[opensuse-project] download.opensuse.org IPV6 address breaks updates
I am seeing this with an openSUSE 12.1 system at home, and also a
Factory system at work:
% host download.opensuse.org
download.opensuse.org has address 195.135.221.134
download.opensuse.org has IPv6 address 2001:67c:2178:8::13
And then, when running zypper patch or zypper up, I see
Retrieving: repomd.xml [error]
Download (curl) error for
'http://download.opensuse.org/update/12.1/repodata/repomd.xml':
Error code: Connection failed
Error message: Failed to connect to 2001:67c:2178:8::13: Network is unreachable
Alas, my provider nor that network at work support IPv6. Still, my
system has IPv6 enabled since roaming around on different networks,
IPv6 may be present, or even necessary there.
(This does not happen all the time, sometimes if I retry a bit later
the system uses IPv4 and everything works.)
Now, is this just a setup problem and I should simply and
unconditionally disable IPv6?
Or are some parts of our update or network stack in need of
some adjustments?
For the time being, unless this is just me running into this,
should we disable IPv6 on download.opensuse.org?
Gerald
--
Dr. Gerald Pfeifer
On 05/07/2012 10:30 AM, Gerald Pfeifer wrote:
I am seeing this with an openSUSE 12.1 system at home, and also a Factory system at work:
% host download.opensuse.org download.opensuse.org has address 195.135.221.134 download.opensuse.org has IPv6 address 2001:67c:2178:8::13
And then, when running zypper patch or zypper up, I see
Retrieving: repomd.xml [error] Download (curl) error for 'http://download.opensuse.org/update/12.1/repodata/repomd.xml': Error code: Connection failed Error message: Failed to connect to 2001:67c:2178:8::13: Network is unreachable
Alas, my provider nor that network at work support IPv6. Still, my system has IPv6 enabled since roaming around on different networks, IPv6 may be present, or even necessary there.
(This does not happen all the time, sometimes if I retry a bit later the system uses IPv4 and everything works.)
Now, is this just a setup problem and I should simply and unconditionally disable IPv6?
Or are some parts of our update or network stack in need of some adjustments?
For the time being, unless this is just me running into this, should we disable IPv6 on download.opensuse.org?
If you modify /etc/resolv.conf and add public name servers that support IPv6, you will bypass any problems such as you describe. I use Google's name servers at 8.8.8.8 and 8.8.4.4. Larry -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2012-05-07 17:48, Larry Finger wrote:
If you modify /etc/resolv.conf and add public name servers that support IPv6, you will bypass any problems such as you describe. I use Google's name servers at 8.8.8.8 and 8.8.4.4.
Why is that? If using IPv6 servers breaks my setup because I have no IPv6 internet, how setting a nameserver that gives me IPv6 addresses can help me? What I need is *no* IPv6 name resolving. - -- Cheers / Saludos, Carlos E. R. (from 11.4 x86_64 "Celadon" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+n/SAACgkQIvFNjefEBxp0jgCgkwjxdgLTFAb7HAoh10K8Lt63 ANkAoIb8/j+GkXhhJdxhDaJH9qeIFKiu =RH3k -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
On 2012/05/07 18:49 (GMT+0200) Carlos E. R. composed:
Larry Finger wrote:
If you modify /etc/resolv.conf and add public name servers that support IPv6, you will bypass any problems such as you describe. I use Google's name servers at 8.8.8.8 and 8.8.4.4.
Why is that?
If using IPv6 servers breaks my setup because I have no IPv6 internet, how setting a nameserver that gives me IPv6 addresses can help me?
What I need is *no* IPv6 name resolving.
Maybe doing what I do will satisfy you: #cat /proc/cmdline ... ipv4only=1 ... I have no idea whether that's a SUSE-only option. When I don't forget, I also strip all ipv6 lines from /etc/hosts. Other than seeing "...eth0: no IPv6 routers present" during boot and in the menu.lst entries, I rarely see evidence of existence of IPv6. Maybe setting network.dns.disableIPv6 = true in Firefox would be worth a try. Also check that network.http.fast-fallback-to-IPv4 isn't false. -- "The wise are known for their understanding, and pleasant words are persuasive." Proverbs 16:21 (New Living Translation) Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata *** http://fm.no-ip.com/ -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2012-05-07 19:38, Felix Miata wrote:
What I need is *no* IPv6 name resolving.
