4

Anonymous ECS with ISP Viettel causes high ping with Google service

Hi,

Previously, I had an error that anonymous ECS was sending the wrong IP address with ISP Akamai, not ISP Viettel. And now, they have come to error, the IP addresses Google servers return are all very high ping. More serious is not being able to access Google services.

When using anonymous ECS

C:\Users\COMPAQ-CQ45>dig youtube.com CHAOS
;; Warning: Message parser reports malformed message packet.
; <<>> DiG 9.16.28 <<>> youtube.com CHAOS
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18258
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 7
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;youtube.com.                   CH      A
;; ANSWER SECTION:
youtube.com.            300     IN      A       172.217.23.206
;; ADDITIONAL SECTION:
client.nextdns.io.      0       CH      TXT     "171.245.219.XXX"
profile.nextdns.io.     0       CH      TXT     "fpcac465e1d66dead4"
client-name.nextdns.io. 0       CH      TXT     "nextdns-cli"
proto.nextdns.io.       0       CH      TXT     "DOH"
server.nextdns.io.      0       CH      TXT     "greencloud-han-1"
smart-ecs.nextdns.io.   0       CH      TXT     "23.40.76.0/24"
;; Query time: 47 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Thu Aug 31 22:32:19 SE Asia Standard Time 2023
;; MSG SIZE  rcvd: 270
C:\Users\COMPAQ-CQ45>tracert -d youtube.com
Tracing route to youtube.com [172.217.23.206]
over a maximum of 30 hops:
  1     2 ms     1 ms     2 ms  192.168.1.1
  2     3 ms     3 ms     2 ms  125.235.251.199
  3     5 ms     3 ms     3 ms  10.207.244.122
  4     7 ms     7 ms     7 ms  27.68.209.61
  5     *       12 ms    15 ms  27.68.209.53
  6     8 ms     7 ms     8 ms  27.68.237.150
  7    11 ms    11 ms     6 ms  27.68.250.214
  8    35 ms    35 ms    34 ms  72.14.205.90
  9    38 ms    40 ms    37 ms  209.85.244.77
 10    36 ms    37 ms    36 ms  108.170.241.79
 11    40 ms    37 ms    36 ms  172.253.64.172
 12    46 ms    46 ms    46 ms  172.253.50.221
 13   174 ms   178 ms   173 ms  142.250.226.88
 14   181 ms   180 ms   182 ms  142.250.58.252
 15   213 ms   208 ms   206 ms  142.250.208.140
 16   214 ms   223 ms   213 ms  142.250.215.119
 17   216 ms   218 ms   215 ms  216.239.49.58
 18   226 ms   230 ms   232 ms  216.239.40.14
 19   245 ms   247 ms   245 ms  216.239.59.1
 20   313 ms   316 ms   310 ms  172.253.65.167
 21   316 ms   317 ms   316 ms  209.85.245.230
 22   328 ms   315 ms   316 ms  216.239.42.102
 23   315 ms   319 ms   317 ms  108.170.241.225
 24   316 ms   314 ms   315 ms  142.251.255.41
 25   317 ms   315 ms   317 ms  172.217.23.206
Trace complete.

When not using anonymous ECS

C:\Users\COMPAQ-CQ45>dig youtube.com CHAOS
;; Warning: Message parser reports malformed message packet.
; <<>> DiG 9.16.28 <<>> youtube.com CHAOS
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23495
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 7
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;youtube.com.                   CH      A
;; ANSWER SECTION:
youtube.com.            300     IN      A       142.251.220.14
;; ADDITIONAL SECTION:
server.nextdns.io.      0       CH      TXT     "greencloud-han-1"
client.nextdns.io.      0       CH      TXT     "171.245.219.XXX"
client-name.nextdns.io. 0       CH      TXT     "nextdns-cli"
proto.nextdns.io.       0       CH      TXT     "DOH"
profile.nextdns.io.     0       CH      TXT     "fpcac465e1d66dead4"
smart-ecs.nextdns.io.   0       CH      TXT     "not sent"
;; Query time: 32 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Thu Aug 31 22:33:00 SE Asia Standard Time 2023
;; MSG SIZE  rcvd: 265
C:\Users\COMPAQ-CQ45>tracert -d youtube.com
Tracing route to youtube.com [142.251.220.14]
over a maximum of 30 hops:
  1     2 ms     4 ms     3 ms  192.168.1.1
  2     6 ms     2 ms     2 ms  125.235.251.199
  3     7 ms     6 ms    12 ms  115.79.0.84
  4     5 ms     7 ms     7 ms  27.68.209.61
  5    19 ms    24 ms    23 ms  27.68.209.53
  6     8 ms     7 ms     6 ms  27.68.237.150
  7     8 ms    10 ms     7 ms  27.68.250.52
  8    30 ms    31 ms    37 ms  72.14.208.125
  9    32 ms    31 ms    39 ms  108.170.231.19
 10    32 ms    33 ms    32 ms  142.251.244.221
 11    32 ms    33 ms    34 ms  142.251.220.14
Trace complete.

