Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 880761 - distfiles.gentoo.org ipv6 address is not routed/not responding
Summary: distfiles.gentoo.org ipv6 address is not routed/not responding
Status: RESOLVED UPSTREAM
Alias: None
Product: Websites
Classification: Unclassified
Component: Other (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo Website Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2022-11-10 18:30 UTC by Michael
Modified: 2022-11-10 22:37 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michael 2022-11-10 18:30:25 UTC
Resolving distfiles.gentoo.org (distfiles.gentoo.org)... 2a02:6ea0:ce00::5, 138.199.17.184
Connecting to distfiles.gentoo.org (distfiles.gentoo.org)|2a02:6ea0:ce00::5|:80... failed: Connection timed out.
Connecting to distfiles.gentoo.org (distfiles.gentoo.org)|138.199.17.184|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 45 [text/plain]
Comment 1 Mike Gilbert gentoo-dev 2022-11-10 18:50:56 UTC
It works for me.

> % wget https://distfiles.gentoo.org/
> --2022-11-10 13:49:22--  https://distfiles.gentoo.org/
> Resolving distfiles.gentoo.org (distfiles.gentoo.org)... 2a02:6ea0:c400::11, 2a02:6ea0:c400::19, 2a02:6ea0:c400::12, ...
> Connecting to distfiles.gentoo.org (distfiles.gentoo.org)|2a02:6ea0:c400::11|:443... connected.
> HTTP request sent, awaiting response... 200 OK
> Length: unspecified [text/html]
> Saving to: ‘index.html’
> 
> index.html              [ <=>                ]   3.22K  --.-KB/s    in 0s
> 
> 2022-11-10 13:49:22 (278 MB/s) - ‘index.html’ saved [3301]
Comment 2 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2022-11-10 18:56:45 UTC
voron1: can you please icnlude a traceroute/mtr to both v4 & v6 addresses from your location?
Comment 3 Michael 2022-11-10 19:12:43 UTC
Certainly.

tracepath 2a02:6ea0:ce00::5
 1?: [LOCALHOST]                        0.026ms pmtu 1492
 1:  2a02:2698:7007:4189::1                                0.329ms 
 1:  2a02:2698:7007:4189::1                                0.317ms 
 2:  2a02:2698:7000::503                                   0.894ms 
 3:  2a02:2698:7000::1e0e                                  4.437ms asymm  4 
 4:  GW-ERTelecom.retn.net                                 8.888ms 
 5:  no reply
 6:  no reply
 7:  ae3-110.RT.ES.VOZ.RU.retn.net                        56.564ms !H
     Resume: pmtu 1492 

tracepath 138.199.17.184
 1?: [LOCALHOST]                      pmtu 1500
 1:  ds.router                                             0.339ms 
 1:  ds.router                                             0.357ms 
 2:  ds.router                                             0.315ms pmtu 1492
 2:  no reply
 3:  lag-4-438.bbr01.samara.ertelecom.ru                   1.177ms 
 4:  GW-ERTelecom.retn.net                                 7.716ms asymm  5 
 5:  ae3-110.RT.ES.VOZ.RU.retn.net                        14.315ms asymm  6 
 6:  ae22-2.RT.M9.MSK.RU.retn.net                         14.569ms asymm  5 
 7:  ae18-2.RT.TC2.AMS.NL.retn.net                        56.072ms asymm  6 
 8:  GW-LibertyGlobal.retn.net                            53.183ms asymm  9 
 9:  no reply
10:  pl-poz02a-rc1-ae-17-0.aorta.net                      81.045ms asymm 13 
11:  pl-waw26b-rc1-ae-63-0.aorta.net                      76.409ms asymm 13 
12:  pl-waw09a-rb1-ae-0-0.aorta.net                       75.559ms asymm 11 
13:  213.46.178.238                                       67.260ms asymm  9 
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
21:  no reply
22:  no reply
23:  no reply
24:  no reply
25:  no reply
26:  no reply
27:  no reply
28:  no reply
29:  no reply
30:  no reply
     Too many hops: pmtu 1492
     Resume: pmtu 1492
Comment 4 Michael 2022-11-10 19:15:21 UTC
traceroute 2a02:6ea0:ce00::5
traceroute to 2a02:6ea0:ce00::5 (2a02:6ea0:ce00::5), 30 hops max, 80 byte packets
 1  2a02:2698:7007:4189::1 (2a02:2698:7007:4189::1)  0.282 ms  0.246 ms  0.231 ms
 2  2a02:2698:7000::503 (2a02:2698:7000::503)  0.789 ms  0.774 ms  0.856 ms
 3  2a02:2698:7000::1e0e (2a02:2698:7000::1e0e)  1.181 ms  1.186 ms  1.156 ms
 4  GW-ERTelecom.retn.net (2a02:2d8:0:5004:232a::1)  13.724 ms  7.712 ms  13.697 ms
 5  * * *
 6  * * *
 7  * * *
 8  * * *
 9  * * *
10  * * *
11  * * *
12  * * *
13  * * *
14  * * *
15  * * *
16  * * *
17  * * *
18  * * *
19  * * *
20  * * *
21  * * *
22  * * *
23  * * *
24  * * *
25  * * *
26  * * *
27  * * *
28  * * *
29  * * *
30  * * *

