Jump to content

Images won't load in the forum


Zahlea

Recommended Posts

Images won't load in the forum

This forum seems dead so not sure this will go anywhere. Anyway, I haven't been able to see most pictures in the forum for several days. I've hard reloaded, tried to power off my router and turning it on again, etc. etc. all the usual. None of the computers in my home (3 of them) gets pictures, nor does my phone. I even had a friend in a different city try it and he doesn't get any pictures either. This has been going on for at least 1-2 weeks and nothing I can think of helps.

Edit: I see the banner and background on the site, but I can't see my or other users' profile pictures and I could see none of the pictures included in the latest community crunch. This is what it looks like:  

image.png

Link to comment
Share on other sites

  • Chris locked this topic

Images won't load in the forum

I wrote a post about images not showing and got a reply about it being the Cloud Flare outage. Thank you for replying @Chris. However, you'll have to excuse the new post as you also closed the topic so I couldn't reply that I still have an issue, even when trying incognito mode, even when trying on a phone not connected to wifi, even after flushing the DNS, even on my friend's computer or phone in a third city in the same (European) country - all using different ISPs. I showed the source of the page and I'm pasting the picture here (should be it, I still can't see images even when posting them myself): 
image.thumb.png.976db9e74270f6718f8eb6f2bedeebfe.png

Your CDN returns a 504 Bad Gateway. This was mere minutes ago but has been exactly the same for almost two weeks at least. As I've been told, the Cloud Flare issue was a couple of days ago, i.e. more than a week after the problem began and it's not over as your reply seemed to suggest.

Link to comment
Share on other sites

Hey @Chris

There seems to be some geographical dns resolution problem at your cdn cdn.survivetheark.com.

I am in Spain, and since some week ago Im not able to see any image on survivetheark.com that is linked from cdn.survivetheark.com.
Thinking it could be a problem on my computer I've done some checks and Im pretty sure that if I resolve the cdn address using an spanish dns server it resolves to a bad ip that gives a 504 http error.

This is the log from one of my computers at my local area network:

alex@nas:~$ nslookup cdn.survivetheark.com 8.8.8.8 ## Trying with google DNS
Server:         8.8.8.8
Address:        8.8.8.8#53

Non-authoritative answer:
cdn.survivetheark.com   canonical name = ace1e05c.l11cdn.net.
Name:   ace1e05c.l11cdn.net
Address: 185.31.158.96
Name:   ace1e05c.l11cdn.net
Address: 185.183.106.10

alex@nas:~$ nslookup cdn.survivetheark.com 195.235.113.3 ## Trying with Movistar Spain DNS
Server:         195.235.113.3
Address:        195.235.113.3#53

Non-authoritative answer:
cdn.survivetheark.com   canonical name = ace1e05c.l11cdn.net.
Name:   ace1e05c.l11cdn.net
Address: 185.31.158.96
Name:   ace1e05c.l11cdn.net
Address: 185.183.106.10

alex@nas:~$ nslookup cdn.survivetheark.com 212.166.210.80 ## Trying with Vodafone Spain DNS
Server:         212.166.210.80
Address:        212.166.210.80#53

Non-authoritative answer:
cdn.survivetheark.com   canonical name = ace1e05c.l11cdn.net.
Name:   ace1e05c.l11cdn.net
Address: 185.183.106.10
Name:   ace1e05c.l11cdn.net
Address: 185.31.158.96


As you can see all the DNS servers that are marked as spanish via ripe records in case of Movistar/Vodafone, and probably Google doing some unicast routing to a server they have in Spain, they all resolve to the same two ip's.