Diag: https://nextdns.io/diag/61ef7460-4815-11ee-8bd4-0dd8037dab5f

Bug reported: https://help.nextdns.io/t/g9haf2j

The outgoing ECS IP address belongs to ISP Akamai, but my IP address belongs to ISP Viettel

 Please check and fix it ASAP! Thank you!

3 replies

null
    • BigDargon
    • 1 yr ago
    • Reported - view

    Google services with ECS enabled have high latency and sometimes cannot access Google services.

    When enabling anonymous ECS

    - Domain google.com

    C:\Users\COMPAQ-CQ45>dig google.com CHAOS
;; Warning: Message parser reports malformed message packet.
; <<>> DiG 9.16.28 <<>> google.com CHAOS
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27440
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 7
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;google.com.                    CH      A
;; ANSWER SECTION:
google.com.             300     IN      A       142.251.39.110
;; ADDITIONAL SECTION:
client-name.nextdns.io. 0       CH      TXT     "nextdns-cli"
profile.nextdns.io.     0       CH      TXT     "fpcac465e1d66dead4"
client.nextdns.io.      0       CH      TXT     "171.245.219.XXX"
proto.nextdns.io.       0       CH      TXT     "DOH"
server.nextdns.io.      0       CH      TXT     "greencloud-han-1"
smart-ecs.nextdns.io.   0       CH      TXT     "23.40.76.0/24"
;; Query time: 38 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Sat Sep 02 21:36:30 SE Asia Standard Time 2023
;; MSG SIZE  rcvd: 269

C:\Users\COMPAQ-CQ45>tracert -d google.com
Tracing route to google.com [142.251.39.110]
over a maximum of 30 hops:
  1     5 ms     1 ms     3 ms  192.168.1.1
  2    12 ms    60 ms     3 ms  125.235.251.199
  3     5 ms     5 ms     5 ms  10.207.244.122
  4     5 ms     3 ms     4 ms  27.68.209.61
  5     *        *        *     Request timed out.
  6     7 ms     8 ms     7 ms  27.68.237.150
  7    11 ms    10 ms    11 ms  27.68.250.52
  8    36 ms    35 ms    32 ms  72.14.208.125
  9    33 ms    31 ms    40 ms  108.170.241.33
 10    33 ms    36 ms    34 ms  108.170.241.45
 11    35 ms    33 ms    38 ms  209.85.142.203
 12    44 ms    45 ms    48 ms  172.253.50.221
 13   175 ms   173 ms   178 ms  142.250.226.88
 14   179 ms   179 ms   179 ms  142.250.238.76
 15   205 ms   217 ms   205 ms  142.250.227.246
 16   232 ms   229 ms   229 ms  142.251.67.134
 17   231 ms   230 ms   235 ms  172.253.68.51
 18   244 ms   249 ms   260 ms  142.250.209.70
 19   320 ms   319 ms   338 ms  142.251.78.222
 20   320 ms   321 ms   324 ms  216.239.43.128
 21   344 ms   326 ms   324 ms  108.170.238.128
 22   320 ms   321 ms   323 ms  108.170.241.161
 23   319 ms   319 ms   319 ms  142.251.225.137
 24   324 ms   324 ms   323 ms  142.251.39.110
Trace complete.

    - Domain gmail.com

    C:\Users\COMPAQ-CQ45>dig gmail.com
; <<>> DiG 9.16.28 <<>> gmail.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 65489
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;gmail.com.                     IN      A
;; ANSWER SECTION:
gmail.com.              300     IN      A       142.251.36.5
;; Query time: 74 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Sat Sep 02 21:36:20 SE Asia Standard Time 2023
;; MSG SIZE  rcvd: 54

C:\Users\COMPAQ-CQ45>tracert -d gmail.com
Tracing route to gmail.com [142.251.36.5]
over a maximum of 30 hops:
  1     1 ms     2 ms     1 ms  192.168.1.1
  2     5 ms    26 ms    28 ms  125.235.251.199
  3     5 ms     4 ms     8 ms  10.207.244.122
  4     4 ms     3 ms     4 ms  27.68.209.61
  5     *        *        *     Request timed out.
  6     7 ms     6 ms     7 ms  27.68.237.150
  7     9 ms     6 ms    11 ms  27.68.250.212
  8    36 ms    34 ms    33 ms  209.85.244.23
  9    35 ms    35 ms    35 ms  108.170.241.16
 10    36 ms    35 ms    38 ms  172.253.64.175
 11    60 ms    47 ms    48 ms  209.85.245.161
 12   175 ms   177 ms   175 ms  142.250.226.86
 13   181 ms   182 ms   181 ms  142.250.238.74
 14   278 ms   208 ms   207 ms  142.250.208.140
 15   231 ms   226 ms   228 ms  192.178.44.140
 16   237 ms   232 ms   232 ms  142.251.254.57
 17   242 ms   242 ms   240 ms  192.178.44.102
 18   318 ms   323 ms   318 ms  142.250.238.100
 19   324 ms   323 ms   323 ms  142.251.79.34
 20   321 ms   322 ms   322 ms  142.251.237.168
 21   324 ms   326 ms   324 ms  108.170.241.161
 22   327 ms   328 ms   325 ms  172.253.71.201
 23   326 ms   327 ms   328 ms  142.251.36.5
Trace complete.

