[opensuse-factory] Zypper uses IPv6 address when no IPv6 available
Hi! My provider does not provide IPv6 Internet access. But zypper stubbornly tries to connect the update server by IPv6 address: Сообщение об ошибке: Failed to connect to 2001:67c:2178:8::13: Сеть недоступна This does not depend on whether IPv6 is enabled in Yast. Zypper does not make any attempts to connect the server via IPv4 so a connot do any updates to the system whatsoever. This issue first time was observed this Summer during IPv6 testing day. It has been reported by me and other users here: http://forums.opensuse.org/forums/english/get-technical-help-here/network-in... But finally dismissed as a problem of my provider dispite the fact it was reported by multiple users. Nothing to say, the provider dismissed the issue as well. I also created a bugreport but currectly bugzilla shows me the following infinitely: http://storage9.static.itmages.ru/i/11/1017/h_1318870424_4471791_b102ad47e6.... This is possibly to the same issue. I also had to wait about a minute before I could read the openSUSE forum (it tales about a minute for Firefox to switch to IPv4 if IPv6 is unavailable). -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On 17/10/11 13:56, Ilya Chernykh wrote:
Hi!
My provider does not provide IPv6 Internet access. But zypper stubbornly tries to connect the update server by IPv6 address:
Сообщение об ошибке: Failed to connect to 2001:67c:2178:8::13: Сеть недоступна
This does not depend on whether IPv6 is enabled in Yast. Zypper does not make any attempts to connect the server via IPv4 so a connot do any updates to the system whatsoever.
Did you disabled ipv6 at boot time ? what I mean is booting with ipv6.disable=1 .? -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Monday 17 October 2011 21:08:22 Cristian Rodríguez wrote:
My provider does not provide IPv6 Internet access. But zypper stubbornly tries to connect the update server by IPv6 address:
Сообщение об ошибке: Failed to connect to 2001:67c:2178:8::13: Сеть недоступна
This does not depend on whether IPv6 is enabled in Yast. Zypper does not make any attempts to connect the server via IPv4 so a connot do any updates to the system whatsoever.
Did you disabled ipv6 at boot time ? what I mean is booting with ipv6.disable=1 .?
Yes, it does not affect the behavior. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On 17/10/11 15:05, Ilya Chernykh wrote:
Did you disabled ipv6 at boot time ? what I mean is booting with ipv6.disable=1 .?
Yes, it does not affect the behavior.
are you sure ? that disables all IPV6 at the kernel level. what DNS server are you using ? what opensuse version did you tried ? -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Monday 17 October 2011 22:24:43 Cristian Rodríguez wrote:
Did you disabled ipv6 at boot time ? what I mean is booting with ipv6.disable=1 .?
Yes, it does not affect the behavior.
are you sure ? that disables all IPV6 at the kernel level.
Yes.
what DNS server are you using ?
77.37.251.33, 77.37.255.30
what opensuse version did you tried ?
openSUSE 11.4. The problem appeared first time in summer at the world IPv6 testing day. Then it went OK for a time until today. Now all the same as it was at that testing day. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On 17/10/11 16:01, Ilya Chernykh wrote:
openSUSE 11.4. The problem appeared first time in summer at the world IPv6 testing day. Then it went OK for a time until today. Now all the same as it was at that testing day.
Ok, for the case of zypper, that does not resolv names by itself, but uses curl, that in turn uses c-ares for the job can you zypper in http://download.opensuse.org/repositories/devel:/libraries:/c_c++/openSUSE_1... (in 11.4 only !!) and then try again, see if it makes any difference.. if still fails please provide a packet capture dump done with wireshark of the failing session. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2011-10-17 18:56, Ilya Chernykh wrote:
Hi!
My provider does not provide IPv6 Internet access. But zypper stubbornly tries to connect the update server by IPv6 address:
I think this happens because the DNS gives back IPv6 addresses. I don't know if it is possible to configure bind not to return such addresses. - -- Cheers / Saludos, Carlos E. R. (from 11.4 x86_64 "Celadon" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/ iEYEARECAAYFAk6ca8cACgkQtTMYHG2NR9VZYACfW6muZ8ngUDPH50je8FamPY+P P5YAniVaULN2w9rPr18fNHMQx3KbQgd+ =GI46 -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Am 17.10.2011 19:54, schrieb Carlos E. R.:
On 2011-10-17 18:56, Ilya Chernykh wrote:
Hi!
