Does it mean we can remove that additional mirror from ivy settings? Dawid
---------- Forwarded message ---------- From: Niclas Hedhman <[email protected]> Date: Thu, Jul 12, 2012 at 3:20 AM Subject: Re: Maven Central is probably blocked in China To: Brian Fox <[email protected]> Cc: Maven Developers List <[email protected]> Yes. repo1 repo2 central central01 central02 all resolve now to hosts that are not blocked. Well done!! Cheers Niclas On Thu, Jul 12, 2012 at 6:20 AM, Brian Fox <[email protected]> wrote: > Niclas, I'm told it's working now. Can you confirm? > > > On Tue, Jul 10, 2012 at 1:11 PM, Brian Fox <[email protected]> wrote: >> >> The network team confirmed that this is only Unicom with the issue. They >> are looking at alternate routes that would hopefully work. >> >> >> On Mon, Jul 9, 2012 at 5:31 PM, Niclas Hedhman <[email protected]> wrote: >>> >>> Ok, good to know that it is not completely blocked. It is likely that >>> there are multiple FirewallOps across China regions and the (I think) >>> 3 ISPs (China Telecom, China Mobile and Unicom). >>> >>> As I mentioned, the edgecast address couldn't be reached, but the >>> akamai one could. >>> >>> I am personally in downtown Shanghai, using China Unicom's "Fiber To >>> The Building". >>> >>> I am seen as 58.246.154.81 from the outside at the moment, can reach >>> your a978.g1.akamai.net, but not wpc.829D.edgecastcdn.net. >>> >>> I can also VPN to Beijing, to a 163.com datacenter (which I think is a >>> China Telecom subsidiary), having IP number 60.191.221.179. From >>> there, both hosts above are reachable. >>> >>> So, yes, it seems to be regionalized or per ISP (which makes this less >>> of a problem than I thought). I also mentioned that I am personally on >>> VPN and I am not really affected, but developers I have met are not >>> willing to pay for that service and don't have it. >>> >>> >>> Cheers >>> Niclas >>> >>> On Tue, Jul 10, 2012 at 1:58 AM, Brian Fox <[email protected]> wrote: >>> > Niclas, >>> > We are seeing a lot of traffic to Central from China, so this certainly >>> > isn't a case of the Great Firewall blocking everything, rather it seems >>> > a >>> > little more localized. Can you send more more info about your source ip >>> > and >>> > geo location that we could use to see what's up? Possibly we can get >>> > the >>> > traffic routed to a China friendly ip. >>> > >>> > On Mon, Jul 9, 2012 at 12:08 PM, Brian E. Fox <[email protected]> >>> > wrote: >>> >> >>> >> Hi Nicolas, this isn't intentional of course. Let me see what I can >>> >> dig up >>> >> based in your traces. >>> >> >>> >> --Brian (mobile) >>> >> >>> >> >>> >> On Jul 7, 2012, at 11:45 PM, Niclas Hedhman <[email protected]> >>> >> wrote: >>> >> >>> >> > (I am not subscribed, so please CC me on any responses) >>> >> > >>> >> > I live in China. I normally have a VPN enabled to circumvent various >>> >> > blocking (YouTube, Twitter, ++) that the Chinese government has in >>> >> > place. I normally don't think much about it. But, today I had my >>> >> > computer rebooted and couldn't build a project, because Maven >>> >> > Central >>> >> > couldn't be reached. >>> >> > >>> >> > So, before I realized that