The network team confirmed that this is only Unicom with the issue. They are looking at alternate routes that would hopefully work.
On Mon, Jul 9, 2012 at 5:31 PM, Niclas Hedhman <[email protected]> wrote: > Ok, good to know that it is not completely blocked. It is likely that > there are multiple FirewallOps across China regions and the (I think) > 3 ISPs (China Telecom, China Mobile and Unicom). > > As I mentioned, the edgecast address couldn't be reached, but the > akamai one could. > > I am personally in downtown Shanghai, using China Unicom's "Fiber To > The Building". > > I am seen as 58.246.154.81 from the outside at the moment, can reach > your a978.g1.akamai.net, but not wpc.829D.edgecastcdn.net. > > I can also VPN to Beijing, to a 163.com datacenter (which I think is a > China Telecom subsidiary), having IP number 60.191.221.179. From > there, both hosts above are reachable. > > So, yes, it seems to be regionalized or per ISP (which makes this less > of a problem than I thought). I also mentioned that I am personally on > VPN and I am not really affected, but developers I have met are not > willing to pay for that service and don't have it. > > > Cheers > Niclas > > On Tue, Jul 10, 2012 at 1:58 AM, Brian Fox <[email protected]> wrote: > > Niclas, > > We are seeing a lot of traffic to Central from China, so this certainly > > isn't a case of the Great Firewall blocking everything, rather it seems a > > little more localized. Can you send more more info about your source ip > and > > geo location that we could use to see what's up? Possibly we can get the > > traffic routed to a China friendly ip. > > > > On Mon, Jul 9, 2012 at 12:08 PM, Brian E. Fox <[email protected]> > wrote: > >> > >> Hi Nicolas, this isn't intentional of course. Let me see what I can dig > up > >> based in your traces. > >> > >> --Brian (mobile) > >> > >> > >> On Jul 7, 2012, at 11:45 PM, Niclas Hedhman <[email protected]> wrote: > >> > >> > (I am not subscribed, so please CC me on any responses) > >> > > >> > I live in China. I normally have a VPN enabled to circumvent various > >> > blocking (YouTube, Twitter, ++) that the Chinese government has in > >> > place. I normally don't think much about it. But, today I had my > >> > computer rebooted and couldn't build a project, because Maven Central > >> > couldn't be reached. > >> > > >> > So, before I realized that my VPN wasn't running I tracerouted a bit. > >> > > >> > repo1 resolved to > >> > > >> > niclas:~ niclas$ dig repo1.maven.org | grep "^[a-z]" > >> > repo1.maven.org. 1751 IN CNAME central.maven.org. > >> > central.maven.org. 212 IN CNAME central02.maven.org. > >> > central02.maven.org. 7112 IN CNAME > wpc.829D.edgecastcdn.net. > >> > wpc.829D.edgecastcdn.net. 3164 IN CNAME > >> > gs1.wpc.edgecastcdn.net. > >> > gs1.wpc.edgecastcdn.net. 2292 IN A 68.232.45.253 > >> > > >> > and from that I also tried central01 > >> > > >> > niclas:~ niclas$ dig central01.maven.org | grep "^[a-z]" > >> > central01.maven.org. 6477 IN CNAME > >> > central01.maven.org.edgesuite.net. > >> > central01.maven.org.edgesuite.net. 20877 IN CNAME a978.g1.akamai.net. > >> > a978.g1.akamai.net. 4 IN A 124.40.42.31 > >> > a978.g1.akamai.net. 4 IN A 124.40.42.6 > >> > > >> > And with tracerouting both (see below), it struck me that VPN might > >> > not be enabled and the IP on "edgecastcdn.net" is probably blocked by > >> > China potentially serving something they don't like, could be > >> > anything... Yeah, China is BAD, we all know that, but shouldn't we > >> > (Apache) try to minimize the problem for your ordinary Chinese > >> > developer, could be a student, hobbyist, small entrepreneur and so on, > >> > who isn't anti-government (most people here are quite content with the > >> > government) to be able to use Apache projects? > >> > > >> > The fact is now, that without reasonably reliable access to Maven > >> > Central, one can not really participate in many, many of the Java > >> > projects at ASF. > >> > > >> > I don't know how the DNS and host resolution is supposed to work, who > >> > is participating in the hosting and under what terms. But I think > >> > Maven/Sonatype should have in its interest to NOT EXCLUDE some > >> > staggering amount of Java programmers, and perhaps try to find a way > >> > to get a better SLA here. If you need help from someone to check "from > >> > the inside the Great Firewall", just let me know... > >> > > >> > > >> > Cheers > >> > Niclas > >> > > >> > > >> > traceroute to gs1.wpc.edgecastcdn.net (68.232.45.253), 64 hops max, > 52 > >> > byte packets > >> > 1 192.168.2.1 (192.168.2.1) 1.446 ms 0.980 ms 0.900 ms > >> > 2 58.246.152.1 (58.246.152.1) 9.855 ms 11.724 ms 8.662 ms > >> > 3 210.22.67.29 (210.22.67.29) 9.563 ms 3.698 ms 1.712 ms > >> > 4 112.64.251.165 (112.64.251.165) 1.696 ms 1.819 ms 3.215 ms > >> > 5 * * * > >> > 6 * * * > >> > 7 * * * > >> > 8 * * * > >> > 9 * * * > >> > 10 * * * > >> > 11 * * * > >> > 12 * * * > >> > 13 * * * > >> > 14 * * * > >> > 15 * * * > >> > 16 * * * > >> > 17 * * * > >> > > >> > > >> > niclas:qi4j-sdk niclas$ traceroute central01.maven.org > >> > traceroute: Warning: central01.maven.org has multiple addresses; > using > >> > 209.107.203.19 > >> > traceroute to a978.g1.akamai.net (209.107.203.19), 64 hops max, 52 > byte > >> > packets > >> > 1 192.168.2.1 (192.168.2.1) 1.681 ms 0.910 ms 0.889 ms > >> > 2 58.246.152.1 (58.246.152.1) 14.958 ms 14.339 ms 115.382 ms > >> > 3 112.64.251.133 (112.64.251.133) 3.516 ms 2.892 ms 1.682 ms > >> > 4 112.64.251.165 (112.64.251.165) 2.117 ms 1.934 ms 1.926 ms > >> > 5 112.64.243.170 (112.64.243.170) 3.859 ms 8.432 ms 4.110 ms > >> > 6 * * * > >> > 7 219.158.9.209 (219.158.9.209) 4.284 ms 3.517 ms 6.284 ms > >> > 8 219.158.100.194 (219.158.100.194) 32.392 ms 34.428 ms 32.079 ms > >> > 9 219.158.96.230 (219.158.96.230) 33.214 ms 33.501 ms 33.470 ms > >> > 10 219.158.96.222 (219.158.96.222) 31.660 ms 31.564 ms 33.370 ms > >> > 11 sl-st30-sj-0-4-3-3.sprintlink.net (144.228.111.29) 214.116 ms > >> > 466.648 ms 503.740 ms > >> > 12 sl-st31-sj-0-12-0-3.sprintlink.net (144.232.3.33) 180.679 ms > >> > sl-st31-sj-0-8-0-0.sprintlink.net (144.232.3.29) 214.923 ms > 231.186 > >> > ms > >> > 13 144.232.8.194 (144.232.8.194) 522.103 ms 381.628 ms 221.618 ms > >> > 14 te0-0-0-3.ccr22.sjc01.atlas.cogentco.com (154.54.6.109) 219.036 > ms > >> > te0-3-0-3.ccr22.sjc01.atlas.cogentco.com (154.54.6.101) 184.460 > ms > >> > te0-1-0-0.ccr21.sjc03.atlas.cogentco.com (66.28.4.53) 305.247 ms > >> > 15 te0-3-0-2.ccr22.lax01.atlas.cogentco.com (154.54.2.149) 614.732 > ms > >> > te0-1-0-0.ccr21.sjc01.atlas.cogentco.com (154.54.83.253) 216.883 > ms > >> > te0-1-0-3.ccr21.sjc01.atlas.cogentco.com (154.54.6.237) 450.823 > ms > >> > 16 te9-3.ccr02.lax05.atlas.cogentco.com (154.54.82.154) 662.795 ms > >> > 154.54.85.25 (154.54.85.25) 189.819 ms > >> > te7-8.ccr02.lax05.atlas.cogentco.com (154.54.30.198) 888.842 ms > >> > 17 te4-1.mpd01.lax05.atlas.cogentco.com (154.54.28.69) 693.184 ms > >> > te9-6.mpd01.lax05.atlas.cogentco.com (154.54.82.150) 190.542 ms * > >> > 18 38.104.84.130 (38.104.84.130) 781.037 ms > >> > 38.104.84.126 (38.104.84.126) 425.045 ms > >> > 38.104.84.130 (38.104.84.130) 643.349 ms > >> > 19 te8-2-3580.bbr1.lax1.bandcon.com (69.16.190.214) 189.074 ms > >> > 189.148 ms 193.641 ms > >> > 20 209.107.203.19 (209.107.203.19) 629.087 ms 412.329 ms 225.912 > ms > >> > > >> > -- > >> > Niclas Hedhman, Software Developer > >> > http://www.qi4j.org - New Energy for Java > >> > > >> > I live here; http://tinyurl.com/3xugrbk > >> > I work here; http://tinyurl.com/6a2pl4j > >> > I relax here; http://tinyurl.com/2cgsug > >> > > >> > --------------------------------------------------------------------- > >> > To unsubscribe, e-mail: [email protected] > >> > For additional commands, e-mail: [email protected] > >> > > > > > > > > > -- > Niclas Hedhman, Software Developer > http://www.qi4j.org - New Energy for Java > > I live here; http://tinyurl.com/3xugrbk > I work here; http://tinyurl.com/6a2pl4j > I relax here; http://tinyurl.com/2cgsug >