Maybe doing what I do will satisfy you:
Yes, but that disables IPv6 completely, and I don't want to disable it in my local network. I only want it do disable it to internet. Disabling DNS IPv6 name resolving would be perfect. - -- Cheers / Saludos, Carlos E. R. (from 11.4 x86_64 "Celadon" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEUEARECAAYFAk+oEFQACgkQIvFNjefEBxqXTgCfao2i+83/iVsaRkbpgFB5uS3c /2oAmLzbMEUQ+SVI1UFYYq6vyBXeXqo= =we5r -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
On 05/07/2012 11:49 AM, Carlos E. R. wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 2012-05-07 17:48, Larry Finger wrote:
If you modify /etc/resolv.conf and add public name servers that support IPv6, you will bypass any problems such as you describe. I use Google's name servers at 8.8.8.8 and 8.8.4.4.
Why is that?
If using IPv6 servers breaks my setup because I have no IPv6 internet, how setting a nameserver that gives me IPv6 addresses can help me?
What I need is *no* IPv6 name resolving.
The problem is that there is a brain-dead name server somewhere in your chain that returns a record saying the "I support IPv6", but then times out when a request is made. That is what happens, or at least used to happen with my ISP's DNS service. By using Google, I bypass them unless both of Google's servers are down. If IPv6 is enabled in your kernel, then it will work as long as the name servers cooperate. That has been true for quite a while. Larry -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2012-05-07 20:39, Larry Finger wrote:
On 05/07/2012 11:49 AM, Carlos E. R. wrote:
The problem is that there is a brain-dead name server somewhere in your chain that returns a record saying the "I support IPv6", but then times out when a request is made. That is what happens, or at least used to happen with my ISP's DNS service. By using Google, I bypass them unless both of Google's servers are down.
Sorry, I don't understand completely. Who has to support IPv6, the name resolver? My ISP? (it doesn't). Or do you mean: I ask for IP for suchname I get back IPv4-address, IPv6-address with the assumption that both those IPv4-address and IPv6-address work at "suchname" - but do not? That is, "suchname" doesn't really have Ipv6. :-?
If IPv6 is enabled in your kernel, then it will work as long as the name servers cooperate. That has been true for quite a while.
What I want, what we need, is that when I do: I ask for IP for suchname I get back IPv4-address because the IPv6 address is removed from the list if I get it, so that zypper can not try it, not knowing that it exists. Of course, if my ISP provided an IPv6 tunnel, would be better. No such thing, to my knowledge. - -- Cheers / Saludos, Carlos E. R. (from 11.4 x86_64 "Celadon" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+oKAgACgkQIvFNjefEBxpOTACdEpii0fzX+cYfpPJHNTYEo/E2 xIgAnRXn5YLhmlknDFovRCyLY0AmFc1Q =sCbh -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
Carlos E. R. wrote:
What I want, what we need, is that when I do:
I ask for IP for suchname I get back IPv4-address
because the IPv6 address is removed from the list if I get it, so that zypper can not try it, not knowing that it exists.
It doesn't matter - if an IPv4 address is returned by a DNS lookup, it will be tried first. Only if it fails, will zypper try an IPv6 address (if one was returned). You can work out the various combinations yourself, but the result is the same regardless of which one.
Of course, if my ISP provided an IPv6 tunnel, would be better. No such thing, to my knowledge.
You could just do it yourself. -- Per Jessen, Zürich (12.4°C) -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2012-05-07 22:01, Per Jessen wrote:
Of course, if my ISP provided an IPv6 tunnel, would be better. No such
thing, to my knowledge. You could just do it yourself.
What, create a huge bandwidth tunnel at home? No way. - -- Cheers / Saludos, Carlos E. R. (from 11.4 x86_64 "Celadon" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+oLW4ACgkQIvFNjefEBxrkegCgnXldpL4A3WwLq7kmizSmdDB+ dxQAoJpK1t3DZCSOXtYYKwJ4yirVPbS6 =HsLw -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
Carlos E. R. wrote:
On 2012-05-07 22:01, Per Jessen wrote:
Of course, if my ISP provided an IPv6 tunnel, would be better. No such
thing, to my knowledge. You could just do it yourself.
What, create a huge bandwidth tunnel at home? No way.
What "huge" bandwidth? It would only serve you, so limited to your existing bandwidth. -- Per Jessen, Zürich (10.0°C) -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2012-05-08 07:39, Per Jessen wrote:
Carlos E. R. wrote:
On 2012-05-07 22:01, Per Jessen wrote:
Of course, if my ISP provided an IPv6 tunnel, would be better. No such thing, to my knowledge. You could just do it yourself.
What, create a huge bandwidth tunnel at home? No way.
What "huge" bandwidth? It would only serve you, so limited to your existing bandwidth.
