Your message dated Tue, 22 Mar 2022 09:20:28 +0000
with message-id <[email protected]>
and subject line Bug#1006375: fixed in debian-edu-config 2.12.18
has caused the Debian Bug report #1006375,
regarding debian-edu-config: squid very slow due to IPv6-lookups being done
first, and only then IPv4
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1006375: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1006375
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: debian-edu-config
Severity: important
Version: 2.12.17
Control: found -1 2.11.56+debu3
Debian Edu is not yet really IPv6-ready. That is another topic and
should be discussed elsewhere. Maybe for some people, Debian Edu works
perfectly on IPv6 and I don't know that yet, please let us know your
experiences on the Debian Edu mailing list. Thanks. (Don't Cc: such
discussion replies to the bug report's mail address, please).
However, here current Debian Edu work best if IPv4 connections (and
DNS lookups) are preferred over IPv6 connections and lookups.
In Squid, I made the observation today that squid tries to do an IPv6
lookup for a URL first and if that fails, it retries via IPv4. This
seems to work ok for Debian Edu networks where TJENER does not have a
public IPv6 address. However, in my customer's setup [1], loading a
complex website page via squid takes ages with this. Esp. if the squid
proxy is under medium to heavy load by other users on the network.
So, long story cut short, squid tries to route http(s) requests
(hostname/path queries, basically) over IPv6 first and falls back as
second choice to IPv4. This takes a bit of extra time for each URL to
be loaded. IMHO, this should be avoided, IPv4 should be preferred in
squid. Not only on this one customer setup, but in general it seems
(as the whole Debian Edu design currently is 'IPv4-first' or rather
'IPv4-only'.
So, I'd like to add (and this extra config line fixed the issue on the
customer site)
dns_v4_first on
to /etc/squid/conf.d/debian-edu.conf
Objections? Other opinions???
Mike
[1] In this customer setup TJENER has two network interfaces (a
.intern network and a .backbone network). The .backbone network is for
WiFi APs being able to access FreeRadius on TJENER (the WiFi APs are
not on the .intern network but on a separate management network). And
TJENER here as a public IPv6 address on the .backbone network's NIC
(eth1 here).
--
DAS-NETZWERKTEAM
c\o Technik- und Ökologiezentrum Eckernförde
Mike Gabriel, Marienthaler Str. 17, 24340 Eckernförde
mobile: +49 (1520) 1976 148
landline: +49 (4351) 850 8940
GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22 0782 9AF4 6B30 2577 1B31
mail: [email protected], http://das-netzwerkteam.de
pgpgMoALiqg9n.pgp
Description: Digitale PGP-Signatur
--- End Message ---
--- Begin Message ---
Source: debian-edu-config
Source-Version: 2.12.18
Done: Mike Gabriel <[email protected]>
We believe that the bug you reported is fixed in the latest version of
debian-edu-config, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Mike Gabriel <[email protected]> (supplier of updated debian-edu-config
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 22 Mar 2022 09:53:57 +0100
Source: debian-edu-config
Architecture: source
Version: 2.12.18
Distribution: unstable
Urgency: medium
Maintainer: Debian Edu Developers <[email protected]>
Changed-By: Mike Gabriel <[email protected]>
Closes: 1002019 1005841 1006362 1006375 1006604 1008067
Changes:
debian-edu-config (2.12.18) unstable; urgency=medium
.
* etc/cups/cups-browsed-debian-edu.conf:
- Let TJENER's print queues appear on Debian Edu clients, use same
print queue names on clients as on TJENER. (Closes: #1005841).
* sbin/debian-edu-pxeinstall:
- Don't append 'ipappend 2' to the kernel boot cmdline anymore as it
confuses systemd when booting into the installed system. This resolves
the graphical.target not coming up on Debian Edu workstations that got
installed via the PXE/network based Debian Installer method. (Closes:
#1006362).
- Silence stderr output if the artwork theme lacks a plymouth subfolder.
This can be silently ignored and should not trouble Debian Edu admins.
* sbin/update-hostname-from-ip:
- Simply if-then-else-clauses, reduce number of exit calls, don't exit with
non-zero exitcode. Improve syslog messages if things fail. (Closes:
#1006604).
* share/debian-edu-config/squid.conf:
- Prefer DNSv4 lookups over DNSv6. Debian Edu does not yet fully support
IPv6 and many schools still use IPv4 primarily. This gives a great
performance boost to squid installations if IPv6 internet is not fully
available for whatever reason. (Closes: #1006375).
* share/debian-edu-config/tools/{update-proxy-from-wpad,wpad-extra}:
- Don't fail if proxy update is not possible, only send warnings to stderr
and syslog. Don't source wpad-extra script, execute it instead and
capture
stdout. (Closes: #1008067).
- White-space clean-up (use only tabs for indentation).
* Move /etc/debian-edu/host-keytabs/* to /var/lib/debian-edu/host-keytabs/
and replace directory /etc/debian-edu/host-keytabs by a symlink. (Closes:
#1002019).
* lintian: Update some override phrases (adjustments to the most recent
lintian version).
Checksums-Sha1:
edb39c0fb53fde383f109be96cae03b731c1b2b4 2055 debian-edu-config_2.12.18.dsc
607d503bbf22853145d96428513cfc5e2b24ceb9 351880
debian-edu-config_2.12.18.tar.xz
f30f006b064dcb6daed82f2b9a28f0724ebd81aa 6155
debian-edu-config_2.12.18_source.buildinfo
Checksums-Sha256:
260d3adcdf590564f1cae752251bab18ec3d56b7d1a6cf6b02cacf166d300617 2055
debian-edu-config_2.12.18.dsc
fc5f21d6ac302095a44243e7b571758f11f7a96598568cd9fc547ad7c43a3a7d 351880
debian-edu-config_2.12.18.tar.xz
57521be07b333041b9913ca60e9618954a8eb4316b75d4d5ca75ab8288097ca9 6155
debian-edu-config_2.12.18_source.buildinfo
Files:
7482a92eef5f911e5e7ac9029203b6d7 2055 misc optional
debian-edu-config_2.12.18.dsc
61869d4bbddd11faf4cc61a3d20eb6e9 351880 misc optional
debian-edu-config_2.12.18.tar.xz
33f92bd82cc8bbf0130f7afd364cd789 6155 misc optional
debian-edu-config_2.12.18_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJJBAEBCAAzFiEEm/uu6GwKpf+/IgeCmvRrMCV3GzEFAmI5jucVHHN1bndlYXZl
ckBkZWJpYW4ub3JnAAoJEJr0azAldxsxbyYP/2+HOhiRUMukM8ikKvVUmdOSiA78
BC9ehCgjTtU3UKa+OmXD10UuPYr2f0T1RgD4gfogr3Tq6gIA50HZ1Ditw+nBRDO7
U2CY4XXwfvb8zgjJhikyKXWMgZxa4+7SuPfJ/ySS21tbPLMM1KVAhS7Vi/F2Kj7H
Bq2KQ7wY9heFjB8EiHhoBlkYfa5+1iZ2f8Om7e8RrzCyGHMZxlxSuLSrz9OalEaO
tMM5rRDUo7ZHVrjl+SWC9jfQsw7lc5UFdNCNh2VSsP6wsrnmnsGsEKaafx/R2ucj
qmcNvHNPI0JwTySVG9+uxFkezjwvwgvHAlOWxf8Bo0xJ/ud8S2/EntgAl2fbrvIP
qxMlm2NK0Tp7VqFUExVDbqd4F15uwaixLXzCSx+CJwFjDnXsImQuuO/f/aMjN2ru
M+s/PlWluUyzPLZlcooKvaqbPHWj+596/Eu/OEt5OGXBe0uAN8dFFrXuzNzeN3cA
NA/r/jDuUKb23Fv3YHI35hjY7IPFOenJHaLqvJj/s3eF5FMT5DwNzt+p6G7xCGCJ
t6wV3cmIuzPHJkbWSHYB/a2vVHQsFxxgRckKFbQrJPrJQkIaiKSvG7oTagI7wOwW
8syNSADGSmHMRQzzjLof/4gaUUkXBwNMXOn+RuVfA6PbQc21/4txNKLmVExHwktV
oJZ7a/fNQA6WFAun
=4OJS
-----END PGP SIGNATURE-----
--- End Message ---