Hi Kevin,
1st example:
curl -svo /dev/null -H "Fastly-Debug:1" https://www.bbc.co.uk 2>&1
* Host www.bbc.co.uk:443 was resolved.
* IPv6: (none)
* IPv4: 212.58.237.129, 212.58.236.1, 212.58.235.1, 212.58.237.1, 212.58.236.129, 212.58.235.129
* Trying 212.58.237.129:443...
* schannel: disabled automatic use of client certificate
* ALPN: curl offers http/1.1
2nd Example:
curl -svo /dev/null -H "Fastly-Debug:1" https://www.reddit.com 2>&1
* Host www.reddit.com:443 was resolved.
* IPv6: (none)
* IPv4: 146.75.73.140
* Trying 146.75.73.140:443...
* schannel: disabled automatic use of client certificate
* ALPN: curl offers http/1.1
*
So in both cases there’s no data coming back.
When I run the command on the device when it’s on a different public IP, it’s fine:
curl -svo /dev/null -H "Fastly-Debug:1" https://www.bbc.co.uk 2>&1
* Host www.bbc.co.uk:443 was resolved.
* IPv6: (none)
* IPv4: 212.58.237.129, 212.58.235.1, 212.58.236.1, 212.58.235.129, 212.58.236.129, 212.58.237.1
* Trying 212.58.237.129:443...
* schannel: disabled automatic use of client certificate
* ALPN: curl offers http/1.1
* ALPN: server accepted http/1.1
* Connected to www.bbc.co.uk (212.58.237.129) port 443
* using HTTP/1.x
> GET / HTTP/1.1
> Host: www.bbc.co.uk
> User-Agent: curl/8.13.0
> Accept: */*
> Fastly-Debug:1
>
* Request completely sent off
* schannel: remote party requests renegotiation
* schannel: renegotiating SSL/TLS connection
* schannel: SSL/TLS connection renegotiated
* schannel: remote party requests renegotiation
* schannel: renegotiating SSL/TLS connection
* schannel: SSL/TLS connection renegotiated
< HTTP/1.1 200 OK
< Date: Wed, 18 Jun 2025 08:37:24 GMT
< Content-Type: text/html
< Content-Length: 701330
< Connection: keep-alive
< Keep-Alive: timeout=120
< belfrage-cache-status: HIT
< bid: bruce
< brequestid: 5c096cea7f76401a862ec2a1a28fedeb
< bsig: c17808d11d40816b2eba1a23ffb11ba3
< cache-control: private, stale-if-error=90, stale-while-revalidate=30, max-age=0, must-revalidate
< content-security-policy: default-src 'none'; script-src 'strict-dynamic' 'nonce-g4hdBO54jIqVRLvhPsX7kkMEAonUBWW+QVNGBk7M7d2FXOoPr8' 'self' 'report-sample' 'unsafe-inline' assets.wearehearken.eu cdn.syndication.twimg.com connect.facebook.net c.files.bbci.co.uk emp.bbci.co.uk ems.wearehearken.eu modules.wearehearken.eu mybbc-analytics.files.bbci.co.uk nav.files.bbci.co.uk news.files.bbci.co.uk platform.twitter.com public.flourish.studio static.bbc.co.uk static.bbci.co.uk static.chartbeat.com static2.chartbeat.com www.bbc.co.uk www.instagram.com www.ons.gov.uk gn-web-assets.api.bbc.com www.google-analytics.com bitesize.files.bbci.co.uk www.tiktok.com lf16-tiktok-web.ttwstatic.com static.files.bbci.co.uk; img-src 'self' https: data:; font-src c.files.bbci.co.uk gel.files.bbci.co.uk static.files.bbci.co.uk static.bbci.co.uk news.files.bbci.co.uk ws-downloads.files.bbci.co.uk bitesize.files.bbci.co.uk; style-src branding.files.bbci.co.uk cdn.riddle.com flo.uri.sh news.files.bbci.co.uk platform.twitter.com static.bbc.co.uk static.bbci.co.uk static.files.bbci.co.uk ton.twimg.com www.riddle.com 'unsafe-inline' lf16-tiktok-web.ttwstatic.com; frame-src 'self' bbc001.carto.com bbc003.carto.com bbc-maps.carto.com cdn.riddle.com chartbeat.com emp.bbc.co.uk emp.bbc.com flo.uri.sh graphics.reuters.com www.reuters.com graphics.thomsonreuters.com