2024-02-14-001
- status: current
Web Connectivity (web_connectivity)
-
An internet connection;
-
The ability to reach the Web Connectivity test helper (TH).
Ability to detect if the websites being tested are reachable and if not what are some of the reasons for them not being reachable.
In OONI Probe CLI, you typically run Web Connectivity without any input as follows:
ooniprobe run websiteswhich is equivalent to running the corresponding "websites" group in the Android, iOS, and Desktop OONI Probe applications.
When you run Web Connectivity like this, it connects to the OONI backend before the beginning of the experiment and fetches the list of URLs to be tested. In such a case, you're getting a list of URLs based on the citizenlab/test-lists repository that depend on your contry code, network, and URL prioritization algorithms.
It is also possible for you to manually specify which URLs to test from the command line:
ooniprobe run websites --input https://www.example.com/It is also possible for you to create a file containing one line for each URL, e.g.:
https://example.com/
https://example.it/path/
https://example.fr/a/longer/path/
https://example.org/
https://93.184.216.34/
https://[2606:2800:220:1:248:1893:25c8:1946]:443/
and run it as follows:
ooniprobe run websites --input-file FILE_NAME.txtURLs may contain IP addresses rather than domain names. IPv6 addresses should be quoted using [
and ] when there's a need to also specify a port (as illustrated above).
When using the miniooni research client, you run Web Connectivity as follows:
miniooni web_connectivityYou measure a specific URL as follows:
miniooni web_connectivity --input https://www.example.com/You measure a list of URLs as follows:
miniooni web_connectivity --input-file INPUT_FILE.txtSince we first specified this test, its implementation has changed significantly to improve our censorship detection capabilities. We will first describe the "classic" algorithm implemented by Web Connectivity and then proceed to explain extensions designed to collect additional information useful to characterize censorship. After that, we specify how OONI Probe should process Web Connectivity results, to determine whether the URL is accessible or there's blocking in place. (Note that the OONI backend is better positioned to determine blocking and accessibility given that it can cross compare measurements and apply fingerprints.)
As a preliminary step, Web Connectivity performs an IPv4 resolver lookup step. We
query for whoami.v4.powerdns.org using the system resolver and we record the resolved
address in the client_resolver test key. Because modern OONI Probe implementations
perform this step by default for all experiments, modern implementations of
Web Connectivity read the client_resolver from the measurement session.
After that, there are two steps: the "connectivity" step and the "web" step.
The objectives of this step are the following:
-
to discover IP addresses for the domain in the input URL using a specific resolver (typically, the "system" resolver using
getaddrinfoon Unix, so that we end up using the DNS resolver configured on the system); -
to query the Web Connectivity test helper (TH) providing to it the URL to measure as well as the resolved IP addresses, such that we can have control information to which to compare our measurement;
-
to establish TCP connections to all the endpoints constructed by appending the scheme's port (
80forhttpand443fortcp) or the custom port specified in the URL; -
optionally, to establish TLS connections to all these endpoints.
We call this step the "connectivity" step because it determines whether we're able to establish TCP/TLS connections with the IP addresses associated with the domain inside the URL. When the URL does not contain a domain but rather contains an IP address, the first step of the algorithm just returns the IP address itself and we're using the address to validate the TLS certificate.
The following diagram illustrates the set of operations performed by the
classic algorithm for http:// like URLs:
stateDiagram-v2
state "depth=0, URL=http://www.example.com/" as S0
state "getaddrinfo('www.example.com')" as S1
[*] --> S0
S0 --> S1
state S2 <<fork>>
S1 --> S2
state "connect('93.184.216.34:443')" as S3
state "connect('93.184.216.33:443')" as S4
S2 --> S3
S2 --> S4
state "call_test_helper_api\naddrs = ['93.184.216.34', '93.184.216.33']\nurl = 'http://example.com/'" as S5
S2 --> S5
state S6 <<join>>
S3 --> S6
S4 --> S6
S5 --> S6
S6 --> [*]
The two small black squares in the diagram represent, respectively, starting several operations in parallel and awaiting for these operations to complete. We set specific timeouts for each parallel operation.
Instead, the following diagram illustrates what happens for https:// like URLs:
stateDiagram-v2
state "depth=0, URL=https://www.example.com/" as S0
state "getaddrinfo('www.example.com')" as S1
[*] --> S0
S0 --> S1
state S2 <<fork>>
S1 -->S2
state "connect('93.184.216.34:443')" as S3
state "connect('93.184.216.33:443')" as S4
S2 --> S3
S2 --> S4
state "tls_handshake('example.com')" as S5
state "tls_handshake('example.com')" as S6
S3 --> S5
S4 --> S6
state "call_test_helper_api\naddrs = ['93.184.216.34', '93.184.216.33']\nurl = 'https://example.com/'" as S7
S2 --> S7
state S8 <<join>>
S5 --> S8
S6 --> S8
S7 --> S8
S8 --> [*]
When the getaddrinfo lookup fails, the algorithm still invokes the test helper
and passes an empty array of discovered IP addresses. Historically, Web Connectivity
does not use IP addresses returned by the test helper to measure connectivity, but
modern versions do that as an extension to the classic algorithm.
Web Connectivity constructs an HTTP client configured to honour cookies and to follow redirects, and uses such a client to fetch the webpage associated with the input URL. Historically, Web Connectivity does not reuse the connections established during the connectivity step to GET the provided URL, but modern versions do that as an extension, to avoid the need to re-establish new connections from scratch. We call this step the "web" step because its goal is to fetch a webpage for the input URL.
The connectivity step collects these information:
-
df-002-dns.mdinformation (stored inside thequeriestest key) when performing the DNS lookup. Note that, when the URL already contains an IP address, Web Connectivity MAY fake a DNS lookup, however, this behavior is NOT RECOMMENDED because it could possibly lead to confusion when looking at the data. -
df-005-tcpconnect.mdinformation (stored insidetcp_connect) and with thetcptls_handshaketag set. This information pertains to all the TCP connect operations performed during the connectivity step. -
df-006-tlshandshake.mdinformation (stored insidetls_handshakes) and with thetcptls_handshaketag set. This information pertains to all the TLS handshake operations performed during the connectivity step. -
df-008-netevents.mdinformation (stored insidenetwork_events) and with thetcptls_handshaketag set. This information pertains to all the socket I/O operations performed during the TLS handshakes of the connectivity step and could be used by the OONI backend to detect throttling.
The web step collects these information:
df-001-http.mdinformation (stored inside therequeststest key). This information pertains to the HTTP requests performed during the web step and MUST be sorted in time-reverse order. That is, in case of redirects, the last request in the list is the 0-th redirect, the penultimate request is the 1-th redirect, and so on, until we reach the final response.
If Web Connectivity uses extensions, data collected by the classic algorithm
MUST have the classic tag set, to distinguish it from ancillary data we
collect. Additionally, Web Connectivity SHOULD use the depth=N tag for
each collected event, to map each piece of collected data to the proper
redirect depth. Additionally, Web Connectivity SHOULD use the transaction_id
field defined by all the relevant data formats such that:
-
each DNS lookup (including the ones performed as part of extensions) SHOULD be on its own
transaction_id. -
Each operation using the same TCP endpoint as part of the same redirect depth SHOULD also be assigned its own
transaction_id. That is, a TCP connect to, say,1.2.3.4:443/tcpSHOULD have the sametransaction_idof the corresponding TLS handshakes, network events, and requests.
