Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Microsoft Ajax Content Delivery Network (CDN) #116

Open
Rick-Anderson opened this Issue Mar 29, 2018 · 57 comments

Comments

Projects
None yet
@Rick-Anderson
Copy link
Contributor

Rick-Anderson commented Mar 29, 2018

Use this issue to report problems with the Microsoft Ajax Content Delivery Network

@Rick-Anderson Rick-Anderson changed the title Microsoft Ajax Content Delivery Network Microsoft Ajax Content Delivery Network (CDN) Mar 30, 2018

@denisyfrolov

This comment has been minimized.

Copy link

denisyfrolov commented Apr 16, 2018

Looks like the CDN is pretty dead currently :-(

@ChrisSfanos

This comment has been minimized.

Copy link
Contributor

ChrisSfanos commented Apr 16, 2018

Hey @denisyfrolov - I just hit https://docs.microsoft.com/en-us/aspnet/ajax/cdn/overview and also tried to download a jQuery file and both worked. Are you seeing something different?

@denisyfrolov

This comment has been minimized.

Copy link

denisyfrolov commented Apr 16, 2018

@ChrisSfanos I am. ERR_CONNECTION_TIMED_OUT from my location (Russia). I'm receiving cs9.wpc.v0cdn.net host

@denisyfrolov

This comment has been minimized.

Copy link

denisyfrolov commented Apr 16, 2018

Sh.., @ChrisSfanos Seems like the IP address was blocked here in Russia by government communication department http://blocklist.rkn.gov.ru/. I have no idea why they did it, but pretty similar they were blocking someone else and puted the address by mistake like just why not. Sort of...

sc1

sc2

@blowdart

This comment has been minimized.

Copy link
Member

blowdart commented Apr 16, 2018

Oh dear. This is a CDN so it hosts more things than just the asp.net cdn, heck it could be part of the attempts to block Telegraph, I doubt there's anything we can do here unfortunately :(

And the IP does appear on what is reported to be a dump of blocked IPs that is reported to be what Russia is blocking (the accuracy of the list of course is up for debate).

@denisyfrolov

This comment has been minimized.

Copy link

denisyfrolov commented Apr 16, 2018

@blowdart sounds catastrophically. Do you understand that the CDN is used by giant number of sites including Russian ones. And it's used by many of Microsoft's sites including the Azure Portal for instance.

@blowdart

This comment has been minimized.

Copy link
Member

blowdart commented Apr 16, 2018

I do, but Russia controls their block list not us. We will talk to the CDN hosts, but if they are being blocked for other things they're caching then it's just going to be blocked again.

@ChrisSfanos can you open a support ticket please?

@denisyfrolov

This comment has been minimized.

Copy link

denisyfrolov commented Apr 16, 2018

@blowdart I do understand you can't change the block list, but c'mon, you have to make something up with that, atleast a mirror or something like that. Otherwise there will be a really big problem to many of people and companies here in Russia. The RKN's blocking is pretty slow process for many of local ISPs but it will be global sooner or later.

@blowdart

This comment has been minimized.

Copy link
Member

blowdart commented Apr 16, 2018

The CDN is the mirror. That's the point of it unfortunately. Spinning up a new site would mean you either change code to use a new host, or we redirect everyone to the mirror, which isn't sustainable in terms of traffic, which is why we offload to a CDN in the first place.

@Rick-Anderson

This comment has been minimized.

Copy link
Contributor Author

Rick-Anderson commented Apr 16, 2018

@denisyfrolov per the CDN article:

Production applications should not take a hard dependency on CDN assets. Applications should test for the CDN asset referenced, and use a fallback asset when the CDN is not available.

@denisyfrolov

This comment has been minimized.

Copy link

denisyfrolov commented Apr 16, 2018

@Rick-Anderson yeah, damn good idea. Who will tell this to the Azure Portal developers? I will not.

sc3

sc4

@denisyfrolov

This comment has been minimized.

Copy link

denisyfrolov commented Apr 17, 2018

@Rick-Anderson Nope, I was wrong. Here is the winner:

sc7

@otryshko

This comment has been minimized.

Copy link

otryshko commented Apr 17, 2018

@denisyfrolov what if tomorrow *.microsoft.com will be blocked (because why not?) More practical approach would be to use a VPN like Chinese do, no?

