bugs.python.org not reachable in IPv6?

Hi, The DNS server of python.org announce the IP address 2a01:4f8:131:2480::3: $ host -t AAAA bugs.python.org bugs.python.org has IPv6 address 2a01:4f8:131:2480::3 The problem is that I cannot connect to this IP address: $ ping6 -c 4 2a01:4f8:131:2480::3 PING 2a01:4f8:131:2480::3(2a01:4f8:131:2480::3) 56 data bytes --- 2a01:4f8:131:2480::3 ping statistics --- 4 packets transmitted, 0 received, 100% packet loss, time 2999ms Do you have a the same issue, or is it just me? Victor

Opened issue at http://psf.upfronthosting.co.za/roundup/meta/issue528 Regards Antoine. Le samedi 12 octobre 2013 à 14:40 +0200, Victor Stinner a écrit :

Hi, bugs.python.org is still not responding on IPv6. Can someone please remove the AAAA record from python.org DNS, or fix the IPv6 configuration? It's an issue on my PC because my PC has IPv6 address and so it cannot reach bugs.python.org. wget is really slow because it tries first IPv6, but then falls back to IPv4. Firefox tries first IPv4 and so doesn't have the issue. Victor 2013/10/12 Antoine Pitrou <antoine@python.org>:

On 04.11.2013 11:01, Victor Stinner wrote:
The infrastructure team cannot do anything about this, since the tracker is hosted by Upfront Systems. They are hosting the instance at Hetzner in Germany, which does support IPv6. Do we have someone with login permission for the server running RoundUp ? If not, we should probably find someone at Upfront Systems to check the configuration.
-- Marc-Andre Lemburg eGenix.com Professional Python Services directly from the Source (#1, Nov 04 2013)
2013-11-19: Python Meeting Duesseldorf ... 15 days to go ::::: Try our mxODBC.Connect Python Database Interface for free ! :::::: eGenix.com Software, Skills and Services GmbH Pastor-Loeh-Str.48 D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg Registered at Amtsgericht Duesseldorf: HRB 46611 http://www.egenix.com/company/contact/

2013/11/4 M.-A. Lemburg <mal@egenix.com>:
But the PSF controls the DNS, no? ;; AUTHORITY SECTION: python.org. 2396 IN NS ns2.p11.dynect.net. python.org. 2396 IN NS ns3.p11.dynect.net. python.org. 2396 IN NS ns1.p11.dynect.net. python.org. 2396 IN NS ns4.p11.dynect.net. -- Regards, Benjamin

On 04.11.2013 16:10, Benjamin Peterson wrote:
Yes, but only Upfront Systems knows about the correct IPv6 address :-) Simply removing it would be short term work-around, though. -- Marc-Andre Lemburg eGenix.com Professional Python Services directly from the Source (#1, Nov 04 2013)
2013-11-19: Python Meeting Duesseldorf ... 15 days to go ::::: Try our mxODBC.Connect Python Database Interface for free ! :::::: eGenix.com Software, Skills and Services GmbH Pastor-Loeh-Str.48 D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg Registered at Amtsgericht Duesseldorf: HRB 46611 http://www.egenix.com/company/contact/

On lun., 2013-11-04 at 16:09 +0100, M.-A. Lemburg wrote:
I think Ezio and Martin have access to the machine, but not necessarily root access; and, furthermore, the problem might be somewhere else on the network. I think the best short-term measure is to disable the IPv6 resolution for bugs.python.org. Otherwise people will run in the same issue over and over again. Regards Antoine.

On Mon, 04 Nov 2013 16:34:46 +0100, Antoine Pitrou <antoine@python.org> wrote:
We have root, but I don't think that helps. I currently see this: eth0 Link encap:Ethernet HWaddr 6c:62:6d:85:bb:7b inet addr:46.4.197.70 Bcast:46.4.197.71 Mask:255.255.255.248 inet6 addr: 2a01:4f8:131:2480::3/64 Scope:Global so the problem appears to be a network issue (as far as I can see, there's no firewall running on the box itself). Disabling the AAA name record until we get a response from upfront sounds like a good idea. (I've added the upfront folks as nosy on the ticket Antoine opened on the meta-tracker.) --David

On 04.11.2013 17:05, R. David Murray wrote:
Some things to try on the box: * ping6 2001:888:2000:d::a2 (that's python.org) * check whether the web server is actually listening on the IPv6 address * check whether a IPv6 default route is set up If the first doesn't work, there's likely a router problem with the server, which only Upfront can resolve (via a support request to Hetzner or by checking their server IPv6 settings). Here's the configuration page for the IPv6 setup: http://wiki.hetzner.de/index.php/Netzkonfiguration_Debian/en -- Marc-Andre Lemburg eGenix.com Professional Python Services directly from the Source (#1, Nov 04 2013)
2013-11-19: Python Meeting Duesseldorf ... 15 days to go ::::: Try our mxODBC.Connect Python Database Interface for free ! :::::: eGenix.com Software, Skills and Services GmbH Pastor-Loeh-Str.48 D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg Registered at Amtsgericht Duesseldorf: HRB 46611 http://www.egenix.com/company/contact/

