[outages] Incapsula hosted sites

[Joe Klein]

Coming from Comcast (home-class), all three sites listed below are reachable via webbrowser. While I was writing this email, Menards' traceroute path changed drastically.. see the last traceroute.


tracert -w 10 www.menards.com

Tracing route to 37ucs.x.incapdns.net [199.83.134.109]
over a maximum of 30 hops:

  1     1 ms     1 ms     1 ms  router.home.local [192.168.14.69]
  2    16 ms    10 ms    10 ms  someRouter.mortongrove.il.chicago.comcast.net [96.120.25.249]
  3    15 ms    12 ms     9 ms  te-0-3-0-0-sur04.mortongrove.il.chicago.comcast.net [162.151.124.81]
  4    16 ms    20 ms    17 ms  te-1-0-0-13-ar01.area4.il.chicago.comcast.net [68.87.230.117]
  5    23 ms    15 ms    15 ms  be-33491-cr02.350ecermak.il.ibone.comcast.net [68.86.91.165]
  6    14 ms    11 ms    12 ms  hu-0-12-0-5-pe01.350ecermak.il.ibone.comcast.net [68.86.89.198]
  7    14 ms    12 ms    11 ms  chi-b21-link.telia.net [62.115.150.2]
  8    11 ms    18 ms    11 ms  incapsula-ic-309292-chi-b21.c.telia.net [80.239.130.222]
  9    12 ms    13 ms    11 ms  199.83.134.109.ip.incapdns.net [199.83.134.109]

tracert -w 10 www.foremoststar.com

Tracing route to wevnr.x.incapdns.net [107.154.111.57]
over a maximum of 30 hops:

  1   106 ms     2 ms     1 ms  router.home.local [192.168.14.69]
  2    46 ms    17 ms     *     someRouter.mortongrove.il.chicago.comcast.net [96.120.25.249]
  3    17 ms    14 ms    11 ms  te-0-3-0-0-sur04.mortongrove.il.chicago.comcast.net [162.151.124.81]
  4    12 ms    13 ms    12 ms  te-1-0-0-12-ar01.area4.il.chicago.comcast.net [68.87.230.61]
  5    15 ms    17 ms    21 ms  be-33491-cr02.350ecermak.il.ibone.comcast.net [68.86.91.165]
  6    12 ms    11 ms    11 ms  hu-0-14-0-6-pe01.350ecermak.il.ibone.comcast.net [68.86.86.122]
  7    11 ms    11 ms    11 ms  ae12.chi11.ip4.gtt.net [199.229.229.249]
  8   102 ms     *        *     xe-11-0-0.tor10.ip4.gtt.net [141.136.105.214]
  9    22 ms    21 ms    22 ms  incapsula-gw.ip4.gtt.net [173.205.59.218]
 10    24 ms    22 ms    21 ms  107.154.111.57.ip.incapdns.net [107.154.111.57]

tracert -w 10 www.dotloop.com

Tracing route to inuqc.x.incapdns.net [199.83.134.109]
over a maximum of 30 hops:

  1     3 ms     1 ms     1 ms  router.home.local [192.168.14.69]
  2    12 ms    15 ms    11 ms  someRouter.mortongrove.il.chicago.comcast.net [96.120.25.249]
  3    12 ms    13 ms    14 ms  te-0-3-0-0-sur04.mortongrove.il.chicago.comcast.net [162.151.124.81]
  4    15 ms    14 ms    35 ms  te-2-2-0-2-ar01.area4.il.chicago.comcast.net [68.86.189.53]
  5    15 ms    13 ms     *     be-33491-cr02.350ecermak.il.ibone.comcast.net [68.86.91.165]
  6    13 ms    12 ms    15 ms  hu-0-12-0-5-pe01.350ecermak.il.ibone.comcast.net [68.86.89.198]
  7    16 ms    13 ms    12 ms  chi-b21-link.telia.net [62.115.150.2]
  8    12 ms    12 ms     *     incapsula-ic-309292-chi-b21.c.telia.net [80.239.130.222]
  9    13 ms    14 ms    15 ms  199.83.134.109.ip.incapdns.net [199.83.134.109]


Second Menards traceroute

tracert -w 10 www.menards.com

Tracing route to 37ucs.x.incapdns.net [199.83.128.109]
over a maximum of 30 hops:

  1     2 ms     2 ms     2 ms  router.home.local [192.168.14.69]
  2    12 ms    13 ms    13 ms  someRouter.mortongrove.il.chicago.comcast.net [96.120.25.249]
  3    13 ms    13 ms    11 ms  te-0-3-0-0-sur04.mortongrove.il.chicago.comcast.net [162.151.124.81]
  4    14 ms    13 ms    14 ms  te-2-2-0-3-ar01.area4.il.chicago.comcast.net [68.87.210.25]
  5    14 ms    13 ms    14 ms  be-33491-cr02.350ecermak.il.ibone.comcast.net [68.86.91.165]
  6    17 ms    28 ms    18 ms  hu-0-12-0-6-pe01.350ecermak.il.ibone.comcast.net [68.86.89.242]
  7    15 ms    14 ms    13 ms  chi-b21-link.telia.net [62.115.150.2]
  8    34 ms    33 ms    49 ms  nyk-bb1-link.telia.net [62.115.137.54]
  9    35 ms    35 ms    34 ms  nyk-b2-link.telia.net [213.155.130.28]
 10    34 ms    34 ms    33 ms  incapsula-ic-309284-nyk-b2.c.telia.net [213.248.72.122]
 11    35 ms    36 ms    34 ms  199.83.128.109.ip.incapdns.net [199.83.128.109]



-----Original Message-----
From: Outages [mailto:outages-bounces at outages.org] On Behalf Of Steven Surdock via Outages
Sent: Thursday, November 17, 2016 09:49
To: outages at outages.org
Subject: [outages] Incapsula hosted sites

Greetings, anyone else experiencing issues with Incapsula hosted sites routing through Chicago?  Our customers have reported issues with the following site:

www.dotloop.com
www.menards.com
www.foremoststar.com

It appears we have an asymmetric routing issue that is confusing Incapsula.  Disabling all sessions with Incapula, including MLPE seems to have allowed us to work around the issue.  Incapsula support has not been very supportive.


Steven Surdock
CTS Telecom
ssurdock[at]ctstelecom.com
_______________________________________________
Outages mailing list
Outages at outages.org
https://puck.nether.net/mailman/listinfo/outages