Ok, good to know that it is not completely blocked. It is likely that there are multiple FirewallOps across China regions and the (I think) 3 ISPs (China Telecom, China Mobile and Unicom).
As I mentioned, the edgecast address couldn't be reached, but the akamai one could. I am personally in downtown Shanghai, using China Unicom's "Fiber To The Building". I am seen as 58.246.154.81 from the outside at the moment, can reach your a978.g1.akamai.net, but not wpc.829D.edgecastcdn.net. I can also VPN to Beijing, to a 163.com datacenter (which I think is a China Telecom subsidiary), having IP number 60.191.221.179. From there, both hosts above are reachable. So, yes, it seems to be regionalized or per ISP (which makes this less of a problem than I thought). I also mentioned that I am personally on VPN and I am not really affected, but developers I have met are not willing to pay for that service and don't have it. Cheers Niclas On Tue, Jul 10, 2012 at 1:58 AM, Brian Fox <[email protected]> wrote: > Niclas, > We are seeing a lot of traffic to Central from China, so this certainly > isn't a case of the Great Firewall blocking everything, rather it seems a > little more localized. Can you send more more info about your source ip and > geo location that we could use to see what's up? Possibly we can get the > traffic routed to a China friendly ip. > > On Mon, Jul 9, 2012 at 12:08 PM, Brian E. Fox <[email protected]> wrote: >> >> Hi Nicolas, this isn't intentional of course. Let me see what I can dig up >> based in your traces. >> >> --Brian (mobile) >> >> >> On Jul 7, 2012, at 11:45 PM, Niclas Hedhman <[email protected]> wrote: >> >> > (I am not subscribed, so please CC me on any responses) >> > >> > I live in China. I normally have a VPN enabled to circumvent various >> > blocking (YouTube, Twitter, ++) that the Chinese government has in >> > place. I normally don't think much about it. But, today I had my >> > computer rebooted and couldn't build a project, because Maven Central >> > couldn't be reached. >> > >> > So, before I realized that my VPN wasn't running I tracerouted a bit. >> > >> > repo1 resolved to >> > >> > niclas:~ niclas$ dig repo1.maven.org | grep "^[a-z]" >> > repo1.maven.org. 1751 IN CNAME central.maven.org. >> > central.maven.org. 212 IN CNAME central02.maven.org. >> > central02.maven.org. 7112 IN CNAME wpc.829D.edgecastcdn.net. >> > wpc.829D.edgecastcdn.net. 3164 IN CNAME >> > gs1.wpc.edgecastcdn.net. >> > gs1.wpc.edgecastcdn.net. 2292 IN A 68.232.45.253 >> > >> > and from that I also tried central01 >> > >> > niclas:~ niclas$ dig central01.maven.org | grep "^[a-z]" >> > central01.maven.org. 6477 IN CNAME >> > central01.maven.org.edgesuite.net. >> > central01.maven.org.edgesuite.net. 20877 IN CNAME a978.g1.akamai.net. >> > a978.g1.akamai.net. 4 IN A 124.40.42.31 >> > a978.g1.akamai.net. 4 IN A 124.40.42.6 >> > >> > And with tracerouting both (see below), it struck me that VPN might >> > not be enabled and the IP on "edgecastcdn.net" is probably blocked by >> > China potentially serving something they don't like, could be >> > anything... Yeah, China is BAD, we all know that, but shouldn't we >> > (Apache) try to minimize the problem for your ordinary Chinese >> > developer, could be a student, hobbyist, small entrepreneur and so on, >> > who isn't anti-government (most people here are quite content with the >> > government) to be able to use Apache projects? >> > >> > The fact is now, that without reasonably reliable access to Maven >> > Central, one can not really participate in many, many of the Java >> > projects at ASF. >> > >> > I don't know how the DNS and host resolution is supposed to work, who >> > is participating in the hosting and under what terms. But I think >> > Maven/Sonatype should have in its interest to NOT EXCLUDE some >> > staggering amount of Java programmers, and perhaps try to find a way >> > to get a better SLA here. If you need help from someone to check "from >> > the inside the Great Firewall", just let me know... >> > >> > >> > Cheers >> > Niclas >> > >> > >> > traceroute to gs1.wpc.edgecastcdn.net (68.232.45.253), 64 hops max, 52 >> > byte packets >> > 1 192.168.2.1 (192.168.2.1) 1.446 ms 0.980 ms 0.900 ms >> > 2 58.246.152.1 (58.246.152.1) 9.855 ms 11.724 ms 8.662 ms >> > 3 210.22.67.29 (210.22.67.29) 9.563 ms 3.698 ms 1.712 ms >> > 4 112.64.251.165 (112.64.251.165) 1.696 ms 1.819 ms 3.215 ms >> > 5 * * * >> > 6 * * * >> > 7 * * * >> > 8 * * * >> > 9 * * * >> > 10 * * * >> > 11 * * * >> > 12 * * * >> > 13 * * * >> > 14 * * * >> > 15 * * * >> > 16 * * * >> > 17 * * * >> > >> > >> > niclas:qi4j-sdk niclas$ traceroute central01.maven.org >> > traceroute: Warning: central01.maven.org has multiple addresses; using >> > 209.107.203.19 >> > traceroute to a978.g1.akamai.net (209.107.203.19), 64 hops max, 52 byte >> > packets >> > 1 192.168.2.1 (192.168.2.1) 1.681 ms 0.910 ms 0.889 ms >> > 2 58.246.152.1 (58.246.152.1) 14.958 ms 14.339 ms 115.382 ms >> > 3 112.64.251.133 (112.64.251.133) 3.516 ms 2.892 ms 1.682 ms >> > 4 112.64.251.165 (112.64.251.165) 2.117 ms 1.934 ms 1.926 ms >> > 5 112.64.243.170 (112.64.243.170) 3.859 ms 8.432 ms 4.110 ms >> > 6 * * * >> > 7 219.158.9.209 (219.158.9.209) 4.284 ms 3.517 ms 6.284 ms >> > 8 219.158.100.194 (219.158.100.194) 32.392 ms 34.428 ms 32.079 ms >> > 9 219.158.96.230 (219.158.96.230) 33.214 ms 33.501 ms 33.470 ms >> > 10 219.158.96.222 (219.158.96.222) 31.660 ms 31.564 ms 33.370 ms >> > 11 sl-st30-sj-0-4-3-3.sprintlink.net (144.228.111.29) 214.116 ms >> > 466.648 ms 503.740 ms >> > 12 sl-st31-sj-0-12-0-3.sprintlink.net (144.232.3.33) 180.679 ms >> > sl-st31-sj-0-8-0-0.sprintlink.net (144.232.3.29) 214.923 ms 231.186 >> > ms >> > 13 144.232.8.194 (144.232.8.194) 522.103 ms 381.628 ms 221.618 ms >> > 14 te0-0-0-3.ccr22.sjc01.atlas.cogentco.com (154.54.6.109) 219.036 ms >> > te0-3-0-3.ccr22.sjc01.atlas.cogentco.com (154.54.6.101) 184.460 ms >> > te0-1-0-0.ccr21.sjc03.atlas.cogentco.com (66.28.4.53) 305.247 ms >> > 15 te0-3-0-2.ccr22.lax01.atlas.cogentco.com (154.54.2.149) 614.732 ms >> > te0-1-0-0.ccr21.sjc01.atlas.cogentco.com (154.54.83.253) 216.883 ms >> > te0-1-0-3.ccr21.sjc01.atlas.cogentco.com (154.54.6.237) 450.823 ms >> > 16 te9-3.ccr02.lax05.atlas.cogentco.com (154.54.82.154) 662.795 ms >> > 154.54.85.25 (154.54.85.25) 189.819 ms >> > te7-8.ccr02.lax05.atlas.cogentco.com (154.54.30.198) 888.842 ms >> > 17 te4-1.mpd01.lax05.atlas.cogentco.com (154.54.28.69) 693.184 ms >> > te9-6.mpd01.lax05.atlas.cogentco.com (154.54.82.150) 190.542 ms * >> > 18 38.104.84.130 (38.104.84.130) 781.037 ms >> > 38.104.84.126 (38.104.84.126) 425.045 ms >> > 38.104.84.130 (38.104.84.130) 643.349 ms >> > 19 te8-2-3580.bbr1.lax1.bandcon.com (69.16.190.214) 189.074 ms >> > 189.148 ms 193.641 ms >> > 20 209.107.203.19 (209.107.203.19) 629.087 ms 412.329 ms 225.912 ms >> > >> > -- >> > Niclas Hedhman, Software Developer >> > http://www.qi4j.org - New Energy for Java >> > >> > I live here; http://tinyurl.com/3xugrbk >> > I work here; http://tinyurl.com/6a2pl4j >> > I relax here; http://tinyurl.com/2cgsug >> > >> > --------------------------------------------------------------------- >> > To unsubscribe, e-mail: [email protected] >> > For additional commands, e-mail: [email protected] >> > > > -- Niclas Hedhman, Software Developer http://www.qi4j.org - New Energy for Java I live here; http://tinyurl.com/3xugrbk I work here; http://tinyurl.com/6a2pl4j I relax here; http://tinyurl.com/2cgsug --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