When Web Connectivity performs additional measurements (e.g., extra TLS
handshakes to validate IP addresses), it SHOULD use the fetch_body=bool
tag such that:
-
all the operations whose objective is to possibly fetch a response body according to the classic algorithm have
fetch_body=true(e.g., all the TLS handshakes related to the inputhttps://like URL); -
all the other operations (e.g., the ones to verify whether IP addresses are valid for the domain) have
fetch_body=false(e.g., the extra TLS handshakes performed when the URL ishttp://like).
Having discussed the main algorithm, let us now discuss extensions.
When the input URL has the http scheme, Web Connectivity additionally
performs TLS handshakes with the corresponding 443/tcp endpoints to
gather data useful to determine whether the resolved IP addresses are valid
for the domain. A successful TLS handhsake, in fact, tells us that the
resolved IP addresses are valid for the domain.
Web Connectivity MUST NOT perform these checks when the input URL is
http:// and an explicit port has been specified.
Rather than using an HTTP client to fetch a webpage, Web Connectivity follows this algorithm:
-
at the end of the connectivity step, choose one endpoint that we could successfully establish a connection to and issue a GET request using such an endpoint, collecting
df-001-http.mddata as well as I/O data according todf-008-netevents.md; -
parse the HTTP response and, in case of
302,303,307, and308redirects, prepare for measuring the URL included into theLocationmaking sure we also record and honour the cookies; -
follow the redirect by performing a connectivity step for the redirect URL, then perform the first step of this algorithm with one of the connections that we could successfully establish except that we do not issue a TH request in this case (motivation: the current TH protocol cannot accommodate for that and we would create excessive TH load if we did that);
-
stop with an error after ten redirects.
To illustrate the overall algorithm, the following diagram shows what it would do in
case we're measuring https://www.example.com/ that redirects to http://blocked.com:
stateDiagram-v2
state "depth=0, URL=https://www.example.com" as S0
state "getaddrinfo('www.example.com')" as S1
[*] --> S0
S0 --> S1
state S2 <<fork>>
S1 -->S2
state "connect('93.184.216.34:443')" as S3
state "connect('93.184.216.33:443')" as S4
S2 --> S3
S2 --> S4
state "tls_handshake('example.com')" as S5
state "tls_handshake('example.com')" as S6
S3 --> S5
S4 --> S6
state "call_test_helper_api\naddrs = ['93.184.216.34', '93.184.216.33']\nurl = 'https://www.example.com/'" as S7
S2 --> S7
state S8 <<join>>
S5 --> S8
S6 --> S8
S7 --> S8
state "Pick one established connection" as S9
S8 --> S9
state "GET / with 93.184.216.33:443" as S10
S9 --> S10
state "depth=1, URL=https://blocked.com" as S11
S10 --> S11
state "getaddrinfo('blocked.com')" as S12
S11 --> S12
state S13 <<fork>>
S12 --> S13
state "connect('192.124.249.15:443')" as S14
state "connect('192.124.248.15:443')" as S15
S13 --> S14
S13 --> S15
state "tls_handshake('blocked.com')" as S16
state "tls_handshake('blocked.com')" as S17
S14 --> S16
S15 --> S17
state S18 <<join>>
S16 --> S18
S17 --> S18
state "Pick one established connection" as S19
S18 --> S19
state "GET / with 192.125.249.15:443" as S20
S19 --> S20
S20 --> [*]
When using this algorithm, the implementation MUST correctly set the
depth=N tag. By using this algorithm, we get extra visibility of
what happens in the network while following redirects. Hence, we can
more precisely figure out the reason for blocking.
Whenever it performs a DNS lookup, Web Connectivity runs a secondary
lookup using a DNS-over-UDP resolver using a well-known endpoint (e.g.,
8.8.8.8:53). Web Connectivity saves the results of this lookup inside the
queries test key. The results collected by this resolver MUST NOT set
the classic tag, given that this is an extension.
Web Connectivity SHOULD try to prioritize IP addresses resolved by the system resolver but MAY use IP addresses used by this extra resolver when the system resolver fails.
Web Connectivity MAY run a lookup using a DNS-over-HTTPS resolver
such as https://dns.google/dns-query. Web Connectivity saves the
results of this lookup inside the queries test key. The results
collected by this resolver MUST NOT set the classic tag, given
that this is an extension.
When analyzing data, be careful that the results of this lookup are not informative of DNS blocking of the input URL's domain, rather, they show whether the given DNS-over-HTTPS endpoint is blocked.
In other words, this extension enables us to perform opportunistic DNS-over-HTTPS measurements as part of Web Connectivity.
Web Connectivity SHOULD try to prioritize IP addresses resolved by the system resolver but MAY use IP addresses used by this extra resolver when the system resolver fails.
The Web Connectivity test helper (TH) returns the results of looking up the hostname inside the URL.
Web Connectivity SHOULD try to prioritize IP addresses resolved by the TH but MAY use IP addresses used by this extra resolver when the system resolver fails.
Web Connectivity measurement completes when one of the following happens:
-
we obtain a response that is not a redirect (the "final" response);
-
a network or protocol error prevents us from obtaining a final webpage (e.g., a DNS, TCP, TLS, or HTTP failure);
-
we are redirected ten times.
At the end of the measurement, we have the following information:
-
"classic" DNS lookups for the domain in the input URL;
-
"classic" TCP connects and possibly TLS handshakes towards TCP endpoints constructed using the URL scheme or an explicit port and IP addresses resolved by "classic" DNS lookups;
-
the result of each HTTP request that was attempted possibly including a final webpage;
-
results of DNS lookups, TCP connects, and TLS handshakes performed by the test helper and directly comparable to the corresponding "classic" results;
-
the final response obtained by the test helper, if any;
-
possibly additional non-"classic" information obtained through extensions.
Based on this information, Web Connectivity needs to compute the following test keys:
| Name | Type | Semantics |
|---|---|---|
dns_consistency |
optional<string> |
Consistency of probe and TH DNS lookups |
body_proportion |
optional<float64> |
Proportion of probe and TH's final response body |
body_length_match |
optional<bool> |
Whether probe and TH's final response body are close enough in size |
headers_match |
optional<bool> |
Whether probe and TH's final response are similar enough |
status_code_match |
optional<bool> |
Whether probe and TH's final response status code are ~same |
title_match |
optional<bool> |
Whether probe and TH's final response title are ~same |
blocking |
optional<string|bool> |
Whether we think there's some blocking in place |
accessible |
optional<bool> |
Whether the website seems accessible |
For historical reasons and backward compatibility, Web Connectivity MUST only use the measurements collected by the classical algorithm to produce a measurement result. New versions of Web Connectivity MAY produce additional measurement results but those results MUST use different test keys than the one used by the classic algorithm.
Finally, note that this specification aims to describe the general idea behind the algorithms, which may be more complex of this because they typically need to deal with (a) avoiding false positives and (b) correctly flagging corner cases.
Given a specific operation (e.g., a TLS handshake with a given TLS endpoint), we define:
-
Expected success: when both the probe and the TH succeeded in performing the given operation.
-
Unexpected failure: when the probe failed and the TH succeeded.
-
Expected failure: when both the probe and the TH failed.
-
Unexpected success: when the probe succeded and the TH failed.
-
Unexplained success: when the probe succeeded and there is no related TH data.
-
Unexplained failure: when the probe failed and there is no related TH data.
With these definitions, we can now discuss specific test keys.
