0

100% packet loss on vultr Sao Paulo, Brazil

The Anycast IP range 45.90.30.0/24 is announced in São Paulo, Brazil by both Vultr (AS20473) and Anexia (AS42473). Pinging 45.90.30.1 using Vultr's own looking glass (https://sao-br-ping.vultr.com) yields 100% packet loss in São Paulo, while other locations seem unaffected. This issue only occurs when traffic is routed through Vultr (AS20473).

Using EdgeUno's looking glass (https://lg.edgeuno.com), we can see that this route goes through Anexia (AS42473) in São Paulo, with ping times around 1 ms. This suggests the issue is not with NextDNS itself, but rather a routing problem within Vultr.

As a result, a significant number of DNS requests are likely being dropped in Brazil—possibly across South America—since Vultr (AS20473) appears to be the preferred path for most ISPs, and São Paulo is a major internet hub for the region.

7 replies

null
    • NextDNs
    • 3 days ago
    • Reported - view

    Please provide a https://nextdns.io/diag

      • James.52
      • 3 days ago
      • Reported - view

      Sure!

      Here is the diag:

      https://nextdns.io/diag/b2b65340-3022-11f0-afb1-299b6374c0e5

      My ISP (TIM) blocks traceroute on their network, which is why their hops are missing.

      I would also like to add that the IP 45.90.30.0 is the only one responsive, and that is why it showed up in the diagnostic tool. This is the only IP in the range 45.90.30.0/24 tested by the tool.

      IPs from 45.90.30.1 to 45.90.30.254 are not responding to pings or DNS requests. This behavior can also be seen on Vultr's looking glass (https://sao-br-ping.vultr.com), suggesting there is an issue in their network.

      As far as I understand, clients are instructed to use addresses from 45.90.30.1 to 45.90.30.254 on their setup page and not 45.90.30.0.

      • NextDNs
      • 3 days ago
      • Reported - view

       .0 and 1-255 are all identical and should equally ping. If one is and not the others, it could indicate something is blocking them on the path.

      • James.52
      • 2 days ago
      • Reported - view

      Yes, very unusual.

      Have you tried contacting Vultr to see why this is happening? The drops seem to be occurring on their network.

      If not, what do you think the next move is?

      I would appreciate it if you could keep me posted.

      • NextDNs
      • 2 days ago
      • Reported - view

      what make you think it is happening on their network?

      • James.52
      • 2 days ago
      • Reported - view

      Because they are the last network on the path before it reaches IPs 45.90.30.0–255 in São Paulo, and they are also dropping the same packets I observed with my ISP.

      Just look at the screenshots from Vultr’s Looking Glass above, or try it yourself: https://sao-br-ping.vultr.com.

      A Looking Glass is a network debugging tool hosted by major networks — in this case, hosted by Vultr — to help understand how traffic is flowing. It provides basic tools like ping and traceroute from various locations within Vultr's network.

      So, if packets are being dropped within Vultr’s network, any ISP that gets routed through them will exhibit the same behavior. This is exactly what I’m seeing with my home ISP (TIM), my mobile ISP (Vivo — I can run another diagnostic if you'd like, but it shows more of the same), as well as in Looking Glass results from NTT America and Cogent, both of which are also routed through Vultr in São Paulo.

    • Leang
    • yesterday
    • Reported - view

    I have run a ping test on my own cloud server and apparently nextdns is actively blocking my cloud server's Ip from some of their steering.nextdns.io DoT servers. Who can I email or talk to?

Content aside

  • yesterdayLast active
  • 7Replies
  • 102Views
  • 3 Following