[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1006375: marked as done (debian-edu-config: squid very slow due to IPv6-lookups being done first, and only then IPv4)

Your message dated Tue, 22 Mar 2022 09:20:28 +0000
with message-id <E1nWagm-00083U-Vx@fasolo.debian.org>
and subject line Bug#1006375: fixed in debian-edu-config 2.12.18
has caused the Debian Bug report #1006375,
regarding debian-edu-config: squid very slow due to IPv6-lookups being done first, and only then IPv4
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1006375: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1006375
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: debian-edu-config
Severity: important
Version: 2.12.17
Control: found -1 2.11.56+debu3
Debian Edu is not yet really IPv6-ready. That is another topic and should be discussed elsewhere. Maybe for some people, Debian Edu works perfectly on IPv6 and I don't know that yet, please let us know your experiences on the Debian Edu mailing list. Thanks. (Don't Cc: such discussion replies to the bug report's mail address, please).
However, here current Debian Edu work best if IPv4 connections (and DNS lookups) are preferred over IPv6 connections and lookups.
In Squid, I made the observation today that squid tries to do an IPv6 lookup for a URL first and if that fails, it retries via IPv4. This seems to work ok for Debian Edu networks where TJENER does not have a public IPv6 address. However, in my customer's setup [1], loading a complex website page via squid takes ages with this. Esp. if the squid proxy is under medium to heavy load by other users on the network.
So, long story cut short, squid tries to route http(s) requests (hostname/path queries, basically) over IPv6 first and falls back as second choice to IPv4. This takes a bit of extra time for each URL to be loaded. IMHO, this should be avoided, IPv4 should be preferred in squid. Not only on this one customer setup, but in general it seems (as the whole Debian Edu design currently is 'IPv4-first' or rather 'IPv4-only'.
So, I'd like to add (and this extra config line fixed the issue on the customer site) 

  dns_v4_first on

to /etc/squid/conf.d/debian-edu.conf

Objections? Other opinions???

Mike
[1] In this customer setup TJENER has two network interfaces (a .intern network and a .backbone network). The .backbone network is for WiFi APs being able to access FreeRadius on TJENER (the WiFi APs are not on the .intern network but on a separate management network). And TJENER here as a public IPv6 address on the .backbone network's NIC (eth1 here). 

--

DAS-NETZWERKTEAM
c\o Technik- und Ökologiezentrum Eckernförde
Mike Gabriel, Marienthaler Str. 17, 24340 Eckernförde
mobile: +49 (1520) 1976 148
landline: +49 (4351) 850 8940

GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22  0782 9AF4 6B30 2577 1B31
mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de

Attachment: pgpVdE12YhX4k.pgp
Description: Digitale PGP-Signatur


--- End Message ---
--- Begin Message --- 
Source: debian-edu-config
Source-Version: 2.12.18
Done: Mike Gabriel <sunweaver@debian.org>

We believe that the bug you reported is fixed in the latest version of
debian-edu-config, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1006375@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Mike Gabriel <sunweaver@debian.org> (supplier of updated debian-edu-config package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 22 Mar 2022 09:53:57 +0100
Source: debian-edu-config
Architecture: source
Version: 2.12.18
Distribution: unstable
Urgency: medium
Maintainer: Debian Edu Developers <debian-edu@lists.debian.org>
Changed-By: Mike Gabriel <sunweaver@debian.org>
Closes: 1002019 1005841 1006362 1006375 1006604 1008067
Changes:
 debian-edu-config (2.12.18) unstable; urgency=medium
 .
   * etc/cups/cups-browsed-debian-edu.conf:
     - Let TJENER's print queues appear on Debian Edu clients, use same
       print queue names on clients as on TJENER. (Closes: #1005841).
   * sbin/debian-edu-pxeinstall:
     - Don't append 'ipappend 2' to the kernel boot cmdline anymore as it
       confuses systemd when booting into the installed system. This resolves
       the graphical.target not coming up on Debian Edu workstations that got
       installed via the PXE/network based Debian Installer method. (Closes:
       #1006362).
     - Silence stderr output if the artwork theme lacks a plymouth subfolder.
       This can be silently ignored and should not trouble Debian Edu admins.
   * sbin/update-hostname-from-ip:
     - Simply if-then-else-clauses, reduce number of exit calls, don't exit with
       non-zero exitcode. Improve syslog messages if things fail. (Closes:
       #1006604).
   * share/debian-edu-config/squid.conf:
     - Prefer DNSv4 lookups over DNSv6. Debian Edu does not yet fully support
       IPv6 and many schools still use IPv4 primarily. This gives a great
       performance boost to squid installations if IPv6 internet is not fully
       available for whatever reason. (Closes: #1006375).
   * share/debian-edu-config/tools/{update-proxy-from-wpad,wpad-extra}:
     - Don't fail if proxy update is not possible, only send warnings to stderr
       and syslog. Don't source wpad-extra script, execute it instead and capture
       stdout. (Closes: #1008067).
     - White-space clean-up (use only tabs for indentation).
   * Move /etc/debian-edu/host-keytabs/* to /var/lib/debian-edu/host-keytabs/
     and replace directory /etc/debian-edu/host-keytabs by a symlink. (Closes:
     #1002019).
   * lintian: Update some override phrases (adjustments to the most recent
     lintian version).
Checksums-Sha1:
 edb39c0fb53fde383f109be96cae03b731c1b2b4 2055 debian-edu-config_2.12.18.dsc
 607d503bbf22853145d96428513cfc5e2b24ceb9 351880 debian-edu-config_2.12.18.tar.xz
 f30f006b064dcb6daed82f2b9a28f0724ebd81aa 6155 debian-edu-config_2.12.18_source.buildinfo
Checksums-Sha256:
 260d3adcdf590564f1cae752251bab18ec3d56b7d1a6cf6b02cacf166d300617 2055 debian-edu-config_2.12.18.dsc
 fc5f21d6ac302095a44243e7b571758f11f7a96598568cd9fc547ad7c43a3a7d 351880 debian-edu-config_2.12.18.tar.xz
 57521be07b333041b9913ca60e9618954a8eb4316b75d4d5ca75ab8288097ca9 6155 debian-edu-config_2.12.18_source.buildinfo
Files:
 7482a92eef5f911e5e7ac9029203b6d7 2055 misc optional debian-edu-config_2.12.18.dsc
 61869d4bbddd11faf4cc61a3d20eb6e9 351880 misc optional debian-edu-config_2.12.18.tar.xz
 33f92bd82cc8bbf0130f7afd364cd789 6155 misc optional debian-edu-config_2.12.18_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQJJBAEBCAAzFiEEm/uu6GwKpf+/IgeCmvRrMCV3GzEFAmI5jucVHHN1bndlYXZl
ckBkZWJpYW4ub3JnAAoJEJr0azAldxsxbyYP/2+HOhiRUMukM8ikKvVUmdOSiA78
BC9ehCgjTtU3UKa+OmXD10UuPYr2f0T1RgD4gfogr3Tq6gIA50HZ1Ditw+nBRDO7
U2CY4XXwfvb8zgjJhikyKXWMgZxa4+7SuPfJ/ySS21tbPLMM1KVAhS7Vi/F2Kj7H
Bq2KQ7wY9heFjB8EiHhoBlkYfa5+1iZ2f8Om7e8RrzCyGHMZxlxSuLSrz9OalEaO
tMM5rRDUo7ZHVrjl+SWC9jfQsw7lc5UFdNCNh2VSsP6wsrnmnsGsEKaafx/R2ucj
qmcNvHNPI0JwTySVG9+uxFkezjwvwgvHAlOWxf8Bo0xJ/ud8S2/EntgAl2fbrvIP
qxMlm2NK0Tp7VqFUExVDbqd4F15uwaixLXzCSx+CJwFjDnXsImQuuO/f/aMjN2ru
M+s/PlWluUyzPLZlcooKvaqbPHWj+596/Eu/OEt5OGXBe0uAN8dFFrXuzNzeN3cA
NA/r/jDuUKb23Fv3YHI35hjY7IPFOenJHaLqvJj/s3eF5FMT5DwNzt+p6G7xCGCJ
t6wV3cmIuzPHJkbWSHYB/a2vVHQsFxxgRckKFbQrJPrJQkIaiKSvG7oTagI7wOwW
8syNSADGSmHMRQzzjLof/4gaUUkXBwNMXOn+RuVfA6PbQc21/4txNKLmVExHwktV
oJZ7a/fNQA6WFAun
=4OJS
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: