[Bug 1412943] Re: security.ubuntu.com (2001:67c:1562::XXX) not reachable via HE

[Colin Dearborn]

Just to note that my native IPv6 connection does work, but my HE tunnel
does not, so this does appear to be an issue with routing somewhere.
Further, I seem to follow the same forward path on both services (from
bost-b1-v6.telia.net on),  so it appears to be on the return route:

HE.net:
traceroute6 2001:67c:1562::17
traceroute to 2001:67c:1562::17 (2001:67c:1562::17) from 2001:470:1f04:6a9::2, 30 hops max, 24 byte packets
 1  stolen-1.tunnel.tserv3.fmt2.ipv6.he.net (2001:470:1f04:6a9::1)  53.126 ms  50.294 ms  51.336 ms
 2  ge5-19.core1.fmt2.he.net (2001:470:0:45::1)  56.835 ms  46.881 ms  48.089 ms
 3  10ge1-1.core1.sjc2.he.net (2001:470:0:31::2)  55.947 ms  64.231 ms  49.21 ms
 4  sjo-eqx-s1-link.telia.net (2001:2000:3080:1b7::1)  49.022 ms  53.619 ms  47.623 ms
 5  bost-b1-v6.telia.net (2001:2000:3018:84::1)  174.659 ms  122.656 ms  123.968 ms
 6  internap-ic-304640-bost-b1.c.telia.net (2001:2000:3080:93b::2)  123.846 ms  127.975 ms  126.091 ms
 7  * * *
 8  * * *
 9  * * *


Native:
traceroute6 2001:67c:1562::17
traceroute to 2001:67c:1562::17 (2001:67c:1562::17) from 2001:4e8:8040:200:497f:7458:2db3:83e4, 30 hops max, 24 byte packets
 1  2001:4e8:8040:200:4af8:b3ff:fe8d:b951 (2001:4e8:8040:200:4af8:b3ff:fe8d:b951)  7.615 ms  0.63 ms  0.381 ms
 2  2001:4e8:40:8001:: (2001:4e8:40:8001::)  7.895 ms 2001:4e8:40:8803::10 (2001:4e8:40:8803::10)  9.872 ms  7.742 ms
 3  2001:4e8:0:8196::2 (2001:4e8:0:8196::2)  8.346 ms  9.353 ms  9.783 ms
 4  2001:4e8:0:81c5::2 (2001:4e8:0:81c5::2)  32.332 ms  33.36 ms  32.091 ms
 5  sea-b1-link.telia.net (2001:2000:3080:335::1)  31.34 ms  31.135 ms  29.913 ms
 6  bost-b1-v6.telia.net (2001:2000:3018:84::1)  85.108 ms  85.133 ms  85.936 ms
 7  internap-ic-304640-bost-b1.c.telia.net (2001:2000:3080:93b::2)  89.355 ms  101.394 ms  87.809 ms
 8  mpr1-bbnet2.bsn004.pnap.net (2600:c0d:0:102:0:4:2:1)  95.473 ms  94.968 ms  95.921 ms
 9  2600:c0d:4002:3::2 (2600:c0d:4002:3::2)  95.925 ms  95.245 ms  95.872 ms
10  economy.canonical.com (2001:67c:1562::17)  88.443 ms  87.497 ms  87.958 ms

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to update-manager in Ubuntu.
https://bugs.launchpad.net/bugs/1412943

Title:
  security.ubuntu.com (2001:67c:1562::XXX) not reachable via HE

Status in update-manager package in Ubuntu:
  Confirmed

Bug description:
  I know this is not a bug in the software, but in the network
  connection of some of the security.ubuntu.com servers via IPv6. Which
  leads to the problem that no software update is possible without
  changes in the /etc/gai.conf to prefer IPv4.  It resolves to following
  IP addresses:

  $ host security.ubuntu.com
  security.ubuntu.com has address 91.189.91.13
  security.ubuntu.com has address 91.189.91.14
  security.ubuntu.com has address 91.189.91.15
  security.ubuntu.com has address 91.189.91.23
  security.ubuntu.com has address 91.189.91.24
  security.ubuntu.com has address 91.189.92.200
  security.ubuntu.com has address 91.189.92.201
  security.ubuntu.com has address 91.189.88.149
  security.ubuntu.com has IPv6 address 2001:67c:1562::15
  security.ubuntu.com has IPv6 address 2001:67c:1562::17
  security.ubuntu.com has IPv6 address 2001:67c:1360:8c01::19
  security.ubuntu.com has IPv6 address 2001:67c:1562::13
  security.ubuntu.com has IPv6 address 2001:67c:1562::16
  security.ubuntu.com has IPv6 address 2001:67c:1360:8c01::18
  security.ubuntu.com has IPv6 address 2001:67c:1562::14

  All IPv6 addresses that start with 2001:67c:1562::  are not reachable
  from some providers. e.g. Hurricane Electric's, but the error seems to
  be on the server site. The 2001:67c:1360:8c01 ones work.

  An MTR from inside HE's network shows it gets into XO's network, then
  dies where it hands off to Internap who gets the routes from
  Occaid/TowardEX, or it used to. Now going via Telia, it still dies
  inside Internap's network. Not an HE issue - please inform your
  networks guys. Thx.

  
    1.|-- f0-6.switch14.fmt2.he.net  0.0%     5   12.0   5.5   0.6  13.5   6.7
    2.|-- 10ge8-4.core1.fmt2.he.net  0.0%     5    0.6   0.6   0.5   0.7   0.0
    3.|-- 10ge1-1.core1.sjc2.he.net  0.0%     5   10.3   5.1   1.0  12.0   5.6
    4.|-- sjo-eqx-s1-link.telia.net  0.0%     5    1.0   1.1   1.0   1.1   0.0
    5.|-- bost-b1-v6.telia.net       0.0%     5   77.4  77.4  77.3  77.4   0.0
    6.|-- internap-ic-304640-bost-b  0.0%     5   78.3  78.3  78.2  78.4   0.0
    7.|-- ???                       100.0     5    0.0   0.0   0.0   0.0   0.0

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/update-manager/+bug/1412943/+subscriptions