Henrique de Moraes Holschuh <hmh@debian.org> writes:
> On Wed, 01 Jun 2011, Jonathan McCrohan wrote:
>> On 01/06/11 00:01, Gerald Turner wrote:
>> > Can anyone else confirm or deny IPv6 security updates mirror at
>> > schein.debian.org is operational (virtual host,
>> > security.debian.org, makes this a bit difficult to test)?
>>
>> I can confirm that apt-get updates are stalling at the following line
>> for upwards of 10 seconds.
>> [Connecting to security.debian.org (2001:4f8:8:36::6)]
>>
>> Both my servers (UK and US based) seem to experience this problem so
>> I suspect it is not related to any particular geolocation server.
>
> The output of traceroute seems to show that schein has a good
> connection to the V6 internet, as it is hosted at ISC.
>
> Please check the MTUs recorded in the route cache:
> ip -6 route get 2001:4f8:8:36::6
>
2001:4f8:8:36::6 from :: via 2001:470:e861::1 dev eth0 src 2001:470:e861::8 metric 0
cache expires 510sec mtu 1480 advmss 1440 hoplimit 4294967295
> And also run a MTU check on your connection to schein. It has to be
> above 1280, and it it has to match whatever the kernel recorded in the
> route cache. I think package "iputils-tracepath" can do it, but I
> haven't checked (I am not in a IPv6-capable network).
>
Looks like it's 1480:
$ tracepath6 schein.debian.org
1?: [LOCALHOST] 0.031ms pmtu 1480
1: shub-niggurath.unzane.com 0.162ms
1: shub-niggurath.unzane.com 0.360ms
2: gturner-1.tunnel.tserv14.sea1.ipv6.he.net 6.576ms
3: gige-g2-6.core1.sea1.he.net 5.654ms
4: 10gigabitethernet9-1.core1.sjc2.he.net 26.522ms
5: 10gigabitethernet3-2.core1.pao1.he.net 34.657ms
6: he.pao1.isc.org 29.855ms
7: int-0-0-0.r1.sjc3.isc.org 31.418ms asymm 5
8: schein.debian.org 27.519ms reached
Resume: pmtu 1480 hops 8 back 59
--
Gerald Turner Email: gturner@unzane.com JID: gturner@unzane.com
GPG: 0xFA8CD6D5 21D9 B2E8 7FE7 F19E 5F7D 4D0C 3FA0 810F FA8C D6D5
Attachment:
pgp19XQAINgwy.pgp
Description: PGP signature