Skip to content

Instantly share code, notes, and snippets.

@isaumya

isaumya/cloudflare-cdn-routing-anomaly-detailed-test.md

Created February 28, 2021 12:35
Show Gist options
  • Save isaumya/548654fd096fcaac9f8ea261ffb8528c to your computer and use it in GitHub Desktop.
Save isaumya/548654fd096fcaac9f8ea261ffb8528c to your computer and use it in GitHub Desktop.
Download ZIP
Cloudflare CDN Routing Anomaly detailed test across multiple DNS resolvers
Raw
cloudflare-cdn-routing-anomaly-detailed-test.md

Cloudflare CDN Routing Anomaly Detailed Test Across Multiple DNS Resolvers

Here are some key details about my testing location and ISP:

Important Note: Keep an eye on the value of colo on the following response. As that value will show exactly from which Cloudflare CDN edge the data is getting served from. Moreover these 3 letter colo values are basically the IATA airport code on that city. So, you can use a website like World Airport Codes to find out the exact City and Country Name.

Testing Cloudflare Free Account

Website: nisdkolkata.com

DNS Resolver: Default Provided by ISP

Over IPv4

> curl https://nisdkolkata.com/cdn-cgi/trace --ipv4
fl=215f8
h=nisdkolkata.com
ip=4X.XX.X.X
ts=1614348984.014
visit_scheme=https
uag=curl/7.68.0
colo=BOM
http=http/2
loc=IN
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off

Sometimes it also gave the following result:

> curl https://nisdkolkata.com/cdn-cgi/trace --ipv4
fl=22f307
h=nisdkolkata.com
ip=4X.XX.X.X
ts=1614349334.217
visit_scheme=https
uag=curl/7.68.0
colo=NRT
http=http/2
loc=IN
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off

Over IPv6

> curl https://nisdkolkata.com/cdn-cgi/trace --ipv6
fl=49f76
h=nisdkolkata.com
ip=2XXX:XXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX
ts=1614349426.463
visit_scheme=https
uag=curl/7.68.0
colo=MRS
http=http/2
loc=IN
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off

DNS Resolver: Google DNS (8.8.8.8)

Over IPv4

> curl https://nisdkolkata.com/cdn-cgi/trace --ipv4
fl=215f1
h=nisdkolkata.com
ip=4X.XX.X.X
ts=1614513029.31
visit_scheme=https
uag=curl/7.68.0
colo=BOM
http=http/2
loc=IN
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off

Over IPv6

> curl https://nisdkolkata.com/cdn-cgi/trace --ipv6
fl=49f48
h=nisdkolkata.com
ip=2XXX:XXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX
ts=1614513118.965
visit_scheme=https
uag=curl/7.68.0
colo=MRS
http=http/2
loc=IN
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off

DNS Resolver: Cloudflare DNS (1.1.1.1)

Over IPv4

> curl https://nisdkolkata.com/cdn-cgi/trace --ipv4
fl=215f16
h=nisdkolkata.com
ip=4X.XX.X.X
ts=1614514898.58
visit_scheme=https
uag=curl/7.68.0
colo=BOM
http=http/2
loc=IN
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off

Over IPv6

> curl https://nisdkolkata.com/cdn-cgi/trace --ipv6
fl=49f98
h=nisdkolkata.com
ip=2XXX:XXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX
ts=1614514933.149
visit_scheme=https
uag=curl/7.68.0
colo=MRS
http=http/2
loc=IN
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off

Testing Cloudflare Pro Account

Website: theecohub.ca

DNS Resolver: Default Provided by ISP

Over IPv4

> curl https://theecohub.ca/cdn-cgi/trace --ipv4
fl=217f1
h=theecohub.ca
ip=4X.XX.X.X
ts=1614350838.444
visit_scheme=https
uag=curl/7.68.0
colo=CCU
http=http/2
loc=IN
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off

Over IPv6

> curl https://theecohub.ca/cdn-cgi/trace --ipv6
fl=217f1
h=theecohub.ca
ip=2XXX:XXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX
ts=1614351151.413
visit_scheme=https
uag=curl/7.68.0
colo=CCU
http=http/2
loc=IN
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off

DNS Resolver: Google DNS (8.8.8.8)

Over IPv4

> curl https://theecohub.ca/cdn-cgi/trace --ipv4
fl=217f5
h=theecohub.ca
ip=4X.XX.X.X
ts=1614513224.652
visit_scheme=https
uag=curl/7.68.0
colo=CCU
http=http/2
loc=IN
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off

Over IPv6

> curl https://theecohub.ca/cdn-cgi/trace --ipv6
fl=202f152
h=theecohub.ca
ip=2XXX:XXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX
ts=1614513262.973
visit_scheme=https
uag=curl/7.68.0
colo=BOM
http=http/2
loc=IN
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off

DNS Resolver: Cloudflare DNS (1.1.1.1)

Over IPv4

> curl https://theecohub.ca/cdn-cgi/trace --ipv4
fl=217f16
h=theecohub.ca
ip=4X.XX.X.X
ts=1614514992.985
visit_scheme=https
uag=curl/7.68.0
colo=CCU
http=http/2
loc=IN
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off

