<div dir="ltr">Hey,<div><br></div><div>Thanks for letting us know about this issue, we'll check everything out on our end. </div><div><br></div><div>If you're a customer of ours it's best to log a ticket so this will get more priority.</div><div><br></div><div>Thanks,</div><div><br></div><div>Luca.</div><div>Network Engineering Manager</div><div>DigitalOcean</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Oct 8, 2015 at 12:39 PM, Mark Felder via Outages <span dir="ltr"><<a href="mailto:outages@outages.org" target="_blank">outages@outages.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello,<br>
<br>
I'm having IPv6 issues between Charter 6rd and Digital Ocean IPv6<br>
servers. HTTP/HTTPS requests do not finish; perhaps MTU issues? Requests<br>
to these destinations seem to work fine from some other places I have<br>
IPv6 access such as a Vultr VPS. I can access the rest of the IPv6<br>
internet without issue.<br>
<br>
Source Subnet: 2602:100::/28 (Charter 6rd IPv6 service)<br>
Source IP: 2602:100:4475:7e4e::1<br>
<br>
Destination IP example 1: 2a03:b0c0:2:d0::1af:a001<br>
Destination IP example 2: 2a01:4f8:210:31fd:1::5<br>
Destination Subnet: 2a00::/12<br>
<br>
Both of those example destinations are hosted at Digital Ocean.<br>
<br>
<br>
It just hangs indefinitely for both of these:<br>
<br>
$ fetch -6 -v <a href="http://blog.higgsboson.tk" rel="noreferrer" target="_blank">http://blog.higgsboson.tk</a><br>
looking up <a href="http://blog.higgsboson.tk" rel="noreferrer" target="_blank">blog.higgsboson.tk</a><br>
connecting to <a href="http://blog.higgsboson.tk:80" rel="noreferrer" target="_blank">blog.higgsboson.tk:80</a><br>
requesting <a href="http://blog.higgsboson.tk/" rel="noreferrer" target="_blank">http://blog.higgsboson.tk/</a><br>
(hangs)<br>
<br>
$ fetch -6 -v <a href="https://nzbs.org/" rel="noreferrer" target="_blank">https://nzbs.org/</a><br>
looking up <a href="http://nzbs.org" rel="noreferrer" target="_blank">nzbs.org</a><br>
connecting to <a href="http://nzbs.org:443" rel="noreferrer" target="_blank">nzbs.org:443</a><br>
SSL options: 83004bff<br>
Peer verification enabled<br>
Using CA cert file: /usr/local/etc/ssl/cert.pem<br>
(hangs)<br>
<br>
The following popular destinations work just fine:<br>
<br>
Google:<br>
<br>
$ fetch -6 -v <a href="http://www.google.com" rel="noreferrer" target="_blank">http://www.google.com</a><br>
looking up <a href="http://www.google.com" rel="noreferrer" target="_blank">www.google.com</a><br>
connecting to <a href="http://www.google.com:80" rel="noreferrer" target="_blank">www.google.com:80</a><br>
requesting <a href="http://www.google.com/" rel="noreferrer" target="_blank">http://www.google.com/</a><br>
fetch: <a href="http://www.google.com" rel="noreferrer" target="_blank">http://www.google.com</a>: size of remote file is not known<br>
<a href="http://www.google.com" rel="noreferrer" target="_blank">www.google.com</a> 150 kB 665 kBps<br>
00m00s<br>
<br>
Yahoo:<br>
<br>
$ fetch -6 -v <a href="https://www.yahoo.com" rel="noreferrer" target="_blank">https://www.yahoo.com</a><br>
