Mailing List Archive

Cloudflare (AS13335) broken - only on IPv6?
Hi,

we've got reports that

- repo.anaconda.com (104.17.N.77, 2606:4700::ip.v4.adr.ess)

(and later:
- www.zabbix.com (104.24.10[23].152, 2606:4700:30::6818:6[6]98)
- www.thunderbird.net (104.25.17[45].13, 2606:4700:20::6819:a[ef]0d)

"don't work but work when IPv6 is switched off"

Careful scrutinizing revealed that this was only the case for one
or two of the used address group.

Detailed symptom: TCP opens, but the first data segment written
gets a RST back.

I first reported to anaconda.com, but it seems to be a generic
problem to me now (who else is seeing this?)

So, if any colleague @ cloudflare (AS13335) reads this:
please make work again.

-is
--
Ignatios Souvatzis, Chief IPv6 enabler RFC 6540
Gemeinsame Systemgruppe b-it + Informatik Tel. +49 228 73-60701
gsg@cs.uni-bonn.de
Re: Cloudflare (AS13335) broken - only on IPv6? [ In reply to ]
????ô??




On 01/24/2019 21:22, ignatios wrote:
Hi,

we've got reports that

- repo.anaconda.com (104.17.N.77, 2606:4700::ip.v4.adr.ess)

(and later:
- www.zabbix.com (104.24.10[23].152, 2606:4700:30::6818:6[6]98)
- www.thunderbird.net (104.25.17[45].13, 2606:4700:20::6819:a[ef]0d)

"don't work but work when IPv6 is switched off"

Careful scrutinizing revealed that this was only the case for one
or two of the used address group.

Detailed symptom: TCP opens, but the first data segment written
gets a RST back.

I first reported to anaconda.com, but it seems to be a generic
problem to me now (who else is seeing this?)

So, if any colleague @ cloudflare (AS13335) reads this:
please make work again.

-is
--
Ignatios Souvatzis, Chief IPv6 enabler RFC 6540
Gemeinsame Systemgruppe b-it + Informatik Tel. +49 228 73-60701
gsg@cs.uni-bonn.de
Re: Cloudflare (AS13335) broken - only on IPv6? [ In reply to ]
what





On 01/24/2019 21:24, CircuitRecords wrote:
????ô??




On 01/24/2019 21:22, ignatios wrote:
Hi,

we've got reports that

- repo.anaconda.com (104.17.N.77, 2606:4700::ip.v4.adr.ess)

(and later:
- www.zabbix.com (104.24.10[23].152, 2606:4700:30::6818:6[6]98)
- www.thunderbird.net (104.25.17[45].13, 2606:4700:20::6819:a[ef]0d)

"don't work but work when IPv6 is switched off"

Careful scrutinizing revealed that this was only the case for one
or two of the used address group.

Detailed symptom: TCP opens, but the first data segment written
gets a RST back.

I first reported to anaconda.com, but it seems to be a generic
problem to me now (who else is seeing this?)

So, if any colleague @ cloudflare (AS13335) reads this:
please make work again.

-is
--
Ignatios Souvatzis, Chief IPv6 enabler RFC 6540
Gemeinsame Systemgruppe b-it + Informatik Tel. +49 228 73-60701
gsg@cs.uni-bonn.de
Re: Cloudflare (AS13335) broken - only on IPv6? [ In reply to ]
Hi,

an update:

On Thu, Jan 24, 2019 at 02:22:39PM +0100, ignatios@cs.uni-bonn.de wrote:
> we've got reports that
>
> - repo.anaconda.com (104.17.N.77, 2606:4700::ip.v4.adr.ess)
>
> (and later:
> - www.zabbix.com (104.24.10[23].152, 2606:4700:30::6818:6[6]98)
> - www.thunderbird.net (104.25.17[45].13, 2606:4700:20::6819:a[ef]0d)
+ www.weatheronline.co.uk (104.18.3[45].125 2606:4700:30::6812:2[23]7d)

Also, we (connected via AS680) are affected, while an AS8422 customer I
spoke to is not affected.

I was contacted pretty quickly by a CloudFlare engineer who asked for some
debug information; they're investigating.

-is
Re: Cloudflare (AS13335) broken - only on IPv6? [ In reply to ]
On 29.01.19 16:32, ignatios@cs.uni-bonn.de wrote:
> On Thu, Jan 24, 2019 at 02:22:39PM +0100, ignatios@cs.uni-bonn.de wrote:
>> we've got reports that
>>
>> - repo.anaconda.com (104.17.N.77, 2606:4700::ip.v4.adr.ess)
>>
>> (and later:
>> - www.zabbix.com (104.24.10[23].152, 2606:4700:30::6818:6[6]98)
>> - www.thunderbird.net (104.25.17[45].13, 2606:4700:20::6819:a[ef]0d)
> + www.weatheronline.co.uk (104.18.3[45].125 2606:4700:30::6812:2[23]7d)
>
> Also, we (connected via AS680) are affected, while an AS8422 customer I
> spoke to is not affected.
>
> I was contacted pretty quickly by a CloudFlare engineer who asked for some
> debug information; they're investigating.