Broadly speaking, we set this field to "consistent" when the result of "classic" DNS lookups
match the DNS lookups performed by the TH. This include cases where we see expected
successes and failures as well as cases where the resolved addresses are compatible with
each other; i.e., the case when one of the following happens:
-
the probe and the TH resolved the same addresses;
-
the addresses resolved by the probe and the TH belong to the same ASNs;
-
(optionally) we did not see any bogon resolved exclusively by the probe;
-
(optionally) we concluded that some IP addresses are good because we could successfully perform TLS handshakes for the domain we were using.
We set this field to "inconsistent" when we could not determine
consistency and we were able to resolve some IP addresses. We leave this field null
if we cannot determine either consistency or inconsistency of the results. Historically,
Web Connectivity also assigned the "reverse_match" value when there was a match
between the reverse lookup of addresses resolved by the probe and the TH, but current
versions do not implement this functionality at present.
This field is the minimum ratio between the final response body obtained by the probe over the one obtained by the test helper and the inverse of such a ratio.
That is:
body_proportion = None
if probe.body_length > 0 and th.body_length > 0:
ratio = probe.body_length / th.body_length
inverse = th.body_length / probe.body_length
body_proportion = min(ratio, inverse)We use this value to compute the following test key. Obviously, we cannot compute this value unless both the probe and the test helper obtained a final HTTP response.
We say that the two body lenghts match if their ratio is greater than 0.7:
if body_proportion is not None:
body_length_match = body_proportion > 0.7The underlying reason for saying that there is a match is that the two final webpages should have similar lengths, otherwise it's possible that we've fetched a blockpage with the probe.
We set this value to true if the probe and the TH have seen similar uncommon
headers inside their final response. We set to false if there's a final response
but no uncommon headers. We leave this filed null otherwise.
We define uncommon headers the set of headers keys obtained by subtracting the set of header keys in a final response and the set of headers commonly observed inside HTTP responses.
We set this value to true if the final responses have the same status
code and the TH's status code is 2xx. We set this value to false if
the two status codes are different and the TH's status code is 2xx. We
leave this field null otherwise.
We take the probe's final response title and the TH's final response title
and, for each of them, only keep words longer than 4 characters, which is the
average word length in English. If the two sets are not empty, we set the
title_match to whether they have at least one word in common. Otherwise, we
leave this field null.
By default, this field's value is null. We set the value to false if
we're able to get a final response and this final response matches the one
obtained by the test helper (more on this below). In case we cannot get a
final response, we set this value to one of the following:
-
"dns", if it seems the reason why we cannot obtain a final response is DNS interference (e.g., injection of invalid IP addresses); -
"tcp_ip", if it seems the reason why we cannot obtain a final response is TCP/IP blocking of the server's IP addresses; -
"http-failure", if it seems the reason why we cannot obtain a final response is TLS or HTTP blocking (this is for historical reasons, as the original Web Connectivity implementation did not specify what to use in case of TLS interference).
When we have a final response, and the scheme of the corresponding
request is https, we always set this field to false.
Otherwise, we run the following "HTTP diff" algorithm to determine
the value of the blocking test key:
if status_code_match is not None and status_code_match:
if body_length_match is not None and body_length_match:
blocking = False
return
if headers_match is not None and headers_match:
blocking = False
return
if title_match is not None and title_match:
blocking = False
return
blocking = "http-diff"This value is true if we think we obtained a legitimate final response, false
if we could not, and null if we could not determine whether there was a legitimate
final response.
The following table summarizes some common blocking and accessible combinations:
| blocking | accessible | what we think is happening |
|---|---|---|
null |
null |
We could not assign values to the fields |
false |
false |
Expected failures (e.g., the website down) |
false |
true |
Expected success (i.e., no censorship) |
"dns" |
false |
DNS-based blocking |
"tcp_ip" |
false |
TCP-based blocking |
"http-failure" |
false |
HTTP or TLS based blocking |
"http-diff" |
false |
Blockpage rather than legit page |
Obviously, false positives may happen. Additionally, note that it is possible for a website to be blocked in multiple ways. For example, there may be DNS blocking but Web Connectivity could obtain and use IP addresses from the test helper, only to discover that there's TLS or TCP based blocking. A future version of this specification will describe additional test keys aimed at providing a more fine grained characterization of blocking.
We will include data following these data formats.
df-001-httptdf-002-dnstdf-005-tcpconnectdf-006-tlshandshakedf-008-netevents
We already described below how this data formats will be used. Historically, Web
Connectivity included a "blocked" key to each tcp_connect entry but modern versions
of this experiment do not do that anymore.
The following specification summarizes the top-level test keys:
{
"client_resolver": "1.2.3.4",
"dns_consistency": "consistent" | "reverse_match" | "inconsistent",
"body_length_match": true | false | null,
"headers_match": true | false | null,
"status_code_match": true | false | null,
"title_match": true | false | null,
"accessible": true | false | null,
"blocking": "tcp_ip" | "dns" | "http-diff" | "http-failure" | false | null
}
We already discussed each of these fields in the above sections.
-
If the URL in question is accessible from the network vantage point of the probe.
-
If the main mechanism of blocking of the URL in question is being performed by means of DNS tampering, TCP blocking, HTTP or TLS interference, or transparent proxying.
Web Connectivity does not correctly handle server-side blocking with https:// like URLs, as
documented by ooni/probe#2661. This happens because,
as explained above, we automatically set "blocking" to false when the request uses https.
If the client has opted out of providing the ASN of their probe the client_resolver key may give away extra information pertaining to the network they are on if they are using the resolver of their ISP. (Modern probes do not allow users to opt-out of providing their ANSs because that would lead to non-actionable measurements. It can still occurr that the ASN is set to zero if the ANS resolution mechanism failed.)
Request:
{
"http_request": "https://www.example.com/",
"http_request_headers": {
"Accept": [
"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"
],
"Accept-Language": [
"en-US,en;q=0.9"
],
"User-Agent": [
"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.3"
]
},
"tcp_connect": [
"93.184.216.34:443",
"[2606:2800:220:1:248:1893:25c8:1946]:443"
],
"x_quic_enabled": false
}Response:
{
"tcp_connect": {
"93.184.216.34:443": {
"status": true,
"failure": null
},
"[2606:2800:220:1:248:1893:25c8:1946]:443": {
"status": true,
"failure": null
}
},
"tls_handshake": {
"93.184.216.34:443": {
"server_name": "www.example.com",
"status": true,
"failure": null
},
"[2606:2800:220:1:248:1893:25c8:1946]:443": {
"server_name": "www.example.com",
"status": true,
"failure": null
}
},
"quic_handshake": {},
"http_request": {
"body_length": 1256,
"discovered_h3_endpoint": "",
"failure": null,
"title": "Example Domain",
"headers": {
"Age": "427098",
"Cache-Control": "max-age=604800",
"Content-Length": "1256",
"Content-Type": "text/html; charset=UTF-8",
"Date": "Wed, 14 Feb 2024 09:04:33 GMT",
"Etag": "\"3147526947+ident\"",
"Expires": "Wed, 21 Feb 2024 09:04:33 GMT",
"Last-Modified": "Thu, 17 Oct 2019 07:18:26 GMT",
"Server": "ECS (dce/268A)",
"Vary": "Accept-Encoding",
"X-Cache": "HIT"
},
"status_code": 200
},
"http3_request": null,
"dns": {
"failure": null,
"addrs": [
"93.184.216.34",
"2606:2800:220:1:248:1893:25c8:1946"
]
},
"ip_info": {
"2606:2800:220:1:248:1893:25c8:1946": {
"asn": 15133,
"flags": 11
},
"93.184.216.34": {
"asn": 15133,
"flags": 11
}
}
}Note: the control will set body_length and status_code to -1 in
case of failure. The client code must correctly handle this case.
{
"annotations": {
"architecture": "arm64",
"engine_name": "ooniprobe-engine",
"engine_version": "3.21.0-alpha",
"go_version": "go1.20.12",
"platform": "macos",
"vcs_modified": "false",
"vcs_revision": "b36dd8f78265762d5ef214a4ff72e2d856410e11",
"vcs_time": "2024-02-13T02:52:13Z",
"vcs_tool": "git"
},
"data_format_version": "0.2.0",
"extensions": {
"dnst": 0,
"httpt": 0,
"netevents": 0,
"tcpconnect": 0,
"tlshandshake": 0,
"tunnel": 0
},
"input": "https://www.example.com/",
"measurement_start_time": "2024-02-14 09:06:17",
"probe_asn": "AS30722",
"probe_cc": "IT",
"probe_ip": "127.0.0.1",
"probe_network_name": "Vodafone Italia S.p.A.",
"report_id": "20240214T090617Z_webconnectivity_IT_30722_n1_1IvUiXNWHooB5rmD",
"resolver_asn": "AS13335",
"resolver_ip": "162.158.131.11",
"resolver_network_name": "Cloudflare Inc",
"software_name": "miniooni",
"software_version": "3.21.0-alpha",
"test_helpers": {
"backend": {
"address": "https://2.th.ooni.org",
"type": "https"
}
},
"test_keys": {
"agent": "redirect",
"client_resolver": "162.158.131.11",
"retries": null,
"socksproxy": null,
"network_events": [
{
"address": "[2606:2800:220:1:248:1893:25c8:1946]:443",
"failure": "host_unreachable",
"operation": "connect",
"proto": "tcp",
"t0": 0.390815,
"t": 0.391203,
"transaction_id": 50002,
"tags": [
"classic",
"tcptls_experiment",
"depth=0",
"fetch_body=true"
]
},
{
"address": "93.184.216.34:443",
"failure": null,
"operation": "connect",
"proto": "tcp",
"t0": 0.390724,
"t": 0.549308,
"transaction_id": 50001,
"tags": [
"classic",
"tcptls_experiment",
"depth=0",
"fetch_body=true"
]
},
{
"address": "93.184.216.34:443",
"failure": null,
"operation": "tls_handshake_start",
"proto": "tcp",
"t0": 0.549373,
"t": 0.549373,
"transaction_id": 50001,
"tags": [
"classic",
"tcptls_experiment",
"depth=0",
"fetch_body=true"
]
},
{
"address": "93.184.216.34:443",
"failure": null,
"num_bytes": 281,
"operation": "write",
"proto": "tcp",
"t0": 0.549704,
"t": 0.549768,
"transaction_id": 50001,
"tags": [
"classic",
"tcptls_experiment",
"depth=0",
"fetch_body=true"
]
},
{
"address": "93.184.216.34:443",
"failure": null,
"num_bytes": 99,
"operation": "read",
"proto": "tcp",
"t0": 0.54978,
"t": 0.677575,
"transaction_id": 50001,
"tags": [
"classic",
"tcptls_experiment",
"depth=0",
"fetch_body=true"
]
},
{
"address": "93.184.216.34:443",
"failure": null,
"num_bytes": 6,
"operation": "write",
"proto": "tcp",
"t0": 0.677603,
"t": 0.677643,
"transaction_id": 50001,
"tags": [
"classic",
"tcptls_experiment",
"depth=0",
"fetch_body=true"
]
},
{
"address": "93.184.216.34:443",
"failure": null,
"num_bytes": 314,
"operation": "write",
"proto": "tcp",
"t0": 0.677767,
"t": 0.677803,
"transaction_id": 50001,
"tags": [
"classic",
"tcptls_experiment",
"depth=0",
"fetch_body=true"
]
},
{
"address": "93.184.216.34:443",
"failure": null,
"num_bytes": 576,
"operation": "read",
"proto": "tcp",
"t0": 0.677857,
"t": 0.808512,
"transaction_id": 50001,
"tags": [
"classic",
"tcptls_experiment",
"depth=0",
"fetch_body=true"
]
},
{
"address": "93.184.216.34:443",
"failure": null,
"num_bytes": 812,
"operation": "read",
"proto": "tcp",
"t0": 0.808985,
"t": 0.808999,
"transaction_id": 50001,
"tags": [
"classic",
"tcptls_experiment",
"depth=0",
"fetch_body=true"
]
},
{
"address": "93.184.216.34:443",
"failure": null,
"num_bytes": 2822,
"operation": "read",
"proto": "tcp",
"t0": 0.809004,
"t": 0.812455,
"transaction_id": 50001,
"tags": [
"classic",
"tcptls_experiment",
"depth=0",
"fetch_body=true"
]
},
{
"address": "93.184.216.34:443",
"failure": null,
"num_bytes": 74,
"operation": "write",
"proto": "tcp",
"t0": 0.815494,
"t": 0.815545,
"transaction_id": 50001,
"tags": [
"classic",
"tcptls_experiment",
"depth=0",
"fetch_body=true"
]
},
{
"address": "93.184.216.34:443",
"failure": null,
"operation": "tls_handshake_done",
"proto": "tcp",
"t0": 0.815575,
"t": 0.815575,
"transaction_id": 50001,
"tags": [
"classic",
"tcptls_experiment",
"depth=0",
"fetch_body=true"
]
},
{
"address": "93.184.216.34:443",
"failure": null,
"operation": "http_transaction_start",
"proto": "tcp",
"t0": 0.815758,
"t": 0.815758,
"transaction_id": 50001,
"tags": [
"classic",
"tcptls_experiment",
"depth=0",
"fetch_body=true"
]
},
{
"address": "93.184.216.34:443",
"failure": null,
"num_bytes": 86,
"operation": "write",
"proto": "tcp",
"t0": 0.815893,
"t": 0.815922,
"transaction_id": 50001,
"tags": [
"classic",
"tcptls_experiment",
"depth=0",
"fetch_body=true"
]
},
{
"address": "93.184.216.34:443",
"failure": null,
"num_bytes": 198,
"operation": "write",
"proto": "tcp",
"t0": 0.815994,
"t": 0.816017,
"transaction_id": 50001,
"tags": [
"classic",
"tcptls_experiment",
"depth=0",
"fetch_body=true"
]
},
{
"address": "93.184.216.34:443",
"failure": null,
"num_bytes": 510,
"operation": "read",
"proto": "tcp",
"t0": 0.815999,
"t": 0.935572,
"transaction_id": 50001,
"tags": [
"classic",
"tcptls_experiment",
"depth=0",
"fetch_body=true"
]
},
{
"address": "93.184.216.34:443",
"failure": null,
"num_bytes": 127,
"operation": "read",
"proto": "tcp",
"t0": 0.935645,
"t": 0.939723,
"transaction_id": 50001,
"tags": [
"classic",
"tcptls_experiment",
"depth=0",
"fetch_body=true"
]
},
{
"address": "93.184.216.34:443",
"failure": null,
"num_bytes": 31,
"operation": "write",
