Hi Per I'm sorry for the delay, but for me it looks like I'm the only one left who is working on mirror stuff - and being sent around in the world does not help me solving problems... On Fri, 15 Sep 2017 08:15:02 +0200 Per Jessen wrote:

...

Now that our mirror is fully synced, when I look at https://mirrors.opensuse.org/, I was expecting to see some tickboxes for http://mirror.hostsuisse.com slowly turn up, but nothing seems to be changing?

Still no change, and our mirror is not being chosen for downloads (from a CH address).

http://mirror.hostsuisse.com/opensuse gives me an error page, generated by "sogo (squid/3.4.4)". "HTTP Request: GET /opensuse HTTP/1.1 Host: mirror.hostsuisse.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,de;q=0.7,en;q=0.3 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1" Might it be that your ACLs are a bit too restrictive? => that would explain why the mirrorprobe does no use/activate your mirror, even if the rsync works like a charm... Regards, Lars -- To unsubscribe, e-mail: mirror+unsubscribe@opensuse.org To contact the owner, email: mirror+owner@opensuse.org

Is the squid on opensuse side? From here (currently Italy) the mirror is reachable and looks good so far. Am 15. September 2017 10:33:37 MESZ schrieb Per Jessen <per@computer.org>:

Lars Vogdt wrote:

...

Hi Per

I'm sorry for the delay, but for me it looks like I'm the only one left who is working on mirror stuff - and being sent around in the world does not help me solving problems...

Thanks Lars - is there anything I can do wrt mirrors?

...

http://mirror.hostsuisse.com/opensuse gives me an error page, generated by "sogo (squid/3.4.4)".

Hmm, what is squid doing there...

Here is what I get:

wget -S http://mirror.hostsuisse.com/opensuse --2017-09-15 10:30:09-- http://mirror.hostsuisse.com/opensuse Resolving mirror.hostsuisse.com (mirror.hostsuisse.com)... 185.85.248.30, 2a03:7520:4c68::2030 Connecting to mirror.hostsuisse.com (mirror.hostsuisse.com)|185.85.248.30|:80... connected. HTTP request sent, awaiting response... HTTP/1.1 301 Moved Permanently Date: Fri, 15 Sep 2017 08:30:09 GMT Server: Apache/2.4.10 (Linux/SUSE) Location: http://mirror.hostsuisse.com/opensuse/ Content-Length: 337 Keep-Alive: timeout=15, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Location: http://mirror.hostsuisse.com/opensuse/ [following] --2017-09-15 10:30:09-- http://mirror.hostsuisse.com/opensuse/ Reusing existing connection to mirror.hostsuisse.com:80. HTTP request sent, awaiting response... HTTP/1.1 200 OK Date: Fri, 15 Sep 2017 08:30:09 GMT Server: Apache/2.4.10 (Linux/SUSE) Keep-Alive: timeout=15, max=99 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html;charset=ISO-8859-1 Length: unspecified [text/html] Saving to: `opensuse'

?per -- To unsubscribe, e-mail: mirror+unsubscribe@opensuse.org To contact the owner, email: mirror+owner@opensuse.org

Am Fri, 15 Sep 2017 10:33:37 +0200 schrieb "Per Jessen" <per@computer.org>:

...

I'm sorry for the delay, but for me it looks like I'm the only one left who is working on mirror stuff - and being sent around in the world does not help me solving problems...

Thanks Lars - is there anything I can do wrt mirrors?

Feel invited to log in at scanner.infra.opensuse.org ;-)

...

http://mirror.hostsuisse.com/opensuse gives me an error page, generated by "sogo (squid/3.4.4)".

Hmm, what is squid doing there...

Here is what I get:

wget -S http://mirror.hostsuisse.com/opensuse --2017-09-15 10:30:09-- http://mirror.hostsuisse.com/opensuse Resolving mirror.hostsuisse.com (mirror.hostsuisse.com)... 185.85.248.30, 2a03:7520:4c68::2030 Connecting to mirror.hostsuisse.com (mirror.hostsuisse.com)|185.85.248.30|:80... connected. HTTP request sent, awaiting response... HTTP/1.1 301 Moved Permanently Date: Fri, 15 Sep 2017 08:30:09 GMT Server: Apache/2.4.10 (Linux/SUSE) Location: http://mirror.hostsuisse.com/opensuse/ Content-Length: 337 Keep-Alive: timeout=15, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Location: http://mirror.hostsuisse.com/opensuse/ [following] --2017-09-15 10:30:09-- http://mirror.hostsuisse.com/opensuse/ Reusing existing connection to mirror.hostsuisse.com:80. HTTP request sent, awaiting response... HTTP/1.1 200 OK Date: Fri, 15 Sep 2017 08:30:09 GMT Server: Apache/2.4.10 (Linux/SUSE) Keep-Alive: timeout=15, max=99 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html;charset=ISO-8859-1 Length: unspecified [text/html] Saving to: `opensuse'