@denisyfrolov

This comment has been minimized.

Copy link

denisyfrolov commented Apr 17, 2018

@otryshko well, probably it sounds like a plan.. in long term.. but how it is supposed to help to consumers now? Let's solve problems as they occur

@Rick-Anderson

This comment has been minimized.

Copy link
Contributor Author

Rick-Anderson commented Apr 17, 2018

@denisyfrolov Thanks for the report. I opened a bug with the Azure folks.

@aspnet aspnet deleted a comment from denisyfrolov Apr 17, 2018

@aspnet aspnet deleted a comment from denisyfrolov Apr 17, 2018

@denisyfrolov

This comment has been minimized.

Copy link

denisyfrolov commented Apr 17, 2018

@Rick-Anderson That's not about the Azure's sites only. Almost each of Microsoft's sites is absolutely unusable in Russia now, like: Docs, MSDN, Visual Studio, Office, Windows, Xbox, all of them and many others are almost dead now.

@Rick-Anderson

This comment has been minimized.

Copy link
Contributor Author

Rick-Anderson commented Apr 17, 2018

@denisyfrolov I'm opening up bugs.

@davidebbo

This comment has been minimized.

Copy link

davidebbo commented Apr 17, 2018

@denisyfrolov are you sure that it really affects everyone in Russia? I would think that this would make big news, and I'm not finding any mentions of it in the news or on Twitter.

@denisyfrolov

This comment has been minimized.

Copy link

denisyfrolov commented Apr 17, 2018

@davidebbo oh yes I am, just check this https://github.com/aspnet/Docs/issues/5832#issuecomment-381762457 out. All of RKN does in Internet affects everyone in Russia. It started at night.. Here is 5 am now in Moscow, people sleep yet. Also It depends on ISP, many of them do the blocking very slow. But from all over the country I'm receiving reports that Microsoft's sites are dying. It is not about Microsoft only, many of IP addresses of AWS and GCE are also blocked (have no idea why).

@denisyfrolov

This comment has been minimized.

@pronichkin

This comment has been minimized.

Copy link

pronichkin commented Apr 17, 2018

@denisyfrolov "Almost each of Microsoft's sites is absolutely unusable in Russia now, like: Docs, MSDN, Visual Studio, Office, Windows, Xbox, all of them and many others are almost dead now."

For good or bad, I cannot confirm that, at least right now. (11 AM Moscow time.) All of the sites you mentioned are currently working for me. They are a bit slower then usual, but open successfully without noticeable errors. (Not using any VPN here of course.)

@tr3x33

This comment has been minimized.

Copy link

tr3x33 commented Apr 17, 2018

@denisyfrolov

I was not able to reproduce the mentioned issue.

Docs, MSDN, Visual Studio, Office, Windows, Xbox

I checked every from this list and all of them fine, moreover, I used Azure Portal earlier today without any issues. I'm located in Russia as well.

So is there a chance to reproduce it somehow?

@phpony

This comment has been minimized.

Copy link

phpony commented Apr 17, 2018

@tr3x33 it's easy to check. Just try downloading https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.3.1.js

It's blocked for me right now (Rostelecom, Rostov-on-Don).

This site can’t be reached: ajax.aspnetcdn.com took too long to respond.
ERR_CONNECTION_TIMED_OUT

$ wget https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.3.1.js
--2018-04-17 11:15:49-- https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.3.1.js
Resolving ajax.aspnetcdn.com (ajax.aspnetcdn.com)... 93.184.221.200
Connecting to ajax.aspnetcdn.com (ajax.aspnetcdn.com)|93.184.221.200|:443... failed: Connection timed out.

@Pzixel

This comment has been minimized.

Copy link

Pzixel commented Apr 17, 2018

@lemenkov sad but true. They already have blocked 16 million addresses, mostly Amazon AWS and Google cloud.

18.184.0.0/15
18.194.0.0/15
18.196.0.0/15
35.156.0.0/14
35.184.0.0/13
35.192.0.0/12
52.58.0.0/15
54.228.0.0/15
...
@lemenkov

This comment has been minimized.

Copy link

lemenkov commented Apr 17, 2018

@Pzixel some people just want to watch the world burn :)

I'm sure this is not the end yet. Hold tight! :)

@ghost

This comment has been minimized.