But how do I send out my IPv6 packets, if neither my router nor my ISP admits those packages? I need some one that has connection to both networks to receive IPv6 packets encapsulated in IPv4 packets sent by me, open the capsules, and send the IPv6 packets on their way. I do not have access to both networks, I can not do that encapsulating/decapsulating job. I can not be the tunneling server. I can be a client. I want my ISP to create the server so that I can send/receive gigabytes of rpms. And you say I can create that tunnel, at home? So that every client in Spain from Telefonica connect to me in order to go out on IPv6? Either we have a big language problem, or... - -- Cheers / Saludos, Carlos E. R. (from 11.4 x86_64 "Celadon" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+o8lgACgkQIvFNjefEBxoZ8wCgg0Sa7ZklBFJw2k6sdaaejmok 5icAn1swZSq54EW5J01YX26zd61b2R1/ =vRLv -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
Quoting "Carlos E. R."
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 2012-05-08 07:39, Per Jessen wrote:
Carlos E. R. wrote:
On 2012-05-07 22:01, Per Jessen wrote:
Of course, if my ISP provided an IPv6 tunnel, would be better. No such thing, to my knowledge. You could just do it yourself.
What, create a huge bandwidth tunnel at home? No way.
What "huge" bandwidth? It would only serve you, so limited to your existing bandwidth.
But how do I send out my IPv6 packets, if neither my router nor my ISP admits those packages? I need some one that has connection to both networks to receive IPv6 packets encapsulated in IPv4 packets sent by me, open the capsules, and send the IPv6 packets on their way.
That's the job of the tunnel broker. I myself use sixxs.net for this service, many more exist. Basically, the ipv6 packets are wrapped in a v4 packet, sent to the broker, being extracted, and forwarded to the real destination... Connection wise: your line will likely be the bottleneck... but forcing your provided to finally catch up with technology might be a good thing too.
And you say I can create that tunnel, at home? So that every client in Spain from Telefonica connect to me in order to go out on IPv6?
You can create the tunnel for the one machine, or for a subnet behind your machine.. surely you do not want to share it with 'all of spain' Hope that helps you a bit more. Dominique -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2012-05-08 12:46, Dominique Leuenberger a.k.a DimStar wrote:
You can create the tunnel for the one machine, or for a subnet behind your machine.. surely you do not want to share it with 'all of spain'
We are using confusing terminology. You say broker, I say tunnel or tunnel server. I can not be the broker, I need my ISP to be the broker. Do you understand now? - -- Cheers / Saludos, Carlos E. R. (from 11.4 x86_64 "Celadon" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+pAKMACgkQIvFNjefEBxrxKQCffWfk4H1v/AUQiu6KxWy4vzJ0 nXgAnjnNsT4AJWBfvdQ3eY4mSAAVVndU =fC5u -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
Carlos E. R. wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 2012-05-08 12:46, Dominique Leuenberger a.k.a DimStar wrote:
You can create the tunnel for the one machine, or for a subnet behind your machine.. surely you do not want to share it with 'all of spain'
We are using confusing terminology. You say broker, I say tunnel or tunnel server. I can not be the broker, I need my ISP to be the broker. Do you understand now?
No :-) Anyone can be your tunnel broker, what has your ISP got to do with it? -- Per Jessen, Zürich (20.0°C) -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2012-05-08 13:54, Per Jessen wrote:
Carlos E. R. wrote:
We are using confusing terminology. You say broker, I say tunnel or tunnel server. I can not be the broker, I need my ISP to be the broker. Do you understand now?
No :-)
Anyone can be your tunnel broker, what has your ISP got to do with it?
But I can not be one, which is what you told me. It has to be the ISP because otherwise, how am I going to be allowed to send/receive gigabytes of data for free? Who is going to provide all that bandwidth? - -- Cheers / Saludos, Carlos E. R. (from 11.4 x86_64 "Celadon" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+pC8gACgkQIvFNjefEBxrwLgCgg1X5hYvwGOr2j2RaFwkagw13 gQYAoLB5Ip5DJUA2uFi+xKUWBI1UzsSz =wHIT -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
On dinsdag 8 mei 2012 14:04:24 Carlos E. R. wrote:
It has to be the ISP because otherwise, how am I going to be allowed to send/receive gigabytes of data for free? Who is going to provide all that bandwidth?
There are free usable IPv6 tunnel brokers, see http://en.wikipedia.org/wiki/List_of_IPv6_tunnel_brokers -- fr.gr. Freek de Kruijf -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2012-05-08 15:07, Freek de Kruijf wrote:
On dinsdag 8 mei 2012 14:04:24 Carlos E. R. wrote:
It has to be the ISP because otherwise, how am I going to be allowed to send/receive gigabytes of data for free? Who is going to provide all that bandwidth?