dynamic.mc-cdn.io vapi.mc-cdn.io vapi.beta.mc-cdn.io elections.mapcreator.io elections.beta.mapcreator.io cdn.mapcreator.io m.facebook.com news.files.bbci.co.uk personaltaxcalculator2.deloittecloud.co.uk platform.twitter.com public.flourish.studio static2.chartbeat.com syndication.twitter.com web.facebook.com www.bbc.co.uk www.facebook.com www.instagram.com www.tiktok.com www.ons.gov.uk www.riddle.com bbc-squares-dev.low6.com bbc-squares-prod.low6.com www.youtube.com www.youtube-nocookie.com uk-script.dotmetrics.net ssp-app-uk.votenow.tv ssp-app-uktest.votenow.tv ssp-app-ukbench.votenow.tv session.test.bbc.co.uk session.bbc.co.uk session.stage.bbc.co.uk bitesize.files.bbci.co.uk; object-src 'none'; manifest-src static.files.bbci.co.uk bitesize.files.bbci.co.uk; media-src 'self' blob: https:; connect-src 'self' https:; child-src blob:; base-uri 'none'; form-action 'self' platform.twitter.com syndication.twitter.com uk-script.dotmetrics.net/DeviceInfo.dotmetrics; frame-ancestors 'none'; upgrade-insecure-requests; report-to default; report-uri https://webcore.bbc-reporting-api.app/report-endpoint;
< feature-policy: accelerometer 'none'; autoplay 'self' https://emp.bbc.com https://emp.bbc.co.uk http://emp.bbc.com http://emp.bbc.co.uk; camera 'none'; document-domain 'self' https://emp.bbc.com https://emp.bbc.co.uk http://emp.bbc.com http://emp.bbc.co.uk; encrypted-media 'none'; fullscreen 'self' https://emp.bbc.com https://emp.bbc.co.uk http://emp.bbc.com http://emp.bbc.co.uk; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; midi 'none'; payment 'none'; picture-in-picture 'self' https://emp.bbc.com https://emp.bbc.co.uk http://emp.bbc.com http://emp.bbc.co.uk; screen-wake-lock 'none'; sync-xhr 'self'; usb 'none'; xr-spatial-tracking 'none'
< nel: {"report_to":"default","max_age":2592000,"include_subdomains":true,"failure_fraction":0.25}
< permissions-policy: accelerometer=(), autoplay=(self "https://emp.bbc.com" "https://emp.bbc.co.uk" "http://emp.bbc.com" "http://emp.bbc.co.uk"), camera=(), document-domain=(self "https://emp.bbc.com" "https://emp.bbc.co.uk" "http://emp.bbc.com" "http://emp.bbc.co.uk"), encrypted-media=(), fullscreen=(self "https://emp.bbc.com" "https://emp.bbc.co.uk" "http://emp.bbc.com" "http://emp.bbc.co.uk"), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(self "https://emp.bbc.com" "https://emp.bbc.co.uk" "http://emp.bbc.com" "http://emp.bbc.co.uk"), screen-wake-lock=(), sync-xhr=(self), usb=(), xr-spatial-tracking=()
< referrer-policy: strict-origin-when-cross-origin
< req-svc-chain: GTM,BELFRAGE
< vary: accept-encoding,x-id-oidc-signedin
< via: 1.1 BBC-GTM, 1.1 Belfrage
< x-content-type-options: nosniff
< x-frame-options: DENY
< x-xss-protection: 1; mode=block
< Origin-Agent-Cluster: ?0
< X-BBC-Edge-Cache-Status: HIT
< report-to: {"group":"default","max_age":2592000,"endpoints":[{"url":"https://default.bbc-reporting-api.app/report-endpoint","priority":1}],"include_subdomains":true}
< Server: BBC-GTM
< Strict-Transport-Security: max-age=31536000; preload
< Permissions-Policy: browsing-topics=(), join-ad-interest-group=(), run-ad-auction=()
<
{ [27856 bytes data]
* client returned ERROR on write of 16384 bytes
* closing connection #0
So, the two IPs from our ISP affected was our old ip 87.224.70.25 and this was changed to 87.224.97.148 and this issue has persisted.