"proto": "tcp",
"t0": 0.93976,
"t": 0.939823,
"transaction_id": 50001,
"tags": [
"classic",
"tcptls_experiment",
"depth=0",
"fetch_body=true"
]
},
{
"address": "93.184.216.34:443",
"failure": null,
"num_bytes": 1515,
"operation": "read",
"proto": "tcp",
"t0": 0.939843,
"t": 0.939852,
"transaction_id": 50001,
"tags": [
"classic",
"tcptls_experiment",
"depth=0",
"fetch_body=true"
]
},
{
"address": "93.184.216.34:443",
"failure": null,
"operation": "http_transaction_done",
"proto": "tcp",
"t0": 0.940186,
"t": 0.940186,
"transaction_id": 50001,
"tags": [
"classic",
"tcptls_experiment",
"depth=0",
"fetch_body=true"
]
},
{
"address": "93.184.216.34:443",
"failure": null,
"num_bytes": 24,
"operation": "write",
"proto": "tcp",
"t0": 0.940384,
"t": 0.940422,
"transaction_id": 50001,
"tags": [
"classic",
"tcptls_experiment",
"depth=0",
"fetch_body=true"
]
},
{
"address": "93.184.216.34:443",
"failure": "connection_already_closed",
"operation": "read",
"proto": "tcp",
"t0": 0.94001,
"t": 0.940512,
"transaction_id": 50001,
"tags": [
"classic",
"tcptls_experiment",
"depth=0",
"fetch_body=true"
]
},
{
"address": "93.184.216.34:443",
"failure": null,
"num_bytes": 6461,
"operation": "bytes_received_cumulative",
"proto": "tcp",
"t0": 0.94056,
"t": 0.94056,
"transaction_id": 50001,
"tags": [
"classic",
"tcptls_experiment",
"depth=0",
"fetch_body=true"
]
}
],
"x_dns_whoami": {
"system_v4": [
{
"address": "162.158.131.11"
}
],
"udp_v4": {
"1.1.1.1:53": [
{
"address": "162.158.131.143"
}
]
}
},
"x_doh": {
"network_events": [
{
"failure": null,
"operation": "resolve_start",
"t0": 0.000888,
"t": 0.000888,
"transaction_id": 30001,
"tags": [
"depth=0"
]
},
{
"address": "149.112.112.112:443",
"failure": null,
"operation": "connect",
"proto": "tcp",
"t0": 0.064547,
"t": 0.122804,
"transaction_id": 30001,
"tags": [
"depth=0"
]
},
{
"address": "149.112.112.112:443",
"failure": null,
"operation": "tls_handshake_start",
"proto": "tcp",
"t0": 0.122879,
"t": 0.122879,
"transaction_id": 30001,
"tags": [
"depth=0"
]
},
{
"address": "149.112.112.112:443",
"failure": null,
"num_bytes": 279,
"operation": "write",
"proto": "tcp",
"t0": 0.123299,
"t": 0.123359,
"transaction_id": 30001,
"tags": [
"depth=0"
]
},
{
"address": "149.112.112.112:443",
"failure": null,
"num_bytes": 576,
"operation": "read",
"proto": "tcp",
"t0": 0.123373,
"t": 0.195812,
"transaction_id": 30001,
"tags": [
"depth=0"
]
},
{
"address": "149.112.112.112:443",
"failure": null,
"num_bytes": 812,
"operation": "read",
"proto": "tcp",
"t0": 0.196251,
"t": 0.196262,
"transaction_id": 30001,
"tags": [
"depth=0"
]
},
{
"address": "149.112.112.112:443",
"failure": null,
"num_bytes": 2113,
"operation": "read",
"proto": "tcp",
"t0": 0.196266,
"t": 0.199866,
"transaction_id": 30001,
"tags": [
"depth=0"
]
},
{
"address": "149.112.112.112:443",
"failure": null,
"num_bytes": 80,
"operation": "write",
"proto": "tcp",
"t0": 0.204227,
"t": 0.204276,
"transaction_id": 30001,
"tags": [
"depth=0"
]
},
{
"address": "149.112.112.112:443",
"failure": null,
"operation": "tls_handshake_done",
"proto": "tcp",
"t0": 0.204297,
"t": 0.204297,
"transaction_id": 30001,
"tags": [
"depth=0"
]
},
{
"address": "149.112.112.112:443",
"failure": null,
"num_bytes": 86,
"operation": "write",
"proto": "tcp",
"t0": 0.204393,
"t": 0.204422,
"transaction_id": 30001,
"tags": [
"depth=0"
]
},
{
"address": "149.112.112.112:443",
"failure": null,
"num_bytes": 163,
"operation": "write",
"proto": "tcp",
"t0": 0.204528,
"t": 0.204556,
"transaction_id": 30001,
"tags": [
"depth=0"
]
},
{
"address": "149.112.112.112:443",
"failure": null,
"num_bytes": 159,
"operation": "write",
"proto": "tcp",
"t0": 0.20457,
"t": 0.204594,
"transaction_id": 30001,
"tags": [
"depth=0"
]
},
{
"address": "149.112.112.112:443",
"failure": null,
"num_bytes": 38,
"operation": "write",
"proto": "tcp",
"t0": 0.204614,
"t": 0.204643,
"transaction_id": 30001,
"tags": [
"depth=0"
]
},
{
"address": "149.112.112.112:443",
"failure": null,
"num_bytes": 159,
"operation": "write",
"proto": "tcp",
"t0": 0.204649,
"t": 0.204676,
"transaction_id": 30001,
"tags": [
"depth=0"
]
},
{
"address": "149.112.112.112:443",
"failure": null,
"num_bytes": 542,
"operation": "read",
"proto": "tcp",
"t0": 0.204477,
"t": 0.24641,
"transaction_id": 30001,
"tags": [
"depth=0"
]
},
{
"address": "149.112.112.112:443",
"failure": null,
"num_bytes": 52,
"operation": "read",
"proto": "tcp",
"t0": 0.246431,
"t": 0.247916,
"transaction_id": 30001,
"tags": [
"depth=0"
]
},
{
"address": "149.112.112.112:443",
"failure": null,
"num_bytes": 31,
"operation": "write",
"proto": "tcp",
"t0": 0.247935,
"t": 0.247979,
"transaction_id": 30001,
"tags": [
"depth=0"
]
},
{
"address": "149.112.112.112:443",
"failure": null,
"num_bytes": 554,
"operation": "read",
"proto": "tcp",
"t0": 0.247989,
"t": 0.255268,
"transaction_id": 30001,
"tags": [
"depth=0"
]
},
{
"failure": null,
"operation": "resolve_done",
"t0": 0.255556,
"t": 0.255556,
"transaction_id": 30001,
"tags": [
"depth=0"
]
},
{
"address": "149.112.112.112:443",
"failure": null,
"num_bytes": 24,
"operation": "write",
"proto": "tcp",
"t0": 0.255584,
"t": 0.255624,
"transaction_id": 30001,
"tags": [
"depth=0"
]
},
{
"address": "149.112.112.112:443",
