Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 616404 - gentoo.org missing AAAA record
Summary: gentoo.org missing AAAA record
Status: RESOLVED FIXED
Alias: None
Product: Websites
Classification: Unclassified
Component: Gentoo Website (show other bugs)
Hardware: All All
: Normal normal with 1 vote (vote)
Assignee: Matthew Marchese
URL: https://ip6.nl/#!gentoo.org
Whiteboard:
Keywords:
: 752372 (view as bug list)
Depends on:
Blocks:
 
Reported: 2017-04-23 19:07 UTC by Thomas Bettler
Modified: 2022-02-03 18:40 UTC (History)
5 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Thomas Bettler 2017-04-23 19:07:49 UTC
gentoo.org has no IPv6 / AAAA entry, but is available over IPv6.
Comment 1 Raul Tambre 2018-07-04 18:20:13 UTC
Fixing this seems as easy as adding the AAAA records already on www.gento.org – 2001:41c8:0:936::136 and 2001:41c8:0:936::139.
Comment 2 Adam Purkrt 2020-02-02 01:42:05 UTC
For a proper functionality of gentoo.org, www.gentoo.org (and other sites - see below), when connected (only) through ipv6, assets.gentoo.org needs to be made accessible over ipv6 too, since it supplies .css files. It is currently accessible through ipv4 only.

adam@gentoo ~ $ host assets.gentoo.org
assets.gentoo.org is an alias for 1739712465.rsc.cdn77.org.
1739712465.rsc.cdn77.org has address 185.152.65.76

How I tested:
1) have only ipv6 set up
2) ctrl+shift+r in firefox

Current status of other sites' ipv6 accessibility:

Works 100% over ipv6:
https://bugs.gentoo.org/
https://sources.gentoo.org/

Works except for the styles from assets.gentoo.org:
https://www.gentoo.org/
https://wiki.gentoo.org/
https://packages.gentoo.org/

Does not work over ipv6:
https://forums.gentoo.org/
https://planet.gentoo.org/
https://archives.gentoo.org/
https://infra-status.gentoo.org/
Comment 3 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2020-02-03 21:45:33 UTC
(In reply to Adam Purkrt from comment #2)
> For a proper functionality of gentoo.org, www.gentoo.org (and other sites -
> see below), when connected (only) through ipv6, assets.gentoo.org needs to
> be made accessible over ipv6 too, since it supplies .css files. It is
> currently accessible through ipv4 only.
> 
> adam@gentoo ~ $ host assets.gentoo.org
> assets.gentoo.org is an alias for 1739712465.rsc.cdn77.org.
> 1739712465.rsc.cdn77.org has address 185.152.65.76
> 
> How I tested:
> 1) have only ipv6 set up
> 2) ctrl+shift+r in firefox
> 
> Current status of other sites' ipv6 accessibility:
> 
> Works 100% over ipv6:
> https://bugs.gentoo.org/
> https://sources.gentoo.org/
> 
> Works except for the styles from assets.gentoo.org:
> https://www.gentoo.org/
> https://wiki.gentoo.org/
> https://packages.gentoo.org/
assets.g.o runs on the CDN77 CDN network, which does not support IPv6 at this time. I'll ask them about their IPv6 timelines.

> 
> Does not work over ipv6:
> https://forums.gentoo.org/
The phpBB version running Forums presently does NOT support IPv6 at all. It has internal code that tries to detect abuse based on IP addresses, and that breaks outright with IPv6 addresses. This was attempted years ago. Hopefully the new phpBB will fix this complete.

> https://planet.gentoo.org/
> https://infra-status.gentoo.org/
These both use the CDN77 network, just like assets.g.o

> https://archives.gentoo.org/
This is hosted at a location with very strict firewalls upstream of the server and no native IPv6. The firewalls block 6in4 tunneled IPv6 traffic (e.g. Tunnelbroker). I don't have an easy solution to that problem outside of moving the service.
Comment 4 Tom Hetmer 2020-11-13 23:55:46 UTC
Hey,

I'm here just to give you an update.

We're beginning to roll out v6 on all CDN77 accounts soon, right now there's a small beta test in Frankfurt POP.

We had to update a lot of internal tooling to get it working but AAAA should be fully deployed in all POPs in a few months at the latest.
Comment 5 Thomas Bettler 2020-12-01 20:31:02 UTC
works like a charm here:
https://ip6.nl/#!gentoo.org

congrats
Comment 6 Tom Hetmer 2020-12-16 18:53:07 UTC
Hi,

assets are now running over IPv6

assets.gentoo.org.	21212	IN	CNAME	1739712465.rsc.cdn77.org.
1739712465.rsc.cdn77.org. 9	IN	AAAA	2a02:6ea0:c207::16
1739712465.rsc.cdn77.org. 9	IN	AAAA	2a02:6ea0:c207::17
Comment 7 Alec Warner (RETIRED) archtester gentoo-dev Security 2020-12-30 13:53:29 UTC
*** Bug 752372 has been marked as a duplicate of this bug. ***
Comment 8 Matthew Marchese Gentoo Infrastructure gentoo-dev 2022-02-03 18:04:09 UTC
According to the scope of the original request, we should be covered now thanks to the kind folks at CDN77. www.g.o now serves over IPv6, as well as assets.g.o...

The litany of other sites mostly seem to be supported. The following list is non-exhaustive, but here are the current findings (from what I can see):

Support IPv6 AAAA records:

api.g.o (1243036502.rsc.cdn77.org)
archives.g.o
bugs.g.o
gitweb.g.o (dualstack.k.sni.global.fastly.net)
infra-status.g.o (dualstack.k.sni.global.fastly.net)
keys.g.o (keys.geodns-americas.gentoo.org)
mirrorstats.g.o
packages.g.o
planet.g.o (1062270406.rsc.cdn77.org)
projects.g.o
qa-reports.g.o (dualstack.k.sni.global.fastly.net)
sso.gentoo.org
wiki.g.o
www.g.o

Do not (yet) support IPv6 AAAA records:

forums.g.o (godwit-v4.gentoo.org) - As Robin mentioned in comment 3 - Current version of phpBB (2.0.23-gentoo-p11) does not support IPv6.
security.g.o (nighthawk.gentoo.org) - Newly re-established service (thanks to our security project members). No ETA on getting IPv6 hookups (yet).
Comment 9 Matthew Marchese Gentoo Infrastructure gentoo-dev 2022-02-03 18:40:29 UTC
(In reply to Matthew Marchese from comment #8)

> security.g.o (nighthawk.gentoo.org) - Newly re-established service (thanks
> to our security project members). No ETA on getting IPv6 hookups (yet).

Here I meant glsa-maker.g.o, not security.g.o... both of which are presently hosted on nighthawk.

After a brief discussion with Robin, security.g.o will get a IPv6 CDN'd frontend once IPv6 is wired up with the hosting provider (Leaseweb).
Comment 10 Matthew Marchese Gentoo Infrastructure gentoo-dev 2022-02-03 18:40:54 UTC
This bug has been resolved!