traceroute 138.199.17.184
traceroute to 138.199.17.184 (138.199.17.184), 30 hops max, 60 byte packets
 1  ds.router (192.168.1.200)  0.288 ms  0.252 ms  0.237 ms
 2  * * *
 3  lag-4-438.bbr01.samara.ertelecom.ru (109.195.24.30)  1.380 ms  1.365 ms  1.352 ms
 4  GW-ERTelecom.retn.net (87.245.243.62)  7.687 ms  7.653 ms  7.641 ms
 5  ae3-110.RT.ES.VOZ.RU.retn.net (87.245.243.61)  14.330 ms  14.437 ms  14.587 ms
 6  ae22-2.RT.M9.MSK.RU.retn.net (87.245.233.120)  14.858 ms  14.205 ms  24.096 ms
 7  ae18-2.RT.TC2.AMS.NL.retn.net (87.245.232.122)  55.449 ms  55.583 ms  55.563 ms
 8  GW-LibertyGlobal.retn.net (87.245.246.19)  52.757 ms  52.767 ms  52.654 ms
 9  nl-ams17b-rc1-lag-24-0.aorta.net (84.116.136.65)  75.256 ms  75.481 ms  75.434 ms
10  pl-poz02a-rc1-ae-17-0.aorta.net (84.116.136.66)  80.724 ms  81.230 ms  81.224 ms
11  pl-waw26b-rc1-ae-63-0.aorta.net (84.116.252.41)  75.859 ms  75.725 ms  75.824 ms
12  pl-waw09a-rb1-ae-0-0.aorta.net (84.116.141.6)  75.672 ms  75.348 ms  75.559 ms
13  213.46.178.238 (213.46.178.238)  66.843 ms  66.824 ms  66.875 ms
14  unn-138-199-17-184.datapacket.com (138.199.17.184)  66.812 ms  66.901 ms  66.809 ms
Comment 5 Michael 2022-11-10 19:20:05 UTC
(In reply to Mike Gilbert from comment #1)
> It works for me.
> 
> > % wget https://distfiles.gentoo.org/
> > --2022-11-10 13:49:22--  https://distfiles.gentoo.org/
> > Resolving distfiles.gentoo.org (distfiles.gentoo.org)... 2a02:6ea0:c400::11, 2a02:6ea0:c400::19, 2a02:6ea0:c400::12, ...

You're downloading from a different IP address, 2a02:6ea0:c400::11, it works for me too. 

ping 2a02:6ea0:c400::11
PING 2a02:6ea0:c400::11(2a02:6ea0:c400::11) 56 data bytes
64 bytes from 2a02:6ea0:c400::11: icmp_seq=1 ttl=53 time=127 ms

However, the one I'm talking about, 2a02:6ea0:ce00::5, looks dead. Try pinging it, I am curious if it's an infra problem, or I am under sanctions again.
Comment 6 Mike Gilbert gentoo-dev 2022-11-10 19:37:07 UTC
2a02:6ea0:ce00::5 responds to both ICMP and HTTPS here (USA).