"failure": "connection_already_closed",
"operation": "read",
"proto": "tcp",
"t0": 0.255378,
"t": 0.255716,
"transaction_id": 30001,
"tags": [
"depth=0"
]
}
],
"queries": [
{
"answers": [
{
"asn": 19281,
"as_org_name": "Quad9",
"answer_type": "A",
"ipv4": "149.112.112.112",
"ttl": null
},
{
"asn": 19281,
"as_org_name": "Quad9",
"answer_type": "A",
"ipv4": "9.9.9.9",
"ttl": null
},
{
"asn": 19281,
"as_org_name": "Quad9",
"answer_type": "AAAA",
"ipv6": "2620:fe::fe",
"ttl": null
},
{
"asn": 19281,
"as_org_name": "Quad9",
"answer_type": "AAAA",
"ipv6": "2620:fe::9",
"ttl": null
},
{
"answer_type": "CNAME",
"hostname": "dns.quad9.net.",
"ttl": null
}
],
"engine": "getaddrinfo",
"failure": null,
"hostname": "dns.quad9.net",
"query_type": "ANY",
"resolver_hostname": null,
"resolver_port": null,
"resolver_address": "",
"t0": 0.001064,
"t": 0.063724,
"tags": [
"depth=0"
],
"transaction_id": 30001
}
],
"requests": [],
"tcp_connect": [
{
"ip": "149.112.112.112",
"port": 443,
"status": {
"failure": null,
"success": true
},
"t0": 0.064547,
"t": 0.122804,
"tags": [
"depth=0"
],
"transaction_id": 30001
}
],
"tls_handshakes": [
{
"network": "tcp",
"address": "149.112.112.112:443",
"cipher_suite": "TLS_AES_256_GCM_SHA384",
"failure": null,
"negotiated_protocol": "h2",
"no_tls_verify": false,
"peer_certificates": [
{
"data": "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",
"format": "base64"
},
{
"data": "MIIEFzCCAv+gAwIBAgIQB/LzXIeod6967+lHmTUlvTANBgkqhkiG9w0BAQwFADBhMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBDQTAeFw0yMTA0MTQwMDAwMDBaFw0zMTA0MTMyMzU5NTlaMFYxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxMDAuBgNVBAMTJ0RpZ2lDZXJ0IFRMUyBIeWJyaWQgRUNDIFNIQTM4NCAyMDIwIENBMTB2MBAGByqGSM49AgEGBSuBBAAiA2IABMEbxppbmNmkKaDp1AS12+umsmxVwP/tmMZJLwYnUcu/cMEFesOxnYeJuq20ExfJqLSDyLiQ0cx0NTY8g3KwtdD3ImnI8YDEe0CPz2iHJlw5ifFNkU3aiYvkA8ND5b8vc6OCAYIwggF+MBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFAq8CCkXjKU5bXoOzjPHLrPt+8N6MB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA4GA1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdgYIKwYBBQUHAQEEajBoMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wQAYIKwYBBQUHMAKGNGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcnQwQgYDVR0fBDswOTA3oDWgM4YxaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDA9BgNVHSAENjA0MAsGCWCGSAGG/WwCATAHBgVngQwBATAIBgZngQwBAgEwCAYGZ4EMAQICMAgGBmeBDAECAzANBgkqhkiG9w0BAQwFAAOCAQEAR1mBf9QbH7Bx9phdGLqYR5iwfnYr6v8ai6wms0KNMeZK6BnQ79oU59cUkqGS8qcuLa/7Hfb7U7CKP/zYFgrpsC62pQsYkDUmotr2qLcy/JUjS8ZFucTP5Hzu5sn4kL1y45nDHQsFfGqXbbKrAjbYwrwsAZI/BKOLdRHHuSm8EdCGupK8JvllyDfNJvaGEwwEqonleLHBTnm8dqMLUeTF0J5q/hosVq4GNiejcxwIfZMy0MJEGdqN9A57HSgDKwmKdsp33Id6rHtSJlWncg+d0ohP/rEhxRqhqjn1VtvChMQ1H3Dau0bwhr9kAMQ+959GG50jBbl9s08PqUU643QwmA==",
"format": "base64"
}
],
"server_name": "dns.quad9.net",
"t0": 0.122879,
"t": 0.204297,
"tags": [
"depth=0"
],
"tls_version": "TLSv1.3",
"transaction_id": 30001
}
]
},
"x_do53": {
"network_events": [
{
"failure": null,
"operation": "resolve_start",
"t0": 0.000472,
"t": 0.000472,
"transaction_id": 20001,
"tags": [
"depth=0"
]
},
{
"address": "1.1.1.1:53",
"failure": null,
"num_bytes": 33,
"operation": "write",
"proto": "udp",
"t0": 0.000699,
"t": 0.000741,
"transaction_id": 20001,
"tags": [
"depth=0"
]
},
{
"address": "1.1.1.1:53",
"failure": null,
"num_bytes": 33,
"operation": "write",
"proto": "udp",
"t0": 0.001085,
"t": 0.001112,
"transaction_id": 20001,
"tags": [
"depth=0"
]
},
{
"address": "1.1.1.1:53",
"failure": null,
"num_bytes": 49,
"operation": "read",
"proto": "udp",
"t0": 0.001121,
"t": 0.038824,
"transaction_id": 20001,
"tags": [
"depth=0"
]
},
{
"address": "1.1.1.1:53",
"failure": null,
"num_bytes": 61,
"operation": "read",
"proto": "udp",
"t0": 0.000954,
"t": 0.045381,
"transaction_id": 20001,
"tags": [
"depth=0"
]
},
{
"failure": null,
"operation": "resolve_done",
"t0": 0.045739,
"t": 0.045739,
"transaction_id": 20001,
"tags": [
"depth=0"
]
}
],
"queries": []
},
"x_dns_duplicate_responses": [],
"queries": [
{
"answers": [
{
"asn": 15133,
"as_org_name": "Edgecast Inc.",
"answer_type": "A",
"ipv4": "93.184.216.34",
"ttl": null
}
],
"engine": "udp",
"failure": null,
"hostname": "www.example.com",
"query_type": "A",
"raw_response": "tGmBgAABAAEAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQABwAwAAQABAAE4awAEXbjYIg==",
"resolver_hostname": null,
"resolver_port": null,
"resolver_address": "1.1.1.1:53",
"t0": 0.000804,
"t": 0.038858,
"tags": [
"depth=0"
],
"transaction_id": 20001
},
{
"answers": [
{
"asn": 15133,
"as_org_name": "Edgecast Inc.",
"answer_type": "AAAA",
"ipv6": "2606:2800:220:1:248:1893:25c8:1946",
"ttl": null
}
],
"engine": "udp",
"failure": null,
"hostname": "www.example.com",
"query_type": "AAAA",
"raw_response": "HY+BgAABAAEAAAAAA3d3dwdleGFtcGxlA2NvbQAAHAABwAwAHAABAAFBSAAQJgYoAAIgAAECSBiTJcgZRg==",
"resolver_hostname": null,
"resolver_port": null,
"resolver_address": "1.1.1.1:53",
"t0": 0.000492,
"t": 0.045419,
"tags": [
"depth=0"
],
"transaction_id": 20001
},
{
"answers": [
{
"asn": 15133,
"as_org_name": "Edgecast Inc.",
"answer_type": "A",
"ipv4": "93.184.216.34",
"ttl": null
},
{
"asn": 15133,
"as_org_name": "Edgecast Inc.",
"answer_type": "AAAA",
"ipv6": "2606:2800:220:1:248:1893:25c8:1946",
"ttl": null
},
{
