Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Microsoft Ajax Content Delivery Network (CDN) #116

Open
Rick-Anderson opened this issue Mar 29, 2018 · 69 comments
Open

Microsoft Ajax Content Delivery Network (CDN) #116

Rick-Anderson opened this issue Mar 29, 2018 · 69 comments
Assignees
Milestone

Comments

@Rick-Anderson
Copy link
Contributor

Rick-Anderson commented Mar 29, 2018

Use this issue to report problems with the Microsoft Ajax Content Delivery Network

@Rick-Anderson Rick-Anderson changed the title Microsoft Ajax Content Delivery Network Microsoft Ajax Content Delivery Network (CDN) Mar 30, 2018
@denisyfrolov
Copy link

denisyfrolov commented Apr 16, 2018

Looks like the CDN is pretty dead currently :-(

@ChrisSfanos
Copy link
Member

ChrisSfanos commented Apr 16, 2018

Hey @denisyfrolov - I just hit https://docs.microsoft.com/en-us/aspnet/ajax/cdn/overview and also tried to download a jQuery file and both worked. Are you seeing something different?

@denisyfrolov
Copy link

denisyfrolov commented Apr 16, 2018

@ChrisSfanos I am. ERR_CONNECTION_TIMED_OUT from my location (Russia). I'm receiving cs9.wpc.v0cdn.net host

@denisyfrolov
Copy link

denisyfrolov commented Apr 16, 2018

Sh.., @ChrisSfanos Seems like the IP address was blocked here in Russia by government communication department http://blocklist.rkn.gov.ru/. I have no idea why they did it, but pretty similar they were blocking someone else and puted the address by mistake like just why not. Sort of...

sc1

sc2

@blowdart
Copy link
Contributor

blowdart commented Apr 16, 2018

Oh dear. This is a CDN so it hosts more things than just the asp.net cdn, heck it could be part of the attempts to block Telegraph, I doubt there's anything we can do here unfortunately :(

And the IP does appear on what is reported to be a dump of blocked IPs that is reported to be what Russia is blocking (the accuracy of the list of course is up for debate).

@denisyfrolov
Copy link

denisyfrolov commented Apr 16, 2018

@blowdart sounds catastrophically. Do you understand that the CDN is used by giant number of sites including Russian ones. And it's used by many of Microsoft's sites including the Azure Portal for instance.

@blowdart
Copy link
Contributor

blowdart commented Apr 16, 2018

I do, but Russia controls their block list not us. We will talk to the CDN hosts, but if they are being blocked for other things they're caching then it's just going to be blocked again.

@ChrisSfanos can you open a support ticket please?

@denisyfrolov
Copy link

denisyfrolov commented Apr 16, 2018

@blowdart I do understand you can't change the block list, but c'mon, you have to make something up with that, atleast a mirror or something like that. Otherwise there will be a really big problem to many of people and companies here in Russia. The RKN's blocking is pretty slow process for many of local ISPs but it will be global sooner or later.

@blowdart
Copy link
Contributor

blowdart commented Apr 16, 2018

The CDN is the mirror. That's the point of it unfortunately. Spinning up a new site would mean you either change code to use a new host, or we redirect everyone to the mirror, which isn't sustainable in terms of traffic, which is why we offload to a CDN in the first place.

@Rick-Anderson
Copy link
Contributor Author

Rick-Anderson commented Apr 16, 2018

@denisyfrolov per the CDN article:

Production applications should not take a hard dependency on CDN assets. Applications should test for the CDN asset referenced, and use a fallback asset when the CDN is not available.

@denisyfrolov
Copy link

denisyfrolov commented Apr 16, 2018

@Rick-Anderson yeah, damn good idea. Who will tell this to the Azure Portal developers? I will not.

sc3

sc4

@denisyfrolov
Copy link

denisyfrolov commented Apr 17, 2018

@Rick-Anderson Nope, I was wrong. Here is the winner:

sc7

@otryshko
Copy link

otryshko commented Apr 17, 2018

@denisyfrolov what if tomorrow *.microsoft.com will be blocked (because why not?) More practical approach would be to use a VPN like Chinese do, no?

@denisyfrolov
Copy link

denisyfrolov commented Apr 17, 2018

@otryshko well, probably it sounds like a plan.. in long term.. but how it is supposed to help to consumers now? Let's solve problems as they occur

@Rick-Anderson
Copy link
Contributor Author

Rick-Anderson commented Apr 17, 2018

@denisyfrolov Thanks for the report. I opened a bug with the Azure folks.

@dotnet dotnet deleted a comment from denisyfrolov Apr 17, 2018
@dotnet dotnet deleted a comment from denisyfrolov Apr 17, 2018
@denisyfrolov
Copy link

denisyfrolov commented Apr 17, 2018

@Rick-Anderson That's not about the Azure's sites only. Almost each of Microsoft's sites is absolutely unusable in Russia now, like: Docs, MSDN, Visual Studio, Office, Windows, Xbox, all of them and many others are almost dead now.

@Rick-Anderson
Copy link
Contributor Author

Rick-Anderson commented Apr 17, 2018

@denisyfrolov I'm opening up bugs.

@davidebbo
Copy link

davidebbo commented Apr 17, 2018

@denisyfrolov are you sure that it really affects everyone in Russia? I would think that this would make big news, and I'm not finding any mentions of it in the news or on Twitter.

@denisyfrolov
Copy link

denisyfrolov commented Apr 17, 2018

@davidebbo oh yes I am, just check this https://github.com/aspnet/Docs/issues/5832#issuecomment-381762457 out. All of RKN does in Internet affects everyone in Russia. It started at night.. Here is 5 am now in Moscow, people sleep yet. Also It depends on ISP, many of them do the blocking very slow. But from all over the country I'm receiving reports that Microsoft's sites are dying. It is not about Microsoft only, many of IP addresses of AWS and GCE are also blocked (have no idea why).

@denisyfrolov
Copy link

denisyfrolov commented Apr 17, 2018

@pronichkin
Copy link

pronichkin commented Apr 17, 2018

@denisyfrolov "Almost each of Microsoft's sites is absolutely unusable in Russia now, like: Docs, MSDN, Visual Studio, Office, Windows, Xbox, all of them and many others are almost dead now."

For good or bad, I cannot confirm that, at least right now. (11 AM Moscow time.) All of the sites you mentioned are currently working for me. They are a bit slower then usual, but open successfully without noticeable errors. (Not using any VPN here of course.)

@tr3x33
Copy link

tr3x33 commented Apr 17, 2018

@denisyfrolov

I was not able to reproduce the mentioned issue.

Docs, MSDN, Visual Studio, Office, Windows, Xbox

I checked every from this list and all of them fine, moreover, I used Azure Portal earlier today without any issues. I'm located in Russia as well.

So is there a chance to reproduce it somehow?

@phpony
Copy link

phpony commented Apr 17, 2018

@tr3x33 it's easy to check. Just try downloading https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.3.1.js

It's blocked for me right now (Rostelecom, Rostov-on-Don).

This site can’t be reached: ajax.aspnetcdn.com took too long to respond.
ERR_CONNECTION_TIMED_OUT

$ wget https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.3.1.js
--2018-04-17 11:15:49-- https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.3.1.js
Resolving ajax.aspnetcdn.com (ajax.aspnetcdn.com)... 93.184.221.200
Connecting to ajax.aspnetcdn.com (ajax.aspnetcdn.com)|93.184.221.200|:443... failed: Connection timed out.

@JustCallMeAD
Copy link

JustCallMeAD commented Jul 11, 2018

Unfortunately I tried emailing a request to "AjaxCDNSubmission@microsoft.com" but my message did not go though.. Not sure why it is advertised on a public page if it does not work - https://docs.microsoft.com/en-us/aspnet/ajax/cdn/overview

Your message to AjaxCDNSubmission@microsoft.com couldn't be delivered.
The group AjaxCDNSubmission only accepts messages from people in its organization or on its allowed senders list, and your email address isn't on the list.

Can someone please allow "AjaxCDNSubmission@microsoft.com" to accept emails from the public & also please look into my request below. Thanks :)

Please add another CDN link for Bootstrap 4 (bootstrap.bundle.js).

To ensure that the new asp.net templates are able to use Bootstrap 4 properly can you please add another CDN link to "bootstrap.bundle.js" (this includes both bootstrap.js & popper.js in 1 js file).

Please note that popper.js it is now a requirement of Bootstrap 4 & is used in Dropdowns & Tooltips.

See the links below for more information:
https://www.bootstrapcdn.com/
https://getbootstrap.com/docs/4.1/getting-started/introduction/#js
https://getbootstrap.com/docs/4.1/getting-started/download/#bootstrapcdn
https://getbootstrap.com/docs/4.1/getting-started/contents/

Please also see github issues below:
dotnet/aspnetcore#3290
aspnet/Templating#601

@klabranche
Copy link

klabranche commented Aug 17, 2018

Bootstrap 4.1.1 has an xss vuln in it. https://snyk.io/vuln/npm:bootstrap:20180529 Any idea of when 4.1.2 or 4.1.3 will be available in the CDN?

@ChALkeR
Copy link

ChALkeR commented Aug 17, 2018

@klabranche that's not an exploit, it's a vulnerability.

@klabranche
Copy link

klabranche commented Aug 17, 2018

@ChALkeR - yes, slip of the keyboard. :-) updated my comment to reflect.

@vanillajonathan
Copy link
Contributor

vanillajonathan commented Sep 9, 2018

It would be good if subresource integrity (SRI) hashes for each file were listed on the webpage.

@nj
Copy link

nj commented Sep 11, 2018

@hjalalisharepoint2013 Hope you have switched to newer MVC version, either v4 or v5, instead of running that rather old version 😉

@klabranche You could use the one from Bootstrap in the meantime, so you get it directly. But yeah, oddly enought not updated yet though 2 months have passed.

@guardrex
Copy link
Contributor

guardrex commented Dec 29, 2018

@footed reports (from dotnet/AspNetCore.Docs#10133) ...

I use .net framework to build a webform website with ScriptManager and I set EnableCdn to true.
I find ScriptManager set the MicrosoftAjax.js to https://ajax.aspnetcdn.com/ajax/4.6/1/MicrosoftAjax.zh-Hant.js and the response code is 404 so the system come back to my website to get the MicrosoftAjax.zh-Hant.js and MicrosoftAjaxWebForms.zh-Hant.js
I also try to link MicrosoftAjax.js and MicrosoftAjaxWebForms.zh-Hant.js use another language like fr-Fr the response code is 404 same with zh-Hant.

@ChrisSfanos

@TheDestinyGroup
Copy link

TheDestinyGroup commented Jan 7, 2019

Hi,

Can you advise when you might add jQuery.Validate 1.19.0, Bootstrap 3.4 and Bootstrap 4.2.x to the CDN?

Les

@ChrisSfanos
Copy link
Member

ChrisSfanos commented Jan 10, 2019

I'm working to publish Validate 1.19 now. I don't plan to publish Bootstrap 3.4 but will work on 4.2.1 tomorrow

@TheDestinyGroup
Copy link

TheDestinyGroup commented Jan 10, 2019

Chris,

Thanks for that.

Can you elaborate on why you won't be publishing Bootstrap 3.4 as it contains crucial security updates for Bootstrap 3.x users who are yet to update their sites to support Bootstrap 4.x?

I would appreciate if you could also add jquery.validate.unobtrusive 3.2.11 as the 3.2.x release is referenced by .net core project templates.

I updated my projects to use the cloudflare cdn links for now as they seem to keep up to date with new releases, but I would prefer to use the Ajax CDN links.

Les

@ChrisSfanos
Copy link
Member

ChrisSfanos commented Jan 15, 2019

Bootstrap 3.4.0 and 4.2.1 are now live
So I'm checking on .unobtrusive 3.2.11 and I only see the main file on GitHub and not the .min version?

@TheDestinyGroup
Copy link

TheDestinyGroup commented Jan 15, 2019

Chris,

Thanks for that.

I'm not sure where the other CDN providers got their version from.

The NuGet 3.2.11 package Microsoft provide for .Net 4.x projects doesn't include a minified version.

Les

@footed
Copy link

footed commented Jan 22, 2019

@footed reports (from #10133) ...

I use .net framework to build a webform website with ScriptManager and I set EnableCdn to true.
I find ScriptManager set the MicrosoftAjax.js to https://ajax.aspnetcdn.com/ajax/4.6/1/MicrosoftAjax.zh-Hant.js and the response code is 404 so the system come back to my website to get the MicrosoftAjax.zh-Hant.js and MicrosoftAjaxWebForms.zh-Hant.js
I also try to link MicrosoftAjax.js and MicrosoftAjaxWebForms.zh-Hant.js use another language like fr-Fr the response code is 404 same with zh-Hant.

@ChrisSfanos

Did somebody try to solve this issue?

