C'est impossible.
Donc
- tu as un tunnel monté entre ta montagne et ta box OVH et/ou ta box Hostinger
- tu as des routes spécifiques quelque part sur l'un des trois éléments, mais c'est un peu comme le premier point
Bref le traceroute ne correspond certainement pas à la réalité observable par le reste du monde.
Oui c'est exactement ce que je me dis ; mais portant j'ai vérifié ; je revérifie.
J'ai ouvert une page sur le Wiki de mon GitHub : LAB3W/docs/wiki/
MTR-My-Traceroute-IPv4-IPv6-over-ICMP‐TCP‐UDP 
---
Pour ma gateway "2a01:cb1d:6aa:b400::1" - Ma "GATE" est la seule machine connectée à la Livebox Orange.
ven. août 14 16:33:30 ⛔🔜 root@gate:~ # swanctl --list-sas
ven. août 14 16:33:32 ⛔🔜 root@gate:~ # ip -6 xfrm state
ven. août 14 16:33:47 ⛔🔜 root@gate:~ # ip -6 xfrm policy
src ::/0 dst ::/0
socket in priority 0 ptype main
src ::/0 dst ::/0
socket out priority 0 ptype main
src ::/0 dst ::/0
socket in priority 0 ptype main
src ::/0 dst ::/0
socket out priority 0 ptype main
ven. août 14 16:33:52 ⛔🔜 root@gate:~ # ip -6 route show
2a01:cb1d:6aa:b400:bee:eeff::/104 dev netbr0 proto kernel metric 256 pref medium
2a01:cb1d:6aa:b400:1ab3::/80 dev srvbr0 proto kernel metric 256 expires 86397sec pref medium
2a01:cb1d:6aa:b400::/64 dev netbr0 proto kernel metric 256 expires 86352sec pref medium
fc01::10:106:0:250/124 dev srvbr0 proto kernel metric 256 pref medium
fc01::10:0:0:0/80 via fc01::10:106:0:252 dev srvbr0 metric 1024 pref medium
fc01::172:16:0:0/112 dev lanbr0 proto kernel metric 256 pref medium
fd10:6:42::/64 dev wlanbr0 proto kernel metric 256 linkdown pref medium
fe80::/64 dev netbr0 proto kernel metric 256 pref medium
fe80::/64 dev srvbr0 proto kernel metric 256 pref medium
fe80::/64 dev lanbr0 proto kernel metric 256 pref medium
fec1::/16 dev netbr0 proto kernel metric 256 pref medium
default via fe80::c2d7:aaff:fec0:f839 dev netbr0 proto ra metric 1024 expires 552sec hoplimit 64 pref high
Pour mon serveur Canadien :
ven. août 14 11:01:02 ⛔🔜 root@srv-ca:~ # ip -6 route show
::1 dev lo proto kernel metric 256 pref medium
2607:5300:60:9389::1 dev vmbr0 proto kernel metric 256 pref medium
2607:5300:60:9389:15:1::/124 dev vmbr1 proto kernel metric 256 pref medium
2607:5300:60:9389:15:1::/124 dev vmbr1 metric 1024 pref medium
2607:5300:60:9389:15:1:a:0/112 dev vmbr1 metric 1024 pref medium
2607:5300:60:9389:15:2::/124 dev vmbr5 proto kernel metric 256 pref medium
2607:5300:60:9389:15:2:a:0/112 dev vmbr5 metric 1024 pref medium
