Henrique de Moraes Holschuh <[email protected]> writes: > On Wed, 01 Jun 2011, Jonathan McCrohan wrote: >> On 01/06/11 00:01, Gerald Turner wrote: >> > Can anyone else confirm or deny IPv6 security updates mirror at >> > schein.debian.org is operational (virtual host, >> > security.debian.org, makes this a bit difficult to test)? >> >> I can confirm that apt-get updates are stalling at the following line >> for upwards of 10 seconds. >> [Connecting to security.debian.org (2001:4f8:8:36::6)] >> >> Both my servers (UK and US based) seem to experience this problem so >> I suspect it is not related to any particular geolocation server. > > The output of traceroute seems to show that schein has a good > connection to the V6 internet, as it is hosted at ISC. > > Please check the MTUs recorded in the route cache: > ip -6 route get 2001:4f8:8:36::6 >
2001:4f8:8:36::6 from :: via 2001:470:e861::1 dev eth0 src 2001:470:e861::8
metric 0
cache expires 510sec mtu 1480 advmss 1440 hoplimit 4294967295
> And also run a MTU check on your connection to schein. It has to be
> above 1280, and it it has to match whatever the kernel recorded in the
> route cache. I think package "iputils-tracepath" can do it, but I
> haven't checked (I am not in a IPv6-capable network).
>
Looks like it's 1480:
$ tracepath6 schein.debian.org
1?: [LOCALHOST] 0.031ms pmtu 1480
1: shub-niggurath.unzane.com 0.162ms
1: shub-niggurath.unzane.com 0.360ms
2: gturner-1.tunnel.tserv14.sea1.ipv6.he.net 6.576ms
3: gige-g2-6.core1.sea1.he.net 5.654ms
4: 10gigabitethernet9-1.core1.sjc2.he.net 26.522ms
5: 10gigabitethernet3-2.core1.pao1.he.net 34.657ms
6: he.pao1.isc.org 29.855ms
7: int-0-0-0.r1.sjc3.isc.org 31.418ms asymm 5
8: schein.debian.org 27.519ms reached
Resume: pmtu 1480 hops 8 back 59
--
Gerald Turner Email: [email protected] JID: [email protected]
GPG: 0xFA8CD6D5 21D9 B2E8 7FE7 F19E 5F7D 4D0C 3FA0 810F FA8C D6D5
pgpUigHwN4Zy4.pgp
Description: PGP signature
