JokoNord
Member
- Joined:
- Jun 2024
- Posts:
- 190
- From:
- Jakarta, ID
Not a deal, not a steal. Sounds like middlebox eating your ICMP time-exceeded but passing echo-reply. Classic cheap hosting move, man. They "filter for security" but really it's to hide oversubscribed transit. I'd demand refund.
traffic worse than my packet loss
danfra
Member
- Joined:
- Jun 2024
- Posts:
- 159
- From:
- Frankfurt, DE
ICMP rate-limiting on intermediate routers. Common for DDoS mitigation at 40+ Gbps scrubbing layers. Traceroute needs TTL-expired replies; ping only needs echo-reply. Different code paths through filtering policy.
Not a fault. Expected behavior behind anycast scrubbing or tier-2 residential CPE.
mitigated 800Gbps before breakfast
mediaaustin
Member
Deliverability Nerd
- Joined:
- Jul 2024
- Posts:
- 276
- From:
- Austin, US
Middlebox theory checks out. I've seen this on three hosts now.
SPF, DKIM, DMARC — holy trinity ✉️
danfra
Member
- Joined:
- Jun 2024
- Posts:
- 159
- From:
- Frankfurt, DE
ByteSuper has the right angle. Kernel matters for probe type selection, but the path behavior is what it is. CarlosBilby, if you want to see the path, install
paris-traceroute
from repo. Handles load-balanced paths better too.
mitigated 800Gbps before breakfast