2607:5300:60:9389:17:4::/124 dev vmbr2 metric 1024 linkdown pref medium
2607:5300:60:9389:17:4c1:0:10/124 dev vmbr4 proto kernel metric 256 pref medium
fc00:5300:60:9389:15:1::/124 dev vmbr1 proto kernel metric 256 pref medium
fc00:5300:60:9389:15:1:a:0/112 via fc00:5300:60:9389:15:1:0:1 dev vmbr1 metric 1024 pref medium
fc00:5300:60:9389:15:2::/124 dev vmbr5 proto kernel metric 256 pref medium
fc00:5300:60:9389:15:2:a:0/112 via fc00:5300:60:9389:15:2:0:1 dev vmbr5 metric 1024 pref medium
fe80::/64 dev vmbr0 proto kernel metric 256 pref medium
fe80::/64 dev vmbr1 proto kernel metric 256 pref medium
fe80::/64 dev vmbr4 proto kernel metric 256 pref medium
fe80::/64 dev vmbr5 proto kernel metric 256 pref medium
fec0::/16 dev vmbr0 proto kernel metric 256 pref medium
default via 2607:5300:60:93ff:ff:ff:ff:fe dev vmbr0 metric 1024 onlink pref medium
ven. août 14 11:01:10 ⛔🔜 root@gate:~ # swanctl --list-sas
ven. août 14 11:01:14 ⛔🔜 root@srv-ca:~ # ip -6 xfrm state
ven. août 14 11:04:15 ⛔🔜 root@srv-ca:~ # ip -6 xfrm policy
src ::/0 dst ::/0
socket in priority 0
src ::/0 dst ::/0
socket out priority 0
src ::/0 dst ::/0
socket in priority 0
src ::/0 dst ::/0
socket out priority 0
src 0.0.0.0/0 dst 0.0.0.0/0
socket in priority 0
src 0.0.0.0/0 dst 0.0.0.0/0
socket out priority 0
src 0.0.0.0/0 dst 0.0.0.0/0
socket in priority 0
src 0.0.0.0/0 dst 0.0.0.0/0
socket out priority 0
Juste une idée comme ça, mais je me demande si c'est possible qu'OVH rejette certains paquets TCP avec une TTL "suspecte" ? Pour ces entrés que mtr te montre après 2a01:cb1d:6aa:b400:c2d7:aaff:fec0:f839, j'imagine qu'il est plus probable que les paquets soient en fait rejetés avant qu'ils n'atteignent 2a01:cb1d:6aa:b400:c2d7:aaff:fec0:f839.
Ouais ; c'est peut-être çà ; c'est bizarre .. çà s'appelle un gros bug réseau malgré tout.
Que ce soit depuis chez moi ou depuis un VPS chez Hetzner, je ne vois rien d'anormal :
$ mtr 2a01:cb1d:6aa:b400::1 -6 -c 3 -brwz -T -P 443
Start: 2026-08-14T13:06:17+0200
HOST: meshify Loss% Snt Last Avg Best Wrst StDev
1. AS3215 livebox.home (XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX) 0.0% 3 0.9 1.1 0.9 1.2 0.2
2. AS??? ??? 100.0 3 0.0 0.0 0.0 0.0 0.0
3. AS??? ??? 100.0 3 0.0 0.0 0.0 0.0 0.0
4. AS3215 2a01:cb1d:6aa:b400:c2d7:aaff:fec0:f839 0.0% 3 12.8 12.9 12.8 13.1 0.2
5. AS??? ??? 100.0 3 0.0 0.0 0.0 0.0 0.0
Super merci pour cette réponse ;
Depuis orange de chez vous ; le traceroute arrive à ma Livebox "2a01:cb1d:6aa:b400:c2d7:aaff:fec0:f839" -- On habite super près !!!?