If I try to fetch an image from the cdn I get this results:

alex@nas:~$ wget --no-check-certificate -4 https://cdn.survivetheark.com/uploads/monthly_2020_07/Chibi.jpg.e5e5c4c93cc9e343b7590f9832ec2419.jpg
--2020-07-25 18:41:40--  https://cdn.survivetheark.com/uploads/monthly_2020_07/Chibi.jpg.e5e5c4c93cc9e343b7590f9832ec2419.jpg
Resolving cdn.survivetheark.com (cdn.survivetheark.com)... 185.183.106.10, 185.31.158.96
Connecting to cdn.survivetheark.com (cdn.survivetheark.com)|185.183.106.10|:443... connected.
WARNING: cannot verify cdn.survivetheark.com's certificate, issued by ‘/C=GB/ST=Greater Manchester/L=Salford/O=Sectigo Limited/CN=Sectigo RSA Domain Validation Secure Server CA’:
  Issued certificate has expired.
HTTP request sent, awaiting response... 504 Gateway Time-out
2020-07-25 18:41:50 ERROR 504: Gateway Time-out.

As you can see Im getting error 504, its the same Im getting in chrome in my Windows 10. Notice also the TLS certificate error, I have to force --no-check-certificate because there seem to be some problem with an expired certificate in the CA.

Note that if I use some dns server that is not in my country, it resolves to different ip's that work:

alex@nas:~$ ping -c 2 64.6.65.6 ## Verisign server, its in USA acording to IANA and latency shows im connecting pretty far
PING 64.6.65.6 (64.6.65.6) 56(84) bytes of data.
64 bytes from 64.6.65.6: icmp_seq=1 ttl=53 time=97.2 ms
64 bytes from 64.6.65.6: icmp_seq=2 ttl=53 time=96.5 ms


alex@nas:~$ nslookup cdn.survivetheark.com 64.6.65.6
Server:         64.6.65.6
Address:        64.6.65.6#53

Non-authoritative answer:
cdn.survivetheark.com   canonical name = ace1e05c.l11cdn.net.
Name:   ace1e05c.l11cdn.net
Address: 85.131.129.131


 


Now, if I connect to a server I have in OVH France, I am able to resolve the cdn ip correctly and the image loads:

alex@vpns:~$ nslookup cdn.survivetheark.com 8.8.8.8
Server:         8.8.8.8
Address:        8.8.8.8#53

Non-authoritative answer:
cdn.survivetheark.com   canonical name = ace1e05c.l11cdn.net.
Name:   ace1e05c.l11cdn.net
Address: 85.131.129.93
Name:   ace1e05c.l11cdn.net
Address: 85.131.129.91
Name:   ace1e05c.l11cdn.net
Address: 85.131.129.90
Name:   ace1e05c.l11cdn.net
Address: 85.131.129.92
alex@vpns:~$ wget --no-check-certificate -4 https://cdn.survivetheark.com/uploads/monthly_2020_07/Chibi.jpg.e5e5c4c93cc9e343b7590f9832ec2419.jpg
--2020-07-25 19:06:20--  https://cdn.survivetheark.com/uploads/monthly_2020_07/Chibi.jpg.e5e5c4c93cc9e343b7590f9832ec2419.jpg
Resolving cdn.survivetheark.com (cdn.survivetheark.com)... 85.131.129.93, 85.131.129.91, 85.131.129.90, ...
Connecting to cdn.survivetheark.com (cdn.survivetheark.com)|85.131.129.93|:443... connected.
WARNING: The certificate of `cdn.survivetheark.com' is not trusted.
HTTP request sent, awaiting response... 200 OK
Length: 70362 (69K) [image/jpeg]
Saving to: `Chibi.jpg.e5e5c4c93cc9e343b7590f9832ec2419.jpg'


Also, about the certificate, here is some info about why its failing to be accepted to wget and imo chrome shouldn't be accepting it:
https://www.sslshopper.com/ssl-checker.html#hostname=cdn.survivetheark.com
As you can see some intermediate certificate expired 54 days ago.


Hope you can fix this soon. Apparently it is not a Cloud Flare problem but a  Level11 which I think its your cdn provider as cdn.survivetheark.com resolves to IPs that also resolve to ssl.l11cdn.net. 
 

