www/174526: main website (freebsd.org/www.freebsd.org) is unreachable from Nova Scotia Universities
Simon L. B. Nielsen
simon at FreeBSD.org
Mon Dec 17 22:00:23 UTC 2012
The following reply was made to PR www/174526; it has been noted by GNATS.
From: "Simon L. B. Nielsen" <simon at FreeBSD.org>
To: Joseph Mingrone <jrm at ftfl.ca>
Cc: FreeBSD-gnats-submit at FreeBSD.org,
"FreeBSD.org clusteradm" <clusteradm at FreeBSD.org>
Subject: Re: www/174526: main website (freebsd.org/www.freebsd.org) is unreachable from Nova Scotia Universities
Date: Mon, 17 Dec 2012 21:55:04 +0000
On 17 Dec 2012, at 20:29, Joseph Mingrone <jrm at ftfl.ca> wrote:
>=20
>> Number: 174526
>> Category: www
>> Synopsis: main website (freebsd.org/www.freebsd.org) is =
unreachable from Nova Scotia Universities
> For the past month or so, freebsd.org has been unreachable from =
Dalhousie University (Halifax, Nova Scotia, Canada) IP addresses. Until =
today, www.freebsd.org was accessible. The traceroute (pasted below) =
shows problems after routerer-pat1.freebsd.org (216.115.101.225). =
Connecting from IPs from local, private ISPs works fine. Perhaps there =
is an invalid redirect for Atlantic Canadian university IP blocks?
>=20
> % traceroute www.freebsd.org
> traceroute to wfe0.ysv.freebsd.org (8.8.178.110), 64 hops max, 52 byte =
packets
> 1 GW81AD2000.Backbone.Dal.Ca (129.173.32.1) 0.870 ms 0.551 ms =
0.480 ms
> 2 GigaPOP-gw.acorn-ns.Ca (198.166.1.17) 0.846 ms 0.758 ms 0.792 ms
> 3 ISInet-GW.Backbone.Dal.Ca (198.166.1.38) 0.769 ms 0.740 ms 0.726 =
ms
> 4 ns-hlfx-asr002.ns.eastlink.ca (24.222.79.121) 1.261 ms 1.232 ms =
0.925 ms
> 5 ns-hlfx-dr001.ns.eastlink.ca (24.215.101.245) 1.766 ms 1.638 ms =
1.842 ms
> 6 ns-hlfx-br001.ns.eastlink.ca (24.215.101.221) 1.890 ms 1.774 ms =
1.727 ms
> 7 xe-1-3-0.bos11.ip4.tinet.net (173.241.128.145) 9.129 ms 51.961 ms =
16.959 ms
> 8 xe-5-1-0.sjc10.ip4.tinet.net (89.149.185.161) 87.429 ms 86.623 ms
> xe-9-1-0.sjc10.ip4.tinet.net (89.149.184.53) 94.843 ms
> 9 * * ge-0-3-8.pat1.sjc.yahoo.com (216.115.96.6) 99.273 ms
> 10 routerer-pat1.freebsd.org (216.115.101.225) 99.996 ms 99.838 ms =
98.871 ms
> 11 routerer-pat1.freebsd.org (216.115.101.225) 98.868 ms 99.718 ms =
*
> 12 * * *
> 13 * * *
> ...
> 64 * * *
FreeBSD is in the process of moving from one datacenter to another and I =
switched www.FreeBSD.org to be served from the new one today. The raw =
host "freebsd.org" is freefall.freebsd.org which was moved a bit longer =
ago (1 month sounds right).
So I think it's either a firewall in either end or an odd routing =
problem.