There are free usable IPv6 tunnel brokers, see http://en.wikipedia.org/wiki/List_of_IPv6_tunnel_brokers
What download limit do they have? The tables do not say. There is only one on Europe, and does not allow dynamic IPs. I have looked at one at random, and they require you to explain why I want it. These things are designed for testing, not for usage. - -- Cheers / Saludos, Carlos E. R. (from 11.4 x86_64 "Celadon" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+pIdQACgkQIvFNjefEBxo0sgCgv0F01fOW8I6gjXbnDt3WSVB4 rXQAnRLuwjevRfWcbh08Tc1jgqHVOwi1 =k3aD -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
Quoting "Carlos E. R."
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 2012-05-08 15:07, Freek de Kruijf wrote:
On dinsdag 8 mei 2012 14:04:24 Carlos E. R. wrote:
It has to be the ISP because otherwise, how am I going to be allowed to send/receive gigabytes of data for free? Who is going to provide all that bandwidth?
There are free usable IPv6 tunnel brokers, see http://en.wikipedia.org/wiki/List_of_IPv6_tunnel_brokers
What download limit do they have? The tables do not say.
There is only one on Europe, and does not allow dynamic IPs. I have looked at one at random, and they require you to explain why I want it. These things are designed for testing, not for usage.
As said earlier: I use sixxs.net. They do support dynamic IPs using AYANA Reason? You're IT affiliate getting in touch with the next technology... that was enough for me to get this approved. It's not that they try to be exclusive or so... All my V6 traffic runs over this tunnel (provider also only offers V4). Current stats show that I do roughly 65% of traffic on V6 (not too bad I think...) Don't be scared by such questions... what's the worst they can say? "No".. what would you loose in this case? Nothing. Dominique -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
On dinsdag 8 mei 2012 15:38:28 Carlos E. R. wrote:
There is only one on Europe, and does not allow dynamic IPs. I have looked at one at random, and they require you to explain why I want it. These things are designed for testing, not for usage.
Apparently you missed the gogo6 one in Amsterdam under Global. You may find more information about ipv6 in Spain on http://gogonet.gogo6.com/group/v6inspain -- fr.gr. Freek de Kruijf -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
On 05/07/2012 02:52 PM, Carlos E. R. wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 2012-05-07 20:39, Larry Finger wrote:
On 05/07/2012 11:49 AM, Carlos E. R. wrote:
The problem is that there is a brain-dead name server somewhere in your chain that returns a record saying the "I support IPv6", but then times out when a request is made. That is what happens, or at least used to happen with my ISP's DNS service. By using Google, I bypass them unless both of Google's servers are down.
Sorry, I don't understand completely.
Who has to support IPv6, the name resolver? My ISP? (it doesn't).
Posted below is the tcpdump output for my active network interface while I was doing nslookup on a non-existent domain: IP 192.168.1.103.40594 > google-public-dns-a.google.com.domain: 1880+ PTR? 1.1.168.192.in-addr.arpa. (42) IP google-public-dns-a.google.com.domain > 192.168.1.103.40594: 1880 NXDomain 0/0/0 (42) IP 192.168.1.103.44573 > google-public-dns-a.google.com.domain: 63970+ A? pop.gmail.com. (31) IP 192.168.1.103.44573 > google-public-dns-a.google.com.domain: 40939+ AAAA? pop.gmail.com. (31) IP 192.168.1.103.33341 > google-public-dns-a.google.com.domain: 3312+ A? www.xyz.comz. (30) The above three lines are the critical ones. Since the name server returns that AAAA record, then my system is allowed to use IPv6 lookups. If no such record is returned, then only IPv4 is allowed. Problems arise if the name server (whomever supplies it) returns that AAAA record but cannot resolve the IPv6 entity. Then the request times out causing all the problems you see in the Forums, etc. Larry -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2012-05-07 22:39, Larry Finger wrote:
On 05/07/2012 02:52 PM, Carlos E. R. wrote:
Problems arise if the name server (whomever supplies it) returns that AAAA record but cannot resolve the IPv6 entity. Then the request times out causing all the problems you see in the Forums, etc.
Look, if I ask my default server I get: cer@Telcontar:~> host download.opensuse.org download.opensuse.org has address 195.135.221.134 download.opensuse.org has IPv6 address 2001:67c:2178:8::13 cer@Telcontar:~> If I ask google, I get: cer@Telcontar:~> host download.opensuse.org 8.8.8.8 Using domain server: Name: 8.8.8.8 Address: 8.8.8.8#53 Aliases: download.opensuse.org has address 195.135.221.134 download.opensuse.org has IPv6 address 2001:67c:2178:8::13 cer@Telcontar:~> The answer is the same, in both cases I get the IPv6 address - and my network is not IPv6 capable. I still do not see how using the google dns can help me. I want an answer that does not include that IPv6 address in the response, because if I get it, YaST tries it when IPv4 fails. I need yast to fail when the IPv4 address fails. - -- Cheers / Saludos, Carlos E. R. (from 11.4 x86_64 "Celadon" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+oOIIACgkQIvFNjefEBxrXMACfeX4ODABaDfr4SlQjTitTVYkV 9WYAoJFwZtl+zgb7X4628AHqvmtt2dYo =85nM -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
Carlos E. R. wrote:
The answer is the same, in both cases I get the IPv6 address - and my network is not IPv6 capable. I still do not see how using the google dns can help me. I want an answer that does not include that IPv6 address in the response, because if I get it, YaST tries it when IPv4 fails. I need yast to fail when the IPv4 address fails.
Why does it make a difference? The problem remains the same whether or not IPv6 is involved. -- Per Jessen, Zürich (10.1°C) -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tuesday, 2012-05-08 at 07:41 +0200, Per Jessen wrote:
Carlos E. R. wrote:
The answer is the same, in both cases I get the IPv6 address - and my network is not IPv6 capable. I still do not see how using the google dns can help me. I want an answer that does not include that IPv6 address in the response, because if I get it, YaST tries it when IPv4 fails. I need yast to fail when the IPv4 address fails.
Why does it make a difference? The problem remains the same whether or not IPv6 is involved.
It does, I can not download from IPv6 addresses. I do not want IPv6 answers from DNS. - -- Cheers, Carlos E. R. (from 11.4 x86_64 "Celadon" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) iEYEARECAAYFAk+pBHsACgkQtTMYHG2NR9XthgCfTSmKgDWsVRXPHxFQg9hWqd2C CF4AoIOFN4Vk8UGKHlN/sma8IfNoE+LD =fh+X -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
Carlos E. R. wrote:
On Tuesday, 2012-05-08 at 07:41 +0200, Per Jessen wrote:
Carlos E. R. wrote:
The answer is the same, in both cases I get the IPv6 address - and my network is not IPv6 capable. I still do not see how using the google dns can help me. I want an answer that does not include that IPv6 address in the response, because if I get it, YaST tries it when IPv4 fails. I need yast to fail when the IPv4 address fails.
Why does it make a difference? The problem remains the same whether or not IPv6 is involved.
It does, I can not download from IPv6 addresses. I do not want IPv6 answers from DNS.
Well, I still don't see that it makes a difference. Wrt zypper, IPv6 is tried when IPV4 isn't available. The end result is the same = no download. Anyway, it's not up to you to tell an application which addresses to look up and how. If you really want to reject all DNS replies for a AAAA query, maybe iptables can help. -- Per Jessen, Zürich (19.9°C) -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2012-05-08 13:56, Per Jessen wrote:
Carlos E. R. wrote:
Well, I still don't see that it makes a difference. Wrt zypper, IPv6 is tried when IPV4 isn't available. The end result is the same = no download.
Sometimes zypper tries an IPv6 address, when there is another server that has IPv4. This is wrong.
Anyway, it's not up to you to tell an application which addresses to look up and how. If you really want to reject all DNS replies for a AAAA query, maybe iptables can help.
Some applications have indeed a switch to tell them to use only IPv4. Zypper does not. As zypper does not, I search for ways to fool zypper into not using IPv6, like not getting IPv6 responses from the DNS system. - -- Cheers / Saludos, Carlos E. R. (from 11.4 x86_64 "Celadon" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+pDKAACgkQIvFNjefEBxp+gACgktw78puGBJ2BVS3+Z6ZR0aq4 B+8AnAjTMIqHt6ZUsAHhF7ZDRbiBh0Ls =k+HN -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
Carlos E. R. wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 2012-05-08 13:56, Per Jessen wrote:
Carlos E. R. wrote:
Well, I still don't see that it makes a difference. Wrt zypper, IPv6 is tried when IPV4 isn't available. The end result is the same = no download.
Sometimes zypper tries an IPv6 address, when there is another server that has IPv4. This is wrong.
Yes, that ought to be a bugreport.
Anyway, it's not up to you to tell an application which addresses to look up and how. If you really want to reject all DNS replies for a AAAA query, maybe iptables can help.
Some applications have indeed a switch to tell them to use only IPv4.
Yes, although mostly network oriented apps where it is more important.
Zypper does not. As zypper does not, I search for ways to fool zypper into not using IPv6, like not getting IPv6 responses from the DNS system.
Well, I can only say that I have never had any such IPv6 issues (and yes, everything here is enabled for IPv6). -- Per Jessen, Zürich (20.4°C) -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
On dinsdag 8 mei 2012 13:33:15 Carlos E. R. wrote:
On Tuesday, 2012-05-08 at 07:41 +0200, Per Jessen wrote:
Carlos E. R. wrote: Why does it make a difference? The problem remains the same whether or not IPv6 is involved.
It does, I can not download from IPv6 addresses. I do not want IPv6 answers from DNS.
If you want IPv6 in your local network and you don't have IPv6 in your external network, currently there is no parameter to set to disable IPv6 answers from your DNS. Is it really necessary to have IPv6 in your local network, as you told you have? -- fr.gr. Freek de Kruijf -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2012-05-08 14:38, Freek de Kruijf wrote:
On dinsdag 8 mei 2012 13:33:15 Carlos E. R. wrote:
If you want IPv6 in your local network and you don't have IPv6 in your external network, currently there is no parameter to set to disable IPv6 answers from your DNS.
Yes, that is what I thought.
Is it really necessary to have IPv6 in your local network, as you told you have?
Not absolutely, but I want to try and learn about it. I have some devices that support it and some that don't. What I have done is create a /root/.curlrc file with the "--ipv4" parameter. This might work. - -- Cheers / Saludos, Carlos E. R. (from 11.4 x86_64 "Celadon" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+pFp8ACgkQIvFNjefEBxpLOQCeLTEYaxcZuNAD8YYc+0Kz2EEe CjIAoIM+Tn2ezSZljjqtOH44jC2PFeT8 =emmw -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
On 05/07/2012 11:30 AM, Gerald Pfeifer wrote:
I am seeing this with an openSUSE 12.1 system at home, and also a Factory system at work:
% host download.opensuse.org download.opensuse.org has address 195.135.221.134 download.opensuse.org has IPv6 address 2001:67c:2178:8::13
And then, when running zypper patch or zypper up, I see
Retrieving: repomd.xml [error] Download (curl) error for 'http://download.opensuse.org/update/12.1/repodata/repomd.xml': Error code: Connection failed Error message: Failed to connect to 2001:67c:2178:8::13: Network is unreachable
Alas, my provider nor that network at work support IPv6. Still, my system has IPv6 enabled since roaming around on different networks, IPv6 may be present, or even necessary there.
(This does not happen all the time, sometimes if I retry a bit later the system uses IPv4 and everything works.)
The system will always try both IPv4 and IPv6 addresses. It just happens that only the last failed attempt is printed as the error by zypper. There's a bug for this. Other things that come into play are re-directs to mirrors. For some reason we appear to have an extraordinary issue with the networks after the disk issues last week. Robert -- Robert Schweikert MAY THE SOURCE BE WITH YOU SUSE-IBM Software Integration Center LINUX Tech Lead rjschwei@suse.com rschweik@ca.ibm.com 781-464-8147 -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
On 07.05.2012 17:53, Robert Schweikert wrote:
Other things that come into play are re-directs to mirrors. For some reason we appear to have an extraordinary issue with the networks after the disk issues last week.
The reboot left the firewall unconfigured and the connection table ran full. I would be interested if you still have this issue - we fixed it around 11am on 7th. So I'm confused about Gerald's mail several hours later. Is this posting late or is the issue still there? And no, I don't think we can disable ipv6 - it's about time we fix the issues around it. Greetings, Stephan -- You know how to win a victory, Hannibal, but not how to use it. -- Maharbal -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2012-05-08 16:56, Stephan Kulow wrote:
And no, I don't think we can disable ipv6 - it's about time we fix the issues around it.
Fix it in the server or in our machines? - -- Cheers / Saludos, Carlos E. R. (from 11.4 x86_64 "Celadon" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+pabUACgkQIvFNjefEBxogDwCg09pnfWswD9NGsH/tCPfow8Yk vmQAoKCmhio7ZAxF4khtwQVGBkN22kvH =sDQY -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
Am 08.05.2012 20:45, schrieb Carlos E. R.:
On 2012-05-08 16:56, Stephan Kulow wrote:
And no, I don't think we can disable ipv6 - it's about time we fix the issues around it.
Fix it in the server or in our machines?
Fix whatever is broken. Greetings, Stephan -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2012-05-09 07:10, Stephan Kulow wrote:
Am 08.05.2012 20:45, schrieb Carlos E. R.:
On 2012-05-08 16:56, Stephan Kulow wrote:
And no, I don't think we can disable ipv6 - it's about time we fix the issues around it.
Fix it in the server or in our machines?
Fix whatever is broken.
Then fix both, I understand you mean. Thanks. - -- Cheers / Saludos, Carlos E. R. (from 11.4 x86_64 "Celadon" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+qVikACgkQIvFNjefEBxrEUACgyNidtbI01TUMF6dcFC0VkzXX RAkAoKdYTGq772DcTDKgysrfGApmsXMK =dBBL -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
On Tue, 8 May 2012, Stephan Kulow wrote:
The reboot left the firewall unconfigured and the connection table ran full. I would be interested if you still have this issue - we fixed it around 11am on 7th. So I'm confused about Gerald's mail several hours later. Is this posting late or is the issue still there?