looking up <a href="http://www.yahoo.com" rel="noreferrer" target="_blank">www.yahoo.com</a><br>
connecting to <a href="http://www.yahoo.com:443" rel="noreferrer" target="_blank">www.yahoo.com:443</a><br>
SSL options: 83004bff<br>
Peer verification enabled<br>
Using CA cert file: /usr/local/etc/ssl/cert.pem<br>
Verify hostname<br>
TLSv1.2 connection established using ECDHE-RSA-AES128-GCM-SHA256<br>
Certificate subject: /C=US/ST=California/L=Sunnyvale/O=Yahoo<br>
Inc./OU=Information Technology/CN=<a href="http://www.yahoo.com" rel="noreferrer" target="_blank">www.yahoo.com</a><br>
Certificate issuer: /C=US/O=Symantec Corporation/OU=Symantec Trust<br>
Network/CN=Symantec Class 3 Secure Server CA - G4<br>
requesting <a href="https://www.yahoo.com/" rel="noreferrer" target="_blank">https://www.yahoo.com/</a><br>
fetch: <a href="https://www.yahoo.com" rel="noreferrer" target="_blank">https://www.yahoo.com</a>: size of remote file is not known<br>
local size / mtime: 329777 / 1444321381<br>
<a href="http://www.yahoo.com" rel="noreferrer" target="_blank">www.yahoo.com</a> 321 kB 130 kBps<br>
00m02s<br>
<br>
Facebook:<br>
<br>
$ fetch -6 -v <a href="http://www.facebook.com" rel="noreferrer" target="_blank">http://www.facebook.com</a><br>
looking up <a href="http://www.facebook.com" rel="noreferrer" target="_blank">www.facebook.com</a><br>
connecting to <a href="http://www.facebook.com:80" rel="noreferrer" target="_blank">www.facebook.com:80</a><br>
requesting <a href="http://www.facebook.com/" rel="noreferrer" target="_blank">http://www.facebook.com/</a><br>
302 redirect to <a href="https://www.facebook.com/" rel="noreferrer" target="_blank">https://www.facebook.com/</a><br>
looking up <a href="http://www.facebook.com" rel="noreferrer" target="_blank">www.facebook.com</a><br>
connecting to <a href="http://www.facebook.com:443" rel="noreferrer" target="_blank">www.facebook.com:443</a><br>
SSL options: 83004bff<br>
Peer verification enabled<br>
Using CA cert file: /usr/local/etc/ssl/cert.pem<br>
Verify hostname<br>
TLSv1.2 connection established using ECDHE-ECDSA-AES128-GCM-SHA256<br>
Certificate subject: /C=US/ST=CA/L=Menlo Park/O=Facebook,<br>
Inc./CN=*.<a href="http://facebook.com" rel="noreferrer" target="_blank">facebook.com</a><br>
Certificate issuer: /C=US/O=DigiCert Inc/OU=<a href="http://www.digicert.com/CN=DigiCert" rel="noreferrer" target="_blank">www.digicert.com/CN=DigiCert</a><br>
High Assurance CA-3<br>
requesting <a href="https://www.facebook.com/" rel="noreferrer" target="_blank">https://www.facebook.com/</a><br>
fetch: <a href="http://www.facebook.com" rel="noreferrer" target="_blank">http://www.facebook.com</a>: size of remote file is not known<br>
<a href="http://www.facebook.com" rel="noreferrer" target="_blank">www.facebook.com</a> 52 kB 358 kBps<br>
00m00s<br>
<br>
<br>
Some traceroutes:<br>
<br>
$ mtr -c 2 -n --report <a href="http://nzbs.org" rel="noreferrer" target="_blank">nzbs.org</a><br>
Start: Thu Oct 8 11:35:31 2015<br>
HOST: <a href="http://skeletor.feld.me" rel="noreferrer" target="_blank">skeletor.feld.me</a> Loss% Snt Last Avg Best Wrst<br>
StDev<br>