my VPN wasn't running I tracerouted a >>> >> > bit. >>> >> > >>> >> > repo1 resolved to >>> >> > >>> >> > niclas:~ niclas$ dig repo1.maven.org | grep "^[a-z]" >>> >> > repo1.maven.org. 1751 IN CNAME central.maven.org. >>> >> > central.maven.org. 212 IN CNAME central02.maven.org. >>> >> > central02.maven.org. 7112 IN CNAME >>> >> > wpc.829D.edgecastcdn.net. >>> >> > wpc.829D.edgecastcdn.net. 3164 IN CNAME >>> >> > gs1.wpc.edgecastcdn.net. >>> >> > gs1.wpc.edgecastcdn.net. 2292 IN A 68.232.45.253 >>> >> > >>> >> > and from that I also tried central01 >>> >> > >>> >> > niclas:~ niclas$ dig central01.maven.org | grep "^[a-z]" >>> >> > central01.maven.org. 6477 IN CNAME >>> >> > central01.maven.org.edgesuite.net. >>> >> > central01.maven.org.edgesuite.net. 20877 IN CNAME >>> >> > a978.g1.akamai.net. >>> >> > a978.g1.akamai.net. 4 IN A 124.40.42.31 >>> >> > a978.g1.akamai.net. 4 IN A 124.40.42.6 >>> >> > >>> >> > And with tracerouting both (see below), it struck me that VPN might >>> >> > not be enabled and the IP on "edgecastcdn.net" is probably blocked >>> >> > by >>> >> > China potentially serving something they don't like, could be >>> >> > anything... Yeah, China is BAD, we all know that, but shouldn't we >>> >> > (Apache) try to minimize the problem for your ordinary Chinese >>> >> > developer, could be a student, hobbyist, small entrepreneur and so >>> >> > on, >>> >> > who isn't anti-government (most people here are quite content with >>> >> > the >>> >> > government) to be able to use Apache projects? >>> >> > >>> >> > The fact is now, that without reasonably reliable access to Maven >>> >> > Central, one can not really participate in many, many of the Java >>> >> > projects at ASF. >>> >> > >>> >> > I don't know how the DNS and host resolution is supposed to work, >>> >> > who >>> >> > is participating in the hosting and under what terms. But I think >>> >> > Maven/Sonatype should have in its interest to NOT EXCLUDE some >>> >> > staggering amount of Java programmers, and perhaps try to find a way >>> >> > to get a better SLA here. If you need help from someone to check >>> >> > "from >>> >> > the inside the Great Firewall", just let me know... >>> >> > >>> >> > >>> >> > Cheers >>> >> > Niclas >>> >> > >>> >> > >>> >> > traceroute to gs1.wpc.edgecastcdn.net (68.232.45.253), 64 hops max, >>> >> > 52 >>> >> > byte packets >>> >> > 1 192.168.2.1 (192.168.2.1) 1.446 ms 0.980 ms 0.900 ms >>> >> > 2 58.246.152.1 (58.246.152.1) 9.855 ms 11.724 ms 8.662 ms >>> >> > 3 210.22.67.29 (210.22.67.29) 9.563 ms 3.698 ms 1.712 ms >>> >> > 4 112.64.251.165 (112.64.251.165) 1.696 ms 1.819 ms 3.215 ms >>> >> > 5 * * * >>> >> > 6 * * * >>> >> > 7 * * * >>> >> > 8 * * * >>> >> > 9 * * * >>> >> > 10 * * * >>> >> > 11 * * * >>> >> > 12 * * * >>> >> > 13 * * * >>> >> > 14 * * * >>> >> > 15 * * * >>> >> > 16 * * * >>> >> > 17 * * * >>> >> > >>> >> > >>> >> > niclas:qi4j-sdk niclas$ traceroute central01.maven.org >>> >> > traceroute: Warning: central01.maven.org has multiple addresses; >>> >> > using >>> >> > 209.107.203.19 >>> >> > traceroute to a978.g1.akamai.net (209.107.203.19), 64 hops max, 52 >>> >> > byte >>> >> > packets >>> >> > 1 192.168.2.1 (192.168.2.1) 1.681 ms 0.910 ms 0.889 ms >>> >> > 2 58.246.152.1 (58.246.152.1) 14.958 ms 14.339 ms 115.382 ms >>> >> > 3 112.64.251.133 (112.64.251.133) 3.516 ms 2.892 ms 1.682 ms >>> >> > 4 112.64.251.165 (112.64.251.165) 2.117 ms 1.934 ms 1.926 ms >>> >> > 5 112.64.243.170 (112.64.243.170) 3.859 ms 8.432 ms 4.110 ms >>> >> > 6 * * * >>> >> > 7 219.158.9.209 (219.158.9.209) 4.284 ms 3.517 ms 6.284 ms >>> >> > 8 219.158.100.194 (219.158.100.194) 32.392 ms 34.428 ms 32.079 >>> >> > ms >>> >> > 9 219.158.96.230 (219.158.96.230) 33.214 ms 33.501 ms 33.470 ms >>> >> > 10 219.158.96.222 (219.158.96.222) 31.660 ms 31.564 ms 33.370 ms >>> >> > 11 sl-st30-sj-0-4-3-3.sprintlink.net (144.228.111.29) 214.116 ms >>> >> > 466.648 ms 503.740 ms >>> >> > 12 sl-st31-sj-0-12-0-3.sprintlink.net (144.232.3.33) 180.679 ms >>> >> > sl-st31-sj-0-8-0-0.sprintlink.net (144.232.3.29) 214.923 ms >>> >> > 231.186 >>> >> > ms >>> >> > 13 144.232.8.194 (144.232.8.194) 522.103 ms 381.628 ms 221.618 >>> >> > ms >>> >> > 14 te0-0-0-3.ccr22.sjc01.atlas.cogentco.com (154.54.6.109) 219.036 >>> >> > ms >>> >> > te0-3-0-3.ccr22.sjc01.atlas.cogentco.com (154.54.6.101) 184.460 >>> >> > ms >>> >> > te0-1-0-0.ccr21.sjc03.atlas.cogentco.com (66.28.4.53) 305.247 ms >>> >> > 15 te0-3-0-2.ccr22.lax01.atlas.cogentco.com (154.54.2.149) 614.732 >>> >> > ms >>> >> > te0-1-0-0.ccr21.sjc01.atlas.cogentco.com (154.54.83.253) 216.883 >>> >> > ms >>> >> > te0-1-0-3.ccr21.sjc01.atlas.cogentco.com (154.54.6.237) 450.823 >>> >> > ms >>> >> > 16 te9-3.ccr02.lax05.atlas.cogentco.com (154.54.82.154) 662.795 ms >>> >> > 154.54.85.25 (154.54.85.25) 189.819 ms >>> >> > te7-8.ccr02.lax05.atlas.cogentco.com (154.54.30.198) 888.842 ms >>> >> > 17 te4-1.mpd01.lax05.atlas.cogentco.com (154.54.28.69) 693.184 ms >>> >> > te9-6.mpd01.lax05.atlas.cogentco.com (154.54.82.150) 190.542 ms >>> >> > * >>> >> > 18 38.104.84.130 (38.104.84.130) 781.037 ms >>> >> > 38.104.84.126 (38.104.84.126) 425.045 ms >>> >> > 38.104.84.130 (38.104.84.130) 643.349 ms >>> >> > 19 te8-2-3580.bbr1.lax1.bandcon.com (69.16.190.214) 189.074 ms >>> >> > 189.148 ms 193.641 ms >>> >> > 20 209.107.203.19 (209.107.203.19) 629.087 ms 412.329 ms 225.912 >>> >> > ms >>> >> > >>> >> > -- >>> >> > Niclas Hedhman, Software Developer >>> >> > http://www.qi4j.org - New Energy for Java >>> >> > >>> >> > I live here; http://tinyurl.com/3xugrbk >>> >> > I work here; http://tinyurl.com/6a2pl4j >>> >> > I relax here; http://tinyurl.com/2cgsug >>> >> > >>> >> > >>> >> > --------------------------------------------------------------------- >>> >> > To unsubscribe, e-mail: [email protected] >>> >> > For additional commands, e-mail: [email protected] >>> >> > >>> > >>> > >>> >>> >>> >>> -- >>> Niclas Hedhman, Software Developer >>> http://www.qi4j.org - New Energy for Java >>> >>> I live here; http://tinyurl.com/3xugrbk >>> I work here; http://tinyurl.com/6a2pl4j >>> I relax here; http://tinyurl.com/2cgsug >> >> > -- Niclas Hedhman, Software Developer http://www.qi4j.org - New Energy for Java I live here; http://tinyurl.com/3xugrbk I work here; http://tinyurl.com/6a2pl4j I relax here; http://tinyurl.com/2cgsug --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