Copy link

ghost commented Apr 17, 2018

currently not reachable from Germany too?
I get timeouts for https://ajax.aspnetcdn.com/ajax/3.5/MicrosoftAjax.js and jQuery within MS-Sites

Cheers,
Björn

@ChrisSfanos

This comment has been minimized.

Copy link
Contributor

ChrisSfanos commented Apr 17, 2018

We are hearing reports of this from Europe. We've asked Azure/Verizon to investigate

@Mekanik

This comment has been minimized.

Copy link

Mekanik commented Apr 17, 2018

Azure App-insight availability test start failing for all Europe regions because of CDN Unable to connect to the remote server. Started approximately 2 hours ago.
image

@phpony

This comment has been minimized.

Copy link

phpony commented Apr 17, 2018

To the good news - CDN is now resolving to 93.184.221.201 instead of 93.184.221.200 and is available for me.

@denisyfrolov

This comment has been minimized.

Copy link

denisyfrolov commented Apr 18, 2018

Confirm. The CDN is working now for me too.

@Vertigo093i

This comment has been minimized.

Copy link

Vertigo093i commented Apr 23, 2018

93.184.221.201 is already blocked too. And even next IP address 152.199.20.1 is blocked as of today.
https://reestr.rublacklist.net/rec/349558/

@denisyfrolov

This comment has been minimized.

Copy link

denisyfrolov commented Apr 23, 2018

The CDN is blocked again.

@ChALkeR

This comment has been minimized.

Copy link

ChALkeR commented Apr 23, 2018

https://github.com/ChALkeR/fuckrkn-dnsmasq/blob/master/fuckrkn.conf — this kinda fixes it for me locally (for now).

@jalalishakib

This comment has been minimized.

Copy link

jalalishakib commented May 7, 2018

Please consider updating https://ajax.aspnetcdn.com/ajax/mvc/3.0/jquery.unobtrusive-ajax.js, Its still looking for live function in jquery!
Uncaught TypeError: a(...).live is not a function at jquery.unobtrusive-ajax.min.js:5

Had to use: https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.8.3.min.js

@Pzixel

This comment has been minimized.

Copy link

Pzixel commented May 7, 2018

@hjalalisharepoint2013 yep, it's definitely looks like a bug, this page is trying to download jquery in year 2018.

@rachelappel rachelappel removed their assignment Jul 5, 2018

@JustCallMeAD

This comment has been minimized.

Copy link

JustCallMeAD commented Jul 11, 2018

Unfortunately I tried emailing a request to "AjaxCDNSubmission@microsoft.com" but my message did not go though.. Not sure why it is advertised on a public page if it does not work - https://docs.microsoft.com/en-us/aspnet/ajax/cdn/overview

Your message to AjaxCDNSubmission@microsoft.com couldn't be delivered.
The group AjaxCDNSubmission only accepts messages from people in its organization or on its allowed senders list, and your email address isn't on the list.

Can someone please allow "AjaxCDNSubmission@microsoft.com" to accept emails from the public & also please look into my request below. Thanks :)

Please add another CDN link for Bootstrap 4 (bootstrap.bundle.js).

To ensure that the new asp.net templates are able to use Bootstrap 4 properly can you please add another CDN link to "bootstrap.bundle.js" (this includes both bootstrap.js & popper.js in 1 js file).

Please note that popper.js it is now a requirement of Bootstrap 4 & is used in Dropdowns & Tooltips.

See the links below for more information:
https://www.bootstrapcdn.com/
https://getbootstrap.com/docs/4.1/getting-started/introduction/#js
https://getbootstrap.com/docs/4.1/getting-started/download/#bootstrapcdn
https://getbootstrap.com/docs/4.1/getting-started/contents/

Please also see github issues below:
aspnet/AspNetCore#3290
aspnet/Templating#601

@klabranche

This comment has been minimized.

Copy link

klabranche commented Aug 17, 2018

Bootstrap 4.1.1 has an xss vuln in it. https://snyk.io/vuln/npm:bootstrap:20180529 Any idea of when 4.1.2 or 4.1.3 will be available in the CDN?

@ChALkeR

This comment has been minimized.

Copy link

ChALkeR commented Aug 17, 2018

@klabranche that's not an exploit, it's a vulnerability.