$ mtr 2a01:cb1d:6aa:b400::1 -6 -c 3 -brwz -T -P 443
Start: 2026-08-14T13:05:33+0200
HOST: bb1 Loss% Snt Last Avg Best Wrst StDev
1. AS??? fe80::1 0.0% 3 3.3 3.5 3.3 3.8 0.2
2. AS24940 11837.your-cloud.host (2a01:4f8:0:e0c0::2655) 0.0% 3 0.7 1.4 0.7 2.7 1.1
3. AS??? ??? 100.0 3 0.0 0.0 0.0 0.0 0.0
4. AS24940 spine7-rdev2.cloud1.nbg1.hetzner.com (2a01:4f8:cfff:1::f000:195) 0.0% 3 1.2 1.9 1.2 3.2 1.1
spine7-rdev1.cloud1.nbg1.hetzner.com (2a01:4f8:cfff:1::f000:191)
AS24940 spine7-rdev1.cloud1.nbg1.hetzner.com (2a01:4f8:cfff:1::f000:191)
5. AS24940 core-spine-rdev1.cloud1.nbg1.hetzner.com (2a01:4f8:cfff:1::f000:f069) 0.0% 3 0.8 1.0 0.8 1.3 0.3
core-spine-rdev1.cloud1.nbg1.hetzner.com (2a01:4f8:cfff:1::f000:f061)
AS24940 core-spine-rdev1.cloud1.nbg1.hetzner.com (2a01:4f8:cfff:1::f000:f061)
core-spine-rdev2.cloud1.nbg1.hetzner.com (2a01:4f8:cfff:1::f000:f06d)
AS24940 core-spine-rdev2.cloud1.nbg1.hetzner.com (2a01:4f8:cfff:1::f000:f06d)
6. AS24940 core11.nbg1.hetzner.com (2a01:4f8:0:3::2a1) 0.0% 3 0.8 1.0 0.7 1.4 0.3
core12.nbg1.hetzner.com (2a01:4f8:0:3::2e1)
AS24940 core12.nbg1.hetzner.com (2a01:4f8:0:3::2e1)
7. AS24940 juniper5.dc2.nbg1.hetzner.com (2a01:4f8:0:3::22a) 0.0% 3 0.8 3.2 0.8 7.9 4.1
juniper5.dc2.nbg1.hetzner.com (2a01:4f8:0:3::22e)
AS24940 juniper5.dc2.nbg1.hetzner.com (2a01:4f8:0:3::22e)
8. AS1299 nug-b2-link.ip.twelve99.net (2001:2035:0:1e9f::1) 0.0% 3 0.8 1.0 0.8 1.3 0.2
9. AS1299 ffm-bb1-link.ip.twelve99.net (2001:2034:a:199::) 0.0% 3 24.4 24.7 24.4 25.0 0.3
10. AS1299 ffm-b5-link.ip.twelve99.net (2001:2034:a:171::1) 0.0% 3 4.3 4.5 4.3 5.0 0.4
ffm-b5-link.ip.twelve99.net (2001:2034:a:71::1)
AS1299 ffm-b5-link.ip.twelve99.net (2001:2034:a:71::1)
11. AS1299 orange-ic-325004.ip.twelve99-cust.net (2001:2035:0:13d9::2) 0.0% 3 5.1 687.6 4.8 2053. 1182.5
12. AS??? ??? 100.0 3 0.0 0.0 0.0 0.0 0.0
Super merci pour cette réponse ;
Depuis votre VPS chez Hetzner mon addresse est bloquée à "orange-ic-325004.ip.twelve99-cust.net (2001:2035:0:13d9::2)"
Sinon pas de boucle - sauf que mon service "actif" n'est pas accessible - le dernier saut marqué "? ? ?" pour l'hôte.
---
Note à 17h41 : On dirais que la route fonctionne (mainteant) ; sauf mon service HTTPS n'est pas visible..
