https://bugzilla.wikimedia.org/show_bug.cgi?id=70084

            Bug ID: 70084
           Summary: DNS can resolve to IPv6 address despite lack of IPv6
                    connectivity
           Product: Wikimedia Labs
           Version: unspecified
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: Unprioritized
         Component: Infrastructure
          Assignee: [email protected]
          Reporter: [email protected]
                CC: [email protected], [email protected],
                    [email protected], [email protected]
       Web browser: ---
   Mobile Platform: ---

On deployment-bastion.eqiad.wmflabs we have a job pulling from Gerrit. It
errored out with:

  INFO:mwextpull:cwd: /srv/scap-stage-dir/php-master/extensions
  INFO:mwextpull:running: git pull
  error: Failed to connect to 2620:0:861:3:208:80:154:81: Network is
unreachable while accessing
https://gerrit.wikimedia.org/r/p/mediawiki/extensions.git/info/refs

Ref:
https://integration.wikimedia.org/ci/job/beta-code-update-eqiad/21755/consoleFull

The eth0 has both IPv4 and IPv6 address, the later being a local one only
though:

  inet addr:10.68.16.58  Bcast:10.68.23.255  Mask:255.255.248.0
  inet6 addr: fe80::f816:3eff:fe85:123f/64 Scope:Link

And:

$ host gerrit.wikimedia.org
gerrit.wikimedia.org has address 208.80.154.81
gerrit.wikimedia.org has IPv6 address 2620:0:861:3:208:80:154:81
$


The workaround would be to force ssh to IPv4 with GIT_SSH='ssh -4'.  But there
is probably a better fix that needs to be done in the way instances resolve DNS
entry, they should only use A entry or the DNS server only yield A entries when
queried over IPv4.

A possibility is that ssh first try the IPv4 address, if it fails to connect,
fallback to the next DNS entry which is the IPv6 address.  The error message
would mean that the service did not respond properly on the IPv4 address.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to