Anyone have obvious candidates ? :
Connecting to www.dal.ca port 80 with an IP from our delegated /24 fails =
with:
# tcpdump -s0 -i bge0 host www.dal.ca
tcpdump: verbose output suppressed, use -v or -vv for full protocol =
decode
listening on bge0, link-type EN10MB (Ethernet), capture size 65535 bytes
21:49:29.941767 IP routerer.FreeBSD.org.41224 > =
kil-cq5-4w0.ITS.Dal.Ca.http: Flags [S], seq 997436128, win 65535, =
options [mss 1460,nop,wscale 6,sackOK,TS val 270875695 ecr 0], length 0
21:49:32.940893 IP routerer.FreeBSD.org.41224 > =
kil-cq5-4w0.ITS.Dal.Ca.http: Flags [S], seq 997436128, win 65535, =
options [mss 1460,nop,wscale 6,sackOK,TS val 270878695 ecr 0], length 0
21:49:36.140885 IP routerer.FreeBSD.org.41224 > =
kil-cq5-4w0.ITS.Dal.Ca.http: Flags [S], seq 997436128, win 65535, =
options [mss 1460,nop,wscale 6,sackOK,TS val 270881895 ecr 0], length 0
21:49:39.340885 IP routerer.FreeBSD.org.41224 > =
kil-cq5-4w0.ITS.Dal.Ca.http: Flags [S], seq 997436128, win 65535, =
options [mss 1460], length 0
21:49:42.540895 IP routerer.FreeBSD.org.41224 > =
kil-cq5-4w0.ITS.Dal.Ca.http: Flags [S], seq 997436128, win 65535, =
options [mss 1460], length 0
21:49:45.740890 IP routerer.FreeBSD.org.41224 > =
kil-cq5-4w0.ITS.Dal.Ca.http: Flags [S], seq 997436128, win 65535, =
options [mss 1460], length 0
21:49:51.940891 IP routerer.FreeBSD.org.41224 > =
kil-cq5-4w0.ITS.Dal.Ca.http: Flags [S], seq 997436128, win 65535, =
options [mss 1460], length 0
But if I'm using the IP on our transit network it works just fine:
21:50:58.046045 IP routerer-pat1.freebsd.org.35814 > =
kil-cq5-4w0.ITS.Dal.Ca.http: Flags [S], seq 2306026374, win 65535, =
options [mss 1460,nop,wscale 6,sackOK,TS val 270963800 ecr 0], length 0
21:50:58.155918 IP kil-cq5-4w0.ITS.Dal.Ca.http > =
routerer-pat1.freebsd.org.35814: Flags [S.], seq 4012957193, ack =
2306026375, win 5792, options [mss 1380,sackOK,TS val 416382003 ecr =
270963800,nop,wscale 7], length 0
21:50:58.155963 IP routerer-pat1.freebsd.org.35814 > =
kil-cq5-4w0.ITS.Dal.Ca.http: Flags [.], ack 1, win 1026, options =
[nop,nop,TS val 270963910 ecr 416382003], length 0
21:51:02.746528 IP kil-cq5-4w0.ITS.Dal.Ca.http > =
routerer-pat1.freebsd.org.35814: Flags [S.], seq 4012957193, ack =
2306026375, win 5792, options [mss 1380,sackOK,TS val 416386594 ecr =
270963910,nop,wscale 7], length 0
21:51:02.746562 IP routerer-pat1.freebsd.org.35814 > =
kil-cq5-4w0.ITS.Dal.Ca.http: Flags [.], ack 1, win 1026, options =
[nop,nop,TS val 270968500 ecr 416386594], length 0
Since I already did them... a few traceroutes:
Traceroute from the old one:
[simon at red:~] traceroute www.dal.ca