Depuis SRV-CA :
ven. août 14 11:34:14 ⛔🔜 root@srv-ca:~ # mtr 2a01:cb1d:6aa:b400::1 -6 -c 3 -brwz -T -P 443
Start: 2026-08-14T11:35:33-0400
HOST: lab3w Loss% Snt Last Avg Best Wrst StDev
1. AS16276 ovh.ipv10.net (2607:5300:60:93ff:ff:ff:ff:fe) 0.0% 3 0.8 0.7 0.7 0.8 0.0
AS16276 ovh.xn--ip10-mw4b.ws (2607:5300:60:93ff:ff:ff:ff:fd)
2. AS16276 2001:41d0:0:50::2:160 0.0% 3 0.8 0.9 0.8 0.9 0.0
AS16276 2001:41d0:0:50::2:15e
3. AS16276 2001:41d0:0:50::6:95a 0.0% 3 0.2 0.2 0.2 0.2 0.0
AS16276 2001:41d0:0:50::6:84e
AS16276 2001:41d0:0:50::6:84c
4. AS??? ??? 100.0 3 0.0 0.0 0.0 0.0 0.0
5. AS16276 ymq-mtl3-sbb2-8k.qc.ca (2607:5300::2564) 0.0% 3 3.8 3.9 3.5 4.4 0.4
6. AS16276 2001:41d0::2689 0.0% 3 4.6 3.6 3.1 4.6 0.9
AS16276 be301.ymq-mtl3-pb2-8k.qc.ca (2001:41d0::2695)
7. AS1299 motl-b3-link.ip.twelve99.net (2001:2035:0:2cd3::1) 0.0% 3 3029. 1351. 1.7 3029. 1540.7
AS174 2001:550:2:6::3e
8. AS174 be2090.ccr22.ymq01.atlas.cogentco.com (2001:550:0:1000::9a36:2d75) 0.0% 3 3032. 1356. 1.9 3032. 1541.0
AS174 be2089.ccr21.ymq01.atlas.cogentco.com (2001:550:0:1000::9a36:2d71)
AS1299 motl-b4-link.ip.twelve99.net (2001:2034:a:2c2::1)
9. AS174 be2088.ccr21.alb02.atlas.cogentco.com (2001:550:0:1000::9a36:2b12) 0.0% 3 8.9 1018. 8.9 3036. 1747.9
AS1299 nyk-bb5-link.ip.twelve99.net (2001:2034:a:f3::)
AS174 be2104.ccr22.alb02.atlas.cogentco.com (2001:550:0:1000::9a36:2b16)
10. AS174 be4077.ccr42.jfk02.atlas.cogentco.com (2001:550:0:1000::9a36:5a65) 0.0% 3 9.2 9.1 9.0 9.2 0.1
AS174 be4076.ccr41.jfk02.atlas.cogentco.com (2001:550:0:1000::9a36:5a61)
11. AS174 port-channel8073.ccr91.dca04.atlas.cogentco.com (2001:550:0:1000::9a36:aa45) 0.0% 3 7257. 2762. 13.8 7257. 3925.1
AS174 port-channel4188.ccr92.dca04.atlas.cogentco.com (2001:550:0:1000::9a36:1e79)
12. AS174 be8413.ccr41.iad02.atlas.cogentco.com (2001:550:0:1000::9a36:5da) 0.0% 3 14.6 14.5 14.2 14.6 0.2
13. AS174 2001:550:3::206 33.3% 3 1128. 614.0 99.8 1128. 727.2
14. AS??? ??? 100.0 3 0.0 0.0 0.0 0.0 0.0
15. AS??? 2a01:cfc4:0:2100::2 0.0% 3 96.7 436.6 96.7 1116. 588.7
16. AS??? ??? 100.0 3 0.0 0.0 0.0 0.0 0.0
17. AS3215 2a01cb08a00402110193025300750144.ipv6.abo.wanadoo.fr (2a01:cb08:a004:211:193:253 0.0% 3 99.6 436.6 99.6 1110. 583.8
18. AS3215 2a01:cb1d:6aa:b400:c2d7:aaff:fec0:f839 0.0% 3 102.0 101.9 101.6 102.1 0.3
19. AS??? ??? 100.0 3 0.0 0.0 0.0 0.0 0.0
-> KO
Depuis HST-FR (TODO faire la page mtr) :
