New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Microsoft Ajax Content Delivery Network (CDN) #5832

Open
Rick-Anderson opened this Issue Mar 29, 2018 · 49 comments

Comments

@Rick-Anderson
Contributor

Rick-Anderson commented Mar 29, 2018

Use this issue to report problems with the Microsoft Ajax Content Delivery Network

@Rick-Anderson Rick-Anderson added this to the Backlog milestone Mar 29, 2018

@Rick-Anderson Rick-Anderson changed the title from Microsoft Ajax Content Delivery Network to Microsoft Ajax Content Delivery Network (CDN) Mar 30, 2018

@denisyfrolov

This comment has been minimized.

denisyfrolov commented Apr 16, 2018

Looks like the CDN is pretty dead currently :-(

@ChrisSfanos

This comment has been minimized.

Contributor

ChrisSfanos commented Apr 16, 2018

Hey @denisyfrolov - I just hit https://docs.microsoft.com/en-us/aspnet/ajax/cdn/overview and also tried to download a jQuery file and both worked. Are you seeing something different?

@denisyfrolov

This comment has been minimized.

denisyfrolov commented Apr 16, 2018

@ChrisSfanos I am. ERR_CONNECTION_TIMED_OUT from my location (Russia). I'm receiving cs9.wpc.v0cdn.net host

@denisyfrolov

This comment has been minimized.

denisyfrolov commented Apr 16, 2018

Sh.., @ChrisSfanos Seems like the IP address was blocked here in Russia by government communication department http://blocklist.rkn.gov.ru/. I have no idea why they did it, but pretty similar they were blocking someone else and puted the address by mistake like just why not. Sort of...

sc1

sc2

@blowdart

This comment has been minimized.

Member

blowdart commented Apr 16, 2018

Oh dear. This is a CDN so it hosts more things than just the asp.net cdn, heck it could be part of the attempts to block Telegraph, I doubt there's anything we can do here unfortunately :(

And the IP does appear on what is reported to be a dump of blocked IPs that is reported to be what Russia is blocking (the accuracy of the list of course is up for debate).

@denisyfrolov

This comment has been minimized.

denisyfrolov commented Apr 16, 2018

@blowdart sounds catastrophically. Do you understand that the CDN is used by giant number of sites including Russian ones. And it's used by many of Microsoft's sites including the Azure Portal for instance.

@blowdart

This comment has been minimized.

Member

blowdart commented Apr 16, 2018

I do, but Russia controls their block list not us. We will talk to the CDN hosts, but if they are being blocked for other things they're caching then it's just going to be blocked again.

@ChrisSfanos can you open a support ticket please?

@denisyfrolov

This comment has been minimized.

denisyfrolov commented Apr 16, 2018

@blowdart I do understand you can't change the block list, but c'mon, you have to make something up with that, atleast a mirror or something like that. Otherwise there will be a really big problem to many of people and companies here in Russia. The RKN's blocking is pretty slow process for many of local ISPs but it will be global sooner or later.

@blowdart

This comment has been minimized.

Member

blowdart commented Apr 16, 2018

The CDN is the mirror. That's the point of it unfortunately. Spinning up a new site would mean you either change code to use a new host, or we redirect everyone to the mirror, which isn't sustainable in terms of traffic, which is why we offload to a CDN in the first place.

@Rick-Anderson

This comment has been minimized.

Contributor

Rick-Anderson commented Apr 16, 2018

@denisyfrolov per the CDN article:

Production applications should not take a hard dependency on CDN assets. Applications should test for the CDN asset referenced, and use a fallback asset when the CDN is not available.

@denisyfrolov

This comment has been minimized.

denisyfrolov commented Apr 16, 2018

@Rick-Anderson yeah, damn good idea. Who will tell this to the Azure Portal developers? I will not.

sc3

sc4

@denisyfrolov

This comment has been minimized.

denisyfrolov commented Apr 17, 2018

@Rick-Anderson Nope, I was wrong. Here is the winner:

sc7

@otryshko

This comment has been minimized.

otryshko commented Apr 17, 2018

@denisyfrolov what if tomorrow *.microsoft.com will be blocked (because why not?) More practical approach would be to use a VPN like Chinese do, no?

@denisyfrolov

This comment has been minimized.

denisyfrolov commented Apr 17, 2018

@otryshko well, probably it sounds like a plan.. in long term.. but how it is supposed to help to consumers now? Let's solve problems as they occur

@Rick-Anderson

This comment has been minimized.

Contributor

Rick-Anderson commented Apr 17, 2018

@denisyfrolov Thanks for the report. I opened a bug with the Azure folks.

@aspnet aspnet deleted a comment from denisyfrolov Apr 17, 2018

@aspnet aspnet deleted a comment from denisyfrolov Apr 17, 2018

@denisyfrolov

This comment has been minimized.

denisyfrolov commented Apr 17, 2018

@Rick-Anderson That's not about the Azure's sites only. Almost each of Microsoft's sites is absolutely unusable in Russia now, like: Docs, MSDN, Visual Studio, Office, Windows, Xbox, all of them and many others are almost dead now.

@Rick-Anderson

This comment has been minimized.

Contributor

Rick-Anderson commented Apr 17, 2018

@denisyfrolov I'm opening up bugs.

@davidebbo

This comment has been minimized.

davidebbo commented Apr 17, 2018

@denisyfrolov are you sure that it really affects everyone in Russia? I would think that this would make big news, and I'm not finding any mentions of it in the news or on Twitter.

@denisyfrolov

This comment has been minimized.

denisyfrolov commented Apr 17, 2018

@davidebbo oh yes I am, just check this #5832 (comment) out. All of RKN does in Internet affects everyone in Russia. It started at night.. Here is 5 am now in Moscow, people sleep yet. Also It depends on ISP, many of them do the blocking very slow. But from all over the country I'm receiving reports that Microsoft's sites are dying. It is not about Microsoft only, many of IP addresses of AWS and GCE are also blocked (have no idea why).

@denisyfrolov

This comment has been minimized.

@pronichkin

This comment has been minimized.

pronichkin commented Apr 17, 2018

@denisyfrolov "Almost each of Microsoft's sites is absolutely unusable in Russia now, like: Docs, MSDN, Visual Studio, Office, Windows, Xbox, all of them and many others are almost dead now."

For good or bad, I cannot confirm that, at least right now. (11 AM Moscow time.) All of the sites you mentioned are currently working for me. They are a bit slower then usual, but open successfully without noticeable errors. (Not using any VPN here of course.)

@ChALkeR

This comment has been minimized.

ChALkeR commented Apr 17, 2018

https://web.skype.com is also effectively blocked (html loads, js doesn't).

@tr3x33

This comment has been minimized.

tr3x33 commented Apr 17, 2018

@phpony ye, thanks, that's particular URL for jquery-3.3.1.js doesn't work for me as well, but still, for now I don't see how it affects the mentioned MS websites

@phpony

This comment has been minimized.

phpony commented Apr 17, 2018

@tr3x33 well, you know, Microsoft for some unknown reason is using their own CDN on their sites. And as for now when CDN is blocked those sites are not working as intended. And some of them are completely broken:

web.skype.com

@Pzixel

This comment has been minimized.

Pzixel commented Apr 17, 2018

This is an official governement site where you can check if site is blocked: https://blocklist.rkn.gov.ru

And it clearly says that at least some addresses are blocked:
image

It's listed in blacklist thus it's blocked, and it doesn't matter if you have an access to it right now, it may be just internet provider lag which didn't block it yet.

Use google translait for the page if neccessary.

@lemenkov

This comment has been minimized.

lemenkov commented Apr 17, 2018

This should be closed as "CLOSED, CHANGEYOURGOVERNMENT"

@Pzixel

This comment has been minimized.

Pzixel commented Apr 17, 2018

@lemenkov sad but true. They already have blocked 16 million addresses, mostly Amazon AWS and Google cloud.

18.184.0.0/15
18.194.0.0/15
18.196.0.0/15
35.156.0.0/14
35.184.0.0/13
35.192.0.0/12
52.58.0.0/15
54.228.0.0/15
...
@lemenkov

This comment has been minimized.

lemenkov commented Apr 17, 2018

@Pzixel some people just want to watch the world burn :)

I'm sure this is not the end yet. Hold tight! :)

@ghost

This comment has been minimized.

ghost commented Apr 17, 2018

currently not reachable from Germany too?
I get timeouts for https://ajax.aspnetcdn.com/ajax/3.5/MicrosoftAjax.js and jQuery within MS-Sites

Cheers,
Björn

@ChrisSfanos

This comment has been minimized.

Contributor

ChrisSfanos commented Apr 17, 2018

We are hearing reports of this from Europe. We've asked Azure/Verizon to investigate

@Mekanik

This comment has been minimized.

