search cancel

BBC sending users to international (bbc.com) site instead of local (bbc.co.uk) when accessing via WSS

book

Article ID: 239227

calendar_today

Updated On:

Products

Web Security Service - WSS

Issue/Introduction

Proxy forwarding access method into WSS from different egress IP addresses

Proxy forwarding tunnels into multiple GGBLO1

Some, not all, users reporting getting redirected to bbc.com instead of bbc.co.uk and not being able to view local UK content

Other UK sites appeared to render local and not international content

 

Cause

BBC GEO locating some of the GGBLO1 egress IP addresses incorrectly

Environment

Explicit, IPSEC and Proxy Forwarding users potentially impacted

Resolution

BBC making changes April 15 2022 to locate GGBLO1 egress IP addresses in 46.235.154.0/24 as UK.

Workarounds until then include contacting WSS support team to switch connections to data pods that egress with other IP address ranges.

Additional Information

By looking at HTTP logs we could check references to bbc.co.uk/bbc.com and identify a pattern. Proxy traffic on certain pods would always go to bbc.com, and others to bbc.co.uk. Everytime we saw a reference to bbc.com, it referenced the 46.235.154.0/24 egress IP address which should be a UK registered IP address as per Akamai, maxmind, iplocate, etc. Hence the need to contact the BBC to follow up on the service provider side.

 

xxxxx 2022-04-06 16:36:09 "DP4-GGBLO11_proxysg1" 8 18.16.25.16 AAAAAA\BBBBBB - - OBSERVED "News" https://www.bbc.co.uk/ 200 TCP_NC_MISS GET application/json https polling.bbc.co.uk 443 /news/breaking-news/audience/domestic - - "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36" 192.168.4.84 557 594 - "{ %22expect_sandbox%22: false }" no - 0 "client" client_connector "BBC" "-" 23.72.230.166 "United Kingdom" CERT_VALID none - - TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 256 www.bbc.co.uk "News" TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 128 - ICAP_NOT_SCANNED - ICAP_NO_MODIFICATION - 23.72.230.166 "United Kingdom" - "United Kingdom" 1 1 wss-agent architecture=x86_64%20name=Windows%2010%20Pro%20version=10.0.19043 7.3.5.15179 185.36.250.106 1bab8a48-2439-4042-aff7-9d0d82a4aa5c UKLAPTOP-DHWFT1 - - - - - - - - - 2001:0DB8:7316:4a5d:1d02:7bb9:343a:d956 a37ebf89f3f42f21-0000000017fe91f7-00000000624dc179 148.64.29.15 148.64.29.15 "GB" "United Kingdom"

 

xxxxx 2022-04-06 16:32:32 "DP7-GGBLO1_proxysg3" 5 172.20.224.77 BBBBBB\CCCCCC - - OBSERVED "News" https://www.bbc.com/ 200 TCP_NC_MISS GET application/json https polling.bbc.co.uk 443 /news/breaking-news/audience/international - - "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.84 Safari/537.36" 192.168.7.86 557 580 - - - - 428342 "CBAM-London" gateway_proxy "BBC" "-" 23.72.230.166 "United Kingdom" CERT_VALID none - - TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 256 www.bbc.co.uk "News" TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 128 - ICAP_NOT_SCANNED - ICAP_NOT_SCANNED - 23.72.230.166 - - - - unlicensed - - - - - - - - - - - - - - - - 52ad8ab005fc6cf0-000000001696c1b4-00000000624dc0a0 46.235.154.32 46.235.154.32 "GB" "United Kingdom"