My provider does not provide IPv6 Internet access. But zypper stubbornly tries to connect the update server by IPv6 address:
I think this happens because the DNS gives back IPv6 addresses. I don't know if it is possible to configure bind not to return such addresses.
Would be nice to get the root cause and not some workaround to move the problem into the future. Every app is allowed to try to use IPv6 if the target has an IPv6 address. After that basically two types of issues can happen: - the app does not retry using IPv4 at all -> the app needs to be fixed - the network is misconfigured and the app has to wait for a timeout until it can try IPv4 So the basic question is in this case. Is there an IPv4 connection at some point (after timeouts) or none at all? Wolfgang -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On 17/10/11 15:14, Wolfgang Rosenauer wrote:
So the basic question is in this case. Is there an IPv4 connection at some point (after timeouts) or none at all?
We need a packet capture session, taken with wireshark to know that. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Monday 17 October 2011 22:14:16 Wolfgang Rosenauer wrote:
My provider does not provide IPv6 Internet access. But zypper stubbornly tries to connect the update server by IPv6 address:
I think this happens because the DNS gives back IPv6 addresses. I don't know if it is possible to configure bind not to return such addresses.
Would be nice to get the root cause and not some workaround to move the problem into the future. Every app is allowed to try to use IPv6 if the target has an IPv6 address. After that basically two types of issues can happen:
- the app does not retry using IPv4 at all -> the app needs to be fixed - the network is misconfigured and the app has to wait for a timeout until it can try IPv4
So the basic question is in this case. Is there an IPv4 connection at some point (after timeouts) or none at all?
None at all (with zypper or yast). -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2011-10-17 20:57, Ilya Chernykh wrote:
On Monday 17 October 2011 22:14:16 Wolfgang Rosenauer wrote:
None at all (with zypper or yast).
That would be because the list of mirrors used are all ipv6. - -- Cheers / Saludos, Carlos E. R. (from 11.4 x86_64 "Celadon" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/ iEYEARECAAYFAk6cfVkACgkQtTMYHG2NR9UZMACfc+PXbZdxArlnfVQBl6nvXE+k BCIAn2rHSl3z/HlPSskv3A/o5Xj4ElGp =Ynps -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Monday 17 October 2011 23:09:13 Carlos E. R. wrote:
None at all (with zypper or yast).
That would be because the list of mirrors used are all ipv6.
Well now it seems all OK again. I'll report once it becomes broken again. Possibly somebody tested IPv6 second time ) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Monday 17 October 2011 23:09:13 Carlos E. R. wrote:
None at all (with zypper or yast).
That would be because the list of mirrors used are all ipv6.
And it seems I was not alone today to have troubles: http://forums.opensuse.org/english/get-technical-help-here/applications/4666... -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Monday 17 October 2011 23:09:13 Carlos E. R. wrote:
None at all (with zypper or yast).
That would be because the list of mirrors used are all ipv6.
And yet another man: http://forums.opensuse.org/english/get-technical-help-here/applications/4666... -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2011-10-17 20:14, Wolfgang Rosenauer wrote:
Am 17.10.2011 19:54, schrieb Carlos E. R.:
I think this happens because the DNS gives back IPv6 addresses. I don't know if it is possible to configure bind not to return such addresses.
Would be nice to get the root cause and not some workaround to move the problem into the future.
Indeed.
Every app is allowed to try to use IPv6 if the target has an IPv6 address. After that basically two types of issues can happen:
That's why I think that a "solution" would be telling, for example to bind, that it should not give ipv6 addresses as responses for name queries. That way IPv6 network is not impeded on the local network, but it would be fine on internet, because it would not be attempted.
- the app does not retry using IPv4 at all -> the app needs to be fixed - the network is misconfigured and the app has to wait for a timeout until it can try IPv4
I think that if the resolution comes back as an IPv6 address and another IPv4, it tries first v6, and after it times out, it tries v4 In the case of zypper, I think that in some cases you only get an IPv6 server as the closest to you, and it fails, of course. - -- Cheers / Saludos, Carlos E. R. (from 11.4 x86_64 "Celadon" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/ iEYEARECAAYFAk6cf34ACgkQtTMYHG2NR9WWRACaAg14acGbv7l8V3F7TMAbzgwM vMkAoJO/G6UXciMxujca4Il0j7aizgh5 =R34t -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Mon, Oct 17, 2011 at 09:18:22PM +0200, Carlos E. R. wrote:
That's why I think that a "solution" would be telling, for example to bind, that it should not give ipv6 addresses as responses for name queries. That way IPv6 network is not impeded on the local network, but it would be fine on internet, because it would not be attempted.
