topic Re: Website Access Issue from one of branch office in General Topics

Website Access Issue from one of branch office

anwardurrani — Mon, 20 Nov 2023 08:14:02 GMT

Hello All,

We have PA-850 implemented across the sites (4 sites), there is a URL www.crunchydata.com is not accessible from one of Branch Office in US, while there is no issue accessing same URL from other branches. However

- i have checked and confirmed via detail packet inspection where i am getting hello client and server response back to client hello packet.

- There is no firewall rules are blocking.

On client machine i run following command to dig issue further and i am getting output as below -

I am also attaching error i am getting while i am access URL in browser.

Output -

----------

curl -iL crunchydata.com

HTTP/1.1 301 Moved Permanently

Date: Mon, 20 Nov 2023 08:09:26 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Cache-Control: max-age=3600

Expires: Mon, 20 Nov 2023 09:09:26 GMT

Location: https://crunchydata.com/

Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sjTRPHemIeAZO%2FMozoq4FWBCu1lJ0qIwfvki%2BTQoXKbf32cgY3CGJbMlUfPTobJLWdcA4m70vSzLqBPpIlQHGJsC%2B4ocOUZLV%2Fm5erUGM8kce%2FenGqGAqytasrH9ytiTcA%3D%3D"}],"group":"cf-nel","max_age":604800}

NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

Server: cloudflare

CF-RAY: 828f35f65f2e420d-EWR

HTTP/2 301

date: Mon, 20 Nov 2023 08:09:26 GMT

location: https://www.crunchydata.com/

cache-control: max-age=3600

expires: Mon, 20 Nov 2023 09:09:26 GMT

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cJ8gJMxnv0F1plWfWc4g8KUsi964eb0yEnox3RY987wil1OrOIdtxBHzgFmflyAjrSJXgc%2FOS462GVySS1aHZyEXCUsoYm1a4d9PhL%2FsTotDTeC1Lwu4jBbQ97fbcz%2FYEA%3D%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f35f6adf51a0b-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:27 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F7FJs2RvDpVCXXp7WX8RdNM0F3izsiErHlkWotTBiB6ilXdb21dSzG9NdG3XsMb%2FxYfMWjRad%2FOldwx%2FmBeEDkxSklW%2F%2FEeGei22dXGhlPEsNZnb85dYcQxpMcYfXWpjzsfb3Wc%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f35f72a0943d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:27 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mKAVYD602Kk5YDY1%2FGrgI3Lv1Y3KFhtZ%2FLX3KsdTRMZ7%2FIdwxubqi%2FkHasggr2JaKT8TivelQ%2BKK7xlLetPgjQgXA00Zm2CkARiO%2BFtH5KtyODObsy%2FQShydnnVhoZHY3adq63A%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f35f80a7343d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:27 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5fS9SPtob8h77iXKpZK38pRkPAGUa%2Fec1L5odTy6eS54jokXBqrrbQuEgZsBm0Cs3cVQZGLEWJEXnvOWEnSRsI8orZxwojHXZqi1kyxdXrZYJPBbzPFBJqLEZnMJGqBF2bPsF%2Bg%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f35f8fae443d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:27 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bIx%2BBdjcRAQCsRk1%2FbuzVajzzuj5YstJp6W88lg96Ckw4Nkc0l9qro1DIT%2BwrON6uL8a0%2Fxhsg0jI%2FtPvbThTzW9lU8pF3NB2mukTooMtg2xMhB7BYjBTqLTwMY9oVpeg5rrAic%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f35f95b1543d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:27 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ot057pHGVQcMi00BgCZm%2BZywGALVKhpX0hxbVNaMxqmKwGt272b9rQY7tKXhoZbaW4Xhm1Qhz5yKc3FPShFLvsA6%2FVk1YPeG%2F2yXJDUajVyQ1ao6Bjj4MnAGoqgIP9cvolaV1NY%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f35f9bb4743d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:27 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TAeu5I%2FuURW46FePQuWEOwz7vHG6WhF3EPDlxxtgBhpR5xIyDsFX5Mw0zO8OZOcgCPdS3UZWtgfZRS8s7NpJzrQHTZzLtRWg9s1XC5SLNAWuWx972m3y4DDYkOx65I8ujcqAjjk%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f35fa2b7a43d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:27 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Cann03tsMSlMKuKGeI2ej5uJQ8DG6YF0KvvAZOXMnurmMLeHnBVm6ZZQZ0slTcOkWuDr%2B6XL8FESSDQW9gCsoOrtUPSicPy4F0guOwrFT2RokBABBzf6JAdXio9LvSTpJSr9kJg%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f35fa8bb043d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:27 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FMfd%2FgCWDx6zfU687uNIS8Tar%2BME5LkEkp%2F%2FFA4PKDVZppzIQxhaLdr1x0Euk5saLT2jT82uL1swvsENhi0ZyKJ58w8DB7rD5jVs02e5dF9oKekiicgqvrlMk7aY%2FTmxjXCAujY%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f35faebdd43d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:27 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=coFlYbSBjpQOA%2Fb4W4GlaOTDmLVhDN5jhXhIgwnaG%2FkUB1I7vSjItnwwcxlI%2BtpgSNZyD%2FG%2F%2Fr%2FjgAbujMqdl%2BPkAQkJrjR2d%2FN4P6hDPK7yYtI5r79qyUBlqOgTyxJ9F5CxGJM%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f35fb4c0743d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:27 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=14lCK3Htc24b7eoDdYUvNR7H35rIMBU1EhPxKYwCvSigbn7YQe%2FGnJVjnjIDtCXoFENY%2FjIfzLOHFmHN4bN%2BVLHfN3T3DkvqT8Xjix1B0wRGikqtzo24I0c20cACeKOBM17mbak%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f35fbac3943d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:27 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fXnK0y5m7SIMw31x4NuSf0iE7Bva4cwbkw1UG34k%2FI7iJfOl7lgR0Nnj8ZnB39jogY4feaI0M4jFWvYtz38DcWzJX6qh9yIOf8PWaO6EEnjO%2FPvth9CxewH4OBSEouAyy1zE1Pg%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f35fc0c8143d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:27 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wBNby6iyX1et%2B%2FS%2F9%2BncLqSPrXnEaWxLRY%2BmqEfBOAenuT8mNGld%2BAvDH7fpcUDDnpLiUHkOWQP4EQGS7Eel7PStwwzjtGA8W6x4%2BTboRmQgGy%2BC8eMAybZhcr8tNygXdX0aTWM%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f35fc6cad43d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:27 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cv0AKPTr22G4RjcQFTMiF8cqUbY5oC6%2F2LG174kOT0U4cw%2BjBudTP6oFgqu671SKJDOSHOIPcKUxbwDNp6KZUz9Zi%2BuhlGzbR1KHcA%2F4cxIpDobAesv8X6v0E0V2aNVQL7op36w%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f35fcccfd43d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:27 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7DemE0l%2FfykSW08ThffW9njI%2B8wVRgSo25tAv0tXBK6dkEG4Wj%2BT9Tj1P4dQKkCb719Q3ScrXWXi5Yh7j4r0OSCJT1Q8wbbfJ9Kbb0C8yUwq%2FAxjuz3mGtw%2Bt%2Bb6n8Pi3ALNV1c%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f35fd2d2b43d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:27 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iVveXG2jW8TZZU1uF9ePwGCkwtlRZWe67hEcKH0eEyM%2FMpHClp8XtLQoi7PPTaKwHVp7eTBN9kcHMpA7q2pPFS076Bdt05CI9CKRI3Wa8b8GcJ8%2FB39w7d8D%2FNDRzKxuNq7DfNk%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f35fd8d5e43d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:28 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pD6qGQcY%2BiIoE3obRuLFnd5D3jvQBjn5eo0%2F9ekuHjJ8WXjt09hhuYwuvatWTdIoPk%2BGRyYcSS7QT%2FIm07J3eMPyxRuHjRLexmSpbzv9yArg%2FSTMvJgXXuWX6qpW9J%2FLmccnF1w%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f35fdfd8343d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:28 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s37dac5HP78sDy3napKcjoWkisP%2F8Oc7RqSG4OsxDX8y0Q47w3u6sUkdhcDUNl9Ox0tNfuPUtM5vhjNG6%2FI1vY%2BcykGwW696wmPoz4lPhfkzu1b7TEp2f2wfkiULjEgmOIgEFG0%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f35fe5dc843d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:28 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tfbTQGPkrLT%2FZ8bIz7mINxJsQoN9paeHspFqC9maklrVYIWITVmpYnUPobmGQeub1tC17Nm4oQPlVhaapmnZiTJguSgrCyGFg3xATEbA1lAihyEm0m5gFGkDF7ZyC%2Bk6CIjzFNA%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f35febe0743d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:28 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iydAcG1tKrSMHQQT2oGyeGdy2s3pSGCfNOnThAjIM26bwTmaqdUi1DV1ciHiQqNsVZSAY0UsFTUF1TS8IqpM70GJOKDpSedNTvCyLLnvNwl6vUVVswRPtkKMXxxzQo1XsLSgpxs%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f35ff1e3643d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:28 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DlKaMO0E0VF7PIK39WWmaTh2u25YE1nhLWvE%2B0WjU5fg4s9S3PRvEOS16VpcH1LEvDzL3rYT9yQiHsQLMALdQAfH59J%2FQe989jn5SZ1VKiflrrEKtHxl210gn9g1sRRo62BXJeU%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f35ff7e6343d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:28 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m0pvQucHG8tre2NlrwKEeXyglygBfFh%2BD%2FGbutLB4RbeDOenvQ2flIO0G9lg2QBpp9kfaArmbmdB3wtFPKd%2BBrm2XCoReHyPyC4zxHOcYclel5AXUf6FKK%2BD3avi7B5vwtn1hWU%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f35ffde9b43d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:28 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HR4aATVV6o51D4%2B8mA87lNlYwxugfGxwoSEkU8Auggy80R%2B8q%2Bl0Dxb%2BDn4pT9Ih7BhX414GZT01IqXoSNYPNs1od2XoT0jNg7UyGlJYTuzNot2wGuueAHZXGWa7kC1OhJLICpk%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f36004ecf43d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:28 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NUarz58UWNAcTZNSQ2Qs9wnFdXB3vLuRPWsXsdbQyhj4gW3mcfneohTLCurDQ9HBEqxSEGJ%2Ba8ECdoqu0q%2BAc3g0wiV8n6IeepLJ31RTTPAEA3VpPE6ml%2B0mWVGeH2W%2F61OEM4w%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f3600aef943d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:28 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3SOyP1Fmm6lh7rXu0rH9IfI8r2ZlHlHN5AY9e92F2t5TKCwbqKhE4AbSQbWKYl3D%2BpIwKB7cl0fWP3ji3TiTxH31aUAaUkphL4reucQi9SRMtznWq1BmUkQLWrv6lygAbRoxRDk%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f36010f2a43d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:28 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8qF49wlpPJIp83X5yKP64Cf2d7XaQLOdoi0qAsy83tcnqJQGl7RPrd0MHT4qq0QRIKDEiE6ftaDJc4n3a7Es5LGB1iCedvdsegMeNLEbHfc2c7CFnbI%2BPXWk5IPEyVjoWh1EF9M%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f36016f5343d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:28 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KWpsa9S1f2MYimEcCXOEt56BRzfx1eD2GAPDbqMTvCR%2FW%2BxwK9kLvVxqiesb0BNbJ8T3Syi1jZ%2B230ghafqGsPUKYU1%2FuUEZvYoqP3g%2F1X3Q2OzC4tmkgNNwc2akbHG9VeKGYsQ%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f3601cf8243d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:28 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4oCwMx5d0J%2FOKq9hDTXC7wwNLcxjmeOBcfpOxaW%2FTmbMkYlM0AFG6CzhO5OSkeRtaWRjfhZlWTuuqgAcMdaAN1%2BqulxhGToyS%2BKsx0uiI0v%2BvdWrT57l1eurqqWi2257TWImk4M%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f3602281943d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:28 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PUG6gwE2qNXDLA9ylf8nZ%2BxJwLRulkXnPhhx4gr2pa2tnD6HbJTo%2BWg%2FHya3%2FLH2PXZIjIQ0pcr4LDnBT0mi%2BB8ORvh7xbl5JCT1dqRM%2FkoHO0rnMVaEhiP71Awsx%2FJKZ2u1GzU%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f3602884443d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:28 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AOuZg3CXcCbI%2FQ%2FDgMHQfx90byzBbnDzIci5Y5t6092q3rwjsH1TqtRTRSnML1OCDxWl35WA%2BMNVTbFG74UnDDfsWnmv3IkE%2FzYaEb1GoPo6nKbYBWopwiWErXDXhZWnJk4eO44%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f3602f87c43d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:28 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cpvf2DlHjfjdlWMTis9rn2F5hfjLCX0g8pGGRx4bCWoK47thB5MLFaE9PqIDJWd7aNUlRD0MZmeDpvgdo5VcslAaFREI%2B5HjSqPjONrh3VbDyNgYhyv6%2BIYepHb1gUas50jqs%2F0%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f360358be43d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:28 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W1KZZgMvA4r2VpJFWajwI97cYClI8EkzjpxO%2Be57fF3qwXBpu17lZUjDeRvumuxXaKY0v4COFsXvwrzeROgGteE8pb22ISgqe90%2FDXMuScFWdT%2FagpTFBgaCktIcNs1ZoWjELBs%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f3603c8f643d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:29 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IdFIhs1w1NfrlvRT1wcYrHl739j1spLY%2FtDW%2BEGKHONlZ40S0mTCsKPsPh63owi5REGPcRXXqacqIeP78Ln2nOiGMdLrAdckeyvhUo%2BKg8Dq5ZtVe7jYnVi7h9UTtai05tgFmrw%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f3604292643d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:29 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iqE8%2BeclvmbTbJbaVnTplpUaT3Buj52dCFRB9VU9OiUooxn2Py%2FgkwFtJN5V1k5RDoA1VlciTMimSDcHc%2BmA05rxCxRoLwl5JdwtFKu1f%2BFKItYejJr10UZ2Wyykb61Cayj6%2BCk%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f3604895443d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:29 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tKwXsMy7YETidZ24cVELS4D7klE2tDy9WPGQ4hVoq%2FFvsr5PBfjyDb8JVTeuqA8kVIaoLytGR7IKJo%2Bcx5iw8dK6s8pOh6F7jZIpA8diqPlFiiS0NbFZO%2FNXYa82YdopPZsZUMs%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f3604e99043d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:29 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P%2Bilw4RySjhec0lzvFaKDYEVbwdYw8mXJLQsYa3VKkl%2BkgGT5slKkqP4h2T1RTL6wBHxGc6yOKzOerqXR0h4jBLOjTS9vE9whw19uIWh3kXHGmf4mB2VIMBeTW1ngpP5xxdMZlU%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f360549bb43d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:29 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m8iiO%2FVyDaKfx%2BnL12N6vmnNjDRDCEeMabv3VVxm%2BS45Agad0g9qve4R%2BthLzc4TrIFHleG0Culr7AUgRvwO87LlxGykODvzCVsguCBF3hJozLO9qrKFkS%2Fb6vpc4U1ULIaszMo%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f3605a9e843d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:29 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T%2FI18Ep8DHDhgXC7uQtbeJJ1uM2aEBynaDwqkJuwZYEPSFHHOg7fNnJ5aMBRpKOCnLtRusBPO7T53bchsn7TSUNoFi3b%2BXPIAA3%2BinrShNXOAa1oy1zInkfeq4hxRhnaNwDMpjY%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f36060a2143d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:29 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Pq4jyNG8Xa93iyta0MAf7mpbE47bD6aG3775BlixMPh9mMBBaBBp33ip9Bs7LHkkgwYWFemHE7GS7MO3%2BQwKt9phH%2BeWp06o3wm0hdmLy1maGBwfVwQ6Y4ATSkOb3MXAsKcyS3w%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f36067a5443d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:29 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m1UF2CFUSPl2ZQ2C5eZOtPCn8VM5n869jcH51aIsAxtA8EhxkAVTGPhE1Cw9AKc9bNp0tbMHeNGIlh1An9C0z5TAmJKWzy6fxxFAyfXWc1IefvZX5H5hMG83kjUdofL%2BLnLuYEc%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f3606da8543d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:29 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3fsrZZnuXMLzr575GrmppSgCzxXuTCkDqySMjuV4qqVjOHuWNXYKAHSugdEUwgZ0%2BYwf6lOSt3maPr%2BvpHJNXhlEAnINIWLUt7LCCjrHhAkpqbC2tWpkdsye2SldnwZqrxDA5i8%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f36073aba43d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:29 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bQrb9SbIwo386esDnDQQKiukEF16gCqksF9a9aTPnhmUG54afyffaFAb1rih2sAji2ZCqkRpo%2FP5CoVLFq67wCurpXjGIVaRyRToBJuHl4LSOMgR1TiOTlKvAhYZoDhh2%2Be9n7c%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f36079aeb43d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:29 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UHpgwvRRCXCzFsBQdlCHCuk6fxYxt2eggLIADf2AgT%2BG9EDcXDgxAFVnFg81%2FGdKNbI59Ak8%2FsxoZiv2hEnThFACFNc97kg3Pu7OfYiZpHH%2FEBCpsGafALTSaTbsj9G2jSm89iQ%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f3607fb1f43d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:29 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tvm6pKq5wzf%2B%2BYXFxM3ovolBvbnIgIrGec0ZKRrhB8J52cVGTqdCLNuGHP3TPgmpSqEacKZwUYsjF2EOWT62ecRt8qTaI2%2B8aPJ34Zkdkzdp2nUkXnBLlCoYPuo0yzSzURWK2%2BA%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f36085b5c43d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:29 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0fUeUmh7LahlzK%2BYtfvSHwQGWWa%2B0vH5QFl4%2BDzAMfujHoLQBf0KMCLp45QPJnm4x0zzSXj9uod%2BCWuZ3Ha4LLI6P9OloXDjadjryT12FK2G%2BtO%2BeRMor59gdwbCJXGKl6IQCXI%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f3608cb8943d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:29 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cyD8uInsKqhzXbFG4CQI30xwh1MHr29h0Ef6a1mCwiMvJYryqJaPjwl%2FyoU7xXOFpqSaui7GIgpvP%2BiDPj3Qd1wjrB30Ve%2FsmqtAuS6j5d%2Fl6VvyP9GzrTiGFXSsfurj6AWHydo%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f36092bb443d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:29 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2J2PMTuKibtQRe%2FL7CJvCMLdQ4BhWR5XaBOwBzwUA6LcvY9UNTIGzdg4JB694%2F%2F6eB5AMY0VC5P%2B581%2FO7WckQKnxhYI3FjDNUN3yLRxRu3tDspN1UZJH8GdaaDPugATCnY6ej8%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f36098be743d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:29 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UxmDP8zVcscVx%2BZfQ0P6DQjeYNfuCTmz3Uy9CPOhe7z1702cAZVWcuut6YCjvIA9ukExkzphx6XgYlk5mHyrn56pSNeTzS0%2FEZKRRWuQMGm7CWu7nHmpnL265BFbNopVJAhGYv4%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f3609ec0f43d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:30 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OI9s8PA3HcJWfSIVj4uwfbS78Nutjiu%2BaO1SpW5dEv%2BbvDmYS3O7rs0f0VejFSjGvYFsVqGTl8kVViZvWKz%2BV1dV5G6i18FyLZn58%2FtOFMIYzfOSNRPosPHu9dgbl13xatGPzCs%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f360a4c5143d9-EWR

HTTP/2 302

date: Mon, 20 Nov 2023 08:09:30 GMT

content-length: 0

location: /

access-control-allow-origin: https://blog.crunchydata.com

x-frame-options: SAMEORIGIN

strict-transport-security: max-age=31536000; includeSubDomains

cf-cache-status: DYNAMIC

report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NYmPSffWD5X%2FdvJLr2sW6zjhCre2AwXJ04hrBmZPKdRBSQUnwR1SkthjFwNszzZZ%2BH6i8OCK4TmdahO9Wn3YFuvjwByJOaa2qrc4hlM6ND9JTc0Fcg%2FVjbCI%2FUbnBEwom0PMcfQ%3D"}],"group":"cf-nel","max_age":604800}

nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

server: cloudflare

cf-ray: 828f360aac8a43d9-EWR

curl: (47) Maximum (50) redirects followed

Re: Website Access Issue from one of branch office

reaper — Mon, 20 Nov 2023 09:48:06 GMT

That looks like a problem with cloudflare and not your firewall

The initial http request returns a redirect (http 301) and then puts you on a weird loop of http 302 instead of returning a 200

Those pages are served by cloudflare

Re: Website Access Issue from one of branch office

anwardurrani — Mon, 20 Nov 2023 11:50:48 GMT

Agree but strange part why its not blocking at other sites, our all 3 sites are just Ok, and we can get to URL without any issue.

Re: Website Access Issue from one of branch office

anwardurrani — Tue, 21 Nov 2023 10:40:58 GMT

Some interesting findings -

[root@localhost ~]# curl -v https://crunchydata.com

Rebuilt URL to: https://crunchydata.com/

Trying 172.67.71.239...

TCP_NODELAY set

Connected to http://crunchydata.com (172.67.71.239) port 443 (#0)

ALPN, offering h2

ALPN, offering http/1.1

successfully set certificate verify locations:

CAfile: /etc/pki/tls/certs/ca-bundle.crt

CApath: none

TLSv1.3 (OUT), TLS handshake, Client hello (1):

TLSv1.3 (IN), TLS handshake, Server hello (2):

TLSv1.3 (IN), TLS handshake, [no content] (0):

TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):

TLSv1.3 (IN), TLS handshake, Certificate (11):

TLSv1.3 (IN), TLS handshake, CERT verify (15):

TLSv1.3 (IN), TLS handshake, Finished (20):

TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):

TLSv1.3 (OUT), TLS handshake, [no content] (0):

TLSv1.3 (OUT), TLS handshake, Finished (20):

SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384

ALPN, server accepted to use h2

Server certificate:

subject: C=US; ST=California; L=San Francisco; O=Cloudflare, Inc.; CN=sni.cloudflaressl.com

start date: Mar 31 00:00:00 2023 GMT

expire date: Mar 30 23:59:59 2024 GMT

subjectAltName: host "http://crunchydata.com " matched cert's "http://crunchydata.com "

issuer: C=US; O=Cloudflare, Inc.; CN=Cloudflare Inc ECC CA-3

SSL certificate verify ok.

Using HTTP2, server supports multi-use

Connection state changed (HTTP/2 confirmed)

Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0

TLSv1.3 (OUT), TLS app data, [no content] (0):

TLSv1.3 (OUT), TLS app data, [no content] (0):

TLSv1.3 (OUT), TLS app data, [no content] (0):

Using Stream ID: 1 (easy handle 0x5587da58e700)

TLSv1.3 (OUT), TLS app data, [no content] (0):

> GET / HTTP/2

> Host: http://crunchydata.com

> User-Agent: curl/7.61.1

> Accept: */*

TLSv1.3 (IN), TLS handshake, [no content] (0):

TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):

TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):

TLSv1.3 (IN), TLS app data, [no content] (0):

Connection state changed (MAX_CONCURRENT_STREAMS == 100)!

TLSv1.3 (OUT), TLS app data, [no content] (0):

TLSv1.3 (IN), TLS app data, [no content] (0):

TLSv1.3 (IN), TLS app data, [no content] (0):

< HTTP/2 301

< date: Tue, 21 Nov 2023 10:26:37 GMT

< location: https://www.crunchydata.com/

< cache-control: max-age=3600

< expires: Tue, 21 Nov 2023 11:26:37 GMT

< report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jBGt2cGSOrAXRYZGuqqCmGvHikXFOGl1Y%2B4J9AWphqHciza%2FVx8hmGCWY7%2BQfhyNV2KxLD4Nn8D1KohuhSpJRmHd2ezYrPnyPvma%2FndoDxLra6bLYrs3hQEKtFXjOMIJCg%3D%3D"}],"group":"cf-nel","max_age":604800}

< nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

< server: cloudflare

< cf-ray: 82983c46bcec4328-EWR

TLSv1.3 (IN), TLS app data, [no content] (0):

Connection #0 to host http://crunchydata.com left intact

Re: Website Access Issue from one of branch office

anwardurrani — Tue, 21 Nov 2023 10:42:01 GMT

Either Client or Server is forcing to user HTTP/2 in stead of HTTP/1 or as a result TLS-1.3 handshake is returning with blank content.

Below is a out put on Pune salora server -

[anwar@salora ~]$ curl -v https://crunchydata.com

About to connect() to http://crunchydata.com port 443 (#0)

Trying 104.26.8.3...

Connected to http://crunchydata.com (104.26.8.3) port 443 (#0)

Initializing NSS with certpath: sql:/etc/pki/nssdb

CAfile: /etc/pki/tls/certs/ca-bundle.crt

CApath: none

SSL connection using TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

Server certificate:

subject: CN=sni.cloudflaressl.com,O="Cloudflare, Inc.",L=San Francisco,ST=California,C=US

start date: Mar 31 00:00:00 2023 GMT

expire date: Mar 30 23:59:59 2024 GMT

common name: http://sni.cloudflaressl.com

issuer: CN=Cloudflare Inc ECC CA-3,O="Cloudflare, Inc.",C=US

> GET / HTTP/1.1

> User-Agent: curl/7.29.0

> Host: http://crunchydata.com

> Accept: */*

< HTTP/1.1 301 Moved Permanently

< Date: Tue, 21 Nov 2023 10:33:57 GMT

< Transfer-Encoding: chunked

< Connection: keep-alive

< Cache-Control: max-age=3600

< Expires: Tue, 21 Nov 2023 11:33:57 GMT

< Location: https://www.crunchydata.com/

< Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E8U%2BzTvy%2F7scvtCkwiLJT%2FFlTkT6hh1sHe1nGM4iimIvFUm9LwCAcGrbpeY%2BoZPofUaeM9p8IB7I15igKmZHQA626nUdfgJhFtbn70PVq05aMnWheFzULW2cuJf6O2F0bA%3D%3D"}],"group":"cf-nel","max_age":604800}

< NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}

< Server: cloudflare

< CF-RAY: 82984704681a6ef5-BOM

Connection #0 to host http://crunchydata.com left intact