@ChrisSfanos
Copy link
Member

ChrisSfanos commented Jan 23, 2019

Have we previously published language-specific versions of those files previously?

@scottaddie scottaddie transferred this issue from dotnet/AspNetCore.Docs Mar 25, 2019
@footed
Copy link

footed commented Jul 31, 2019

Have we previously published language-specific versions of those files previously?

Hi, it was six months ago issue but this problem is still have. Do you have any schedule to solve this issue?

@mcandre
Copy link

mcandre commented Aug 13, 2019

Hey, thank you for providing a CDN for accelerating our Web applications!

Could we please add Popper and Tippy to the list? These frameworks are not currently hosted on very many CDN's, yet they are often used by Bootstrap applications in order to provide a reliable, cross-browser user experience with tooltips.

https://popper.js.org

https://atomiks.github.io/tippyjs/

@Rick-Anderson Rick-Anderson added this to the Discussion milestone Oct 9, 2019
@vanillajonathan
Copy link
Contributor

vanillajonathan commented Dec 12, 2019

Could Microsoft's Monaco editor be added to the CDN?

Cross-reference: microsoft/monaco-editor#583

@ikomwrestling
Copy link

ikomwrestling commented May 17, 2020

ajax.aspnetcdn.com lacks IPv6 addresses and thus resources (JavaScript) from it can't be received using IPv6.

Since the CDN seems to be served by Edgecast, which has great IPv6 support, it should hopefully be a simple fix by asking Edgecast support to enable IPv6.

Thank you.

@Rigo-Villalta
Copy link

Rigo-Villalta commented Feb 1, 2021

Hi. Thanks for this wonderful contribution to the developer's community.
Will you add Bootstrap 4.6 in the next days?
With the quantity of bugs that it fixes I think is a very important update.

Thank you

@stalsma-palmetto
Copy link

stalsma-palmetto commented Jun 23, 2021

Will Bootstrap 5.0 and 5.0.1 be added anytime soon?

@ikellenberger
Copy link

ikellenberger commented Jul 8, 2021

MS Partner Center currently can hardly be used as the MS CDNs seems to be down(?):
grafik

I guess they should follow the guidelines at: https://docs.microsoft.com/en-us/aspnet/ajax/cdn/overview
"Production applications should not take a hard dependency on CDN assets. Applications should test for the CDN asset referenced, and use a fallback asset when the CDN is not available." ;-\

@Twoleeland
Copy link

Twoleeland commented Jul 8, 2021

MS Partner Center currently can hardly be used as the MS CDNs seems to be down(?):
grafik

I guess they should follow the guidelines at: https://docs.microsoft.com/en-us/aspnet/ajax/cdn/overview
"Production applications should not take a hard dependency on CDN assets. Applications should test for the CDN asset referenced, and use a fallback asset when the CDN is not available." ;-\

We use ASP.NET WebForms with ScriptManager and have same problems, although locale files are registered as fallbacks.
The funny thing is: using a mobile phone, it loads the same pages faster... really courious.

@peaemaye
Copy link

peaemaye commented Sep 9, 2021

Using a ScriptManager tag in a webforms site with the EnableCdn option set to true and the EnablePartialRendering set to true returns the MicrosoftAjaxWebForms.js file without gzip compresson:

<asp:ScriptManager runat="server" ID="asmMain" EnableCdn="true" EnableCdnFallback="true" EnablePartialRendering="true" />

https://ajax.aspnetcdn.com/ajax/4.6/1/MicrosoftAjaxWebForms.js (not compressed)

Is it possible for this to be served with gzip compression like the other .NET js files?

MicrosoftAjaxWebForms

@behroozbc
Copy link

behroozbc commented Dec 18, 2021

hi
can add bootstrap v5 ?

@hkelley
Copy link

hkelley commented Jul 7, 2022

We need to include IPs for ajax.aspnetcdn.com in firewall/threat feed safe lists, e.g. https://github.com/MISP/misp-warninglists. Is this information already published somewhere?

@alvipeo
Copy link

alvipeo commented Jul 28, 2022

Microsoft Azure AD B2C log in page is dependent on https://ajax.aspnetcdn.com/ajax/bootstrap/3.3.5/css/bootstrap.min.css, and it's not accessible from Russia (at least). This makes AD B2C log in page completely unusable (the Sign In button is not visible!), thus all the B2C auth benefits :(

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests