[Bug 1412943] Re: security.ubuntu.com (2001:67c:1562::XXX) not reachable via HE

Haw Loeung 1412943 at bugs.launchpad.net
Mon Jan 18 00:12:36 UTC 2016 

Is this still a problem?

Using Hurricane Electric's looking glass (http://lg.he.net), it all
seems to look fine.

>From HE looking glass to 2001:67c:1562::/47 (US):

| core1.fmt1.he.net> traceroute ipv6 2001:67c:1562::15 numeric
| Hop	Packet 1	Packet 2	Packet 3	Hostname
| 1	49 ms	<1 ms	<1 ms	10ge11-1.core1.sjc2.he.net (2001:470:0:2f::2)
| 2	22 ms	42 ms	21 ms	sjo-b21-link.telia.net (2001:2000:3080:1b7::1)
| 3	89 ms	91 ms	101 ms	bost-b1-v6.telia.net (2001:2000:3018:84::1)
| 4	95 ms	105 ms	95 ms	internap-ic-304640-bost-b1.c.telia.net (2001:2000:3080:93b::2)
| 5	99 ms	105 ms	95 ms	mpr1-bbnet2.bsn004.pnap.net (2600:c0d:0:102:0:4:2:1)
| 6	142 ms	105 ms	99 ms	2600:c0d:4002:3::2
| 7	102 ms	95 ms	91 ms	likho.canonical.com (2001:67c:1562::15)

| core1.sjc1.he.net> traceroute ipv6 2001:67c:1562::15 numeric
| Hop	Packet 1	Packet 2	Packet 3	Hostname
| 1	19 ms	<1 ms	<1 ms	10ge4-4.core1.sjc2.he.net (2001:470:0:55::2)
| 2	21 ms	24 ms	1 ms	sjo-b21-link.telia.net (2001:2000:3080:1b7::1)
| 3	98 ms	90 ms	101 ms	bost-b1-v6.telia.net (2001:2000:3018:84::1)
| 4	97 ms	99 ms	100 ms	internap-ic-304640-bost-b1.c.telia.net (2001:2000:3080:93b::2)
| 5	99 ms	99 ms	100 ms	mpr1-bbnet1.bsn004.pnap.net (2600:c0d:0:101:0:4:2:1)
| 6	100 ms	97 ms	151 ms	2600:c0d:4002:3::2
| 7	84 ms	75 ms	74 ms	likho.canonical.com (2001:67c:1562::15)

>From HE looking glass to 2001:67c:1360::/48 (EU):

| core1.fmt1.he.net> traceroute ipv6 2001:67c:1360:8c01::18 numeric
| Hop	Packet 1	Packet 2	Packet 3	Hostname
| 1	20 ms	27 ms	21 ms	10ge11-1.core1.sjc2.he.net (2001:470:0:2f::2)
| 2	12 ms	4 ms	20 ms	level3.v310.core1.sjc2.he.net (2001:470:0:203::2)
| 3	14 ms	95 ms	28 ms	vl-90.edge1.SanJose1.Level3.net (2001:1900:1a:8::8)
| 4	*	*	85 ms	2001:1900:4:1::5e
| 5	135 ms	195 ms	147 ms	vl-4086.edge3.London1.Level3.net (2001:1900:6:1::11)
| 6	151 ms	148 ms	147 ms	vl-51.edge5.London1.Level3.net (2001:1900:101:1::a)
| 7	136 ms	133 ms	142 ms	SOURCE-MANA.edge5.London1.Level3.net (2001:1900:5:2:2::131a)
| 8	148 ms	150 ms	148 ms	obake.canonical.com (2001:67c:1360:8c01::18)

| core1.sjc1.he.net> traceroute ipv6 2001:67c:1360:8c01::18 numeric
| Hop	Packet 1	Packet 2	Packet 3	Hostname
| 1	32 ms	24 ms	24 ms	10ge4-4.core1.sjc2.he.net (2001:470:0:55::2)
| 2	34 ms	33 ms	24 ms	level3.v310.core1.sjc2.he.net (2001:470:0:203::2)
| 3	10 ms	<1 ms	<1 ms	vl-90.edge1.SanJose1.Level3.net (2001:1900:1a:8::8)
| 4	*	*	*	?
| 5	156 ms	159 ms	149 ms	vl-4086.edge3.London1.Level3.net (2001:1900:6:1::11)
| 6	159 ms	150 ms	149 ms	vl-51.edge5.London1.Level3.net (2001:1900:101:1::a)
| 7	149 ms	186 ms	164 ms	SOURCE-MANA.edge5.London1.Level3.net (2001:1900:5:2:2::131a)
| 8	148 ms	149 ms	149 ms	obake.canonical.com (2001:67c:1360:8c01::18)

>From HE to 2001:67c:1560/47 (EU):

| core1.fmt1.he.net> traceroute ipv6 2001:67c:1560:8001::11 numeric
| Hop	Packet 1	Packet 2	Packet 3	Hostname
| 1	23 ms	23 ms	31 ms	10ge11-1.core1.sjc2.he.net (2001:470:0:2f::2)
| 2	8 ms	107 ms	24 ms	level3.v310.core1.sjc2.he.net (2001:470:0:203::2)
| 3	18 ms	22 ms	24 ms	vl-60.edge1.SanJose1.Level3.net (2001:1900:1a:5::8)
| 4	*	*	92 ms	2001:1900:4:1::5e
| 5	144 ms	134 ms	145 ms	vl-4086.edge3.London1.Level3.net (2001:1900:6:1::11)
| 6	172 ms	146 ms	134 ms	vl-51.edge5.London1.Level3.net (2001:1900:101:1::a)
| 7	141 ms	141 ms	145 ms	SOURCE-MANA.edge5.London1.Level3.net (2001:1900:5:2:2::131a)
| 8	149 ms	208 ms	161 ms	steelix.canonical.com (2001:67c:1560:8001::11)

| core1.sjc1.he.net> traceroute ipv6 2001:67c:1560:8001::11 numeric
| Hop	Packet 1	Packet 2	Packet 3	Hostname
| 1	48 ms	22 ms	25 ms	10ge4-4.core1.sjc2.he.net (2001:470:0:55::2)
| 2	24 ms	14 ms	24 ms	level3.v310.core1.sjc2.he.net (2001:470:0:203::2)
| 3	10 ms	1 ms	1 ms	vl-60.edge1.SanJose1.Level3.net (2001:1900:1a:5::8)
| 4	80 ms	98 ms	83 ms	2001:1900:4:1::5e
| 5	193 ms	181 ms	148 ms	vl-4086.edge3.London1.Level3.net (2001:1900:6:1::11)
| 6	160 ms	150 ms	149 ms	vl-51.edge5.London1.Level3.net (2001:1900:101:1::a)
| 7	150 ms	149 ms	150 ms	SOURCE-MANA.edge5.London1.Level3.net (2001:1900:5:2:2::131a)
| 8	150 ms	149 ms	150 ms	steelix.canonical.com (2001:67c:1560:8001::11)

archive.ubuntu.com includes *only* servers in our UK datacentres.

us.archive.ubuntu.com includes *only* servers in our US datacentres.

security.ubuntu.com includes *both* servers in the our UK and US
datacentres.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to update-manager in Ubuntu.
https://bugs.launchpad.net/bugs/1412943

Title:
  security.ubuntu.com (2001:67c:1562::XXX) not reachable via HE

Status in update-manager package in Ubuntu:
  Confirmed

Bug description:
  I know this is not a bug in the software, but in the network
  connection of some of the security.ubuntu.com servers via IPv6. Which
  leads to the problem that no software update is possible without
  changes in the /etc/gai.conf to prefer IPv4.  It resolves to following
  IP addresses:

  $ host security.ubuntu.com
  security.ubuntu.com has address 91.189.91.13
  security.ubuntu.com has address 91.189.91.14
  security.ubuntu.com has address 91.189.91.15
  security.ubuntu.com has address 91.189.91.23
  security.ubuntu.com has address 91.189.91.24
  security.ubuntu.com has address 91.189.92.200
  security.ubuntu.com has address 91.189.92.201
  security.ubuntu.com has address 91.189.88.149
  security.ubuntu.com has IPv6 address 2001:67c:1562::15
  security.ubuntu.com has IPv6 address 2001:67c:1562::17
  security.ubuntu.com has IPv6 address 2001:67c:1360:8c01::19
  security.ubuntu.com has IPv6 address 2001:67c:1562::13
  security.ubuntu.com has IPv6 address 2001:67c:1562::16
  security.ubuntu.com has IPv6 address 2001:67c:1360:8c01::18
  security.ubuntu.com has IPv6 address 2001:67c:1562::14

  All IPv6 addresses that start with 2001:67c:1562::  are not reachable
  from some providers. e.g. Hurricane Electric's, but the error seems to
  be on the server site. The 2001:67c:1360:8c01 ones work.

  An MTR from inside HE's network shows it gets into XO's network, then
  dies where it hands off to Internap who gets the routes from
  Occaid/TowardEX, or it used to. Now going via Telia, it still dies
  inside Internap's network. Not an HE issue - please inform your
  networks guys. Thx.

  
    1.|-- f0-6.switch14.fmt2.he.net  0.0%     5   12.0   5.5   0.6  13.5   6.7
    2.|-- 10ge8-4.core1.fmt2.he.net  0.0%     5    0.6   0.6   0.5   0.7   0.0
    3.|-- 10ge1-1.core1.sjc2.he.net  0.0%     5   10.3   5.1   1.0  12.0   5.6
    4.|-- sjo-eqx-s1-link.telia.net  0.0%     5    1.0   1.1   1.0   1.1   0.0
    5.|-- bost-b1-v6.telia.net       0.0%     5   77.4  77.4  77.3  77.4   0.0
    6.|-- internap-ic-304640-bost-b  0.0%     5   78.3  78.3  78.2  78.4   0.0
    7.|-- ???                       100.0     5    0.0   0.0   0.0   0.0   0.0

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/update-manager/+bug/1412943/+subscriptions

More information about the foundations-bugs mailing list