<div><br></div><div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Sep 22, 2021 at 7:38 PM Ethan Katz-Bassett <<a href="mailto:ebk2141@columbia.edu">ebk2141@columbia.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Cloudflare in particular is experimenting with returning different IP addresses to different queries for all kinds of reasons:<div><a href="https://mislove.org/publications/IP-Unbound-SIGCOMM.pdf" target="_blank">https://mislove.org/publications/IP-Unbound-SIGCOMM.pdf</a><br></div><div></div></div></blockquote><div dir="auto"><br></div><div dir="auto">Yup — but in this case, at least one of the addresses that they returned gave a 403 Error when connecting and trying to fetch /.</div><div dir="auto"><br></div><div dir="auto">Giving out different addresses is fine, but they should all work :-)</div><div dir="auto"><br></div><div dir="auto">W</div><div dir="auto"><br></div><div dir="auto"><br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><br></div><div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Sep 22, 2021 at 1:29 PM Warren Kumari <<a href="mailto:warren@kumari.net" target="_blank">warren@kumari.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div dir="ltr"><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Sep 22, 2021 at 1:01 PM Brown, William <<a href="mailto:wbrown@e1b.org" target="_blank">wbrown@e1b.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-US">
<div>
<p class="MsoNormal">We have a school district that is trying to resolve the domain <a href="http://deltamath.com" target="_blank">deltamath.com</a>. This issue is impacting the classroom use of this service.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">The authoritative servers are <a href="http://tani.ns.cloudflare.com" target="_blank">tani.ns.cloudflare.com</a> and <a href="http://jarred.ns.cloudfare.com" target="_blank">jarred.ns.cloudfare.com</a>. Tani seems to work correctly. Jarred however, will return two different results:<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Here are the results of four tries within a few seconds:<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">[wbrown@ns3 ~]$ dig @<a href="http://jarred.ns.cloudflare.com" target="_blank">jarred.ns.cloudflare.com</a> <a href="http://deltamath.com" target="_blank">deltamath.com</a> +short<u></u><u></u></p>
<p class="MsoNormal">172.67.75.10<u></u><u></u></p>
<p class="MsoNormal">104.26.2.229<u></u><u></u></p>
<p class="MsoNormal">104.26.3.229<u></u><u></u></p>
<p class="MsoNormal">[wbrown@ns3 ~]$ dig @<a href="http://jarred.ns.cloudflare.com" target="_blank">jarred.ns.cloudflare.com</a> <a href="http://deltamath.com" target="_blank">deltamath.com</a> +short<u></u><u></u></p>
<p class="MsoNormal">104.26.2.229<u></u><u></u></p>
<p class="MsoNormal">104.26.3.229<u></u><u></u></p>
<p class="MsoNormal">172.67.75.10<u></u><u></u></p>
<p class="MsoNormal">[wbrown@ns3 ~]$ dig @<a href="http://jarred.ns.cloudflare.com" target="_blank">jarred.ns.cloudflare.com</a> <a href="http://deltamath.com" target="_blank">deltamath.com</a> +short<u></u><u></u></p>
<p class="MsoNormal">172.67.75.10<u></u><u></u></p>
<p class="MsoNormal">104.26.3.229<u></u><u></u></p>
<p class="MsoNormal">104.26.2.229<u></u><u></u></p>
<p class="MsoNormal">[wbrown@ns3 ~]$ dig @<a href="http://jarred.ns.cloudflare.com" target="_blank">jarred.ns.cloudflare.com</a> <a href="http://deltamath.com" target="_blank">deltamath.com</a> +short<u></u><u></u></p>
<p class="MsoNormal">172.64.80.1<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Is anyone from Cloudflare of the list that can assist with resolving this? Anyone have a contact at Cloudflare they can share to get this resolved for the school district?</p></div></div></blockquote><div><br></div><div>I don't really see the problem here -- all of the addresses returned seem to be valid CloudFlare addresses, and (I think) that all of them are answering correctly for <a href="http://deltamath.com" target="_blank">deltamath.com</a>.</div><div>Nameservers routinely answer with different answers to split the load between different VIPS, provide answers which they think are "better" for specific queriers, etc. As long as the servers returned are behaving correctly, CF can return basically whatever they like.</div><div><br></div><div>Of course, it's entirely possible/likely that I completely misunderstood the issue/question.</div><div>W</div><div><br></div><div><br></div><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div lang="EN-US"><div><p class="MsoNormal"><u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">--<u></u><u></u></p>
<p class="MsoNormal">William Brown<u></u><u></u></p>
<p class="MsoNormal">WNYRIC/Erie 1 BOCES<u></u><u></u></p>
<p class="MsoNormal">716-821-7285<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">SharePoint, Eforms, Email, Spam Filtering Please reach out to
<a href="mailto:messaging@e1b.org" target="_blank"><span style="color:blue">messaging@e1b.org</span></a><u></u><u></u></p>
<p class="MsoNormal">Immediate Needs Call our Service Desk at 716-821-7171<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
Confidentiality Notice: This electronic message and any attachments may contain confidential or privileged information, and is intended only for the individual or entity identified above as the addressee. If you are not the addressee (or the employee or agent
responsible to deliver it to the addressee), or if this message has been addressed to you in error, you are hereby notified that you may not copy, forward, disclose or use any part of this message or any attachments. Please notify the sender immediately by
return e-mail or telephone and delete this message from your system.
</div>
_______________________________________________<br>
dns-operations mailing list<br>
<a href="mailto:dns-operations@lists.dns-oarc.net" target="_blank">dns-operations@lists.dns-oarc.net</a><br>
<a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations" rel="noreferrer" target="_blank">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a><br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr"><div dir="ltr">The computing scientist’s main challenge is not to get confused by the<br>complexities of his own making. <br> -- E. W. Dijkstra</div></div></div>
_______________________________________________<br>
dns-operations mailing list<br>
<a href="mailto:dns-operations@lists.dns-oarc.net" target="_blank">dns-operations@lists.dns-oarc.net</a><br>
<a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations" rel="noreferrer" target="_blank">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a><br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr"><div dir="ltr"><a href="http://www.columbia.edu/~ebk2141/" target="_blank">http://www.columbia.edu/~ebk2141/</a><br></div></div>
</blockquote></div></div>-- <br><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr">Perhaps they really do strive for incomprehensibility in their specs.<br>After all, when the liturgy was in Latin, the laity knew their place.<br>-- Michael Padlipsky<br></div></div>