Stephan, you are right. Due to travel, my mail went out with delay and I have been trying to reproduce this issue for a week now and failed all the time, both on a Factory machine and a 12.1/11.4 one. Which I take as a good sign. :-) (Note that I also saw the same issue earlier, as in a week and more earlier on a Factory system, but also that is fine now.)
And no, I don't think we can disable ipv6 - it's about time we fix the issues around it.
Fair enough.
Gerald
--
Dr. Gerald Pfeifer
Gerald Pfeifer wrote:
I am seeing this with an openSUSE 12.1 system at home, and also a Factory system at work:
% host download.opensuse.org download.opensuse.org has address 195.135.221.134 download.opensuse.org has IPv6 address 2001:67c:2178:8::13
And then, when running zypper patch or zypper up, I see
Retrieving: repomd.xml [error] Download (curl) error for 'http://download.opensuse.org/update/12.1/repodata/repomd.xml': Error code: Connection failed Error message: Failed to connect to 2001:67c:2178:8::13: Network is unreachable
Alas, my provider nor that network at work support IPv6. Still, my system has IPv6 enabled since roaming around on different networks, IPv6 may be present, or even necessary there.
(This does not happen all the time, sometimes if I retry a bit later the system uses IPv4 and everything works.)
Now, is this just a setup problem and I should simply and unconditionally disable IPv6?
Or are some parts of our update or network stack in need of some adjustments?
For the time being, unless this is just me running into this, should we disable IPv6 on download.opensuse.org?
It's not really an IPv6 problem, it's due to unavailability of the IPv4 access. Explanation: IPv4 is tried first, when it fails IPv6 is tried, and when that fails, that is the error report you see. Also mentioned here: http://lists.opensuse.org/opensuse/2012-05/msg00136.html -- Per Jessen, Zürich (17.1°C) -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2012-05-07 18:48, Per Jessen wrote:
It's not really an IPv6 problem, it's due to unavailability of the IPv4 access. Explanation: IPv4 is tried first, when it fails IPv6 is tried, and when that fails, that is the error report you see.
How can we tell zypper and Yast NOT to use IPv6? Because this time it is a network problem with the main download server, but now and then people hit a mirror server which resolves as IPv6 and thus fails. We need something to tell the code that does the downloading in yast and zypper to not even try IPv6 addresses. It is becoming a problem. - -- Cheers / Saludos, Carlos E. R. (from 11.4 x86_64 "Celadon" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+n/ggACgkQIvFNjefEBxqW6gCgtqu6+pKqo9nH/Db7em5zx/PD 850An06UYh1pY5goPuMtZ4KYLs26NtLh =s1oq -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
Carlos E. R. wrote:
On 2012-05-07 18:48, Per Jessen wrote:
It's not really an IPv6 problem, it's due to unavailability of the IPv4 access. Explanation: IPv4 is tried first, when it fails IPv6 is tried, and when that fails, that is the error report you see.
How can we tell zypper and Yast NOT to use IPv6?
Because this time it is a network problem with the main download server, but now and then people hit a mirror server which resolves as IPv6 and thus fails.
We need something to tell the code that does the downloading in yast and zypper to not even try IPv6 addresses. It is becoming a problem.
I have not experienced that at all, I guess it depends on which mirrors you get redirected to. I'm surprised that we should have IPv6-only mirrors, but I guess it's not entirely unreasonable. -- Per Jessen, Zürich (16.8°C) -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
Per Jessen wrote:
Carlos E. R. wrote:
On 2012-05-07 18:48, Per Jessen wrote:
It's not really an IPv6 problem, it's due to unavailability of the IPv4 access. Explanation: IPv4 is tried first, when it fails IPv6 is tried, and when that fails, that is the error report you see.
How can we tell zypper and Yast NOT to use IPv6?
Because this time it is a network problem with the main download server, but now and then people hit a mirror server which resolves as IPv6 and thus fails.
We need something to tell the code that does the downloading in yast and zypper to not even try IPv6 addresses. It is becoming a problem.
I have not experienced that at all, I guess it depends on which mirrors you get redirected to. I'm surprised that we should have IPv6-only mirrors, but I guess it's not entirely unreasonable.
Carlos, I've checked all the openSUSE mirrors from http://mirrors.opensuse.org/list/all.html, and none of them are IPv6-only. -- Per Jessen, Zürich (16.1°C) -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2012-05-07 19:32, Per Jessen wrote:
Per Jessen wrote:
Carlos, I've checked all the openSUSE mirrors from http://mirrors.opensuse.org/list/all.html, and none of them are IPv6-only.
