203.109.129.67 & 68 allow remote DNS requests so I checked them. I was seeing some of my US IPs for a bit but not so much now. This is all http traffic so it could be something fancy like having a http proxy forward requests to a non-NZ server. I am guessing it's vodafone from a trawl of the logs, it's a bit hard to pick out details from a couple of hundred hits/second jump vs the normal traffic. On Mon, 9 Jan 2012, Mauricio Freitas wrote:
How did you test this? PING, Tracert or HTTP requests?
Cheers
Mauricio Freitas www.geekzone.co.nz www.freitasm.com www.twitter.com/freitasm
-----Original Message----- From: nznog-bounces(a)list.waikato.ac.nz [mailto:nznog-bounces(a)list.waikato.ac.nz] On Behalf Of Simon Lyall Sent: Tuesday, 10 January 2012 2:06 p.m. To: nznog Subject: [nznog] Vodafone DNS
It looks like around 8:20 this morning vodafone customers started hitting my US rather than my NZ Web servers. I use GSLB to balance things so since that time vodafone's DNS queries have appeared to be from "outside NZ".
This is probably due to Telstra problems this morning.
I've done a little remote testing but it's all a little hard to confirm, so if somebody at vodafone could either backout the change or pop me an email to discuss it would probably speed up their customer access (at least to my site, perhaps others).
I've done some testing against 203.109.129.67 & 68 and they seem to have fixed themselves around 13:30 but I suspect thats not the whole story.
-- Simon Lyall | Very Busy | Web: http://www.darkmere.gen.nz/ "To stay awake all night adds a day to your life" - Stilgar | eMT.
_______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog
-- Simon Lyall | Very Busy | Web: http://www.darkmere.gen.nz/ "To stay awake all night adds a day to your life" - Stilgar | eMT.