1.|-- 2602:100:4475:7e4e::1 0.0% 2 0.4 0.4 0.4 0.4<br>
0.0<br>
2.|-- ??? 100.0 2 0.0 0.0 0.0 0.0<br>
0.0<br>
3.|-- 2001:506:100:6c::1 0.0% 2 39.6 37.1 34.7 39.6<br>
3.3<br>
4.|-- 2001:506:100:23::1 0.0% 2 37.0 40.9 37.0 44.7<br>
5.4<br>
5.|-- 2001:506:100:7::1 0.0% 2 47.4 47.4 47.3 47.4<br>
0.0<br>
6.|-- 2001:506:100:305::2 0.0% 2 40.1 40.1 40.1 40.1<br>
0.0<br>
7.|-- 2001:470:0:1b3::1 0.0% 2 36.4 41.1 36.4 45.8<br>
6.6<br>
8.|-- 2001:470:0:346::2 0.0% 2 78.5 64.6 50.7 78.5<br>
19.6<br>
9.|-- 2001:470:0:298::2 0.0% 2 69.2 65.1 60.9 69.2<br>
5.8<br>
10.|-- 2001:470:0:2cf::1 0.0% 2 127.8 129.5 127.8 131.2<br>
2.2<br>
11.|-- 2001:470:0:2d0::2 0.0% 2 138.0 136.4 134.8 138.0<br>
2.2<br>
12.|-- 2001:7f8:1:0:a500:20:2018 0.0% 2 134.8 133.4 132.0 134.8<br>
2.0<br>
13.|-- 2a03:b0c0:2::702 0.0% 2 141.1 141.9 141.1 142.7<br>
1.0<br>
14.|-- 2a03:b0c0:2:d0::1af:a001 0.0% 2 133.0 133.9 133.0 134.7<br>
1.0<br>
<br>
$ mtr -c 2 -n --report <a href="http://blog.higgsboson.tk" rel="noreferrer" target="_blank">blog.higgsboson.tk</a><br>
Start: Thu Oct 8 11:36:07 2015<br>
HOST: <a href="http://skeletor.feld.me" rel="noreferrer" target="_blank">skeletor.feld.me</a> Loss% Snt Last Avg Best Wrst<br>
StDev<br>
1.|-- 2602:100:4475:7e4e::1 0.0% 2 0.4 0.4 0.3 0.4<br>
0.0<br>
2.|-- ??? 100.0 2 0.0 0.0 0.0 0.0<br>
0.0<br>
3.|-- 2001:506:100:6c::1 0.0% 2 38.7 35.0 31.4 38.7<br>
5.1<br>
4.|-- 2001:506:100:23::1 0.0% 2 35.9 36.3 35.9 36.6<br>
0.0<br>
5.|-- 2001:506:100:7::1 0.0% 2 49.1 48.5 47.9 49.1<br>
0.0<br>
6.|-- 2001:506:100:305::2 0.0% 2 45.2 43.1 41.1 45.2<br>
2.8<br>
7.|-- 2001:470:0:1b3::1 0.0% 2 50.7 53.2 50.7 55.6<br>
3.5<br>
8.|-- 2001:470:0:346::2 0.0% 2 37.6 39.6 37.6 41.7<br>
2.8<br>
9.|-- 2001:470:0:298::2 0.0% 2 66.6 71.5 66.6 76.4<br>
6.9<br>
10.|-- 2001:470:0:2cf::1 0.0% 2 142.7 138.6 134.5 142.7<br>
5.7<br>
11.|-- 2001:470:0:2d0::2 0.0% 2 133.5 135.4 133.5 137.3<br>
2.6<br>
12.|-- 2001:7f8:1::a502:4940:1 0.0% 2 130.8 131.9 130.8 133.1<br>
1.4<br>
13.|-- 2a01:4f8:0:3::11d 0.0% 2 143.0 144.7 143.0 146.3<br>
2.2<br>
14.|-- 2a01:4f8:0:3::11a 0.0% 2 142.3 143.4 142.3 144.5<br>
1.4<br>
15.|-- 2a01:4f8:0:3::12e 0.0% 2 150.9 151.5 150.9 152.1<br>
0.0<br>
16.|-- 2a01:4f8:210:31fd::1 0.0% 2 146.3 146.8 146.3 147.3<br>
0.0<br>
17.|-- 2a01:4f8:210:31fd:1::5 0.0% 2 141.7 142.4 141.7 143.1<br>
0.0<br>
<br>
<br>
Thanks!<br>
<span class="HOEnZb"><font color="#888888"><br>
<br>
<br>
--<br>
Mark Felder<br>
<a href="mailto:feld@feld.me">feld@feld.me</a><br>
_______________________________________________<br>
Outages mailing list<br>
<a href="mailto:Outages@outages.org">Outages@outages.org</a><br>
<a href="https://puck.nether.net/mailman/listinfo/outages" rel="noreferrer" target="_blank">https://puck.nether.net/mailman/listinfo/outages</a><br>
</font></span></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr">Luca Salvatore</div><div dir="ltr"><div>Network Engineering Manager | <span style="font-size:12.8000001907349px">DigitalOcean</span></div><div><span style="font-size:12.8000001907349px">Phone: +1 (929) 214-7242 </span><br></div></div></div></div></div></div></div></div></div></div>
</div>