4 ms·
Also, the 'apple.com' IP address in the screenshot (221.194.154.187) belongs to a Chinese company. The developer seems to be located in China. You are seeing
by raphman 2y ago
Also, the 'apple.com' IP address in the screenshot (221.194.154.187) belongs to a Chinese company.
The developer seems to be located in China. You are seeing the Great Firewall in action:
> The GFW does not have a unique technique of censorship. One of its strengths is to combine several techniques. One of them is the generation, by the network itself (and not by a lying resolver), of bogus DNS responses. You ask for a censored name and as a result you get an answer giving an IP address that has nothing to do with the question asked. [...] But if you ask him about a censored name, then the network generates a false answer. Even if the input is the same, the response varies from a request to another: [...]. The IP address 157.240.17.14 belongs to Facebook (normally scratch.mit.edu is at Fastly), a prime example of the lies generated by the GFW.
https://ipregistry.co/blog/chinese-national-firewall https://ipregistry.co/blog/chinese-national-firewall
- markhan-nping 2y agothanks ~
- rfoo 2y ago> You are seeing the Great Firewall in action Why? It's just that Apple has CDNs in China. Yes, as long as you do all the bureaucracy nonsense and comply to censorship you can do that. e6858.e19.s.tl88.net resolves to 221.194.154.187. tl88.net is the domain for a CDN vendor mainly operating in China. And it does serve www.apple.com content with actual www.apple.com TLS cert.
- raphman 2y agoThanks for the explanation about the CDN for apple.com. However, the parent's observation seems to be consistent with the Great Firewall, no?
- rfoo 2y agoOops, sorry, yes you are right. For some reason I didn't see GP's comment at all and ignored the fact that you were replying to it /facepalm