    When disabling anonymous ECS

    - Domain google.com

    C:\Users\COMPAQ-CQ45>dig google.com CHAOS
;; Warning: Message parser reports malformed message packet.
; <<>> DiG 9.16.28 <<>> google.com CHAOS
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31252
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 7
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;google.com.                    CH      A
;; ANSWER SECTION:
google.com.             300     IN      A       142.250.66.46
;; ADDITIONAL SECTION:
client-name.nextdns.io. 0       CH      TXT     "nextdns-cli"
profile.nextdns.io.     0       CH      TXT     "fpcac465e1d66dead4"
client.nextdns.io.      0       CH      TXT     "171.245.219.XXX"
proto.nextdns.io.       0       CH      TXT     "DOH"
server.nextdns.io.      0       CH      TXT     "greencloud-han-1"
smart-ecs.nextdns.io.   0       CH      TXT     "not sent"
;; Query time: 43 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Sat Sep 02 21:48:10 SE Asia Standard Time 2023
;; MSG SIZE  rcvd: 264

C:\Users\COMPAQ-CQ45>tracert -d google.com
Tracing route to google.com [142.250.66.46]
over a maximum of 30 hops:
  1     2 ms     4 ms     6 ms  192.168.1.1
  2     5 ms     2 ms     3 ms  125.235.251.199
  3     5 ms     8 ms     4 ms  10.207.244.126
  4     5 ms     9 ms     7 ms  27.68.209.61
  5     *        *        *     Request timed out.
  6     7 ms     8 ms     7 ms  27.68.237.150
  7     7 ms     7 ms    11 ms  27.68.250.212
  8    35 ms    37 ms    37 ms  209.85.244.77
  9    40 ms    35 ms    34 ms  108.170.232.111
 10    35 ms    34 ms    37 ms  142.250.66.46
Trace complete.

    - Domain gmail.com

    C:\Users\COMPAQ-CQ45>dig gmail.com CHAOS
;; Warning: Message parser reports malformed message packet.
; <<>> DiG 9.16.28 <<>> gmail.com CHAOS
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57856
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 7
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;gmail.com.                     CH      A
;; ANSWER SECTION:
gmail.com.              300     IN      A       142.251.220.69
;; ADDITIONAL SECTION:
proto.nextdns.io.       0       CH      TXT     "DOH"
server.nextdns.io.      0       CH      TXT     "greencloud-han-1"
profile.nextdns.io.     0       CH      TXT     "fpcac465e1d66dead4"
client.nextdns.io.      0       CH      TXT     "171.245.219.XXX"
client-name.nextdns.io. 0       CH      TXT     "nextdns-cli"
smart-ecs.nextdns.io.   0       CH      TXT     "not sent"
;; Query time: 45 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Sat Sep 02 21:48:14 SE Asia Standard Time 2023
;; MSG SIZE  rcvd: 263

C:\Users\COMPAQ-CQ45>tracert -d gmail.com
Tracing route to gmail.com [142.251.220.69]
over a maximum of 30 hops:
  1     2 ms     2 ms     2 ms  192.168.1.1
  2     3 ms     3 ms     2 ms  125.235.251.199
  3     3 ms     4 ms     4 ms  10.207.244.122
  4     3 ms     8 ms     3 ms  27.68.209.61
  5    11 ms     7 ms     7 ms  27.68.209.53
  6     7 ms     7 ms     6 ms  27.68.237.150
  7     7 ms     7 ms     8 ms  27.68.250.50
  8    47 ms    39 ms    36 ms  72.14.208.125
  9    35 ms    31 ms    32 ms  108.170.231.21
 10    34 ms    32 ms    31 ms  142.251.245.19
 11    32 ms    34 ms    31 ms  142.251.220.69
Trace complete.

    Please check and fix it! Thank you!

    • BigDargon
    • 1 yr ago
    • Reported - view

    Viettel ISP users cannot access Google services when anonymous ECS is enabled.

    • BigDargon
    • 7 mths ago
    • Reported - view

    I'm still waiting for this to be fixed! Thanks!

Login to reply

Content aside

  • 4 Likes
  • 7 mths agoLast active
  • 3Replies
  • 390Views
  • 2 Following