traceroute to kil-cq5-4w0.ITS.dal.ca (129.173.21.171), 64 hops max, 40 =
byte packets
1 vl-225.bas-b1.sp1.yahoo.com (69.147.83.3) 0.398 ms 0.289 ms 0.228 =
ms
2 ge-1-0-1.msr1.sp1.yahoo.com (209.131.32.30) 0.201 ms 0.196 ms =
0.183 ms
3 ae-2-d161.pat2.sjc.yahoo.com (216.115.107.62) 0.829 ms
ae-0-d141.pat2.pao.yahoo.com (216.115.107.50) 0.834 ms
ae-1-d160.pat1.sjc.yahoo.com (216.115.107.56) 0.946 ms
4 ae-3.pat1.pao.yahoo.com (216.115.101.34) 0.964 ms 1.184 ms
ae-3.pat2.swp.yahoo.com (216.115.96.57) 19.416 ms
5 ae-0.pat1.swp.yahoo.com (216.115.110.43) 19.550 ms 19.346 ms =
19.526 ms
6 clgr2rtr2.canarie.ca (205.189.33.197) 108.554 ms 108.667 ms
vncv1rtr2.canarie.ca (206.81.80.189) 26.030 ms
7 toro1rtr2.canarie.ca (205.189.33.209) 108.755 ms 108.740 ms =
109.493 ms
8 toro1rtr2.canarie.ca (205.189.33.209) 108.802 ms
mtrl2rtr2.canarie.ca (205.189.33.223) 110.261 ms 109.952 ms
9 hlfx1rtr2.canarie.ca (199.212.24.84) 116.929 ms
mtrl2rtr2.canarie.ca (205.189.33.223) 113.690 ms 110.201 ms
10 hlfx1rtr2.canarie.ca (199.212.24.84) 116.991 ms 116.898 ms *
11 * * *
[simon at admin:~] traceroute www.dal.ca
traceroute to kil-cq5-4w0.ITS.dal.ca (129.173.21.171), 64 hops max, 52 =
byte packets
1 routerer (8.8.178.2) 0.708 ms 0.581 ms 0.675 ms
2 ae-1-d188.pat1.sjc.yahoo.com (216.115.101.224) 1.818 ms 1.822 ms =
1.663 ms
3 ae-6.pat1.swp.yahoo.com (216.115.100.94) 20.470 ms 20.569 ms =
20.523 ms
4 * * *
5 clgr2rtr2.canarie.ca (205.189.33.197) 107.807 ms 107.904 ms =
107.759 ms
6 toro1rtr2.canarie.ca (205.189.33.209) 107.981 ms 108.130 ms =
108.106 ms
7 mtrl2rtr2.canarie.ca (205.189.33.223) 108.661 ms 108.388 ms =
108.170 ms
8 hlfx1rtr2.canarie.ca (199.212.24.84) 107.617 ms 107.620 ms =
107.279 ms
9 * * *
10 * * *
11 * * *
Just for reference for me from home to www.freebsd.org the last part is:
10 4.68.111.242 (4.68.111.242) 166.288 ms
4.68.63.158 (4.68.63.158) 139.719 ms
64.215.195.213 (64.215.195.213) 149.850 ms
11 ae14-20g.scr3.nyc1.gblx.net (67.17.72.109) 129.934 ms 103.820 ms =
113.754 ms
12 ae4-20g.scr4.snv2.gblx.net (67.16.147.90) 179.863 ms 393.493 ms
xe5-0-2-10g.scr3.snv2.gblx.net (67.16.165.50) 238.116 ms
13 e5-3-40g.ar5.sjc2.gblx.net (67.17.72.14) 249.433 ms
e8-1-20g.ar5.sjc2.gblx.net (67.16.145.118) 422.696 ms 198.738 ms
14 yahoo.tengigabitethernet2-4.1189.ar3.sjc2.gblx.net (208.48.239.254) =
192.603 ms 198.490 ms
yahoo-san-jose.tengig2-3.1189.ar3.sjc2.gblx.net (64.211.206.210) =
638.591 ms
15 routerer-pat1.freebsd.org (216.115.101.225) 663.967 ms 499.559 ms =
280.826 ms
16 wfe0.ysv.freebsd.org (8.8.178.110) 333.695 ms 482.018 ms 249.999 =
ms
--=20
Simon L. B. Nielsen
More information about the freebsd-www
mailing list