Hello Igniatos,

thanks for the update. I have tried a different system in the meantime
(AS24940) an still not see your issues.

I think you should try to ask someone from DFN on a different location
if the problem occurs with him too.

Best reagards
Ulf
Re: Cloudflare (AS13335) broken - only on IPv6? [ In reply to ]
hi!

can you provide a traceroute, or perhaps www.cloudflare.com/cdn-cgi/trace
so I can try to isolate the issue?

thanks!
-Tom

On Tue, Jan 29, 2019 at 10:47 AM Ulf Volmer <u.volmer@u-v.de> wrote:

> On 29.01.19 16:32, ignatios@cs.uni-bonn.de wrote:
> > On Thu, Jan 24, 2019 at 02:22:39PM +0100, ignatios@cs.uni-bonn.de wrote:
> >> we've got reports that
> >>
> >> - repo.anaconda.com (104.17.N.77, 2606:4700::ip.v4.adr.ess)
> >>
> >> (and later:
> >> - www.zabbix.com (104.24.10[23].152, 2606:4700:30::6818:6[6]98)
> >> - www.thunderbird.net (104.25.17[45].13, 2606:4700:20::6819:a[ef]0d)
> > + www.weatheronline.co.uk (104.18.3[45].125 2606:4700:30::6812:2[23]7d)
> >
> > Also, we (connected via AS680) are affected, while an AS8422 customer I
> > spoke to is not affected.
> >
> > I was contacted pretty quickly by a CloudFlare engineer who asked for
> some
> > debug information; they're investigating.
>
> Hello Igniatos,
>
> thanks for the update. I have tried a different system in the meantime
> (AS24940) an still not see your issues.
>
> I think you should try to ask someone from DFN on a different location
> if the problem occurs with him too.
>
> Best reagards
> Ulf
>
>
Re: Cloudflare (AS13335) broken - only on IPv6? [ In reply to ]
On 30.01.19 00:22, Tom Paseka wrote:

> can you provide a traceroute, or perhaps www.cloudflare.com/cdn-cgi/trace
> so I can try to isolate the issue?

Of course. But as I wrote, i did not have this issue. From my side
everything is fine.

traceroute to www.thunderbird.net (2606:4700:20::6819:af0d), 30 hops
max, 80 byte packets
1 2001-4dd0-212c-fd-201-2eff-fe5a-a900.ipv6dyn.netcologne.de
(2001:4dd0:212c:fd:201:2eff:fe5a:a900) 3.025 ms 2.530 ms 2.381 ms
2 2001-4dd0-212c-0-3a10-d5ff-fe07-4c65.ipv6dyn.netcologne.de
(2001:4dd0:212c:0:3a10:d5ff:fe07:4c65) 2.082 ms 1990.872 ms 1990.782 ms
3 e320lns-eup1-lo0.netcologne.de (2001:4dd0:a2a:40::4acc) 18.881 ms
19.288 ms 19.710 ms
4 swrt-eup9-vl61.netcologne.de (2001:4dd0:a2b:80:dc40::a) 18.238 ms
18.728 ms 19.258 ms
5 ip-core-eup2-ae9.netcologne.de (2001:4dd0:a2b:47:dc40::c) 19.410 ms
19.933 ms 19.797 ms
6 ip-core-net2-et9-2-2.netcologne.de (2001:4dd0:a2b:121:dc60::1)
20.761 ms ip-core-net1-et9-2-2.netcologne.de (2001:4dd0:a2b:11f:dc60::1)
15.947 ms 16.303 ms
7 bdr-net1-ae1.netcologne.de (2001:4dd0:a2b:114:dc61::b) 17.188 ms
bdr-net1-ae2.netcologne.de (2001:4dd0:a2b:115:dc61::b) 17.473 ms
bdr-net1-ae1.netcologne.de (2001:4dd0:a2b:114:dc61::b) 16.089 ms
8 cloudflare.dus.ecix.net (2001:7f8:8::3417:0:1) 17.578 ms 18.533 ms
18.695 ms
9 2400:cb00:48:1024::c629:f147 (2400:cb00:48:1024::c629:f147) 18.479
ms 2400:cb00:48:1024::c629:f124 (2400:cb00:48:1024::c629:f124) 18.642
ms 2400:cb00:48:1024::c629:f106 (2400:cb00:48:1024::c629:f106) 18.428 ms

Best regards
Ulf