Skip to content
Register

Why does my German VPS route through US?

VPS Hosting Locked by pdxltd 27 replies 3.2K views
This thread is locked — new replies are not accepted. (Closed: the question was answered)
HieuTce

Member

4 #11
Nadia59 said:
What happened with unbound

Sorry hit character limit. Yes unbound fixed it completely. I run it on localhost now, no anycast dns at all, traffic routes straight to Limburg where my OVHcloud box actually lives. Ping dropped from 120ms to 35ms. SSL handshake went from like 800ms to 120ms.

The problem is anycast dns + anycasted IP space on the provider side. Your DNS query hits the closest anycast node (Virginia for both of us apparently) and then the whole TCP flow anchors there even though your server is in LA.

Lou1

Member

#12
frank79 said:
How do I run mtr? I installed it but it says I need root.

You don't need root for basic mtr, just run 

mtr --report google.com
as normal user. The root warning is for ICMP mode which is slightly more accurate but TCP mode works fine for routing diagnosis.

frank79 said:
My site is live and I dont want to break anything

mtr is read-only, it won't break anything.

FR

Member

4 #13
Lou1 said:
mtr is read-only

Thanks, that helps. Ran it and I see the same pattern - my RackNerd Amsterdam server is routing through Ashburn too. But wait, RackNerd has an Amsterdam datacenter right? So why would it go through Virginia at all?

Actually looking at my traceroute again, the Ashburn hop is on Cloudflare's network, not RackNerd's. So maybe this is Cloudflare DNS doing the anycast thing, not RackNerd.

AL

Member

#14
pdxltd said:
My German VPS

What kernel you running though? If it's an old kernel the TCP stack might be doing weird stuff with routing. CloudCone uses a lot of OpenVZ and the kernel is whatever the host node has.

Nadia59

Member

#15
ALEXANDER22 said:
What kernel you running

I have no idea how to check that and honestly I don't think that's the problem? Like HieuTce said it's the DNS anycast thing. I changed my resolver to 1.1.1.1 and still get Ashburn. Then I tried 8.8.8.8 and same thing. Then I tried the CleanBrowsing one turbochetah said and STILL Ashburn.

So it's not the DNS provider, it's something else. Maybe CloudCone's network itself is anycasted wrong?

TU

Member

#16
Nadia59 said:
CloudCone's network itself is anycasted wrong

Bro CloudCone only has LA datacenter, no anycast there. But they use Cloudflare for DDoS protection and that is anycast. Check if your IP is behind Cloudflare proxy? If yes then all traffic goes to Cloudflare edge first, and for Lisbon the closest edge might be Ashburn not Madrid or whatever.

Try 

curl -I http://YOUR_IP
from outside and see if Cloudflare headers show up.

Zurich1984

Member

#17

This is why I stopped using budget providers for anything latency-sensitive. You get what you pay for. OVHcloud is barely more expensive and at least you know where your traffic goes.

Also worth noting: IPv4 prices are climbing fast. These anycast tricks let providers share IPs across regions, saves them money, costs you latency.

/24 for sale. No lowballs.
carlos2

Member

#18
Zurich1984 said:
OVHcloud is barely more expensive

OVHcloud bills in EUR though, and their support is just as bad. I had a Strasbourg server that got moved to Gravelines without telling me. Same IP, suddenly routing through France instead of Germany. Took weeks to get an explanation.

At least with RackNerd I know I'm getting cheap and I expect weird.

not your keys, not your coins
svendeal

Member

Deal Sniper

#19
frank79 said:
RackNerd Amsterdam server is routing through Ashburn

Wait hold up. RackNerd got Amsterdam? Since when? Last I checked they was only US. Lemme check... huh okay they do now. But at $1/month you think they got their own ASN optimized for Europe? Nah they probably reselling or using some US upstream that backhauls everything.

I got three RackNerd boxes, all US, all work fine for what I pay. You want EU routing you gotta pay EU prices.

world record: 4min Arch install
JA

Member

#20
turbochetah said:
Check if your IP is behind Cloudflare proxy

This. I had the exact same problem and it was Cloudflare. Not even DNS, the orange cloud proxy. Turned it off, routing went normal. Turned it back on, back to Ashburn. Cloudflare's Lisbon node apparently peers weird or something — https://www.peeringdb.com

If you need Cloudflare for DDoS you can't turn it off though. Catch-22.

Thread closed

Replies are closed on this thread. Closed: the question was answered.