Can't access sites using Fastly from our corporate lan

Network Services
1

We’ve been having some issues with access to websites using Fastly, e.g. www.bb.co.uk, www.reddit.com, nytimes, and twitch. Whilst we can ping and traceroute to those sites, in the browser we just don’t get a response at all. I’ve just got the ISP to change the public IP address of our router to see whether that made any difference, but it didn’t.

Can someone at Fastly take a look and see if there’s an issue with our IP address (87.224.97.148 is the one that we are using at present) as I cant find any reason for the sites not to work.

2

Can you run a command similar to this one, against one of the sites in question, and paste the headers in the response into this topic?

curl -svo /dev/null -H "Fastly-Debug:1" https://www.example.com 2>&1
3

Hi Kevin,

1st example:

curl -svo /dev/null -H "Fastly-Debug:1" https://www.bbc.co.uk 2>&1

* Host www.bbc.co.uk:443 was resolved.
* IPv6: (none)
* IPv4: 212.58.237.129, 212.58.236.1, 212.58.235.1, 212.58.237.1, 212.58.236.129, 212.58.235.129
*   Trying 212.58.237.129:443...
* schannel: disabled automatic use of client certificate
* ALPN: curl offers http/1.1

2nd Example:

curl -svo /dev/null -H "Fastly-Debug:1" https://www.reddit.com 2>&1
* Host www.reddit.com:443 was resolved.
* IPv6: (none)
* IPv4: 146.75.73.140
*   Trying 146.75.73.140:443...
* schannel: disabled automatic use of client certificate
* ALPN: curl offers http/1.1
*

So in both cases there’s no data coming back.

When I run the command on the device when it’s on a different public IP, it’s fine:

