Hi Eric, Yep, no problem:
Just to help here's a diagram of the initial setup +-------------+ +----------+ +----------+ +-----------+ |uk.debian.org|<--------|server01 |<-------|server02 |<--------|client01 | +-------------+ |(approx & | |(approx & | |(client of | +-------------------+ |client of | |client of | |server02) | |security.debian.org|<--|localhost)| |localhost)| | | +-------------------+ +----------+ +----------+ +-----------+ I should also point out that server02 is shared by a number of other clients, not just client01. Is it possible that approx somehow marks a file as pending from upstream, when in fact the download has failed, or been interrupted? It could then permanently believe the file is not yet available, when it never will be. Syslog on server02 only thing that looks odd is a few "utimes: Operation not permitted" on Packages.gz files When I checked the perms the file is rw for user approx which seems right to me. Can fail at any point, sometimes in the download of packages files, sometimes in the fetch of the package.dpkg files. It may not be related, but even when things are working fairly ok, I do seem to get quite a few "Error reading from server - read (104 Connection reset by peer)" messages in aptitude/apt-get which I don't get if I switch back to apt-proxy. Each time it leaves a bunch of connections to it's upstream in the CLOSE_WAIT state. There remains, however only one connection in the ESTABLISHED state with a high value rx q. If I then repeat the run it will be all or most of the same downloads that fail. If I connect apt directly to the upstream, and the upstream is the remote debian mirror, that always works fine. Otherwise the same thing happens but not quite so regularly, I guess the problem can occur in any of the approx instances in the chain. For each instance you take out of the chain the lower the chance of bumping into a problem. Different remote? - see above, the debian mirror never fails. Wget seems to work ok on the files that are getting "Error reading from server - read (104 Connection reset by peer)" from aptitude/apt-get which is interesting. Hope this helps rather than confuses the issue, anything else you'd like me to try just let me know. Cheers, Tim ##################################################################### CONFIDENTIALITY NOTICE The information contained in this email is confidential and may also be privileged. It is intended to be for the exclusive use of the addressee(s) and access to it by any other person is unauthorised. If you are not the addressee please note that you must not distribute, copy, circulate or in any other way use or rely on the information contained in this email. If you have received this email in error please notify us by phone (+44 (0)870 445 1445) and then destroy the email and any copies of it. ######################################################################