Own VPN Server on ionos - Netflix / Joyn did not work - Live TV work

desc · February 14, 2021 at 10:10 AM

Hello,

I had build my own VPN-Server (Wireguard).

Connect did work, LiveTV did work to.

But Joyn say that: api.joyn.de can not be connected.

Netflix say <SPAM REMOVED BY MODERATOR> can not connected.

If I do a ping on Libreelc to api.joyn.de or <SPAM REMOVED BY MODERATOR> this did work.

I tryed to disable IPv6 on Libreelec & VPN Server because I thought this is the issue

but did not help.

Only difference I see is the DNS-Resotion between LibreElec and VPN-Server see below

And without VPN 15 Hops, with VPN 24 Hops to api.joyn.de

LibreELEC:~ # ping api.joyn.de

PING api.joyn.de (99.84.90.25): 56 data bytes

64 bytes from 99.84.90.25: seq=0 ttl=236 time=49.031 ms

64 bytes from 99.84.90.25: seq=1 ttl=236 time=47.595 ms

LibreELEC:~ # ping <SPAM REMOVED BY MODERATOR>

PING <SPAM REMOVED BY MODERATOR> (54.155.178.5): 56 data bytes

root@localhost:/etc/wireguard# ping <SPAM REMOVED BY MODERATOR>

PING dualstack.apiproxy-website-nlb-prod-1-5675d5ecda6efdd8.elb.eu-west-1.amazonaws.com (54.246.79.9) 56(84) bytes of data.

root@localhost:/etc/wireguard# ping api.joyn.de

PING api.joyn.de (13.225.80.104) 56(84) bytes of data.

64 bytes from server-13-225-80-104.fra2.r.cloudfront.net (13.225.80.104): icmp_seq=1 ttl=246 time=5.17 ms

64 bytes from server-13-225-80-104.fra2.r.cloudfront.net (13.225.80.104): icmp_seq=2 ttl=246 time=5.31 ms

Without VPN

Quote

LibreELEC:~ # traceroute api.joyn.de
traceroute to api.joyn.de (99.84.90.55), 30 hops max, 38 byte packets
1 speedport.ip (192.168.2.1) 2.077 ms 1.764 ms 2.656 ms
2 * * *
3 * * *
4 195.145.92.17 (195.145.92.17) 28.498 ms 28.924 ms 28.936 ms
5 217.5.113.6 (217.5.113.6) 210.829 ms 86.932 ms 34.553 ms
6 s-sa4-i.S.DE.NET.DTAG.DE (62.154.22.197) 33.913 ms 32.572 ms 32.889 ms
7 80.157.128.94 (80.157.128.94) 32.741 ms 31.961 ms 33.849 ms
8 52.93.41.122 (52.93.41.122) 35.697 ms 52.93.41.58 (52.93.41.58) 35.568 ms 52.93.41.90 (52.93.41.90) 32.229 ms
9 52.93.48.89 (52.93.48.89) 48.203 ms 52.93.48.91 (52.93.48.91) 59.642 ms 52.93.48.79 (52.93.48.79) 48.605 ms
10 * * *
11 * * *
12 * * *
13 * * *
14 * * *
15 server-99-84-90-55.muc50.r.cloudfront.net (99.84.90.55) 32.453 ms 32.549 ms 32.259 ms

Display More

With VPN

Quote

LibreELEC:~ # traceroute api.joyn.de
traceroute to api.joyn.de (99.84.90.55), 30 hops max, 38 byte packets
1 192.168.10.1 (192.168.10.1) 42.005 ms 35.356 ms 35.452 ms
2 10.255.255.2 (10.255.255.2) 34.780 ms 36.545 ms 35.157 ms
3 vl-202.gw-distdh-a.bap.rhr.de.oneandone.net (93.90.196.2) 36.553 ms 35.654 ms 37.681 ms
4 ae-16.bb-b.bs.kae.de.oneandone.net (212.227.121.32) 38.904 ms ae-0-0.bb-a.bap.rhr.de.oneandone.net (212.227.121.4) 37.469 ms ae-1-0.bb-a.bap.rhr.de.oneandone.net (212.227.122.4) 36.092 ms
5 ae-10-0.bb-a.fra3.fra.de.oneandone.net (212.227.120.146) 41.024 ms ae-9.bb-b.fr7.fra.de.oneandone.net (212.227.120.169) 38.877 ms 40.406 ms
6 ae-14.bb-b.fr7.fra.de.oneandone.net (212.227.120.149) 42.636 ms ffm-b1-link.telia.net (62.115.181.10) 38.276 ms 65.170 ms
7 amazon-ic-331702-ffm-b1.c.telia.net (62.115.48.55) 37.577 ms ffm-b1-link.telia.net (62.115.181.10) 76.115 ms 40.502 ms
8 52.93.23.210 (52.93.23.210) 41.615 ms 52.93.23.204 (52.93.23.204) 39.791 ms 52.93.23.202 (52.93.23.202) 40.769 ms
9 54.239.106.67 (54.239.106.67) 38.327 ms 52.93.23.206 (52.93.23.206) 43.867 ms 54.239.106.17 (54.239.106.17) 41.083 ms
10 * * *
11 * * *
12 150.222.245.139 (150.222.245.139) 83.124 ms 48.957 ms 150.222.245.135 (150.222.245.135) 50.819 ms
13 * * *
14 * * *
15 * * *
16 * * *
17 * 52.93.41.62 (52.93.41.62) 46.805 ms 52.93.41.98 (52.93.41.98) 51.059 ms
18 52.93.48.87 (52.93.48.87) 48.107 ms 52.93.41.80 (52.93.41.80) 48.491 ms 52.93.41.98 (52.93.41.98) 52.666 ms
19 52.93.48.87 (52.93.48.87) 55.022 ms * *
20 * * *
21 * * *
22 * * *
23 * * *
24 server-99-84-90-55.muc50.r.cloudfront.net (99.84.90.55) 48.549 ms * *

