamai geoloc. Could just be set up that way.
On Jan 17, 2020, at 11:35 AM, Dan White via Outages <outages@outages.org> wrote:
Thanks Jared. We operate our own DNS resolvers, which are seeing the same behavior. I wanted to test against a couple of public servers to, presumably, rule out a geolocation database problem.
Josh,
All looks good with regards to the data provided at https://urldefense.proofpoint.com/v2/url?u=http-3A__thebrotherswisp.com_inde... with the exception of https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ipligence.com_geolo... which seems to be junk serving junk data.
So far, Akamai is the only provider we are seeing issues with.
Thanks for the feedback.
On 01/17/20 14:24 -0500, Jared Mauch wrote:
I recommend against using 1.1.1.1 as that may direct you to far away locations. I can help you off-list further.
- Jared
On Jan 17, 2020, at 2:20 PM, Josh Luthman via Outages <outages@outages.org> wrote:
The IPs you're coming from, look what they say at the various geolocation services here:
https://urldefense.proofpoint.com/v2/url?u=http-3A__thebrotherswisp.com_inde... Also, have you tried a local DNS server and not Google/Cloudflare Anycast ones?
Josh Luthman
On Fri, Jan 17, 2020 at 2:13 PM Dan White via Outages <outages@outages.org> wrote: We are seeing some geolocation oddities with a couple of websites hosted at, or resolved by, Akamai.
Two hostnames I'm looking at include:
business.officedepot.com https://urldefense.proofpoint.com/v2/url?u=http-3A__www.teacherspayteachers.... 'A' records for both have a TTL of 20 seconds, and randomly resolve to IPs in the US, and Europe (we are in the US/Oklahoma).
For example, business.officedepot.com is resolving to both 96.17.32.230 and 88.221.37.87 (at different times). I've verified the same inconsistent behavior against 8.8.8.8 and 1.1.1.1.
This is causing issues for an educational customer of ours. Is anyone aware of issues within Akamai that may be causing them to source content from Europe?
-- Dan White BTC Broadband Network Admin Lead Ph 918.366.0248 (direct) main: (918)366-8000 Fax 918.366.6610 email: dwhite@mybtc.com https://urldefense.proofpoint.com/v2/url?u=http-3A__www.btcbroadband.com&d=D... _______________________________________________ Outages mailing list Outages@outages.org https://urldefense.proofpoint.com/v2/url?u=https-3A__puck.nether.net_mailman...
If you contact me off-list I can help :-) We don't want you going to europe when you're in the US for example, but there may be reasons/cases that happens as well. - Jared On Fri, Jan 17, 2020 at 01:35:00PM -0600, Dan White wrote:
Thanks Jared. We operate our own DNS resolvers, which are seeing the same behavior. I wanted to test against a couple of public servers to, presumably, rule out a geolocation database problem.
Josh,
All looks good with regards to the data provided at http://thebrotherswisp.com/index.php/geo-and-vpn with the exception of https://www.ipligence.com/geolocation which seems to be junk serving junk data.
So far, Akamai is the only provider we are seeing issues with.
Thanks for the feedback.
On 01/17/20 14:24 -0500, Jared Mauch wrote:
I recommend against using 1.1.1.1 as that may direct you to far away locations. I can help you off-list further.
- Jared
On Jan 17, 2020, at 2:20 PM, Josh Luthman via Outages <outages@outages.org> wrote:
The IPs you're coming from, look what they say at the various geolocation services here:
http://thebrotherswisp.com/index.php/geo-and-vpn/
Also, have you tried a local DNS server and not Google/Cloudflare Anycast ones?
Josh Luthman
On Fri, Jan 17, 2020 at 2:13 PM Dan White via Outages <outages@outages.org> wrote: We are seeing some geolocation oddities with a couple of websites hosted at, or resolved by, Akamai.
Two hostnames I'm looking at include:
business.officedepot.com www.teacherspayteachers.com
'A' records for both have a TTL of 20 seconds, and randomly resolve to IPs in the US, and Europe (we are in the US/Oklahoma).
For example, business.officedepot.com is resolving to both 96.17.32.230 and 88.221.37.87 (at different times). I've verified the same inconsistent behavior against 8.8.8.8 and 1.1.1.1.
This is causing issues for an educational customer of ours. Is anyone aware of issues within Akamai that may be causing them to source content from Europe?
-- Dan White BTC Broadband Network Admin Lead Ph 918.366.0248 (direct) main: (918)366-8000 Fax 918.366.6610 email: dwhite@mybtc.com http://www.btcbroadband.com
-- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.
participants (4)
-
Dan White -
Jared Mauch -
Josh Luthman -
Michael Christian