For any user that is having this same problem and want a temporary workaround check my next post.

Link to comment
Share on other sites

On 7/25/2020 at 12:15 PM, slejo said:

Still dont see any images. I have tried with different browsers and different internet providers.

Meanwhile it is fixed you can either:

Manually edit your c:\windows\system32\drivers\etc\hosts and add a line like that:

85.131.129.131  cdn.survivetheark.com

* You need to do this as Administrator, and close/open your browser after.

Or use a DNS provider that does not have servers in your country, for example in my case, in spain, if I use 8.8.8.8, 9.9.9.9, 1.1.1.1 none of this works, opendns from cisco 208.67.222.222 doesnt work too but 64.6.65.6 which is from Verisign does work (its also bit slow compaired to the others... almost 100ms latency because of connecting to USA vs 2ms in the case of google and 20 ms of the other servers).

 

I think that editing etc\hosts its better temporary solution than changing the dns, as it will slighly make the initial connections to any site slower.

Link to comment
Share on other sites

  • Administrator
On 7/25/2020 at 1:04 PM, arkark said:

Hey @Chris

There seems to be some geographical dns resolution problem at your cdn cdn.survivetheark.com.

I am in Spain, and since some week ago Im not able to see any image on survivetheark.com that is linked from cdn.survivetheark.com.
Thinking it could be a problem on my computer I've done some checks and Im pretty sure that if I resolve the cdn address using an spanish dns server it resolves to a bad ip that gives a 504 http error.

This is the log from one of my computers at my local area network:


alex@nas:~$ nslookup cdn.survivetheark.com 8.8.8.8 ## Trying with google DNS
Server:         8.8.8.8
Address:        8.8.8.8#53

Non-authoritative answer:
cdn.survivetheark.com   canonical name = ace1e05c.l11cdn.net.
Name:   ace1e05c.l11cdn.net
Address: 185.31.158.96
Name:   ace1e05c.l11cdn.net
Address: 185.183.106.10

alex@nas:~$ nslookup cdn.survivetheark.com 195.235.113.3 ## Trying with Movistar Spain DNS
Server:         195.235.113.3
Address:        195.235.113.3#53

Non-authoritative answer:
cdn.survivetheark.com   canonical name = ace1e05c.l11cdn.net.
Name:   ace1e05c.l11cdn.net
Address: 185.31.158.96
Name:   ace1e05c.l11cdn.net
Address: 185.183.106.10

alex@nas:~$ nslookup cdn.survivetheark.com 212.166.210.80 ## Trying with Vodafone Spain DNS
Server:         212.166.210.80
Address:        212.166.210.80#53

Non-authoritative answer:
cdn.survivetheark.com   canonical name = ace1e05c.l11cdn.net.
Name:   ace1e05c.l11cdn.net
Address: 185.183.106.10
Name:   ace1e05c.l11cdn.net
Address: 185.31.158.96


As you can see all the DNS servers that are marked as spanish via ripe records in case of Movistar/Vodafone, and probably Google doing some unicast routing to a server they have in Spain, they all resolve to the same two ip's.

If I try to fetch an image from the cdn I get this results:


alex@nas:~$ wget --no-check-certificate -4 https://cdn.survivetheark.com/uploads/monthly_2020_07/Chibi.jpg.e5e5c4c93cc9e343b7590f9832ec2419.jpg
--2020-07-25 18:41:40--  https://cdn.survivetheark.com/uploads/monthly_2020_07/Chibi.jpg.e5e5c4c93cc9e343b7590f9832ec2419.jpg
Resolving cdn.survivetheark.com (cdn.survivetheark.com)... 185.183.106.10, 185.31.158.96
Connecting to cdn.survivetheark.com (cdn.survivetheark.com)|185.183.106.10|:443... connected.
WARNING: cannot verify cdn.survivetheark.com's certificate, issued by ‘/C=GB/ST=Greater Manchester/L=Salford/O=Sectigo Limited/CN=Sectigo RSA Domain Validation Secure Server CA’:
  Issued certificate has expired.
HTTP request sent, awaiting response... 504 Gateway Time-out
2020-07-25 18:41:50 ERROR 504: Gateway Time-out.