glibc does that if AI_ADDRCONFIG is used in the lookup call. Unfortunately libcurl does not use this flag. Cheers, Michael. -- Michael Schroeder mls@suse.de SUSE LINUX Products GmbH, GF Jeff Hawn, HRB 16746 AG Nuernberg main(_){while(_=~getchar())putchar(~_-1/(~(_|32)/13*2-11)*13);} -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Carlos E. R. wrote:
Every app is allowed to try to use IPv6 if the target has an IPv6 address. After that basically two types of issues can happen:
That's why I think that a "solution" would be telling, for example to bind, that it should not give ipv6 addresses as responses for name queries. That way IPv6 network is not impeded on the local network, but it would be fine on internet, because it would not be attempted.
It really is not an issue for the application (zypper). An application that is IPv4+IPv6 capable should "just work" and be able to ignore whether it is one or the other network. -- Per Jessen, Zürich (16.4°C) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2011-10-18 16:12, Per Jessen wrote:
Carlos E. R. wrote:
Every app is allowed to try to use IPv6 if the target has an IPv6 address. After that basically two types of issues can happen:
That's why I think that a "solution" would be telling, for example to bind, that it should not give ipv6 addresses as responses for name queries. That way IPv6 network is not impeded on the local network, but it would be fine on internet, because it would not be attempted.
It really is not an issue for the application (zypper). An application that is IPv4+IPv6 capable should "just work" and be able to ignore whether it is one or the other network.
Zypper can do nothing if it gets directed to IPv6 mirrors only. I understood that zypper used metalinks, and could download from several sources simultaneously. That if one failed, it would use another one, not get stuck. Maybe that is wrong? - -- Cheers / Saludos, Carlos E. R. (from 11.4 x86_64 "Celadon" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/ iEYEARECAAYFAk6dnQ4ACgkQtTMYHG2NR9VVKwCfQ8U3lyWMu4itgrhNkRu91rPi aIMAnj3i+zyhgk0oEPPS3oK1azkoC6rG =DP9H -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Carlos E. R. wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 2011-10-18 16:12, Per Jessen wrote:
Carlos E. R. wrote:
Every app is allowed to try to use IPv6 if the target has an IPv6 address. After that basically two types of issues can happen:
That's why I think that a "solution" would be telling, for example to bind, that it should not give ipv6 addresses as responses for name queries. That way IPv6 network is not impeded on the local network, but it would be fine on internet, because it would not be attempted.
It really is not an issue for the application (zypper). An application that is IPv4+IPv6 capable should "just work" and be able to ignore whether it is one or the other network.
Zypper can do nothing if it gets directed to IPv6 mirrors only.
Of course, and it shouldn't.
I understood that zypper used metalinks, and could download from several sources simultaneously. That if one failed, it would use another one, not get stuck.
Yes it does. I don't know how it deals with a failed download, but not being to reach a destination should not be an issue at all. -- Per Jessen, Zürich (14.5°C) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Tue, Oct 18, 2011 at 11:36, Carlos E. R.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 2011-10-18 16:12, Per Jessen wrote:
Carlos E. R. wrote:
Every app is allowed to try to use IPv6 if the target has an IPv6 address. After that basically two types of issues can happen:
That's why I think that a "solution" would be telling, for example to bind, that it should not give ipv6 addresses as responses for name queries. That way IPv6 network is not impeded on the local network, but it would be fine on internet, because it would not be attempted.
It really is not an issue for the application (zypper). An application that is IPv4+IPv6 capable should "just work" and be able to ignore whether it is one or the other network.
Zypper can do nothing if it gets directed to IPv6 mirrors only.
I understood that zypper used metalinks, and could download from several sources simultaneously. That if one failed, it would use another one, not get stuck.
Maybe that is wrong?
I'm just guessing that download.opensuse.org just had a bit of a screwup. Nothing much... :| -- later daze. :: Robert Xu :: rxu.lincomlinux.org :: protocol.by/rxu -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
participants (7)
-
Carlos E. R. -
Cristian Rodríguez -
Ilya Chernykh -
Michael Schroeder -
Per Jessen -
Robert Xu -
Wolfgang Rosenauer