Fri Aug 14 17:36:59 ⛔🔜 root@hst-fr:~ # mtr 2a01:cb1d:6aa:b400::1 -6 -c 3 -brwz -T -P 443
Start: 2026-08-14T17:36:41+0200
HOST: hst-fr Loss% Snt Last Avg Best Wrst StDev
1. AS47583 _gateway (2a02:4780:28::1) 0.0% 3 1.0 1.0 1.0 1.1 0.1
2. AS47583 2a02:4780:27:ffff::2d 0.0% 3 2.0 1.1 0.5 2.0 0.8
3. AS47583 2a02:4780:27:ffff::2 0.0% 3 0.9 0.6 0.5 0.9 0.2
2a02:4780:27:ffff::1
AS47583 2a02:4780:27:ffff::1
4. AS47583 2a02:4780:27:ffff::c 0.0% 3 0.5 0.6 0.5 0.7 0.1
2a02:4780:27:ffff::b
AS47583 2a02:4780:27:ffff::b
5. AS174 2001:978:2:1c::b0:1 0.0% 3 1.6 340.2 1.6 1017. 586.2
2001:978:2:1c::b1:1
AS174 2001:978:2:1c::b1:1
6. AS6939 be47.core3.par2.he.net (2001:470:e:13::2) 0.0% 3 4.9 3.2 1.3 4.9 1.8
be9955.agr71.par05.atlas.cogentco.com (2001:550:0:1000::9a19:b95)
AS174 be9955.agr71.par05.atlas.cogentco.com (2001:550:0:1000::9a19:b95)
7. AS6939 be2.core4.lon2.he.net (2001:470:e:44::1) 0.0% 3 10.5 7.7 1.7 10.8 5.2
prs-bb1-link.ip.twelve99.net (2001:2034:a:a9::)
AS1299 prs-bb1-link.ip.twelve99.net (2001:2034:a:a9::)
8. AS6939 be4.core2.lon3.he.net (2001:470:e:41::2) 0.0% 3 17.2 9.6 1.7 17.2 7.8
2001:688:0:4::1ed
AS5511 2001:688:0:4::1ed
9. AS1299 ffm-b5-link.ip.twelve99.net (2001:2034:a:171::1) 0.0% 3 1032. 1377. 10.8 3088. 1567.7
ffm-b5-link.ip.twelve99.net (2001:2034:a:23::1)
AS1299 ffm-b5-link.ip.twelve99.net (2001:2034:a:23::1)
10. AS1299 orange-ic-325004.ip.twelve99-cust.net (2001:2035:0:13d9::2) 0.0% 3 2047. 688.9 9.8 2047. 1176.1
11. AS??? ??? 100.0 3 0.0 0.0 0.0 0.0 0.0
-> KO
Pouvez me renvoyer ces 2 retours MTR s'il vous plaît :
Et sur celle-ci "2a01:cb1d:6aa:b400:1ab3::1" (mon SRV-FR après la "GATE", après ma livebox) répond normalement, à ce que j'ai tracé.
ven. août 14 11:44:46 ⛔🔜 root@srv-ca:~ # mtr 2a01:cb1d:6aa:b400:1ab3::1 -6 -c 3 -brwz -T -P 443
Start: 2026-08-14T11:44:56-0400
HOST: lab3w Loss% Snt Last Avg Best Wrst StDev
1. AS16276 ovh.xn--ip10-mw4b.ws (2607:5300:60:93ff:ff:ff:ff:fd) 0.0% 3 0.7 0.7 0.6 0.7 0.0
AS16276 ovh.xn--ip10-mw4b.ws (2607:5300:60:93ff:ff:ff:ff:fe)
2. AS16276 2001:41d0:0:50::2:15c 0.0% 3 0.8 0.9 0.8 1.1 0.2
AS16276 2001:41d0:0:50::2:160
AS16276 2001:41d0:0:50::2:162
3. AS16276 2001:41d0:0:50::6:95a 0.0% 3 0.2 0.2 0.2 0.2 0.0
AS16276 2001:41d0:0:50::6:84e
AS16276 2001:41d0:0:50::6:84a
4. AS16276 be100-100.bhs-g1-nc5.qc.ca (2607:5300::1c2) 0.0% 3 3033. 1352. 0.9 3033. 1543.2
AS16276 be100-100.bhs-g2-nc5.qc.ca (2607:5300::1cc)
5. AS16276 ymq-mtl3-sbb2-8k.qc.ca (2607:5300::2564) 0.0% 3 3.1 3.3 2.8 3.8 0.5
