I've been having trouble with apt-cacher-ng on a set of hosts on an IPv6
network for the last 3 days. Package updates are stalling on
security.debian.org, taking several minutes, even segfaulting acng.
I found that:
wget http://security.debian.org/dists/squeeze/updates/Release
hangs, while:
wget http://security.debian.org/dists/squeeze/updates/Release.gpg
succeeds.
Running 'dig +trace security.debian.org AAAA' always returns the same address,
security.debian.org. 300 IN AAAA 2001:4f8:8:36::6
which is schein.debian.org.
A fellow on IRC gave me a handful of AAAA records that his
security.debian.org lookup resolves to (from Poland), I put them in
/etc/hosts to bypass what the geo[1-3].debian.org nameservers expect me
to use (from Oregon, US), and all is well.
traceroute to schein looks good:
$ traceroute6 security.debian.org
traceroute to security.debian.org (2001:4f8:8:36::6), 30 hops max, 80 byte packets
1 shub-niggurath.unzane.com (2001:470:e861::1) 0.224 ms 0.278 ms 0.258 ms
2 gturner-1.tunnel.tserv14.sea1.ipv6.he.net (2001:470:a:208::1) 6.374 ms 6.904 ms 7.660 ms
3 gige-g2-6.core1.sea1.he.net (2001:470:0:9b::1) 7.621 ms 7.595 ms 7.569 ms
4 10gigabitethernet9-1.core1.sjc2.he.net (2001:470:0:1c7::1) 27.148 ms 28.672 ms 28.655 ms
5 10gigabitethernet3-2.core1.pao1.he.net (2001:470:0:32::2) 29.043 ms 29.027 ms 28.999 ms
6 he.pao1.isc.org (2001:470:0:38::2) 32.357 ms 31.603 ms 31.542 ms
7 int-0-0-0.r1.sjc3.isc.org (2001:4f8:1b:1::1:1) 32.058 ms 28.006 ms 28.317 ms
8 schein.debian.org (2001:4f8:8:36::6) 27.105 ms 27.060 ms 27.042 ms
ping looks good:
$ ping6 -c3 security.debian.org
PING security.debian.org(schein.debian.org) 56 data bytes
64 bytes from schein.debian.org: icmp_seq=1 ttl=59 time=27.0 ms
64 bytes from schein.debian.org: icmp_seq=2 ttl=59 time=26.8 ms
64 bytes from schein.debian.org: icmp_seq=3 ttl=59 time=27.2 ms
--- security.debian.org ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2002ms
rtt min/avg/max/mdev = 26.868/27.069/27.275/0.213 ms
wget of the Release.gpg file looks good:
$ wget -S --delete-after http://security.debian.org/dists/squeeze/updates/Release.gpg
--2011-05-31 15:51:53-- http://security.debian.org/dists/squeeze/updates/Release.gpg
Resolving security.debian.org... 2001:4f8:8:36::6, 128.31.0.36, 128.101.240.212, ...
Connecting to security.debian.org|2001:4f8:8:36::6|:80... connected.
HTTP request sent, awaiting response...
HTTP/1.1 200 OK
Date: Tue, 31 May 2011 22:51:53 GMT
Server: Apache
Last-Modified: Tue, 31 May 2011 21:08:26 GMT
ETag: "344-4a498ce104680"
Accept-Ranges: bytes
Content-Length: 836
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/plain
Length: 836 [text/plain]
Saving to: “Release.gpg”
100%[====================================>] 836 --.-K/s in 0s
2011-05-31 15:51:53 (74.0 MB/s) - “Release.gpg” saved [836/836]
Removing Release.gpg.
Only wget to http://security.debian.org/dists/squeeze/updates/Release
seems to fail (other files fail as well, Packages.gz, Sources.gz, etc.).
Can anyone else confirm or deny IPv6 security updates mirror at
schein.debian.org is operational (virtual host, security.debian.org,
makes this a bit difficult to test)?
--
Gerald Turner Email: gturner@unzane.com JID: gturner@unzane.com
GPG: 0xFA8CD6D5 21D9 B2E8 7FE7 F19E 5F7D 4D0C 3FA0 810F FA8C D6D5
Attachment:
pgpVZKqrwf7IN.pgp
Description: PGP signature