5.4.2014 16.30, Max Grobecker kirjoitti:
you can do traceroutes with Port 123/UDP, so you can determine where the
filtering begins:
traceroute6 -U -p 123 2001:4b98:dc0:41:216:3eff:fe69:46e3
Thanks, this was an excellent suggestion.
Here are two traceroute6 outputs from my Linode server to my Gandi
server. The second one uses UDP/123 for probes.
$ traceroute6 -q1 -A 2001:4b98:dc0:41:216:3eff:fe69:46e3
traceroute to 2001:4b98:dc0:41:216:3eff:fe69:46e3
(2001:4b98:dc0:41:216:3eff:fe69:46e3), 30 hops max, 80 byte packets
1 2600:3c01::8678:acff:fe0d:79c1 (2600:3c01::8678:acff:fe0d:79c1)
[AS8001] 1.165 ms
2 10gigabitethernet8-2.core3.fmt2.he.net (2001:470:1:3b8::1) [AS6939]
51.951 ms
3 10ge1-3.core1.fmt2.he.net (2001:470:0:23b::2) [AS6939] 5.976 ms
4 10ge1-1.core1.sjc2.he.net (2001:470:0:31::2) [AS6939] 1.027 ms
5 10ge3-3.core1.den1.he.net (2001:470:0:1b4::2) [AS6939] 27.890 ms
6 10ge4-3.core1.chi1.he.net (2001:470:0:1af::1) [AS6939] 55.099 ms
7 10ge15-7.core1.ash1.he.net (2001:470:0:286::2) [AS6939] 77.485 ms
8 vcore1-dc1.gandi.net (2001:504:0:2:0:2:9169:1) [*] 71.035 ms
9 2001:4b98:dc1::228:229 (2001:4b98:dc1::228:229) [AS29169] 159.668 ms
10 p250-dist1-d-ip6.paris.gandi.net (2001:4b98:1f::c1d1:238) [AS29169]
161.836 ms
11 villisika.miuku.net (2001:4b98:dc0:41:216:3eff:fe69:46e3) [AS29169]
160.665 ms
$ traceroute6 -q1 -A -U -p 123 2001:4b98:dc0:41:216:3eff:fe69:46e3
traceroute to 2001:4b98:dc0:41:216:3eff:fe69:46e3
(2001:4b98:dc0:41:216:3eff:fe69:46e3), 30 hops max, 80 byte packets
1 2600:3c01::8678:acff:fe0d:79c1 (2600:3c01::8678:acff:fe0d:79c1)
[AS8001] 1.476 ms
2 10gigabitethernet8-2.core3.fmt2.he.net (2001:470:1:3b8::1) [AS6939]
1.434 ms
3 10ge1-3.core1.fmt2.he.net (2001:470:0:23b::2) [AS6939] 21.139 ms
4 10ge1-1.core1.sjc2.he.net (2001:470:0:31::2) [AS6939] 4.817 ms
5 10ge3-3.core1.den1.he.net (2001:470:0:1b4::2) [AS6939] 28.471 ms
6 10ge4-3.core1.chi1.he.net (2001:470:0:1af::1) [AS6939] 54.602 ms
7 10ge15-7.core1.ash1.he.net (2001:470:0:286::2) [AS6939] 69.205 ms
8 *
9 *
10 *
Based on these results I figured that there's something that's filtering
traffic on the border between Hurricane Electric and Gandi.
I asked Gandi about this on 14th April. They responded on 23rd April
saying that it must be Hurricane Electric that's filtering the traffic.
I then contacted Linode and forwarded the information to them. They
contacted HE.net, and they responded that they might lift the
restrictions some time in May.
Some time ago I noticed that the filtering has been removed and I was
able to re-add my server back to the pool:
http://www.pool.ntp.org/scores/2001:4b98:dc0:41:216:3eff:fe69:46e3 (the
graph looks a bit odd at the moment, but I believe it will start looking
normal in a few days).
If you have been having trouble with IPv6 NTP servers, now might be a
good time to test if your servers are reachable again.
_______________________________________________
pool mailing list
[email protected]
http://lists.ntp.org/listinfo/pool
