Live data from Hacker News

Cloudflare misidentifies Hetzner IPs as being located in Iran

gitlab.com

41–50 of 245 posts

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#41
post #40
post #39

Earlier quoted context omitted.

It's more that you are on the right side in a unipolar world. When the world shifts to multipolarity in the next few years, the problem will solve itself.

Multipolarity is a more dangerous world, as we have seen Russia asserts itself at the expense of Ukraine.

[flagged]

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#42
post #7

My theory is lots of people who want to circumvent Iranian internet censorship rely on tunnels/VPNs hosted on Hetzner, which correlates those IPs with `Accept-Language: fa` and GPS locations collected from Android or other similar behavior.

I think a more likely explanation is that Hetzner just acquired some IPv4 address ranges that were previously used in Iran

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#43
post #18

Yeah, google does it too. I could not use certain Hetzner IPs to download container image on my kubernetes nodes at all. Even the official registry.k8s.io registry is hosted on Google Cloud Services and basic stuff like the pause image cant be pulled.

Google's IP to location mapping is so bad it has to be intentional. I was in Japan and using my home network as a VPN quite a bit, after a while Google decided my home comcast IP had to be located in Japan. Even though others in the household were still there, they started getting default-Japanese pages on google/maps/youtube/... It didn't fix itself back until a couple weeks after I got home, even filled out https:/…

They finger print your browser. You need to vpn to your home and serve from your US browser not tunnel traffic back to your Japan machine.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#44
post #5

Earlier quoted context omitted.

A lot of US resources ban traffic outside the US. Or, at least, from "suspicious" or "sanctioned" locations. Some ban EU due to GDPR. You never know such things when you are in US though...

but the traffic is _clearly coming from Germany_, the issue is that cloudflare/google have tagged certain ip addresses as Iranian no matter where the traffic actually originates from

> but the traffic is _clearly coming from Germany_

How do you know that if the only thing you see on the receiving side is an IP address, which is marked as Iranian?

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#45

Earlier quoted context omitted.

Which is plainly stupid. They should interpret the law to mean "We will treat every request from Iran as a non-paying customer, and won't offer anything outside the free-tier" Even if that isn't the way was written , it is plain that it falls within the intent of the law, and is beneficial to US businesses.

Isn't intent of sanctions to weaken the adversary? Providing services, even free-tier (or, may be, especially so), to sanctioned countries is exactly the opposite of that.

The adversary is the government and businesses associated with the government, not all of the 90 million people living in Iran.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#46
post #40
post #39

Earlier quoted context omitted.

It's more that you are on the right side in a unipolar world. When the world shifts to multipolarity in the next few years, the problem will solve itself.

Multipolarity is a more dangerous world, as we have seen Russia asserts itself at the expense of Ukraine.

Unless you happen to not be aligned with or really on the wrong side of that fabled ideal power monopole. It can quickly knock you from ignorance to reality. Imagine Russia was that monopole of power. Or look no further than a dictatorship. Great if your interests align or you're willing to bend them until they do, hell if they don't.

The US is the closest thing we have to a monopole these days and I'm sure it's sweet for some and very bitter for others.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#47
post #40
post #39

Earlier quoted context omitted.

It's more that you are on the right side in a unipolar world. When the world shifts to multipolarity in the next few years, the problem will solve itself.

Multipolarity is a more dangerous world, as we have seen Russia asserts itself at the expense of Ukraine.

[flagged]

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#48
post #39

I'm frequently reminded how thankful I am to live in a country with a strong, positive international reputation. Even ignoring actual quality-of-life stuff associated with where I live - simply not being from a country with a "dodgy" reputation makes many things so much easier. I don't have to think about blocked websites. Companies accept my payments. Couriers ship to me. With my passport, I walk straight to the fro…

It's more that you are on the right side in a unipolar world. When the world shifts to multipolarity in the next few years, the problem will solve itself.

I'm a globalist and all but when people say "multipolar" doesn't that usually mean "the USA shouldn't rule everyone, I want to also rule over some countries "

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#50

it's pretty absurd that cloudflare can just effectively cripple a cloud provider by tagging part of their IPv4 range as Iranian and not fixing their issues in over a year (and AFIK have no intention to fix them at all) like I wonder if Hetzner has any way to legally force them to stop misclassifying their IP

What's absurd to me is that Cloudflare gains more and more control over the internet, by people voluntarily submitting to its domination.

My favorite is trying to go someone's random blog with like 5 posts (because they have a singular post about the technical topic I'm trying to figure something out about) and I can't access the site because Cloudflare has decided my locked-down Firefox ("resist fingerprinting" + strict privacy mode etc.) running on OpenBSD is somehow malicious. So much for the open web. (nevermind the audacity that "we can't spy on you sufficiently" is enough to serve a 403 Forbidden response header)

Post reply on HN