Over IPv6

> curl https://theecohub.ca/cdn-cgi/trace --ipv6
fl=202f66
h=theecohub.ca
ip=2XXX:XXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX
ts=1614515032.109
visit_scheme=https
uag=curl/7.68.0
colo=BOM
http=http/2
loc=IN
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off

Testing Cloudflare Business Account

Website: crunchbase.com

DNS Resolver: Default Provided by ISP

Over IPv4

> curl https://www.crunchbase.com/cdn-cgi/trace --ipv4
fl=217f12
h=www.crunchbase.com
ip=4X.XX.X.X
ts=1614351405.229
visit_scheme=https
uag=curl/7.68.0
colo=CCU
http=http/2
loc=IN
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off

Over IPv6

> curl https://www.crunchbase.com/cdn-cgi/trace --ipv6
fl=217f19
h=www.crunchbase.com
ip=2XXX:XXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX
ts=1614351642.737
visit_scheme=https
uag=curl/7.68.0
colo=CCU
http=http/2
loc=IN
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off

DNS Resolver: Google DNS (8.8.8.8)

Over IPv4

> curl https://www.crunchbase.com/cdn-cgi/trace --ipv4
fl=217f14
h=www.crunchbase.com
ip=4X.XX.X.X
ts=1614513342.217
visit_scheme=https
uag=curl/7.68.0
colo=CCU
http=http/2
loc=IN
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off

Over IPv6

> curl https://www.crunchbase.com/cdn-cgi/trace --ipv6
fl=217f4
h=www.crunchbase.com
ip=2XXX:XXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX
ts=1614513384.81
visit_scheme=https
uag=curl/7.68.0
colo=CCU
http=http/2
loc=IN
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off

DNS Resolver: Cloudflare DNS (1.1.1.1)

Over IPv4

> curl https://www.crunchbase.com/cdn-cgi/trace --ipv4
fl=217f1
h=www.crunchbase.com
ip=4X.XX.X.X
ts=1614515082.542
visit_scheme=https
uag=curl/7.68.0
colo=CCU
http=http/2
loc=IN
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off

Over IPv6

> curl https://www.crunchbase.com/cdn-cgi/trace --ipv6
fl=217f10
h=www.crunchbase.com
ip=2XXX:XXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX
ts=1614515113.623
visit_scheme=https
uag=curl/7.68.0
colo=CCU
http=http/2
loc=IN
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off

Testing Cloudflare Enterprise Account

Website: cloudflare.com

DNS Resolver: Default Provided by ISP

Over IPv4

> curl https://www.cloudflare.com/cdn-cgi/trace --ipv4
fl=217f17
h=www.cloudflare.com
ip=4X.XX.X.X
ts=1614351908.49
visit_scheme=https
uag=curl/7.68.0
colo=CCU
http=http/2
loc=IN
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off

Over IPv6

> curl https://www.cloudflare.com/cdn-cgi/trace --ipv6
fl=202f118
h=www.cloudflare.com
ip=2XXX:XXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX
ts=1614352061.117
visit_scheme=https
uag=curl/7.68.0
colo=BOM
http=http/2
loc=IN
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off

DNS Resolver: Google DNS (8.8.8.8)

Over IPv4

> curl https://www.cloudflare.com/cdn-cgi/trace --ipv4
fl=217f17
h=www.cloudflare.com
ip=4X.XX.X.X
ts=1614513455.658
visit_scheme=https
uag=curl/7.68.0
colo=CCU
http=http/2
loc=IN
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off

Over IPv6

> curl https://www.cloudflare.com/cdn-cgi/trace --ipv6
fl=202f92
h=www.cloudflare.com
ip=2XXX:XXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX
ts=1614513485.253
visit_scheme=https
uag=curl/7.68.0
colo=BOM
http=http/2
loc=IN
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off

DNS Resolver: Cloudflare DNS (1.1.1.1)

Over IPv4

> curl https://www.cloudflare.com/cdn-cgi/trace --ipv4
fl=217f11
h=www.cloudflare.com
ip=4X.XX.X.X
ts=1614515157.358
visit_scheme=https
uag=curl/7.68.0
colo=CCU
http=http/2
loc=IN
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off

Over IPv6

> curl https://www.cloudflare.com/cdn-cgi/trace --ipv6
fl=202f53
h=www.cloudflare.com
ip=2XXX:XXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX
ts=1614515186.19
visit_scheme=https
uag=curl/7.68.0
colo=BOM
http=http/2
loc=IN
tls=TLSv1.3
sni=plaintext
warp=off
gateway=off

Traceroute Screenshots

DNS Resolver: Default Provided by ISP

Cloudflare Domains Tests on Default DNS Resolver

DNS Resolver: Google DNS (8.8.8.8)

Cloudflare Domains Tests on Google DNS Resolver

DNS Resolver: Cloudflare DNS (1.1.1.1)

Cloudflare Domains Tests on Cloudflare DNS Resolver

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment