联通连 cloudfront 都封锁了

[guoguobaba]

huggingface-cli 下包都不行，设置 hf-mirror.com 也不行，测试了一下　

# curl -v https://cas-bridge.xethub.hf-mirror.com
< Via: 1.1 1e0f88a39289286be3e03ff93487da80.cloudfront.net (CloudFront)
< content-security-policy: default-src 'none'; sandbox
< x-amz-cf-id: u0QXaCbRAOoE5LIaAMI-FovCp9gxvayliYi21-uENxhFyzmc7d0aNA==
< x-amz-cf-pop: FRA56-P8
< x-cache: Error from cloudfront
< Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TEO0QCz0M6vLbsFt%2BbC9hxsMUY1l5eHpghvLRyRKLjmoqEAA5BfwXQyUe3mwZ6c7z1hpukV521fETpAtCRmMheoV68f%2F8oJ2JZN97qZELqVJHqKjFnSO%2B01ZOoUz5a11s%2FD4as%2BWzlBLFcPkaXvqiWk%3D"}],"group":"cf-nel","max_age":604800}
< NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
< Server: cloudflare
< server-timing: cfL4;desc="?proto=TCP&rtt=227389&min_rtt=227359&rtt_var=64006&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=434&delivery_rate=12420&cwnd=33&unsent_bytes=0&cid=43a723fb2ae48f2c&ts=488&x=0"
<
* Connection #0 to host cas-bridge.xethub.hf-mirror.com left intact
<?xml version="1.0" encoding="UTF-8"?><Error><Code>MissingKey</Code><Message>Missing Key-Pair-Id query parameter or cookie value</Message></Error>

都无法访问，在公司的电信宽带和机房的都可以访问，这 nm 太恶心了。

这是正常响应的结果，联通是不正常的，我只是说这个域名后面是 cloudfront

[mytsing520]

这个响应，有没有一种可能，是源站自身的问题
我电信宽带访问报一样的错

[me221]

我车上被贴的黄色（诈骗）小广告的服务都是 cloudfront 。 可能是因为这个原因？

[cnrting]

这关联通什么事啊

[milkman155]

Missing Key-Pair-Id query parameter or cookie value
关联通什么事

[Shiroka]

1. 楼上所说 Missing Key-Pair-Id query parameter or cookie value
2. 并非 cloudfront ，你连接的是 cloudflare 的 ip ，只是源站用了 cloudfront

[YaakovZiv]

$your-signed-url=aws cloudfront sign --url https://cas-bridge.xethub.hf-mirror.com --key-pair-id YOUR_KEY_PAIR_ID --private-key YOUR_PRIVATE_KEY_PATH
curl -v "https://cas-bridge.xethub.hf-mirror.com/your-signed-url"
我记得文档有这俩前置操作

[iijboom]

这个域名正常解析出来是 cf 的啊

[guoguobaba]

@cnrting 这是正常响应的结果，联通是不正常的，我只是说这个域名后面是 cloudfront

[milkman155]

建议先自查

[guoguobaba]

@milkman155 显然不是，我 ssh 登录了好几个站点查看了，深圳联通，甚至 cloudflare 都不利索 都是这样的。
```
* Connected to fgfwxxx.xxxx.site (104.21.37.142) port 443
* using HTTP/2
* [HTTP/2] [1] OPENED stream for https://fgfwxxx.xxxx.site/
* [HTTP/2] [1] [:method: GET]
* [HTTP/2] [1] [:scheme: https]
* [HTTP/2] [1] [:authority: fgfw666.xxxx.site]
* [HTTP/2] [1] [:path: /]
* [HTTP/2] [1] [user-agent: curl/8.12.1]
* [HTTP/2] [1] [accept: */*]
> GET / HTTP/2
> Host: fgfwxxx.xxxx.site
> User-Agent: curl/8.12.1
> Accept: */*
>
* Request completely sent off

* OpenSSL SSL_read: SSL_ERROR_SYSCALL, errno 0
* Failed receiving HTTP2 data: 56(Failure when receiving data from the peer)
* Connection #0 to host fgfwxxx.xxxx.site left intact
curl: (56) OpenSSL SSL_read: SSL_ERROR_SYSCALL, errno 0
```

登录 tx 云上可以访问

[milkman155]

@guoguobaba 这个是阻断了，联通存在 tls 阻断的，也就是墙中墙，你主楼那个我这边三网 curl 都一样