Forum Discussion

couttsj's avatar
couttsj
Organizer
9 days ago

Telus access problem!

For the last couple of days I am having a lot of trouble reaching 
certain web sites, "telus.com" being one of them. After a lengthy 
investigation I find that Telus is using a reverse proxy provided 
by "Cloudflare [172.66.0.98]". A reverse proxy sits in front of an 
origin server and ensures that no client ever communicates directly 
with that origin server. Some time ago, I had a similar problem with 
"VBForums.com". I was able to work around that issue by enabling 
"turnstile.workers.dev", but that doesn't seem to have an impact here.

Anyone having a similar problem?

J.A. Coutts

5 Replies

  • Here is another example. Telus neighborhood (forum.telus.com)

    traces to "forum.telus.com.cdn.cloudflare.net [162.159.140.100]",

    which belongs to:

    NetRange: 162.158.0.0 - 162.159.255.255

    OrgName: Cloudflare, Inc.

    Country: US

    It appears that the problem is associated with Cloudflare.

    J.A. Coutts

     

     

    • TELUS_Support's avatar
      TELUS_Support
      Icon for Official Support Team rankOfficial Support Team

      Hello. TELUS, like many other major networks, uses Cloudflare routing to mitigate DDoS attacks, handle load balancing, etc. Since modifying your Turnstile workers config didn't do the trick, you can always try the following:

       

      - Try visiting telus.com via a completely vanilla, extension-free browser session to see if you get a standard 200 OK or an explicit 403 Forbidden / 52x timeout error. Cloudflare's WAF might be silently dropping or looping your requests at the proxy level.

      - Try temporarily lowering your router or local NIC's MTU to 1420 or 1450 to see if the TLS handshake completes. This is because Cloudflare's edge routers will occasionally drop packets if they're fragmented a bit on the aggressive side.

      - Try flushing your resolver cache and, as a diagnostic test, temporarily toggle off IPv6 on your network adapter to force the connection purely over IPv4.

       

      See if any of those work for you!

      • couttsj's avatar
        couttsj
        Organizer

        - Try visiting telus.com via a completely vanilla, extension-free browser session to see if you get a standard 200 OK or an explicit 403 Forbidden / 52x timeout error. Cloudflare's WAF might be silently dropping or looping your requests at the proxy level.
        // Using Firefox 56.0.2 on Win 8.1, telus.com loads in less than a couple of seconds without the images. Using Firefox 151.0.2 on Win 11 took more than a minute and 45 seconds

        - Try temporarily lowering your router or local NIC's MTU to 1420 or 1450 to see if the TLS handshake completes. This is because Cloudflare's edge routers will occasionally drop packets if they're fragmented a bit on the aggressive side.
        // The handshake appears to complete, but the status box in the lower left corner of the window flashes between "Transferring data from www.telus.com" and "Transferring data from cdn.telus.digital...". In contrast, a 2mb message from fastmail.com in Australia took less than 2 seconds.

        - Try flushing your resolver cache and, as a diagnostic test, temporarily toggle off IPv6 on your network adapter to force the connection purely over IPv4.
        // Not sure what a resolver cache is, but rebooting the system did nothing to speed up the connection. Disabling IPv6 will take a little longer to figure out.