As you can see Im getting error 504, its the same Im getting in chrome in my Windows 10. Notice also the TLS certificate error, I have to force --no-check-certificate because there seem to be some problem with an expired certificate in the CA.

Note that if I use some dns server that is not in my country, it resolves to different ip's that work:


alex@nas:~$ ping -c 2 64.6.65.6 ## Verisign server, its in USA acording to IANA and latency shows im connecting pretty far
PING 64.6.65.6 (64.6.65.6) 56(84) bytes of data.
64 bytes from 64.6.65.6: icmp_seq=1 ttl=53 time=97.2 ms
64 bytes from 64.6.65.6: icmp_seq=2 ttl=53 time=96.5 ms


alex@nas:~$ nslookup cdn.survivetheark.com 64.6.65.6
Server:         64.6.65.6
Address:        64.6.65.6#53

Non-authoritative answer:
cdn.survivetheark.com   canonical name = ace1e05c.l11cdn.net.
Name:   ace1e05c.l11cdn.net
Address: 85.131.129.131


 


Now, if I connect to a server I have in OVH France, I am able to resolve the cdn ip correctly and the image loads:


alex@vpns:~$ nslookup cdn.survivetheark.com 8.8.8.8
Server:         8.8.8.8
Address:        8.8.8.8#53

Non-authoritative answer:
cdn.survivetheark.com   canonical name = ace1e05c.l11cdn.net.
Name:   ace1e05c.l11cdn.net
Address: 85.131.129.93
Name:   ace1e05c.l11cdn.net
Address: 85.131.129.91
Name:   ace1e05c.l11cdn.net
Address: 85.131.129.90
Name:   ace1e05c.l11cdn.net
Address: 85.131.129.92

alex@vpns:~$ wget --no-check-certificate -4 https://cdn.survivetheark.com/uploads/monthly_2020_07/Chibi.jpg.e5e5c4c93cc9e343b7590f9832ec2419.jpg
--2020-07-25 19:06:20--  https://cdn.survivetheark.com/uploads/monthly_2020_07/Chibi.jpg.e5e5c4c93cc9e343b7590f9832ec2419.jpg
Resolving cdn.survivetheark.com (cdn.survivetheark.com)... 85.131.129.93, 85.131.129.91, 85.131.129.90, ...
Connecting to cdn.survivetheark.com (cdn.survivetheark.com)|85.131.129.93|:443... connected.
WARNING: The certificate of `cdn.survivetheark.com' is not trusted.
HTTP request sent, awaiting response... 200 OK
Length: 70362 (69K) [image/jpeg]
Saving to: `Chibi.jpg.e5e5c4c93cc9e343b7590f9832ec2419.jpg'


Also, about the certificate, here is some info about why its failing to be accepted to wget and imo chrome shouldn't be accepting it:
https://www.sslshopper.com/ssl-checker.html#hostname=cdn.survivetheark.com
As you can see some intermediate certificate expired 54 days ago.


Hope you can fix this soon. Apparently it is not a Cloud Flare problem but a  Level11 which I think its your cdn provider as cdn.survivetheark.com resolves to IPs that also resolve to ssl.l11cdn.net. 
 

For any user that is having this same problem and want a temporary workaround check my next post.

Thanks for the detailed data. When our CDN company opens back up tomorrow i'll be in touch with them to figure out the issue.

Thanks again everyone for your feedback.

Link to comment
Share on other sites

  • Chris locked this topic

Archived

This topic is now archived and is closed to further replies.

Guest
This topic is now closed to further replies.
×
×
  • Create New...