"answer_type": "CNAME",
"hostname": "www.example.com.",
"ttl": null
}
],
"engine": "getaddrinfo",
"failure": null,
"hostname": "www.example.com",
"query_type": "ANY",
"resolver_hostname": null,
"resolver_port": null,
"resolver_address": "",
"t0": 0.000471,
"t": 0.067597,
"tags": [
"classic",
"depth=0"
],
"transaction_id": 10001
},
{
"answers": [
{
"asn": 15133,
"as_org_name": "Edgecast Inc.",
"answer_type": "AAAA",
"ipv6": "2606:2800:220:1:248:1893:25c8:1946",
"ttl": null
}
],
"engine": "doh",
"failure": null,
"hostname": "www.example.com",
"query_type": "AAAA",
"raw_response": "OmqBoAABAAIAAAABA3d3dwdleGFtcGxlA2NvbQAAHAABwAwAHAABAACd9AAQJgYoAAIgAAECSBiTJcgZRsAMAC4AAQAAnfQAXwAcDQMAAVGAZdukQGW/1XbuIAdleGFtcGxlA2NvbQCoA9gGNqTDxjtNjCQksOty2S9SEkdnNvJy7tvEvZKaezuD2JXe8IydgpuGOePpGbOH5JcNVs0lV/bT8etzUJQvAAApBNAAAIAAAAA=",
"resolver_hostname": null,
"resolver_port": null,
"resolver_address": "https://dns.quad9.net/dns-query",
"t0": 0.00091,
"t": 0.255443,
"tags": [
"depth=0"
],
"transaction_id": 30001
},
{
"answers": [
{
"asn": 15133,
"as_org_name": "Edgecast Inc.",
"answer_type": "A",
"ipv4": "93.184.216.34",
"ttl": null
}
],
"engine": "doh",
"failure": null,
"hostname": "www.example.com",
"query_type": "A",
"raw_response": "QB2BoAABAAIAAAABA3d3dwdleGFtcGxlA2NvbQAAAQABwAwAAQABAACfYwAEXbjYIsAMAC4AAQAAn2MAXwABDQMAAVGAZduj8WXAKdbuIAdleGFtcGxlA2NvbQD9/kjA7vSsX+sy6mnffr10QJesokx6iFIS6tTl4cPBfgBB7A3PPZJSKkvHlEHMeUTJzgPczOEfFmr0xHM7jTGqAAApBNAAAIAAAAA=",
"resolver_hostname": null,
"resolver_port": null,
"resolver_address": "https://dns.quad9.net/dns-query",
"t0": 0.00112,
"t": 0.255436,
"tags": [
"depth=0"
],
"transaction_id": 30001
}
],
"requests": [
{
"network": "tcp",
"address": "93.184.216.34:443",
"alpn": "h2",
"failure": null,
"request": {
"body": "",
"body_is_truncated": false,
"headers_list": [
[
"Accept",
"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"
],
[
"Accept-Language",
"en-US,en;q=0.9"
],
[
"Host",
"www.example.com"
],
[
"Referer",
""
],
[
"User-Agent",
"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[scrubbed] Safari/537.3"
]
],
"headers": {
"Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
"Accept-Language": "en-US,en;q=0.9",
"Host": "www.example.com",
"Referer": "",
"User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[scrubbed] Safari/537.3"
},
"method": "GET",
"tor": {
"exit_ip": null,
"exit_name": null,
"is_tor": false
},
"x_transport": "tcp",
"url": "https://www.example.com/"
},
"response": {
"body": "<!doctype html>\n<html>\n<head>\n <title>Example Domain</title>\n\n <meta charset=\"utf-8\" />\n <meta http-equiv=\"Content-type\" content=\"text/html; charset=utf-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n <style type=\"text/css\">\n body {\n background-color: #f0f0f2;\n margin: 0;\n padding: 0;\n font-family: -apple-system, system-ui, BlinkMacSystemFont, \"Segoe UI\", \"Open Sans\", \"Helvetica Neue\", Helvetica, Arial, sans-serif;\n \n }\n div {\n width: 600px;\n margin: 5em auto;\n padding: 2em;\n background-color: #fdfdff;\n border-radius: 0.5em;\n box-shadow: 2px 3px 7px 2px rgba(0,0,0,0.02);\n }\n a:link, a:visited {\n color: #38488f;\n text-decoration: none;\n }\n @media (max-width: 700px) {\n div {\n margin: 0 auto;\n width: auto;\n }\n }\n </style> \n</head>\n\n<body>\n<div>\n <h1>Example Domain</h1>\n <p>This domain is for use in illustrative examples in documents. You may use this\n domain in literature without prior coordination or asking for permission.</p>\n <p><a href=\"https://www.iana.org/domains/example\">More information...</a></p>\n</div>\n</body>\n</html>\n",
"body_is_truncated": false,
"code": 200,
"headers_list": [
[
"Age",
"419986"
],
[
"Cache-Control",
"max-age=604800"
],
[
"Content-Length",
"1256"
],
[
"Content-Type",
"text/html; charset=UTF-8"
],
[
"Date",
"Wed, 14 Feb 2024 09:06:17 GMT"
],
[
"Etag",
"\"3147526947+ident\""
],
[
"Expires",
"Wed, 21 Feb 2024 09:06:17 GMT"
],
[
"Last-Modified",
"Thu, 17 Oct 2019 07:18:26 GMT"
],
[
"Server",
"ECS (dce/2698)"
],
[
"Vary",
"Accept-Encoding"
],
[
"X-Cache",
"HIT"
]
],
"headers": {
"Age": "419986",
"Cache-Control": "max-age=604800",
"Content-Length": "1256",
"Content-Type": "text/html; charset=UTF-8",
"Date": "Wed, 14 Feb 2024 09:06:17 GMT",
"Etag": "\"3147526947+ident\"",
"Expires": "Wed, 21 Feb 2024 09:06:17 GMT",
"Last-Modified": "Thu, 17 Oct 2019 07:18:26 GMT",
"Server": "ECS (dce/2698)",
"Vary": "Accept-Encoding",
"X-Cache": "HIT"
}
},
"t0": 0.815758,
"t": 0.940186,
"tags": [
"classic",
"tcptls_experiment",
"depth=0",
"fetch_body=true"
],
"transaction_id": 50001
}
],
"tcp_connect": [
{
"ip": "2606:2800:220:1:248:1893:25c8:1946",
"port": 443,
"status": {
"failure": "host_unreachable",
"success": false
},
"t0": 0.390815,
"t": 0.391203,
"tags": [
"classic",
"tcptls_experiment",
"depth=0",
"fetch_body=true"
],
"transaction_id": 50002
},
{
"ip": "93.184.216.34",
"port": 443,
"status": {
"failure": null,
"success": true
},
"t0": 0.390724,
"t": 0.549308,
"tags": [
"classic",
"tcptls_experiment",
"depth=0",
"fetch_body=true"
],
"transaction_id": 50001
}
],
"tls_handshakes": [
{
"network": "tcp",
"address": "93.184.216.34:443",
"cipher_suite": "TLS_AES_256_GCM_SHA384",
"failure": null,
"negotiated_protocol": "h2",
"no_tls_verify": false,
