[Bug 1412943] Re: security.ubuntu.com (2001:67c:1562::XXX) not reachable via HE

[Marc Kolly]

This problem has been around since 2012 when they enabled IPv6 for their
"core services". This: #241305 shows the development of the problem we
face now.

I'm not using HE. I tested it using Telekom + M-Net (Germany) and O2 +
UPC (Czech Republic), so we can basically say that it's not reachable in
at least large parts of Germany and Czech Republic.

Why won't Canonical do something about their routing and peerings????
It's almost four years that we were facing this problem!

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to update-manager in Ubuntu.
https://bugs.launchpad.net/bugs/1412943

Title:
  security.ubuntu.com (2001:67c:1562::XXX) not reachable via HE

Status in update-manager package in Ubuntu:
  Confirmed

Bug description:
  I know this is not a bug in the software, but in the network
  connection of some of the security.ubuntu.com servers via IPv6. Which
  leads to the problem that no software update is possible without
  changes in the /etc/gai.conf to prefer IPv4.  It resolves to following
  IP addresses:

  $ host security.ubuntu.com
  security.ubuntu.com has address 91.189.91.13
  security.ubuntu.com has address 91.189.91.14
  security.ubuntu.com has address 91.189.91.15
  security.ubuntu.com has address 91.189.91.23
  security.ubuntu.com has address 91.189.91.24
  security.ubuntu.com has address 91.189.92.200
  security.ubuntu.com has address 91.189.92.201
  security.ubuntu.com has address 91.189.88.149
  security.ubuntu.com has IPv6 address 2001:67c:1562::15
  security.ubuntu.com has IPv6 address 2001:67c:1562::17
  security.ubuntu.com has IPv6 address 2001:67c:1360:8c01::19
  security.ubuntu.com has IPv6 address 2001:67c:1562::13
  security.ubuntu.com has IPv6 address 2001:67c:1562::16
  security.ubuntu.com has IPv6 address 2001:67c:1360:8c01::18
  security.ubuntu.com has IPv6 address 2001:67c:1562::14

  All IPv6 addresses that start with 2001:67c:1562::  are not reachable
  from some providers. e.g. Hurricane Electric's, but the error seems to
  be on the server site. The 2001:67c:1360:8c01 ones work.

  An MTR from inside HE's network shows it gets into XO's network, then
  dies where it hands off to Internap who gets the routes from
  Occaid/TowardEX, or it used to. Now going via Telia, it still dies
  inside Internap's network. Not an HE issue - please inform your
  networks guys. Thx.

  
    1.|-- f0-6.switch14.fmt2.he.net  0.0%     5   12.0   5.5   0.6  13.5   6.7
    2.|-- 10ge8-4.core1.fmt2.he.net  0.0%     5    0.6   0.6   0.5   0.7   0.0
    3.|-- 10ge1-1.core1.sjc2.he.net  0.0%     5   10.3   5.1   1.0  12.0   5.6
    4.|-- sjo-eqx-s1-link.telia.net  0.0%     5    1.0   1.1   1.0   1.1   0.0
    5.|-- bost-b1-v6.telia.net       0.0%     5   77.4  77.4  77.3  77.4   0.0
    6.|-- internap-ic-304640-bost-b  0.0%     5   78.3  78.3  78.2  78.4   0.0
    7.|-- ???                       100.0     5    0.0   0.0   0.0   0.0   0.0

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/update-manager/+bug/1412943/+subscriptions