Mekanik commented Apr 17, 2018

Azure App-insight availability test start failing for all Europe regions because of CDN Unable to connect to the remote server. Started approximately 2 hours ago.
image

@phpony

This comment has been minimized.

phpony commented Apr 17, 2018

To the good news - CDN is now resolving to 93.184.221.201 instead of 93.184.221.200 and is available for me.

@denisyfrolov

This comment has been minimized.

denisyfrolov commented Apr 18, 2018

Confirm. The CDN is working now for me too.

@Vertigo093i

This comment has been minimized.

Vertigo093i commented Apr 23, 2018

93.184.221.201 is already blocked too. And even next IP address 152.199.20.1 is blocked as of today.
https://reestr.rublacklist.net/rec/349558/

@denisyfrolov

This comment has been minimized.

denisyfrolov commented Apr 23, 2018

The CDN is blocked again.

@ChALkeR

This comment has been minimized.

ChALkeR commented Apr 23, 2018

https://github.com/ChALkeR/fuckrkn-dnsmasq/blob/master/fuckrkn.conf — this kinda fixes it for me locally (for now).

@hjalalisharepoint2013

This comment has been minimized.

hjalalisharepoint2013 commented May 7, 2018

Please consider updating https://ajax.aspnetcdn.com/ajax/mvc/3.0/jquery.unobtrusive-ajax.js, Its still looking for live function in jquery!
Uncaught TypeError: a(...).live is not a function at jquery.unobtrusive-ajax.min.js:5

Had to use: https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.8.3.min.js

@Pzixel

This comment has been minimized.

Pzixel commented May 7, 2018

@hjalalisharepoint2013 yep, it's definitely looks like a bug, this page is trying to download jquery in year 2018.

@rachelappel rachelappel removed their assignment Jul 5, 2018

@JustCallMeAD

This comment has been minimized.

JustCallMeAD commented Jul 11, 2018

Unfortunately I tried emailing a request to "AjaxCDNSubmission@microsoft.com" but my message did not go though.. Not sure why it is advertised on a public page if it does not work - https://docs.microsoft.com/en-us/aspnet/ajax/cdn/overview

Your message to AjaxCDNSubmission@microsoft.com couldn't be delivered.
The group AjaxCDNSubmission only accepts messages from people in its organization or on its allowed senders list, and your email address isn't on the list.

Can someone please allow "AjaxCDNSubmission@microsoft.com" to accept emails from the public & also please look into my request below. Thanks :)

Please add another CDN link for Bootstrap 4 (bootstrap.bundle.js).

To ensure that the new asp.net templates are able to use Bootstrap 4 properly can you please add another CDN link to "bootstrap.bundle.js" (this includes both bootstrap.js & popper.js in 1 js file).

Please note that popper.js it is now a requirement of Bootstrap 4 & is used in Dropdowns & Tooltips.

See the links below for more information:
https://www.bootstrapcdn.com/
https://getbootstrap.com/docs/4.1/getting-started/introduction/#js
https://getbootstrap.com/docs/4.1/getting-started/download/#bootstrapcdn
https://getbootstrap.com/docs/4.1/getting-started/contents/

Please also see github issues below:
aspnet/AspNetCore#3290
aspnet/Templating#601

@Rick-Anderson Rick-Anderson modified the milestones: Backlog, Discussions Jul 24, 2018

@klabranche

This comment has been minimized.

klabranche commented Aug 17, 2018

Bootstrap 4.1.1 has an xss vuln in it. https://snyk.io/vuln/npm:bootstrap:20180529 Any idea of when 4.1.2 or 4.1.3 will be available in the CDN?

@ChALkeR

This comment has been minimized.

ChALkeR commented Aug 17, 2018

@klabranche that's not an exploit, it's a vulnerability.

@klabranche

This comment has been minimized.

klabranche commented Aug 17, 2018

@ChALkeR - yes, slip of the keyboard. :-) updated my comment to reflect.

@vanillajonathan

This comment has been minimized.

Contributor

vanillajonathan commented Sep 9, 2018

It would be good if subresource integrity (SRI) hashes for each file were listed on the webpage.

@nj

This comment has been minimized.

nj commented Sep 11, 2018

@hjalalisharepoint2013 Hope you have switched to newer MVC version, either v4 or v5, instead of running that rather old version 😉

@klabranche You could use the one from Bootstrap in the meantime, so you get it directly. But yeah, oddly enought not updated yet though 2 months have passed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment