Does not connect to app.powerbigov.us
Categories
(Core :: Networking: DNS, defect)
Tracking
()
People
(Reporter: jkvt, Unassigned)
Details
Attachments
(2 files)
3.png
User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Firefox/78.0
Steps to reproduce:
Go to https://app.powerbigov.us
Actual results:
"We’re having trouble finding that site." error (attached)
tcpdump shows only DNS request made, no http request
DNS 77 Standard query 0xe1bd A app.powerbigov.us
DNS 484 Standard query response 0xe1bd A app.powerbigov.us CNAME app.privatelink.analysis.usgovcloudapi.net CNAME 03be66dd-3487-4b89-a8d9-89ade6381a91.usgovtrafficmanager.net CNAME pbi-wfe-us-gov-virginia.powerbigov.us CNAME pbi-wfe-us-gov-virginia-ase.powerbigov.us CNAME app-pbi-wfe-us-gov-virginia.pbi-wfe-us-gov-virginia-ase.p.azurewebsites.us CNAME gc-p-bn1-5220b386.sip.p.azurewebsites.usgovcloudapi.net CNAME gc-p-bn1-5220b386.usgovcloudapp.net A 52.227.153.206
OS: Linux
Expected results:
Site opened
When DNS-over-HTTP is enabled it works fine, seems like error processing a large/incorrect DNS reply
|
||
Comment 4•5 years ago
|
||
The Bugbug bot thinks this bug should belong to the 'Core::Networking: DNS' component, and is moving the bug to that component. Please revert this change in case you think the bot is wrong.
|
||
Comment 5•5 years ago
|
||
jkvt, I can't reproduce this. The site redirects me to a Microsoft sign-in page, which I think is correct - when I try to navigate to https://<ip-address> manually, it shows me an Azure error, and I suspect that the Azure stuff is bound to the hostname.
Could you capture a http log? It might be useful. Please note that it may contain sensitive information so you may want to use a new profile.
Log attached, relevant line is this
E/nsHostResolver DNS lookup thread - lookup completed for host [app.powerbigov.us]: failure: unknown host.
I can do strace but don't know what to look for, does Firefox use system resolver or it's own?
|
|
||
Comment 10•5 years ago
|
||
jkvt, Firefox uses either your system's native resolver (via getaddrinfo) or our implementation of DoH if it is enabled. From the log you provided, looks like DoH is not enabled, and getaddrinfo is simply not returning any addresses.
I could not reproduce this on my local Fedora 34 setup with Firefox 78 ESR. Further, the DNS Lookup tool in about:networking yields the expected IP address: 52.227.153.206.
What's the output of $dig app.powerbigov.us on your system? Is the issue reproducible using other browsers on the same system? What about other machines on the network? Considering this is some kind of Azure instance, I wonder if there is some inadvertent configuration on the machine or network that is preventing the address from reaching Firefox via getaddrinfo.
|
Reporter | |
Comment 11•5 years ago
|
||
$ dig app.powerbigov.us
; <<>> DiG 9.11.32-RedHat-9.11.32-1.fc33 <<>> app.powerbigov.us
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34789
;; flags: qr rd ra; QUERY: 1, ANSWER: 8, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;app.powerbigov.us. IN A
;; ANSWER SECTION:
app.powerbigov.us. 120 IN CNAME app.privatelink.analysis.usgovcloudapi.net.
app.privatelink.analysis.usgovcloudapi.net. 41 IN CNAME 03be66dd-3487-4b89-a8d9-89ade6381a91.usgovtrafficmanager.net.
03be66dd-3487-4b89-a8d9-89ade6381a91.usgovtrafficmanager.net. 221 IN CNAME pbi-wfe-us-gov-virginia.powerbigov.us.
pbi-wfe-us-gov-virginia.powerbigov.us. 1725 IN CNAME pbi-wfe-us-gov-virginia-ase.powerbigov.us.
pbi-wfe-us-gov-virginia-ase.powerbigov.us. 1087 IN CNAME app-pbi-wfe-us-gov-virginia.pbi-wfe-us-gov-virginia-ase.p.azurewebsites.us.
app-pbi-wfe-us-gov-virginia.pbi-wfe-us-gov-virginia-ase.p.azurewebsites.us. 30 IN CNAME gc-p-bn1-5220b386.sip.p.azurewebsites.usgovcloudapi.net.
gc-p-bn1-5220b386.sip.p.azurewebsites.usgovcloudapi.net. 623 IN CNAME gc-p-bn1-5220b386.usgovcloudapp.net.
gc-p-bn1-5220b386.usgovcloudapp.net. 10 IN A 52.227.153.206
;; Query time: 144 msec
;; SERVER: 71.250.0.12#53(71.250.0.12)
;; WHEN: Sat Jun 26 20:07:23 EDT 2021
;; MSG SIZE rcvd: 453
|
|
Reporter | |
Comment 12•5 years ago
|
||
test app outputs correct address
#include <stdio.h>
#include <stdlib.h>
#include <netdb.h>
#include <netinet/in.h>
#include <sys/socket.h>
#include <arpa/inet.h>
int main(void)
{
struct addrinfo* result;
struct addrinfo* res;
getaddrinfo("app.powerbigov.us", NULL, NULL, &result);
for (res = result; res != NULL; res = res->ai_next) {
char addrstr[100];
void *ptr = &((struct sockaddr_in *) res->ai_addr)->sin_addr;
inet_ntop (res->ai_family, ptr, addrstr, 100);
printf ("address %s\n", addrstr);
}
}
connect(3, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("71.250.0.12")}, 16) = 0
poll([{fd=3, events=POLLOUT}], 1, 0) = 1 ([{fd=3, revents=POLLOUT}])
sendto(3, "O\307\1\0\0\1\0\0\0\0\0\0\3app\npowerbigov\2us\0\0\1\0\1", 35, MSG_NOSIGNAL, NULL, 0) = 35
poll([{fd=3, events=POLLIN}], 1, 5000) = 1 ([{fd=3, revents=POLLIN}])
ioctl(3, FIONREAD, [442]) = 0
recvfrom(3, "O\307\201\200\0\1\0\10\0\0\0\0\3app\npowerbigov\2us\0\0\1\0\1\300\f\0\5\0\1\0\0\0(\0,\3app\vprivatelink\10analysis\rusgovcloudapi\3net\0\300/\0\5\0\1\0\0\0(\0;$03be66dd-3487-4b89-a8d9-89ade6381a91\23usgovtrafficmanager\300V\300g\0\5\0\1\0\0\0\334\0\32\27pbi-wfe-us-gov-virginia\300\20\300\256\0\5\0\1\0\0\4\203\0\36\33pbi-wfe-us-gov-virginia-ase\300\20\300\324\0\5\0\1\0\0\4\203\0J\33app-pbi-wfe-us-gov-virginia\33pbi-wfe-us-gov-virginia-ase\1p\razurewebsites\300\33\300\376\0\5\0\1\0\0\0\36\0(\21gc-p-bn1-5220b386\3sip\1p\razurewebsites\300H\301T\0\5\0\1\0\0\4\36\0\"\21gc-p-bn1-5220b386\rusgovcloudapp\300V\301\210\0\1\0\1\0\0\0\n\0\0044\343\231\316", 1024, 0, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("71.250.0.12")}, [28 => 16]) = 442
close(3) = 0
fstat(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(0x88, 0x5), ...}) = 0
write(1, "address 52.227.153.206\n", 23address 52.227.153.206
) = 23
|
|
Reporter | |
Comment 13•5 years ago
|
||
strace from firefox, but firefox somehow does not parse the response
1806 connect(72, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("71.250.0.12")}, 16) = 0
1806 sendto(72, "\205+\1\0\0\1\0\0\0\0\0\0\3app\npowerbigov\2us\0\0\1\0\1", 35, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
1806 recvfrom(72, "\205+\201\200\0\1\0\10\0\0\0\0\3app\npowerbigov\2us\0\0\1\0\1\300\f\0\5\0\1\0\0\0x\0,\3app\vprivatelink\10analysis\rusgovcloudapi\3net\0\300/\0\5\0\1\0\0\0x\0;$03be66dd-3487-4b89-a8d9-89ade6381a91\23usgovtrafficmanager\300V\300g\0\5\0\1\0\0\1,\0\32\27pbi-wfe-us-gov-virginia\300\20\300\256\0\5\0\1\0\0\4|\0\36\33pbi-wfe-us-gov-virginia-ase\300\20\300\324\0\5\0\1\0\0\4|\0J\33app-pbi-wfe-us-gov-virginia\33pbi-wfe-us-gov-virginia-ase\1p\razurewebsites\300\33\300\376\0\5\0\1\0\0\0\36\0(\21gc-p-bn1-5220b386\3sip\1p\razurewebsites\300H\301T\0\5\0\1\0\0\4O\0\"\21gc-p-bn1-5220b386\rusgovcloudapp\300V\301\210\0\1\0\1\0\0\0\n\0\0044\343\231\316", 1024, 0, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("71.250.0.12")}, [28 => 16]) = 442
1806 close(72) = 0
|
|
Reporter | |
Comment 14•5 years ago
|
||
seems firefox 90 resolves the issue
|
||
Comment 15•5 years ago
|
||
Please reopen if the problem appears again.
Description
•