@klabranche

This comment has been minimized.

Copy link

klabranche commented Aug 17, 2018

@ChALkeR - yes, slip of the keyboard. :-) updated my comment to reflect.

@vanillajonathan

This comment has been minimized.

Copy link

vanillajonathan commented Sep 9, 2018

It would be good if subresource integrity (SRI) hashes for each file were listed on the webpage.

@nj

This comment has been minimized.

Copy link

nj commented Sep 11, 2018

@hjalalisharepoint2013 Hope you have switched to newer MVC version, either v4 or v5, instead of running that rather old version 😉

@klabranche You could use the one from Bootstrap in the meantime, so you get it directly. But yeah, oddly enought not updated yet though 2 months have passed.

@guardrex

This comment has been minimized.

Copy link
Collaborator

guardrex commented Dec 29, 2018

@footed reports (from aspnet/AspNetCore.Docs#10133) ...

I use .net framework to build a webform website with ScriptManager and I set EnableCdn to true.
I find ScriptManager set the MicrosoftAjax.js to https://ajax.aspnetcdn.com/ajax/4.6/1/MicrosoftAjax.zh-Hant.js and the response code is 404 so the system come back to my website to get the MicrosoftAjax.zh-Hant.js and MicrosoftAjaxWebForms.zh-Hant.js
I also try to link MicrosoftAjax.js and MicrosoftAjaxWebForms.zh-Hant.js use another language like fr-Fr the response code is 404 same with zh-Hant.

@ChrisSfanos

@TheDestinyGroup

This comment has been minimized.

Copy link

TheDestinyGroup commented Jan 7, 2019

Hi,

Can you advise when you might add jQuery.Validate 1.19.0, Bootstrap 3.4 and Bootstrap 4.2.x to the CDN?

Les

@ChrisSfanos

This comment has been minimized.

Copy link
Contributor

ChrisSfanos commented Jan 10, 2019

I'm working to publish Validate 1.19 now. I don't plan to publish Bootstrap 3.4 but will work on 4.2.1 tomorrow

@TheDestinyGroup

This comment has been minimized.

Copy link

TheDestinyGroup commented Jan 10, 2019

Chris,

Thanks for that.

Can you elaborate on why you won't be publishing Bootstrap 3.4 as it contains crucial security updates for Bootstrap 3.x users who are yet to update their sites to support Bootstrap 4.x?

I would appreciate if you could also add jquery.validate.unobtrusive 3.2.11 as the 3.2.x release is referenced by .net core project templates.

I updated my projects to use the cloudflare cdn links for now as they seem to keep up to date with new releases, but I would prefer to use the Ajax CDN links.

Les

@ChrisSfanos

This comment has been minimized.

Copy link
Contributor

ChrisSfanos commented Jan 15, 2019

Bootstrap 3.4.0 and 4.2.1 are now live
So I'm checking on .unobtrusive 3.2.11 and I only see the main file on GitHub and not the .min version?

@TheDestinyGroup

This comment has been minimized.

Copy link

TheDestinyGroup commented Jan 15, 2019

Chris,

Thanks for that.

I'm not sure where the other CDN providers got their version from.

The NuGet 3.2.11 package Microsoft provide for .Net 4.x projects doesn't include a minified version.

Les

@footed

This comment has been minimized.

Copy link

footed commented Jan 22, 2019

@footed reports (from #10133) ...

I use .net framework to build a webform website with ScriptManager and I set EnableCdn to true.
I find ScriptManager set the MicrosoftAjax.js to https://ajax.aspnetcdn.com/ajax/4.6/1/MicrosoftAjax.zh-Hant.js and the response code is 404 so the system come back to my website to get the MicrosoftAjax.zh-Hant.js and MicrosoftAjaxWebForms.zh-Hant.js
I also try to link MicrosoftAjax.js and MicrosoftAjaxWebForms.zh-Hant.js use another language like fr-Fr the response code is 404 same with zh-Hant.

@ChrisSfanos

Did somebody try to solve this issue?

@ChrisSfanos

This comment has been minimized.

Copy link
Contributor

ChrisSfanos commented Jan 23, 2019

Have we previously published language-specific versions of those files previously?

@scottaddie scottaddie transferred this issue from aspnet/AspNetCore.Docs Mar 25, 2019

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.