Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #177841 > unrolled thread

IPv6 connection problem with https://www.flickr.com/

Back to article view | Back to linux.debian.user

Contents

  IPv6 connection problem with https://www.flickr.com/ Vincent Lefevre <vincent@vinc17.net> - 2017-02-16 03:10 +0100
    Re: IPv6 connection problem with https://www.flickr.com/ Jochen Spieker <ml@well-adjusted.de> - 2017-02-16 09:50 +0100
      Re: IPv6 connection problem with https://www.flickr.com/ Vincent Lefevre <vincent@vinc17.net> - 2017-02-16 10:00 +0100
      Re: IPv6 connection problem with https://www.flickr.com/ Vincent Lefevre <vincent@vinc17.net> - 2017-02-16 12:50 +0100
        Re: IPv6 connection problem with https://www.flickr.com/ Vincent Lefevre <vincent@vinc17.net> - 2017-02-16 13:40 +0100
    Re: IPv6 connection problem with https://www.flickr.com/ Brad Rogers <brad@fineby.me.uk> - 2017-02-16 10:10 +0100

#177841 — IPv6 connection problem with https://www.flickr.com/

On my Debian/unstable machine at home, IPv6 connection to
https://www.flickr.com/ freezes most of the time:

zira:~> wget -d https://www.flickr.com/
DEBUG output created by Wget 1.19.1 on linux-gnu.

Reading HSTS entries from /home/vinc17/.wget-hsts
URI encoding = ‘UTF-8’
Converted file name 'index.html' (UTF-8) -> 'index.html' (UTF-8)
--2017-02-16 02:46:17--  https://www.flickr.com/
Certificates loaded: 173
Resolving www.flickr.com (www.flickr.com)... 2a00:1288:7c:800::4001, 2a00:1288:7c:800::4000, 87.248.114.11, ...
Caching www.flickr.com => 2a00:1288:7c:800::4001 2a00:1288:7c:800::4000 87.248.114.11 87.248.114.12
Connecting to www.flickr.com (www.flickr.com)|2a00:1288:7c:800::4001|:443... connected.
Created socket 3.
Releasing 0x000055fbccaf8f70 (new refcount 1).

Then, I no longer get anything.

I don't have any problem with:
  * IPv4 to https://www.flickr.com/ from this machine
    (using wget -4 ...).
  * IPv6 to http://www.flickr.com/ from this machine (well, the
    redirection to https is done, then it blocks for https as above).
  * IPv6 to https://www.debian.org/ or https://www.google.com/ from
    this machine.
  * IPv6 to https://www.flickr.com/ from an Ubuntu machine on a
    different network (even when the used IP is the same, i.e.
    2a00:1288:7c:800::4001).

Note: I've used wget here for the information it gives, but from
this machine to https://www.flickr.com/ the connection also freezes
with Firefox and Lynx.

Any idea on where the problem could come from?

-- 
Vincent Lefèvre <vincent@vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

[toc] | [next] | [standalone]

#177848

[Multipart message — attachments visible in raw view] — view raw

Vincent Lefevre:
>
> On my Debian/unstable machine at home, IPv6 connection to
> https://www.flickr.com/ freezes most of the time:

I do not have this problem with native IPv6 at home (Debian sid ad
well).

Does OpenSSL have this problem as well? Does it maybe report something
with respect to a TLS problem?

openssl s_client -connect www.flickr.com:443

J.
-- 
My drug of choice is self-pity.
[Agree]   [Disagree]
                 <http://archive.slowlydownward.com/NODATA/data_enter2.html>

[toc] | [prev] | [next] | [standalone]

#177849

On 2017-02-16 09:40:27 +0100, Jochen Spieker wrote:
> Vincent Lefevre:
> > On my Debian/unstable machine at home, IPv6 connection to
> > https://www.flickr.com/ freezes most of the time:
> 
> Does OpenSSL have this problem as well? Does it maybe report something
> with respect to a TLS problem?
> 
> openssl s_client -connect www.flickr.com:443

Yes, same problem.

Note: it is the first recvfrom() (for wget / libgnutls) or read()
(for openssl) system call after the connect() which blocks.

-- 
Vincent Lefèvre <vincent@vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

[toc] | [prev] | [next] | [standalone]

#177863

On 2017-02-16 09:40:27 +0100, Jochen Spieker wrote:
> Vincent Lefevre:
> >
> > On my Debian/unstable machine at home, IPv6 connection to
> > https://www.flickr.com/ freezes most of the time:
> 
> I do not have this problem with native IPv6 at home (Debian sid ad
> well).

I've eventually found:

  https://www.flickr.com/help/forum/72157676769425294/
  "Flickr broken over ipv6 from some networks"

which was posted yesterday. So, this appears to be a problem
on the Flickr side.

I wonder whether there's a workaround for my machine, except by adding
one of the IPv4 addresses for www.flickr.com to the /etc/hosts file
(if the domain uses other hostnames for particular things, this won't
be sufficient).

-- 
Vincent Lefèvre <vincent@vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

[toc] | [prev] | [next] | [standalone]

#177866

On 2017-02-16 12:34:47 +0100, Vincent Lefevre wrote:
> I've eventually found:
> 
>   https://www.flickr.com/help/forum/72157676769425294/
>   "Flickr broken over ipv6 from some networks"
> 
> which was posted yesterday. So, this appears to be a problem
> on the Flickr side.

Actually it may be a problem on my side.

http://ipv6-test.com/pmtud/ gives:

  Testing packet size: 1500 
  Result: probable PMTUD problem detected beyond ~1500 bytes

-- 
Vincent Lefèvre <vincent@vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

[toc] | [prev] | [next] | [standalone]

#177850

[Multipart message — attachments visible in raw view] — view raw

On Thu, 16 Feb 2017 02:58:36 +0100
Vincent Lefevre <vincent@vinc17.net> wrote:

Hello Vincent,

>On my Debian/unstable machine at home, IPv6 connection to
>https://www.flickr.com/ freezes most of the time:

Debian testing, native IPv6 (i.e. no tunnelling over an IPv4 connection)
and flickr doesn't freeze here.  I don't spend lots of time on flickr, so
might not be a fair test.

-- 
 Regards  _
         / )           "The blindingly obvious is
        / _)rad        never immediately apparent"
Never much liked playing there anyway
Banned From The Roxy - Crass

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.user

csiph-web