Investigating BYC Being Slow

Pics
I can see entries in the access logs until just over an hour ago on that IP address

Code:
104.224.120.207 - - [12/Mar/2019:20:55:01 +0000] GET /account/alerts HTTP/1.1 "200" 83164 "https://www.backyardchickens.com/threads/chicken-pulling-feathers.1296130/" "Mozilla/5.0 (iPad; CPU OS 10_3_3 like Mac OS X) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.0 Mobile/14G60 Safari/602.1" "104.224.120.207" "-" "3383240" "5" "0.000"
104.224.120.207 - - [12/Mar/2019:20:55:18 +0000] GET /forums/ HTTP/1.1 "200" 166213 "https://www.backyardchickens.com/account/alerts" "Mozilla/5.0 (iPad; CPU OS 10_3_3 like Mac OS X) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.0 Mobile/14G60 Safari/602.1" "104.224.120.207" "-" "3384050" "5" "0.200"
104.224.120.207 - - [12/Mar/2019:20:55:45 +0000] GET /forums/ducks.42/ HTTP/1.1 "200" 202238 "https://www.backyardchickens.com/forums/" "Mozilla/5.0 (iPad; CPU OS 10_3_3 like Mac OS X) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.0 Mobile/14G60 Safari/602.1" "104.224.120.207" "-" "3384868" "1" "0.100"
127.0.0.1 - - [12/Mar/2019:21:03:40 +0000] GET /threads/homegrown-feed.1296049/ HTTP/1.1 "200" 23681 "https://www.backyardchickens.com/forums/ducks.42/" "Mozilla/5.0 (iPad; CPU OS 10_3_3 like Mac OS X) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.0 Mobile/14G60 Safari/602.1" "104.224.120.207,127.0.0.1,127.0.0.1" "-" "3402308" "1" "0.100"

On the last request, something changed, because your device started adding 127.0.0.1 to the requests, and then 104.224.120.207,127.0.0.1,127.0.0.1 as the source IP address of the final request.

This isn't something with Cloudflare or BYC, it's local to your device.
 
I can see entries in the access logs until just over an hour ago on that IP address

Code:
104.224.120.207 - - [12/Mar/2019:20:55:01 +0000] GET /account/alerts HTTP/1.1 "200" 83164 "https://www.backyardchickens.com/threads/chicken-pulling-feathers.1296130/" "Mozilla/5.0 (iPad; CPU OS 10_3_3 like Mac OS X) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.0 Mobile/14G60 Safari/602.1" "104.224.120.207" "-" "3383240" "5" "0.000"
104.224.120.207 - - [12/Mar/2019:20:55:18 +0000] GET /forums/ HTTP/1.1 "200" 166213 "https://www.backyardchickens.com/account/alerts" "Mozilla/5.0 (iPad; CPU OS 10_3_3 like Mac OS X) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.0 Mobile/14G60 Safari/602.1" "104.224.120.207" "-" "3384050" "5" "0.200"
104.224.120.207 - - [12/Mar/2019:20:55:45 +0000] GET /forums/ducks.42/ HTTP/1.1 "200" 202238 "https://www.backyardchickens.com/forums/" "Mozilla/5.0 (iPad; CPU OS 10_3_3 like Mac OS X) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.0 Mobile/14G60 Safari/602.1" "104.224.120.207" "-" "3384868" "1" "0.100"
127.0.0.1 - - [12/Mar/2019:21:03:40 +0000] GET /threads/homegrown-feed.1296049/ HTTP/1.1 "200" 23681 "https://www.backyardchickens.com/forums/ducks.42/" "Mozilla/5.0 (iPad; CPU OS 10_3_3 like Mac OS X) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.0 Mobile/14G60 Safari/602.1" "104.224.120.207,127.0.0.1,127.0.0.1" "-" "3402308" "1" "0.100"

On the last request, something changed, because your device started adding 127.0.0.1 to the requests, and then 104.224.120.207,127.0.0.1,127.0.0.1 as the source IP address of the final request.

This isn't something with Cloudflare or BYC, it's local to your device.
What can I do?
 
I’ll let you know if it works..:p
Please do. This is something I've not seen before in all my time running servers / forums.

You can see that Cloudflare think your IP was 127.0.0.1 from the screen shot

upload_2019-3-12_22-47-31.png


Your IP: 127.0.0.1

I've set up our server logging to also log the Ray ID which Cloudflare track:

Code:
2605:8d80:403:30dc:e8e2:b8ae:91ed:92d8 - - [12/Mar/2019:22:46:56 +0000]  TLSv1.2/ECDHE-RSA-AES128-GCM-SHA256 "GET /account/alerts HTTP/1.1" 200 81517 "https://www.backyardchickens.com/threads/bycs-random-funny-posting-thread-hosts-mike-sally.1127873/page-476" "Mozilla/5.0 (iPhone; CPU iPhone OS 12_1_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Mobile/15E148 Safari/604.1" 4b694e9aae8ac99f-SEA

It's the last part of the request above, so we can now match up events between CF and our server.
 

New posts New threads Active threads

Back
Top Bottom