curl -svo /dev/null -H "Fastly-Debug:1" https://www.bbc.co.uk 2>&1

* Host www.bbc.co.uk:443 was resolved.
* IPv6: (none)
* IPv4: 212.58.237.129, 212.58.235.1, 212.58.236.1, 212.58.235.129, 212.58.236.129, 212.58.237.1
*   Trying 212.58.237.129:443...
* schannel: disabled automatic use of client certificate
* ALPN: curl offers http/1.1
* ALPN: server accepted http/1.1
* Connected to www.bbc.co.uk (212.58.237.129) port 443
* using HTTP/1.x
> GET / HTTP/1.1
> Host: www.bbc.co.uk
> User-Agent: curl/8.13.0
> Accept: */*
> Fastly-Debug:1
> 
* Request completely sent off
* schannel: remote party requests renegotiation
* schannel: renegotiating SSL/TLS connection
* schannel: SSL/TLS connection renegotiated
* schannel: remote party requests renegotiation
* schannel: renegotiating SSL/TLS connection
* schannel: SSL/TLS connection renegotiated
< HTTP/1.1 200 OK
< Date: Wed, 18 Jun 2025 08:37:24 GMT
< Content-Type: text/html
< Content-Length: 701330
< Connection: keep-alive
< Keep-Alive: timeout=120
< belfrage-cache-status: HIT
< bid: bruce
< brequestid: 5c096cea7f76401a862ec2a1a28fedeb
< bsig: c17808d11d40816b2eba1a23ffb11ba3
< cache-control: private, stale-if-error=90, stale-while-revalidate=30, max-age=0, must-revalidate
< content-security-policy: default-src 'none'; script-src 'strict-dynamic' 'nonce-g4hdBO54jIqVRLvhPsX7kkMEAonUBWW+QVNGBk7M7d2FXOoPr8' 'self' 'report-sample' 'unsafe-inline' assets.wearehearken.eu cdn.syndication.twimg.com connect.facebook.net c.files.bbci.co.uk emp.bbci.co.uk ems.wearehearken.eu modules.wearehearken.eu mybbc-analytics.files.bbci.co.uk nav.files.bbci.co.uk news.files.bbci.co.uk platform.twitter.com public.flourish.studio static.bbc.co.uk static.bbci.co.uk static.chartbeat.com static2.chartbeat.com www.bbc.co.uk www.instagram.com www.ons.gov.uk gn-web-assets.api.bbc.com www.google-analytics.com bitesize.files.bbci.co.uk www.tiktok.com lf16-tiktok-web.ttwstatic.com static.files.bbci.co.uk; img-src 'self' https: data:; font-src c.files.bbci.co.uk gel.files.bbci.co.uk static.files.bbci.co.uk static.bbci.co.uk news.files.bbci.co.uk ws-downloads.files.bbci.co.uk bitesize.files.bbci.co.uk; style-src branding.files.bbci.co.uk cdn.riddle.com flo.uri.sh news.files.bbci.co.uk platform.twitter.com static.bbc.co.uk static.bbci.co.uk static.files.bbci.co.uk ton.twimg.com www.riddle.com 'unsafe-inline' lf16-tiktok-web.ttwstatic.com; frame-src 'self' bbc001.carto.com bbc003.carto.com bbc-maps.carto.com cdn.riddle.com chartbeat.com emp.bbc.co.uk emp.bbc.com flo.uri.sh graphics.reuters.com www.reuters.com graphics.thomsonreuters.com dynamic.mc-cdn.io vapi.mc-cdn.io vapi.beta.mc-cdn.io elections.mapcreator.io elections.beta.mapcreator.io cdn.mapcreator.io m.facebook.com news.files.bbci.co.uk personaltaxcalculator2.deloittecloud.co.uk platform.twitter.com public.flourish.studio static2.chartbeat.com syndication.twitter.com web.facebook.com www.bbc.co.uk www.facebook.com www.instagram.com www.tiktok.com www.ons.gov.uk www.riddle.com bbc-squares-dev.low6.com bbc-squares-prod.low6.com www.youtube.com www.youtube-nocookie.com uk-script.dotmetrics.net ssp-app-uk.votenow.tv ssp-app-uktest.votenow.tv ssp-app-ukbench.votenow.tv session.test.bbc.co.uk session.bbc.co.uk session.stage.bbc.co.uk bitesize.files.bbci.co.uk; object-src 'none'; manifest-src static.files.bbci.co.uk bitesize.files.bbci.co.uk; media-src 'self' blob: https:; connect-src 'self' https:; child-src blob:; base-uri 'none'; form-action 'self' platform.twitter.com syndication.twitter.com uk-script.dotmetrics.net/DeviceInfo.dotmetrics; frame-ancestors 'none'; upgrade-insecure-requests; report-to default; report-uri https://webcore.bbc-reporting-api.app/report-endpoint;
< feature-policy: accelerometer 'none'; autoplay 'self' https://emp.bbc.com https://emp.bbc.co.uk http://emp.bbc.com http://emp.bbc.co.uk; camera 'none'; document-domain 'self' https://emp.bbc.com https://emp.bbc.co.uk http://emp.bbc.com http://emp.bbc.co.uk; encrypted-media 'none'; fullscreen 'self' https://emp.bbc.com https://emp.bbc.co.uk http://emp.bbc.com http://emp.bbc.co.uk; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; midi 'none'; payment 'none'; picture-in-picture 'self' https://emp.bbc.com https://emp.bbc.co.uk http://emp.bbc.com http://emp.bbc.co.uk; screen-wake-lock 'none'; sync-xhr 'self'; usb 'none'; xr-spatial-tracking 'none'
< nel: {"report_to":"default","max_age":2592000,"include_subdomains":true,"failure_fraction":0.25}
< permissions-policy: accelerometer=(), autoplay=(self "https://emp.bbc.com" "https://emp.bbc.co.uk" "http://emp.bbc.com" "http://emp.bbc.co.uk"), camera=(), document-domain=(self "https://emp.bbc.com" "https://emp.bbc.co.uk" "http://emp.bbc.com" "http://emp.bbc.co.uk"), encrypted-media=(), fullscreen=(self "https://emp.bbc.com" "https://emp.bbc.co.uk" "http://emp.bbc.com" "http://emp.bbc.co.uk"), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(self "https://emp.bbc.com" "https://emp.bbc.co.uk" "http://emp.bbc.com" "http://emp.bbc.co.uk"), screen-wake-lock=(), sync-xhr=(self), usb=(), xr-spatial-tracking=()
< referrer-policy: strict-origin-when-cross-origin
< req-svc-chain: GTM,BELFRAGE
< vary: accept-encoding,x-id-oidc-signedin
< via: 1.1 BBC-GTM, 1.1 Belfrage
< x-content-type-options: nosniff
< x-frame-options: DENY
< x-xss-protection: 1; mode=block
< Origin-Agent-Cluster: ?0
< X-BBC-Edge-Cache-Status: HIT
< report-to: {"group":"default","max_age":2592000,"endpoints":[{"url":"https://default.bbc-reporting-api.app/report-endpoint","priority":1}],"include_subdomains":true}
< Server: BBC-GTM
< Strict-Transport-Security: max-age=31536000; preload
< Permissions-Policy: browsing-topics=(), join-ad-interest-group=(), run-ad-auction=()
< 
{ [27856 bytes data]
* client returned ERROR on write of 16384 bytes
* closing connection #0

So, the two IPs from our ISP affected was our old ip 87.224.70.25 and this was changed to 87.224.97.148 and this issue has persisted.

4

Thanks! You’re correct, the TCP connection to Fastly isn’t even being established. The next debugging step is to use a tool called mtr, you’d run it like this:

mtr -P 443 -T -w  <destination ip>

That will show the path from your client machine to Fastly, and where the packet loss/drops are occurring.

5

It’s a windows machine so here’s tracert instead.

Tracing route to reddit.com [151.101.1.140]
over a maximum of 30 hops:

1 8 ms 14 ms 3 ms 192.168.1.1
2 6 ms 8 ms 6 ms 83.218.143.122
3 8 ms 8 ms 6 ms 83.218.143.153
4 8 ms 7 ms 9 ms 62.133.0.234
5 * * * Request timed out.
6 8 ms 8 ms 7 ms 154.54.61.62
7 7 ms 8 ms 7 ms 149.6.2.38
8 9 ms 8 ms 7 ms 151.101.1.140

I’ve logged a case with support for this issue.00429803

1 Like