> % wget https://distfiles.gentoo.org/
> --2022-11-10 14:35:44--  https://distfiles.gentoo.org/
> Resolving distfiles.gentoo.org (distfiles.gentoo.org)... 2a02:6ea0:ce00::5
> Connecting to distfiles.gentoo.org (distfiles.gentoo.org)|2a02:6ea0:ce00::5|:443... connected.
> HTTP request sent, awaiting response... 200 OK
> Length: unspecified [text/html]
> Saving to: ‘index.html’
> 
> index.html                   [ <=>                               ]   3.35K  --.-KB/s    in 0s
> 
> 2022-11-10 14:35:45 (295 MB/s) - ‘index.html’ saved [3430]
Comment 7 Michael 2022-11-10 19:51:01 UTC
Well, gentlemen, I have a bad feeling about what kind of answer I might get for my question about sanctions. :-)
Comment 8 Michael 2022-11-10 21:12:52 UTC
Anyway. I see that the CDN selects different IPs in response to requests from different places, which kinda makes sense. And maybe this particular one is not routed correctly for some reason, accessible for some people, but not for others. 

Or the problem might be on our side, after all, the trace stops on ae3-110.RT.ES.VOZ.RU.retn.net which is one of ours.
Comment 9 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2022-11-10 21:23:37 UTC
- That hostname is on the CDN.
- Gentoo ourselves do not implement any sanctions against traffic direct to our hosts by nationality.
- The CDN provider has previously said while they don't, some of their transit may.

Based on the traceroutes, it's likely that whoever RETN are, either has a bug in their network, or has partially implemented some blocking.

Sorry we can't do anything about it for you :-(
Comment 10 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2022-11-10 21:33:25 UTC
As a workaround, find a working mirror from https://www.gentoo.org/downloads/mirrors/, and throw it in your GENTOO_MIRRORS setting. Install app-portage/mirrorselect (https://wiki.gentoo.org/wiki/Mirrorselect), and you can have a semi-automated way of enumerating mirrors.

If you hit the same issue with one of those mirrors, just drop it from GENTOO_MIRRORS. There's obviously a lot of variables at hand, but iterating this should hopefully give you a set of mirrors that work consistently. Also, feel free to ask for help on IRC or the forums if necessary (and link this bug, since it'll be useful background).
Comment 11 Michael 2022-11-10 22:21:37 UTC
(In reply to Robin Johnson from comment #9)
> - Gentoo ourselves do not implement any sanctions against traffic direct to
> our hosts by nationality.

That's as much as I can hope for nowadays. I yesterday routed my plasma weather widget through TOR, because bbcukmet (BBC weather data source) did the thing. :-)

> Based on the traceroutes, it's likely that whoever RETN are, either has a
> bug in their network, or has partially implemented some blocking.

RENT and ertelecom is essentially my ISP, so I can't imagine they'd do it on purpose, and I checked in the blocklist used on _this_ side, for blocking the undesirables, the address in question is not there. However, there has been cases when they want to block one thing, but for various reasons block another. The funniest recent example was a couple of months ago when all userpics disappeared from youtube. 

(In reply to John Helmert III from comment #10)
> As a workaround, find a working mirror from
> https://www.gentoo.org/downloads/mirrors/

Thanks for the tip.

As a quick workaround I did:
FETCHCOMMAND="${FETCHCOMMAND} -4"

Since the only problem for now is no response over ipv6. 

> Also, feel free to ask for help on IRC or the forums if necessary

Really? What happened to your threat to get me k-lined? ;-)
Comment 12 Michael 2022-11-10 22:37:55 UTC
(In reply to Robin Johnson from comment #9)
> Sorry we can't do anything about it for you :-(

Eh. No need to be sorry. I got pretty good at evading and circumventing all sorts of things. At this point to me it's just a cat and mouse game. And the mouse is winning.