"peer_certificates": [
{
"data": "MIIHbjCCBlagAwIBAgIQB1vO8waJyK3fE+Ua9K/hhzANBgkqhkiG9w0BAQsFADBZMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypEaWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjQwMTMwMDAwMDAwWhcNMjUwMzAxMjM1OTU5WjCBljELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExFDASBgNVBAcTC0xvcyBBbmdlbGVzMUIwQAYDVQQKDDlJbnRlcm5ldMKgQ29ycG9yYXRpb27CoGZvcsKgQXNzaWduZWTCoE5hbWVzwqBhbmTCoE51bWJlcnMxGDAWBgNVBAMTD3d3dy5leGFtcGxlLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIaFD7sO+cpf2fXgCjIsM9mqDgcpqC8IrXi9wga/9y0rpqcnPVOmTMNLsid3INbBVEm4CNr5cKlh9rJJnWlX2vttJDRyLkfwBD+dsVvivGYxWTLmqX6/1LDUZPVrynv/cltemtg/1Aay88jcj2ZaRoRmqBgVeacIzgU8+zmJ7236TnFSe7fkoKSclsBhPaQKcE3Djs1uszJs8sdECQTdoFX9I6UgeLKFXtg7rRf/hcW5dI0zubhXbrW8aWXbCzySVZn0c7RkJMpnTCiZzNxnPXnHFpwr5quqqjVyN/aBKkjoP04Zmr+eRqoyk/+lslq0sS8eaYSSHbC5ja/yMWyVhvMCAwEAAaOCA/IwggPuMB8GA1UdIwQYMBaAFHSFgMBmx9833s+9KTeqAx2+7c0XMB0GA1UdDgQWBBRM/tASTS4hz2v68vK4TEkCHTGRijCBgQYDVR0RBHoweIIPd3d3LmV4YW1wbGUub3JnggtleGFtcGxlLm5ldIILZXhhbXBsZS5lZHWCC2V4YW1wbGUuY29tggtleGFtcGxlLm9yZ4IPd3d3LmV4YW1wbGUuY29tgg93d3cuZXhhbXBsZS5lZHWCD3d3dy5leGFtcGxlLm5ldDA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBnwYDVR0fBIGXMIGUMEigRqBEhkJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxHMlRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcmwwSKBGoESGQmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbEcyVExTUlNBU0hBMjU2MjAyMENBMS0xLmNybDCBhwYIKwYBBQUHAQEEezB5MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wUQYIKwYBBQUHMAKGRWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbEcyVExTUlNBU0hBMjU2MjAyMENBMS0xLmNydDAMBgNVHRMBAf8EAjAAMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdABOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAY1b0vxkAAAEAwBFMEMCH0BRCgxPbBBVxhcWZ26a8JCe83P1JZ6wmv56GsVcyMACIDgpMbEo5HJITTRPnoyT4mG8cLrWjEvhchUdEcWUuk1TAHYAfVkeEuF4KnscYWd8Xv340IdcFKBOlZ65Ay/ZDowuebgAAAGNW9L8MAAABAMARzBFAiBdv5Z3pZFbfgoM3tGpCTM3ZxBMQsxBRSdTS6d8d2NAcwIhALLoCT9mTMN9OyFzIBV5MkXVLyuTf2OAzAOa7d8x2H6XAHcA5tIxY0B3jMEQQQbXcbnOwdJA9paEhvu6hzId/R43jlAAAAGNW9L8XwAABAMASDBGAiEA4Koh/VizdQU1tjZ2E2VGgWSXXkwnQmiYhmAeKcVLHeACIQD7JIGFsdGol7kss2pe4lYrCgPVc+iGZkuqnj26hqhr0TANBgkqhkiG9w0BAQsFAAOCAQEABOFuAj4N4yNG9OOWNQWTNSICC4Rd4nOG1HRP/Bsnrz7KrcPORtb6D+Jx+Q0amhO31QhIvVBYs14gY4Ypyj7MzHgm4VmPXcqLvEkxb2G9Qv9hYuEiNSQmm1fr5QAN/0AzbEbCM3cImLJ69kP5bUjfv/76KB57is8tYf9sh5ikLGKauxCM/zRIcGa3bXLDafk5S2g5Vr2hs230d/NGW1wZrE+zdGuMxfGJzJP+DAFviBfcQnFg4+1zMEKcqS87oniOyG+60RMM0MdejBD7AS43m9us96Gsun/4kufLQUTIFfnzxLutUV++3seshgefQOy5C/ayi8y1VTNmujPCxPCi6Q==",
"format": "base64"
},
{
"data": "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",
"format": "base64"
}
],
"server_name": "www.example.com",
"t0": 0.549373,
"t": 0.815575,
"tags": [
"classic",
"tcptls_experiment",
"depth=0",
"fetch_body=true"
],
"tls_version": "TLSv1.3",
"transaction_id": 50001
}
],
"x_control_request": {
"http_request": "https://www.example.com/",
"http_request_headers": {
"Accept": [
"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"
],
"Accept-Language": [
"en-US,en;q=0.9"
],
"User-Agent": [
"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.3"
]
},
"tcp_connect": [
"93.184.216.34:443",
"93.184.216.34:80",
"[2606:2800:220:1:248:1893:25c8:1946]:443",
"[2606:2800:220:1:248:1893:25c8:1946]:80"
],
"x_quic_enabled": false
},
"control": {
"tcp_connect": {
"93.184.216.34:443": {
"status": true,
"failure": null
},
"[2606:2800:220:1:248:1893:25c8:1946]:443": {
"status": true,
"failure": null
}
},
"tls_handshake": {
"93.184.216.34:443": {
"server_name": "www.example.com",
"status": true,
"failure": null
},
"[2606:2800:220:1:248:1893:25c8:1946]:443": {
"server_name": "www.example.com",
"status": true,
"failure": null
}
},
"quic_handshake": {},
"http_request": {
"body_length": 1256,
"discovered_h3_endpoint": "",
"failure": null,
"title": "Example Domain",
"headers": {
"Accept-Ranges": "bytes",
"Age": "504555",
"Cache-Control": "max-age=604800",
"Content-Length": "1256",
"Content-Type": "text/html; charset=UTF-8",
"Date": "Wed, 14 Feb 2024 09:06:17 GMT",
"Etag": "\"3147526947\"",
"Expires": "Wed, 21 Feb 2024 09:06:17 GMT",
"Last-Modified": "Thu, 17 Oct 2019 07:18:26 GMT",
"Server": "ECS (nyb/1D1F)",
"Vary": "Accept-Encoding",
"X-Cache": "HIT"
},
"status_code": 200
},
"http3_request": null,
"dns": {
"failure": null,
"addrs": [
"93.184.216.34",
"2606:2800:220:1:248:1893:25c8:1946"
]
},
"ip_info": {
"2606:2800:220:1:248:1893:25c8:1946": {
"asn": 15133,
"flags": 11
},
"93.184.216.34": {
"asn": 15133,
"flags": 11
}
}
},
"x_conn_priority_log": [
{
"msg": "create with [{Addr:93.184.216.34 Flags:7} {Addr:2606:2800:220:1:248:1893:25c8:1946 Flags:7}]",
"t": 0.390366
},
{
"msg": "conn 93.184.216.34:443: granted permission: true",
"t": 0.815651
}
],
"control_failure": null,
"x_dns_flags": 0,
"dns_experiment_failure": null,
"dns_consistency": "consistent",
"http_experiment_failure": null,
"x_blocking_flags": 32,
"x_null_null_flags": 0,
"body_proportion": 1,
"body_length_match": true,
"headers_match": true,
"status_code_match": true,
"title_match": true,
"blocking": false,
"accessible": true
},
"test_name": "web_connectivity",
"test_runtime": 1.221807625,
"test_start_time": "2024-02-14 09:06:16",
"test_version": "0.5.28"
}