I assure you it happens. Very seldom, but it happens. To me it happened twice, I think. Some people get them all the time. I do not know if they are IPv6 only, or if they get that IP first, or the IPv4 address fails and then it switches to the IPv6 one. - -- Cheers / Saludos, Carlos E. R. (from 11.4 x86_64 "Celadon" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+oEnAACgkQIvFNjefEBxrjSgCgqHXm/hJRJSVNX7lyBxflQ4zw 1+wAoLjgsy0qYt6FlwQdOeLsSc6tSXps =qbIf -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
On Monday 07 May 2012 20.20:32 Carlos E. R. wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 2012-05-07 19:32, Per Jessen wrote:
Per Jessen wrote:
Carlos, I've checked all the openSUSE mirrors from http://mirrors.opensuse.org/list/all.html, and none of them are IPv6-only.
I assure you it happens. Very seldom, but it happens. To me it happened twice, I think. Some people get them all the time. I do not know if they are IPv6 only, or if they get that IP first, or the IPv4 address fails and then it switches to the IPv6 one.
Then zypper should be able to handle a -4 parameter, which then like in curl and wget and most program forbid the try to use ipv6 ... extract of man curl -4, --ipv4 If libcurl is capable of resolving an address to multiple IP versions (which it is if it is IPv6-capable), this option tells libcurl to resolve names to IPv4 addresses only. -6, --ipv6 If libcurl is capable of resolving an address to multiple IP versions (which it is if it is IPv6-capable), this option tells libcurl to resolve names to IPv6 addresses only. default statistics. A missing in development of zypper, bug, enhancement ? Just don't forget that some part of the world can't use ipv4, and one day or another ipv6 will be mandatory. -- Bruno Friedmann Ioda-Net Sàrl www.ioda-net.ch openSUSE Member & Ambassador GPG KEY : D5C9B751C4653227 irc: tigerfoot -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2012-05-07 20:30, Bruno Friedmann wrote:
On Monday 07 May 2012 20.20:32 Carlos E. R. wrote:
Then zypper should be able to handle a -4 parameter, which then like in curl and wget and most program forbid the try to use ipv6 ...
That is exactly what I mean. :-)
extract of man curl -4, --ipv4 If libcurl is capable of resolving an address to multiple IP versions (which it is if it is IPv6-capable), this option tells libcurl to resolve names to IPv4 addresses only.
-6, --ipv6 If libcurl is capable of resolving an address to multiple IP versions (which it is if it is IPv6-capable), this option tells libcurl to resolve names to IPv6 addresses only. default statistics.
Can we tell this to libcurl, via a configuration file somewhere? Or do we need a zypper/yast patch?
A missing in development of zypper, bug, enhancement ?
Dunno.
Just don't forget that some part of the world can't use ipv4, and one day or another ipv6 will be mandatory.
Absolutely, I know that IPv6 is comming to all the world sooner or later. But we need a method to force one or the other for those that do not have both. I'm looking at man curl, which I understand is what zypper/yast use. In the entry for "-K/--config <config file>", it says that it checks for a default config file: +++··············· When curl is invoked, it always (unless -q is used) checks for a default config file and uses it if found. The default config file is checked for in the following places in this order: 1) curl tries to find the "home dir": It first checks for the CURL_HOME and then the HOME environment variables. Failing that, it uses getpwuid() on UNIX-like systems (which returns the home dir given the current user in your system). On Windows, it then checks for the APPDATA variable, or as a last resort the '%USERPRO-FILE%\Application Data'. ···············++- So, would a /root/.curlrc work with zypper/yast? I have just created one, and I'll wait to see what happens. - -- Cheers / Saludos, Carlos E. R. (from 11.4 x86_64 "Celadon" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+oLBMACgkQIvFNjefEBxon6wCeO8cKI0lwe+nI6RbROOVHExtK OHsAnAvYUzDi0iGgjtD0h6yk00uNJQSd =0eok -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
This fixes the problem without disabling IPv6 Edit /etc/gai.conf # # For sites which prefer IPv4 connections change the last line to # precedence ::ffff:0:0/96 100 -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org To contact the owner, email: opensuse-project+owner@opensuse.org
participants (12)
-
Bruno Friedmann -
Carlos E. R. -
Carlos E. R. -
Dominique Leuenberger a.k.a DimStar -
Felix Miata -
Freek de Kruijf -
Gerald Pfeifer -
Larry Finger -
Per Jessen -
Robert Schweikert -
Stephan Kulow -
Sven-Thorsten Dietrich