0

Cloudfront resolving to incorrect state (Australia)

I am located in MEL. Amazon Cloudfront is resolving to SYD when using NextDNS.

adrian@minisforum:~/containers$ dig +short 7news.com.au @1.1.1.1
65.8.33.78
65.8.33.89
65.8.33.93
65.8.33.106
adrian@minisforum:~/containers$ dig +short 7news.com.au @45.90.30.0
108.158.20.51
108.158.20.103
108.158.20.78
108.158.20.47
adrian@minisforum:~/containers$ dig +short 7news.com.au @45.90.28.0
108.158.20.103
108.158.20.47
108.158.20.51
108.158.20.78
adrian@minisforum:~/containers$ dig +short 7news.com.au @9.9.9.11
65.8.33.89
65.8.33.78
65.8.33.106
65.8.33.93
adrian@minisforum:~/containers$ dig +short 7news.com.au @8.8.8.8
65.8.33.89
65.8.33.106
65.8.33.93
65.8.33.78
adrian@minisforum:~/containers$ curl ipv6.icanhazip.com
2400:a842:407b::/48
adrian@minisforum:~/containers$ curl ipv4.icanhazip.com
103.51.115.134/32

 

3 replies

null
    • BigDargon
    • 1 mth ago
    • Reported - view

    If you are using NextDNS with an ID, try disabling the anonymous ECS feature.

      • adrianmaceau
      • 1 mth ago
      • Reported - view

       Thank you for the suggestion. Looking at the results more closely I actually notice using my ID-mapped DNS resolver works as expected (Cloudfront resolves to MEL).

      adrian@minisforum:~/containers$ dig +short 7news.com.au @45.90.28.xx
65.8.33.78
65.8.33.89
65.8.33.106
65.8.33.93
adrian@minisforum:~/containers$ dig +short 7news.com.au @45.90.28.0
108.158.20.78
108.158.20.103
108.158.20.51
108.158.20.47
      • BigDargon
      • 1 mth ago
      • Reported - view

       In some countries/service providers, the anonymous ECS feature doesn't work well. Sending ECS only helps to identify the network provider you are using, does not work to find the server location near you.
       

      So when turned off, the authorized dns server will rely on the IP address/location of the ultralow server of NextDNS to answer the query server IP address.

Login to reply

Content aside

  • 1 mth agoLast active
  • 3Replies
  • 24Views
  • 2 Following