2013/11/4 M.-A. Lemburg <mal@egenix.com>:
Some things to try on the box:
* ping6 2001:888:2000:d::a2 (that's python.org)
$ ping6 -c 4 2001:888:2000:d::a2 PING 2001:888:2000:d::a2(2001:888:2000:d::a2) 56 data bytes 64 bytes from 2001:888:2000:d::a2: icmp_seq=1 ttl=56 time=53.0 ms 64 bytes from 2001:888:2000:d::a2: icmp_seq=2 ttl=56 time=53.0 ms 64 bytes from 2001:888:2000:d::a2: icmp_seq=3 ttl=56 time=58.4 ms 64 bytes from 2001:888:2000:d::a2: icmp_seq=4 ttl=56 time=122 ms --- 2001:888:2000:d::a2 ping statistics --- 4 packets transmitted, 4 received, 0% packet loss, time 3003ms rtt min/avg/max/mdev = 53.024/71.841/122.817/29.514 ms => OK
* check whether the web server is actually listening on the IPv6 address
smithers$ wget -O python.html 'http://[2001:888:2000:d::a2]/' --2013-11-04 20:53:27-- http://[2001:888:2000:d::a2]/ Connecting to [2001:888:2000:d::a2]:80... connecté. requête HTTP transmise, en attente de la réponse...302 Found Emplacement: http://www.python.org [suivant] --2013-11-04 20:53:27-- http://www.python.org/ Résolution de www.python.org (www.python.org)... 2001:888:2000:d::a2, 82.94.164.162 Reusing existing connection to [2001:888:2000:d::a2]:80. requête HTTP transmise, en attente de la réponse...200 OK Longueur: 20423 (20K) [text/html] Sauvegarde en : «python.html» 100%[=====================================================================================================>] 20 423 113KB/s ds 0,2s 2013-11-04 20:53:28 (113 KB/s) - «python.html» sauvegardé [20423/20423] => OK
* check whether a IPv6 default route is set up
I don't know how to check that. Victor

On 04.11.2013 20:54, Victor Stinner wrote:
route -n -A inet6 should print the default route setup for IPv6. This has to list a working and ping6'able gateway. BTW: The above was meant to be run on the bugs.python.org box, not your box :-) -- Marc-Andre Lemburg eGenix.com Professional Python Services directly from the Source (#1, Nov 04 2013)
2013-11-19: Python Meeting Duesseldorf ... 15 days to go ::::: Try our mxODBC.Connect Python Database Interface for free ! :::::: eGenix.com Software, Skills and Services GmbH Pastor-Loeh-Str.48 D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg Registered at Amtsgericht Duesseldorf: HRB 46611 http://www.egenix.com/company/contact/

Opened issue at http://psf.upfronthosting.co.za/roundup/meta/issue528 Regards Antoine. Le samedi 12 octobre 2013 à 14:40 +0200, Victor Stinner a écrit :

Hi, bugs.python.org is still not responding on IPv6. Can someone please remove the AAAA record from python.org DNS, or fix the IPv6 configuration? It's an issue on my PC because my PC has IPv6 address and so it cannot reach bugs.python.org. wget is really slow because it tries first IPv6, but then falls back to IPv4. Firefox tries first IPv4 and so doesn't have the issue. Victor 2013/10/12 Antoine Pitrou <antoine@python.org>:

On 04.11.2013 11:01, Victor Stinner wrote:
The infrastructure team cannot do anything about this, since the tracker is hosted by Upfront Systems. They are hosting the instance at Hetzner in Germany, which does support IPv6. Do we have someone with login permission for the server running RoundUp ? If not, we should probably find someone at Upfront Systems to check the configuration.
-- Marc-Andre Lemburg eGenix.com Professional Python Services directly from the Source (#1, Nov 04 2013)
2013-11-19: Python Meeting Duesseldorf ... 15 days to go ::::: Try our mxODBC.Connect Python Database Interface for free ! :::::: eGenix.com Software, Skills and Services GmbH Pastor-Loeh-Str.48 D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg Registered at Amtsgericht Duesseldorf: HRB 46611 http://www.egenix.com/company/contact/

2013/11/4 M.-A. Lemburg <mal@egenix.com>:
But the PSF controls the DNS, no? ;; AUTHORITY SECTION: python.org. 2396 IN NS ns2.p11.dynect.net. python.org. 2396 IN NS ns3.p11.dynect.net. python.org. 2396 IN NS ns1.p11.dynect.net. python.org. 2396 IN NS ns4.p11.dynect.net. -- Regards, Benjamin

On 04.11.2013 16:10, Benjamin Peterson wrote:
Yes, but only Upfront Systems knows about the correct IPv6 address :-) Simply removing it would be short term work-around, though. -- Marc-Andre Lemburg eGenix.com Professional Python Services directly from the Source (#1, Nov 04 2013)
2013-11-19: Python Meeting Duesseldorf ... 15 days to go ::::: Try our mxODBC.Connect Python Database Interface for free ! :::::: eGenix.com Software, Skills and Services GmbH Pastor-Loeh-Str.48 D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg Registered at Amtsgericht Duesseldorf: HRB 46611 http://www.egenix.com/company/contact/

On lun., 2013-11-04 at 16:09 +0100, M.-A. Lemburg wrote:
I think Ezio and Martin have access to the machine, but not necessarily root access; and, furthermore, the problem might be somewhere else on the network. I think the best short-term measure is to disable the IPv6 resolution for bugs.python.org. Otherwise people will run in the same issue over and over again. Regards Antoine.

On Mon, 04 Nov 2013 16:34:46 +0100, Antoine Pitrou <antoine@python.org> wrote:
We have root, but I don't think that helps. I currently see this: eth0 Link encap:Ethernet HWaddr 6c:62:6d:85:bb:7b inet addr:46.4.197.70 Bcast:46.4.197.71 Mask:255.255.255.248 inet6 addr: 2a01:4f8:131:2480::3/64 Scope:Global so the problem appears to be a network issue (as far as I can see, there's no firewall running on the box itself). Disabling the AAA name record until we get a response from upfront sounds like a good idea. (I've added the upfront folks as nosy on the ticket Antoine opened on the meta-tracker.) --David

On 04.11.2013 17:05, R. David Murray wrote:
Some things to try on the box: * ping6 2001:888:2000:d::a2 (that's python.org) * check whether the web server is actually listening on the IPv6 address * check whether a IPv6 default route is set up If the first doesn't work, there's likely a router problem with the server, which only Upfront can resolve (via a support request to Hetzner or by checking their server IPv6 settings). Here's the configuration page for the IPv6 setup: http://wiki.hetzner.de/index.php/Netzkonfiguration_Debian/en -- Marc-Andre Lemburg eGenix.com Professional Python Services directly from the Source (#1, Nov 04 2013)
2013-11-19: Python Meeting Duesseldorf ... 15 days to go ::::: Try our mxODBC.Connect Python Database Interface for free ! :::::: eGenix.com Software, Skills and Services GmbH Pastor-Loeh-Str.48 D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg Registered at Amtsgericht Duesseldorf: HRB 46611 http://www.egenix.com/company/contact/

2013/11/4 M.-A. Lemburg <mal@egenix.com>:
Some things to try on the box:
* ping6 2001:888:2000:d::a2 (that's python.org)
$ ping6 -c 4 2001:888:2000:d::a2 PING 2001:888:2000:d::a2(2001:888:2000:d::a2) 56 data bytes 64 bytes from 2001:888:2000:d::a2: icmp_seq=1 ttl=56 time=53.0 ms 64 bytes from 2001:888:2000:d::a2: icmp_seq=2 ttl=56 time=53.0 ms 64 bytes from 2001:888:2000:d::a2: icmp_seq=3 ttl=56 time=58.4 ms 64 bytes from 2001:888:2000:d::a2: icmp_seq=4 ttl=56 time=122 ms --- 2001:888:2000:d::a2 ping statistics --- 4 packets transmitted, 4 received, 0% packet loss, time 3003ms rtt min/avg/max/mdev = 53.024/71.841/122.817/29.514 ms => OK
* check whether the web server is actually listening on the IPv6 address
smithers$ wget -O python.html 'http://[2001:888:2000:d::a2]/' --2013-11-04 20:53:27-- http://[2001:888:2000:d::a2]/ Connecting to [2001:888:2000:d::a2]:80... connecté. requête HTTP transmise, en attente de la réponse...302 Found Emplacement: http://www.python.org [suivant] --2013-11-04 20:53:27-- http://www.python.org/ Résolution de www.python.org (www.python.org)... 2001:888:2000:d::a2, 82.94.164.162 Reusing existing connection to [2001:888:2000:d::a2]:80. requête HTTP transmise, en attente de la réponse...200 OK Longueur: 20423 (20K) [text/html] Sauvegarde en : «python.html» 100%[=====================================================================================================>] 20 423 113KB/s ds 0,2s 2013-11-04 20:53:28 (113 KB/s) - «python.html» sauvegardé [20423/20423] => OK
* check whether a IPv6 default route is set up
I don't know how to check that. Victor

On 04.11.2013 20:54, Victor Stinner wrote:
route -n -A inet6 should print the default route setup for IPv6. This has to list a working and ping6'able gateway. BTW: The above was meant to be run on the bugs.python.org box, not your box :-) -- Marc-Andre Lemburg eGenix.com Professional Python Services directly from the Source (#1, Nov 04 2013)
2013-11-19: Python Meeting Duesseldorf ... 15 days to go ::::: Try our mxODBC.Connect Python Database Interface for free ! :::::: eGenix.com Software, Skills and Services GmbH Pastor-Loeh-Str.48 D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg Registered at Amtsgericht Duesseldorf: HRB 46611 http://www.egenix.com/company/contact/
participants (5)
-
Antoine Pitrou
-
Benjamin Peterson
-
M.-A. Lemburg
-
R. David Murray
-
Victor Stinner