Looks to me like something is in front of your network, especially in case you are using IPv6 (like our scanner is doing): =================== ~ > wget -S http://mirror.hostsuisse.com/opensuse --2017-09-15 10:54:16-- http://mirror.hostsuisse.com/opensuse Resolving mirror.hostsuisse.com ... 2a03:7520:4c68::2030, 185.85.248.30 Connecting to mirror.hostsuisse.com |2a03:7520:4c68::2030|:80... connected. HTTP request sent, awaiting response... HTTP/1.1 403 Forbidden Server: squid/3.4.4 Mime-Version: 1.0 Date: Fri, 15 Sep 2017 08:54:17 GMT Content-Type: text/html Content-Length: 3214 X-Squid-Error: ERR_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from sogo X-Cache-Lookup: NONE from sogo:3128 Via: 1.1 sogo Connection: keep-alive 2017-09-15 10:54:17 ERROR 403: Forbidden. =================== From a machine connected just via IPv4 everything seems to work. ~> host mirror.hostsuisse.com mirror.hostsuisse.com has address 185.85.248.30 mirror.hostsuisse.com has IPv6 address 2a03:7520:4c68::2030 Does that help? Regards, Lars -- To unsubscribe, e-mail: mirror+unsubscribe@opensuse.org To contact the owner, email: mirror+owner@opensuse.org

Per Jessen wrote:

Per Jessen wrote:

...

Lars Vogdt wrote:

...

Hi Per

I'm sorry for the delay, but for me it looks like I'm the only one left who is working on mirror stuff - and being sent around in the world does not help me solving problems...

Thanks Lars - is there anything I can do wrt mirrors?

...

http://mirror.hostsuisse.com/opensuse gives me an error page, generated by "sogo (squid/3.4.4)".

Hmm, what is squid doing there...

Ah, found it. It's a config problem on ipv6 so inbound http traffic is being diverted to squid. It should have been fixed as I'm writing this.

Lars, I'm curious - mirrorbrain was clearly correctly probing on ipv4, but somehow not getting the right status. Then suddenly this morning at 10:14 CET, I see accesses from "ZYpp", so the status must have been updated then. That was before I fixed the firewall though. -- Per Jessen, Zürich (12.6°C) http://www.dns24.ch/ - free dynamic DNS, made in Switzerland. -- To unsubscribe, e-mail: mirror+unsubscribe@opensuse.org To contact the owner, email: mirror+owner@opensuse.org

Am 15. September 2017 18:35:21 MESZ schrieb Levon Avagyan <levon.avagyan@ucom.am>:

I am sure there are lots of people like me who are happy to help and contribute with maintainig mirror infrastructure. Just tell us how we can help?

Oh, I'm sorry: I mixed up the mirrors list with the heroes one - that's why I just pointed to the scanner machine without explanation... Let me add some explanation below.

The link you gave (scanner.infra.opensuse.org) is not resolving. Any other clue?

Since some weeks, we have a dedicated private management network for most of the machines related to openSUSE. Members of the openSUSE heroes team (like Per our me) get access to that network via VPN. This network is using the subdomain infra.o.o (only resolvable via the also internal DNS in that network). So if you want to help with the mirror management (which is very, very welcome!), I see two options : 1) you are a (Ruby) programmer and can help with the "mirrorpinky" project: https://github.com/openSUSE/mirrorpinky - which should allow mirror admins to administrate their server entries on their own in the future 2) you join the openSUSE heroes (don't worry: they are normally friendly and don't bite) and ask to help with the administration of the mirrorbrain DB. If you have any questions, just ask ;-) With kind regards, Lars -- To unsubscribe, e-mail: mirror+unsubscribe@opensuse.org To contact the owner, email: mirror+owner@opensuse.org

Am 15. September 2017 11:27:12 MESZ schrieb Per Jessen <per@computer.org>:

Lars, I'm curious - mirrorbrain was clearly correctly probing on ipv4, but somehow not getting the right status. Then suddenly this morning at 10:14 CET, I see accesses from "ZYpp", so the status must have been updated then. That was before I fixed the firewall though.

Well, I'm unsure about 'ZYpp', too, but during that time I started a manual scan from the - to become - new scanner machine. JFYI: This machine is currently only doing DB backups and cleanup - but no constant scanning. At least I'm happy that your mirrors seems now to work as expected :-) With kind regards, Lars -- To unsubscribe, e-mail: mirror+unsubscribe@opensuse.org To contact the owner, email: mirror+owner@opensuse.org