AS16276 ymq-mtl3-sbb1-8k.qc.ca (2607:5300::2562)
6. AS16276 be300.ymq-mtl3-pb2-8k.qc.ca (2001:41d0::2691) 0.0% 3 4.0 3.4 3.0 4.0 0.6
AS16276 be301.ymq-mtl3-pb2-8k.qc.ca (2001:41d0::2695)
AS16276 be301.ymq-mtl3-pb1-8k.qc.ca (2001:41d0::2693)
7. AS174 2001:550:2:6::3e 0.0% 3 3020. 1007. 1.4 3020. 1743.0
8. AS174 be2090.ccr22.ymq01.atlas.cogentco.com (2001:550:0:1000::9a36:2d75) 0.0% 3 1011. 338.2 1.6 1011. 583.0
AS1299 motl-b4-link.ip.twelve99.net (2001:2034:a:2c2::1)
9. AS174 be2104.ccr22.alb02.atlas.cogentco.com (2001:550:0:1000::9a36:2b16) 0.0% 3 1107. 403.7 9.0 1107. 610.7
AS6461 zayo-orange.ter1.iad10.us.zip.zayo.com (2001:438:ffff::407e:31e)
10. AS174 be4076.ccr41.jfk02.atlas.cogentco.com (2001:550:0:1000::9a36:5a61) 0.0% 3 102.6 71.6 9.0 103.3 54.2
AS3215 2a01:cb1d:6aa:b400:1ab3::1
11. AS3215 2a01:cb1d:6aa:b400:1ab3::1 0.0% 3 102.5 73.1 13.8 102.9 51.3
AS174 port-channel4188.ccr92.dca04.atlas.cogentco.com (2001:550:0:1000::9a36:1e79)
-> OK
Fri Aug 14 17:36:59 ⛔🔜 root@hst-fr:~ # mtr 2a01:cb1d:6aa:b400:1ab3::1 -6 -c 3 -brwz -T -P 443
Start: 2026-08-14T17:45:23+0200
HOST: hst-fr Loss% Snt Last Avg Best Wrst StDev
1. AS47583 _gateway (2a02:4780:28::1) 0.0% 3 1.6 1.6 1.2 1.9 0.3
2. AS47583 2a02:4780:27:ffff::2d 0.0% 3 1.2 1.0 0.7 1.2 0.2
2a02:4780:27:ffff::2e
AS47583 2a02:4780:27:ffff::2e
3. AS47583 2a02:4780:27:ffff::1 0.0% 3 1.2 1.2 0.7 1.6 0.4
2a02:4780:27:ffff::2
AS47583 2a02:4780:27:ffff::2
4. AS47583 2a02:4780:27:ffff::c 0.0% 3 1.1 0.9 0.6 1.1 0.2
2a02:4780:27:ffff::b
AS47583 2a02:4780:27:ffff::b
5. AS174 2001:978:2:1c::b0:1 0.0% 3 1011. 338.4 0.9 1011. 583.0
prs-b9-link.ip.twelve99.net (2001:2035:0:2921::1)
AS1299 prs-b9-link.ip.twelve99.net (2001:2035:0:2921::1)
6. AS1299 prs-b16-link.ip.twelve99.net (2001:2034:a:280::) 0.0% 3 5.0 4.2 3.1 5.0 1.0
7. AS6939 be2.core4.lon2.he.net (2001:470:e:44::1) 0.0% 3 1021. 345.0 3.4 1021. 585.6
be9919.rcr81.par05.atlas.cogentco.com (2001:550:0:1000::8275:33d1)
AS174 be9919.rcr81.par05.atlas.cogentco.com (2001:550:0:1000::8275:33d1)
8. AS6939 be4.core2.lon3.he.net (2001:470:e:41::2) 0.0% 3 10.1 16.5 10.1 28.2 10.1
ffm-bb2-link.ip.twelve99.net (2001:2034:a:8f::1)
AS1299 ffm-bb2-link.ip.twelve99.net (2001:2034:a:8f::1)
9. AS3215 2a01:cb1d:6aa:b400:1ab3::1 0.0% 3 30.2 22.1 11.2 30.2 9.8
ffm-b5-link.ip.twelve99.net (2001:2034:a:304::1)
AS1299 ffm-b5-link.ip.twelve99.net (2001:2034:a:304::1)
-> OK
Merci.
Romain.