cdnjs.com unavailable from China #1922

Closed
evanp opened this Issue Sep 26, 2013 · 10 comments

Projects

None yet

7 participants

@evanp
Contributor
evanp commented Sep 26, 2013

I had a user complain that functionality was seriously hampered because our JS files were missing; see pump-io/pump.io#837 .

I'm not sure if it's a Great Firewall issue or not; this tool shows that the files are available:

http://www.viewdns.info/chinesefirewall/?domain=https%3A%2F%2Fcdnjs.cloudflare.com%2Fajax%2Flibs%2Ftwitter-bootstrap%2F2.3.2%2Fcss%2Fbootstrap.min.css

But I thought I'd bring it up here.

@thomasdavis
Member

Thanks @evanp, saw your other thread. I will send an email out to the team to conduct some research and find solutions.

@petecooper
Contributor

@evanp - bit of a long shot, but are you still encountering this problem? Issue #2485 was having a similar problem, but appears to be resolved. Any further comments from users?

@szimek
Contributor
szimek commented Apr 18, 2014

I've just got a ticket with exactly the same issue - cowbell/sharedrop#22. According to this site suggested in the ticket, everything on cdnjs.cloudflare.com is blocked.

@watermelonjuice

https to cdnjs is blocked.
https to googleapis is blocked. at times http can also be blocked if the user triggers the 90 second Google block.

-_-

telnet cdnjs.cloudflare.com 443
Trying 198.41.212.185...
Trying 198.41.213.183...
Trying 198.41.213.185...
Trying 198.41.212.183...
Trying 198.41.213.184...
Trying 198.41.213.186...
Trying 198.41.212.186...
Trying 198.41.212.184...
Trying 2400:cb00:2048:1::c629:d5b9...
Trying 2400:cb00:2048:1::c629:d5b7...
Trying 2400:cb00:2048:1::c629:d4b8...
Trying 2400:cb00:2048:1::c629:d4b9...
Trying 2400:cb00:2048:1::c629:d4ba...
Trying 2400:cb00:2048:1::c629:d4b7...
Trying 2400:cb00:2048:1::c629:d5b8...
Trying 2400:cb00:2048:1::c629:d5ba...
telnet: Unable to connect to remote host: Network is unreachable

Ironically...
telnet cdn.jsdelivr.net 443
Trying 190.93.246.228...
Connected to cdn.jsdelivr.net.cdn.cloudflare.net.

Solution is for cloudflare to rotate cdnjs to new IPs and ONLY use these IPs for cdnjs. What probably happened is some content that China wanted to censored was detected on the cdnjs IPs and all https connections have since been blocked.

@watermelonjuice

Any comment?

@watermelonjuice

Moving to new issue #3179

@terinjokes
Contributor

China occasionally blocks HTTPS and HTTP to CDNJS and other sites, as noted above. Unfortunately, that policy is outside the scope of this project.

@terinjokes terinjokes closed this May 20, 2014
@thomasdavis thomasdavis reopened this May 20, 2014
@thomasdavis
Member

We will keep the issue open until we have documented the error properly. Also as referenced in this issue BroadleafCommerce/BroadleafCommerce#871, jsdelivrs Cloudflare IP's are not being blocked.

@watermelonjuice

Currently the block is only being applied to https access to cdnjs IPs and not to the jsdelivr IPs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment