Wasn't today the activation day for the DNS switcher virus? Which appears to match the symptoms here.
-Chris Sent from my iPhone On 10/07/2012, at 7:31 AM, Niclas Hedhman <[email protected]> wrote: > Ok, good to know that it is not completely blocked. It is likely that > there are multiple FirewallOps across China regions and the (I think) > 3 ISPs (China Telecom, China Mobile and Unicom). > > As I mentioned, the edgecast address couldn't be reached, but the > akamai one could. > > I am personally in downtown Shanghai, using China Unicom's "Fiber To > The Building". > > I am seen as 58.246.154.81 from the outside at the moment, can reach > your a978.g1.akamai.net, but not wpc.829D.edgecastcdn.net. > > I can also VPN to Beijing, to a 163.com datacenter (which I think is a > China Telecom subsidiary), having IP number 60.191.221.179. From > there, both hosts above are reachable. > > So, yes, it seems to be regionalized or per ISP (which makes this less > of a problem than I thought). I also mentioned that I am personally on > VPN and I am not really affected, but developers I have met are not > willing to pay for that service and don't have it. > > > Cheers > Niclas > > On Tue, Jul 10, 2012 at 1:58 AM, Brian Fox <[email protected]> wrote: >> Niclas, >> We are seeing a lot of traffic to Central from China, so this certainly >> isn't a case of the Great Firewall blocking everything, rather it seems a >> little more localized. Can you send more more info about your source ip and >> geo location that we could use to see what's up? Possibly we can get the >> traffic routed to a China friendly ip. >> >> On Mon, Jul 9, 2012 at 12:08 PM, Brian E. Fox <[email protected]> wrote: >>> >>> Hi Nicolas, this isn't intentional of course. Let me see what I can dig up >>> based in your traces. >>> >>> --Brian (mobile) >>> >>> >>> On Jul 7, 2012, at 11:45 PM, Niclas Hedhman <[email protected]> wrote: >>> >>>> (I am not subscribed, so please CC me on any responses) >>>> >>>> I live in China. I normally have a VPN enabled to circumvent various >>>> blocking (YouTube, Twitter, ++) that the Chinese government has in >>>> place. I normally don't think much about it. But, today I had my >>>> computer rebooted and couldn't build a project, because Maven Central >>>> couldn't be reached. >>>> >>>> So, before I realized that my VPN wasn't running I tracerouted a bit. >>>> >>>> repo1 resolved to >>>> >>>> niclas:~ niclas$ dig repo1.maven.org | grep "^[a-z]" >>>> repo1.maven.org. 1751 IN CNAME central.maven.org. >>>> central.maven.org. 212 IN CNAME central02.maven.org. >>>> central02.maven.org. 7112 IN CNAME wpc.829D.edgecastcdn.net. >>>> wpc.829D.edgecastcdn.net. 3164 IN CNAME >>>> gs1.wpc.edgecastcdn.net. >>>> gs1.wpc.edgecastcdn.net. 2292 IN A 68.232.45.253 >>>> >>>> and from that I also tried central01 >>>> >>>> niclas:~ niclas$ dig central01.maven.org | grep "^[a-z]" >>>> central01.maven.org. 6477 IN CNAME >>>> central01.maven.org.edgesuite.net. >>>> central01.maven.org.edgesuite.net. 20877 IN CNAME a978.g1.akamai.net. >>>> a978.g1.akamai.net. 4 IN A 124.40.42.31 >>>> a978.g1.akamai.net. 4 IN A 124.40.42.6 >>>> >>>> And with tracerouting both (see below), it struck me that VPN might >>>> not be enabled and the IP on "edgecastcdn.net" is probably blocked by >>>> China potentially serving something they don't like, could be >>>> anything... Yeah, China is BAD, we all know that, but shouldn't we >>>> (Apache) try to minimize the problem for your ordinary Chinese >>>> developer, could be a student, hobbyist, small entrepreneur and so on, >>>> who isn't anti-government (most people here are quite content with the >>>> government) to be able to use Apache projects? >>>> >>>> The fact is now, that without reasonably reliable access to Maven >>>> Central, one can not really participate in many, many of the Java >>>> projects at ASF. >>>> >>>> I don't know how the DNS and host resolution is supposed to work, who >>>> is participating in the hosting and under what terms. But I think >>>> Maven/Sonatype should have in its interest to NOT EXCLUDE some >>>> staggering amount of Java programmers, and perhaps try to find a way >>>> to get a better SLA here. If you need help from someone to check "from >>>> the inside the Great Firewall", just let me know... >>>> >>>> >>>> Cheers >>>> Niclas >>>> >>>> >>>> traceroute to gs1.wpc.edgecastcdn.net (68.232.45.253), 64 hops max, 52 >>>> byte packets >>>> 1 192.168.2.1 (192.168.2.1) 1.446 ms 0.980 ms 0.900 ms >>>> 2 58.246.152.1 (58.246.152.1) 9.855 ms 11.724 ms 8.662 ms >>>> 3 210.22.67.29 (210.22.67.29) 9.563 ms 3.698 ms 1.712 ms >>>> 4 112.64.251.165 (112.64.251.165) 1.696 ms 1.819 ms 3.215 ms >>>> 5 * * * >>>> 6 * * * >>>> 7 * * * >>>> 8 * * * >>>> 9 * * * >>>> 10 * * * >>>> 11 * * * >>>> 12 * * * >>>> 13 * * * >>>> 14 * * * >>>> 15 * * * >>>> 16 * * * >>>> 17 * * * >>>> >>>> >>>> niclas:qi4j-sdk niclas$ traceroute central01.maven.org >>>> traceroute: Warning: central01.maven.org has multiple addresses; using >>>> 209.107.203.19 >>>> traceroute to a978.g1.akamai.net (209.107.203.19), 64 hops max, 52 byte >>>> packets >>>> 1 192.168.2.1 (192.168.2.1) 1.681 ms 0.910 ms 0.889 ms >>>> 2 58.246.152.1 (58.246.152.1) 14.958 ms 14.339 ms 115.382 ms >>>> 3 112.64.251.133 (112.64.251.133) 3.516 ms 2.892 ms 1.682 ms >>>> 4 112.64.251.165 (112.64.251.165) 2.117 ms 1.934 ms 1.926 ms >>>> 5 112.64.243.170 (112.64.243.170) 3.859 ms 8.432 ms 4.110 ms >>>> 6 * * * >>>> 7 219.158.9.209 (219.158.9.209) 4.284 ms 3.517 ms 6.284 ms >>>> 8 219.158.100.194 (219.158.100.194) 32.392 ms 34.428 ms 32.079 ms >>>> 9 219.158.96.230 (219.158.96.230) 33.214 ms 33.501 ms 33.470 ms >>>> 10 219.158.96.222 (219.158.96.222) 31.660 ms 31.564 ms 33.370 ms >>>> 11 sl-st30-sj-0-4-3-3.sprintlink.net (144.228.111.29) 214.116 ms >>>> 466.648 ms 503.740 ms >>>> 12 sl-st31-sj-0-12-0-3.sprintlink.net (144.232.3.33) 180.679 ms >>>> sl-st31-sj-0-8-0-0.sprintlink.net (144.232.3.29) 214.923 ms 231.186 >>>> ms >>>> 13 144.232.8.194 (144.232.8.194) 522.103 ms 381.628 ms 221.618 ms >>>> 14 te0-0-0-3.ccr22.sjc01.atlas.cogentco.com (154.54.6.109) 219.036 ms >>>> te0-3-0-3.ccr22.sjc01.atlas.cogentco.com (154.54.6.101) 184.460 ms >>>> te0-1-0-0.ccr21.sjc03.atlas.cogentco.com (66.28.4.53) 305.247 ms >>>> 15 te0-3-0-2.ccr22.lax01.atlas.cogentco.com (154.54.2.149) 614.732 ms >>>> te0-1-0-0.ccr21.sjc01.atlas.cogentco.com (154.54.83.253) 216.883 ms >>>> te0-1-0-3.ccr21.sjc01.atlas.cogentco.com (154.54.6.237) 450.823 ms >>>> 16 te9-3.ccr02.lax05.atlas.cogentco.com (154.54.82.154) 662.795 ms >>>> 154.54.85.25 (154.54.85.25) 189.819 ms >>>> te7-8.ccr02.lax05.atlas.cogentco.com (154.54.30.198) 888.842 ms >>>> 17 te4-1.mpd01.lax05.atlas.cogentco.com (154.54.28.69) 693.184 ms >>>> te9-6.mpd01.lax05.atlas.cogentco.com (154.54.82.150) 190.542 ms * >>>> 18 38.104.84.130 (38.104.84.130) 781.037 ms >>>> 38.104.84.126 (38.104.84.126) 425.045 ms >>>> 38.104.84.130 (38.104.84.130) 643.349 ms >>>> 19 te8-2-3580.bbr1.lax1.bandcon.com (69.16.190.214) 189.074 ms >>>> 189.148 ms 193.641 ms >>>> 20 209.107.203.19 (209.107.203.19) 629.087 ms 412.329 ms 225.912 ms >>>> >>>> -- >>>> Niclas Hedhman, Software Developer >>>> http://www.qi4j.org - New Energy for Java >>>> >>>> I live here; http://tinyurl.com/3xugrbk >>>> I work here; http://tinyurl.com/6a2pl4j >>>> I relax here; http://tinyurl.com/2cgsug >>>> >>>> --------------------------------------------------------------------- >>>> To unsubscribe, e-mail: [email protected] >>>> For additional commands, e-mail: [email protected] >>>> >> >> > > > > -- > Niclas Hedhman, Software Developer > http://www.qi4j.org - New Energy for Java > > I live here; http://tinyurl.com/3xugrbk > I work here; http://tinyurl.com/6a2pl4j > I relax here; http://tinyurl.com/2cgsug > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
