[Solved] Roon <-> Qobuz connection failing?

Support
1

Hi there,

Had a smooth working Roon setup with Qobuz but since a couple of days I get an error message in The Roon iOS app on all pages with Qobuz content:
Error loading page, please check tour network connection.
Qobuz items don’t get loaded.
Things Inallready checked:

Restarted server
Restarted clients
Checked Qobuz account; Qobuz app works, can login at webinterface.
Looked at logfiles on server (Slackware current) and there’s a lot going on. Don’t know if uploading logfiles is ‘socially accepted’…

Am I the only one with these problems ?

Best regards,
larsh

1 Like
2

Hi @larsh,

What is your network setup like? Is the Roon Core connected directly to your router or are you making use of any switches/range extender/powerline adapters here? In the past, we have seen users resolve similar issues if they change their DNS servers from the ISP provided ones to Google DNS or Cloudflare DNS. Can you please give this a try and let me know if it helps?

Thanks,
Noris

4

See the other threads - seems like it’s hitting many people.

5

Hi @larsh,

We recently resolved an issue on our end, can you please let me know if everything is stable for you now?

Thanks,
Noris

6

It hasn’t been stable for me over the last two days. Slow loading on reach Qobuz playlists, favorites etc keep getting Roon spinning wheel of death happens on search of both high res and cd tracks. Have signed out signed back into Qobuz Roon several times today just tons of stability problems. Cannot do simple search on Qobuz before Roon times out. So frustrated that I’m now back to my local Roon library very stable and fast as usual. Thank god im still on the Qobuz trial. If this stability issues continues with Qobuz integration with Roon I’m going to cancel Qobuz. I have a rock solid network speeds

7

Hi @noris, last night (i.e. 12 hours ago) I was seeing issues with Qobuz in Roon. For example, only the Playlists page was getting populated; the New Releases, Taste of Qobuz and My Qobuz pages were blank, or sparsely populated.

This morning, everything seems back to normal. Thanks.

8

Hi all, @noris,

thank you all for your responses ! I was glad to read that some of your problems where solved so I signed in to Qobuz again in the RoonApp Services tab.
When I tried to load the Qobuz Menu item in the RoonApp, nothing happened and I got the same error. So, @noris, the issue you resolved had no effect on the error I encountered.
But… I found out what caused it…
Doing a tail on the log files I noticed that Roonserver does a lot of requests to the host “metadataserver<.>roonlabs<.>net” and that this request returns a failure code later on in the log.

Excerpt from .RoonServer/Logs/RoonServer_log.txt
Trace: [metadatasvc] REQ [xx] hxxps://metadataserver.roonlabs.net/md/4/qobuz/featured/albums?uid= <…>
Warn: Error in web request hxxps://metadataserver.roonlabs.net/md/4/qobuz/featured/albums?uid= <…> NetworkError (Error: ConnectFailure (Connection timed out))

So, it looks like there is something wrong with “metadataserver<.>roonlabs<.>net”. I did a nslookup on it and found out it lives on 35.244.225.31 and that a reverse lookup on this IP address resolves to “31<.>225<.>244<.>35<.>bc<.>googleusercontent<.>com.”

nslookup “metadataserver<.>roonlabs<.>net”:
“metadataserver<.>roonlabs<.>net” canonical name = “roonlabs<.>net”
Name: “roonlabs<.>net”
Address: 35.244.225.31
Reverse lookup:
31.225.244.35.in-addr.arpa name = “31<.>225<.>244<.>35<.>bc<.>googleusercontent<.>com.”

When I searched my logging for IP address 35.244.225.31, I found out my firewall is blocking all traffic from my RoonServer to and from 35.244.225.31
Looking in the firewall logging I found out my firewall detected suspicious inbound traffic on February 17 and 18 and classified it as a Stealth Scan.
The reverse ip address points to a domain with a reverse address that didn’t match the A record so the IP address ended up on a watch-list…

Feb 17 10:10:00 xxx kernel: […] Stealth scan? (UNPRIV): IN=eth1 OUT= MAC= SRC=35.244.225.31 DST=x.x.x.x LEN=810 TOS=0x00 PREC=0x00 TTL=123 ID=38679 PROTO=TCP SPT=443 DPT=50720 WINDOW=248 RES=0x00 ACK PSH URGP=0
Feb 17 18:21:31 xxx kernel: […] Stealth scan? (UNPRIV): IN=eth1 OUT= MAC= SRC=35.244.225.31 DST=x.x.x.x LEN=810 TOS=0x00 PREC=0x00 TTL=123 ID=25185 PROTO=TCP SPT=443 DPT=54428 WINDOW=244 RES=0x00 ACK PSH URGP=0
Feb 18 22:53:55 xxx kernel: […] Stealth scan? (UNPRIV): IN=eth1 OUT= MAC= SRC=35.244.225.31 DST=x.x.x.x LEN=585 TOS=0x00 PREC=0x00 TTL=123 ID=51465 PROTO=TCP SPT=443 DPT=37332 WINDOW=458 RES=0x00 ACK PSH URGP=0

On February 24 another scan took place and the firewall started blocking all traffic to and from this address

Feb 24 18:17:40 xxx kernel: […] Stealth scan? (UNPRIV): IN=eth1 OUT= MAC= SRC=35.244.225.31 DST=x.x.x.x LEN=585 TOS=0x00 PREC=0x00 TTL=123 ID=91187 PROTO=TCP SPT=443 DPT=37332 WINDOW=458 RES=0x00 ACK PSH URGP=0
Feb 24 18:17:41 xxx kernel: […] Blocked host(s): IN=eth1 OUT= SRC=35.244.225.31 DST=x.x.x.x LEN=585 TOS=0x00 PREC=0x00 TTL=123 ID=91187 PROTO=TCP SPT=443 DPT=37332 WINDOW=458 RES=0x00 SYN URGP=0
…
Mar 3 13:20:44 xxx kernel: […] Blocked host(s): IN= OUT=eth1 SRC=x.x.x.x DST=35.244.225.31 LEN=60 TOS=0x08 PREC=0x00 TTL=64 ID=50042 PROTO=TCP SPT=47230 DPT=443 WINDOW=29200 RES=0x00 SYN URGP=0

So… after finding out what caused it, I took the IP address and hostnames of the blacklist and entered them in the whitelist, restarted my firewall and Roonserver and tried to load the Qobuz Menu item in the RoonApp again and …
All is back to normal and the Mar 3, 13:20:44 firewall log entry was the last one I saw !

But why did I notice this yesterday if this all started on February 24th ? Because I was traveling for the past 10 day’s and the rest of the family only listen to (low-res) internet radio stations. They are not used to Qobuz yet :slight_smile:
It would be interesting to know why my firewall detected scans from “roonlabs<.>net”… Is there anyone at RoonLabs who knows why this happens ?

Best regards,
larsh

PS: Sorry for all the obfuscation of host names and links but I can’t post links in the forum as a new user…

9

Hi @larsh,

I’m glad you were able to get things up and running!

Would you mind sharing what firewall you were using that was blocking this?

Thanks!

10

Hi @dylan

I use an IPtables based firewall with fail2ban and a couple of homebrew scripts to tie it all together.

Best regards,
larsh

1 Like
11

This topic was automatically closed 36 hours after the last reply. New replies are no longer allowed.