Display More

From VPN Server:

Quote

root@localhost:/etc/wireguard# traceroute api.joyn.de
traceroute to api.joyn.de (13.225.80.104), 30 hops max, 60 byte packets
1 10.255.255.2 (10.255.255.2) 0.210 ms 0.180 ms 0.159 ms
2 vl-202.gw-distdh-a.bap.rhr.de.oneandone.net (93.90.196.2) 0.994 ms 1.176 ms 0.980 ms
3 ae-17.bb-b.bs.kae.de.oneandone.net (212.227.122.31) 1.967 ms 1.958 ms ae-1-0.bb-a.bap.rhr.de.oneandone.net (212.227.122.4) 0.788 ms
4 ae-10-0.bb-a.fra3.fra.de.oneandone.net (212.227.120.146) 6.425 ms ae-9.bb-b.fr7.fra.de.oneandone.net (212.227.120.169) 3.978 ms ae-10-0.bb-a.fra3.fra.de.oneandone.net (212.227.120.146) 6.301 ms
5 decix.amazon.com (80.81.194.152) 5.084 ms decix2.amazon.com (80.81.195.152) 6.642 ms decix.amazon.com (80.81.194.152) 5.058 ms
6 54.239.107.220 (54.239.107.220) 7.776 ms 52.93.244.81 (52.93.244.81) 8.652 ms 54.239.107.222 (54.239.107.222) 6.061 ms
7 52.93.244.131 (52.93.244.131) 5.098 ms 52.93.244.123 (52.93.244.123) 6.824 ms 6.531 ms
8 54.239.4.250 (54.239.4.250) 4.570 ms 54.239.4.219 (54.239.4.219) 4.054 ms 54.239.5.25 (54.239.5.25) 5.763 ms
9 * * 54.239.106.62 (54.239.106.62) 8.003 ms
10 * * 52.93.244.131 (52.93.244.131) 6.473 ms
11 * * *
12 * * *
13 * * server-13-225-80-104.fra2.r.cloudfront.net (13.225.80.104) 7.123 ms

Display More

from my pc at home with VPN it is 14 hops.

What did I wrong ?

**chewitt** · February 14, 2021 at 10:49 AM Official Post

Netfix probably detects the IP/ASN you connect from belongs to a commercial hosting provider (where you created the VPS that runs WireGuard) and like many streaming media providers, they agressively block access from non-domestic hosting ASNs.

NB: Discussion on bypassing geo restrictions will put you on the wrong side of our forum rules.

desc · February 14, 2021 at 11:03 AM

thanks chewitt,

I will try to build a VPN Connect to a buddy and try with his internet access and will check
if it will work then....

desc · February 14, 2021 at 12:39 PM

OK did the test.

VPN Connect to my buddy, he had Vodafone as Provider.

Joyn and Netflix works over the VPN Connection to him.

With my VPN Connection to Ionos (1&1) it did not work

Thanks a lot chewitt

to bad that that not work with Ionos

**Da Flex** · February 14, 2021 at 5:44 PM Official Post

I'm using the "Joyn" (and "DAZN") add-on from the KodiNerds repo without the need of VPN. Eventually you have to update to the latest LE nightly to make it work.

The Netflix links of your initial post are useless spam. I had to remove them. Maybe those links have been created by the forum formater.

dersimn · June 30, 2023 at 8:25 PM

Same issue (just tested Netflix).

@Mod: not trying to bypass geo block,

I use the VPS because I don’t have a proper IPv4 address from my provider and still want to host stuff. Tunneling all traffic through this breaks Netflix apparently.

**chewitt** · July 1, 2023 at 11:48 AM

Netflix are very agressive at blocking traffic from non-domestic ASN's (blocks of IP ranges). I'd wager there's a 99%+ chance that the ASN's for any commercial VPS hosting provider will be on their block list.