On 2020-12-15, Ottavio Caruso <ottavio2006-usenet2...@yahoo.com> wrote: > Hi, > > I asked on Freenode#OpenBSD and apparently it's only me, but I haven't > been able to access www.openbsd.org for a few days.
Has been a problem on *some* connections since about 16:00UTC on the 9th. I believe it is on the return path, because it works from some IP addresses but not others on the same ISP, so there's little we're going to be able to tell from a traceroute from the client side. I've sent private mail to the www server admin to ask if he can check from his side. > $ traceroute 129.128.5.194 > traceroute to 129.128.5.194 (129.128.5.194), 30 hops max, 60 byte packets > 1 gateway (192.168.2.1) 0.879 ms 1.433 ms 2.591 ms > 2 192.168.1.254 (192.168.1.254) 3.400 ms 6.013 ms 11.119 ms > 3 host81-139-176-1.in-addr.btopenworld.com (81.139.176.1) 23.841 ms > 24.279 ms 24.892 ms > 4 217.32.25.94 (217.32.25.94) 26.975 ms 32.948 ms 33.224 ms > 5 217.32.25.120 (217.32.25.120) 34.331 ms 34.815 ms 35.379 ms > 6 31.55.185.228 (31.55.185.228) 36.239 ms 31.55.185.192 > (31.55.185.192) 18.589 ms 31.55.185.208 (31.55.185.208) 23.081 ms > 7 core1-hu0-16-0-6.colindale.ukcore.bt.net (213.121.192.16) 24.023 > ms core2-hu0-12-0-5.colindale.ukcore.bt.net (195.99.127.122) 24.013 > ms core1-hu0-16-0-7.colindale.ukcore.bt.net (213.121.192.18) 24.400 > ms > 8 109.159.252.138 (109.159.252.138) 25.195 ms > core2-hu0-1-0-1-1.colindale.ukcore.bt.net (195.99.127.9) 26.188 ms > core3-hu0-8-0-0.faraday.ukcore.bt.net (195.99.127.36) 27.082 ms > 9 62.6.201.145 (62.6.201.145) 27.534 ms 166-49-209-194.gia.bt.net > (166.49.209.194) 28.250 ms 62.6.201.145 (62.6.201.145) 33.835 ms > 10 166-49-209-194.gia.bt.net (166.49.209.194) 34.201 ms 34.174 ms 34.132 > ms > 11 40ge1-3.core1.lon2.he.net (195.66.224.21) 35.068 ms > 100ge4-1.core1.nyc4.he.net (72.52.92.166) 101.075 ms 86.105 ms > 12 100ge4-1.core1.nyc4.he.net (72.52.92.166) 85.940 ms 87.165 ms > 100ge14-1.core1.tor1.he.net (184.105.80.10) 97.811 ms > 13 100ge6-1.core1.ywg1.he.net (184.105.64.102) 122.819 ms > 100ge14-1.core1.tor1.he.net (184.105.80.10) 98.632 ms 99.697 ms > 14 100ge6-1.core1.ywg1.he.net (184.105.64.102) 124.813 ms > 100ge5-2.core1.yxe1.he.net (184.104.192.70) 138.323 ms > 100ge6-1.core1.ywg1.he.net (184.105.64.102) 134.804 ms > 15 100ge5-2.core1.yxe1.he.net (184.104.192.70) 137.811 ms > 100ge11-2.core1.yeg1.he.net (72.52.92.61) 164.945 ms 163.780 ms > 16 * 100ge11-2.core1.yeg1.he.net (72.52.92.61) 164.850 ms * > 17 * * * > 18 * * * > 19 * * * Yet from another BT connection it works: 1 62.6.243.145 (62.6.243.145) 1.089 ms 0.756 ms 0.595 ms 2 ch-de.eurocore.bt.net (194.72.24.204) 10.445 ms 10.646 ms 10.576 ms 3 core2-te0-11-0-14.colindale.ukcore.bt.net (109.159.254.14) 11.852 ms core2-te0-13-0-1.southbank.ukcore.bt.net (109.159.254.22) 11.479 ms core2-te0-11-0-12.colindale.ukcore.bt.net (109.159.254.6) 11.309 ms 4 109.159.252.138 (109.159.252.138) 11.876 ms core4-hu0-1-0-1.faraday.ukcore.bt.net (195.99.127.50) 11.644 ms core4-hu0-2-0-4.faraday.ukcore.bt.net (195.99.127.70) 10.946 ms 5 166-49-209-194.gia.bt.net (166.49.209.194) 11.333 ms 11.008 ms 11.701 ms 6 40ge1-3.core1.lon2.he.net (195.66.224.21) 12.404 ms 12.326 ms 13.749 ms 7 100ge4-1.core1.nyc4.he.net (72.52.92.166) 77.78 ms 77.304 ms 85.621 ms 8 100ge14-1.core1.tor1.he.net (184.105.80.10) 106.467 ms 89.209 ms 88.499 ms 9 100ge6-1.core1.ywg1.he.net (184.105.64.102) 124.079 ms 123.837 ms 124.221 ms 10 100ge5-2.core1.yxe1.he.net (184.104.192.70) 131.846 ms 132.143 ms 133.125 ms 11 100ge11-2.core1.yeg1.he.net (72.52.92.61) 128.302 ms 127.369 ms 128.946 ms 12 university-of-alberta-sms.10gigabitethernet2-2.core1.yeg1.he.net (184.105.18.50) 139.441 ms 140.486 ms 139.761 ms 13 katzcore-esqgw.corenet.ualberta.ca (129.128.255.41) 139.524 ms cabcore-esqgw.corenet.ualberta.ca (129.128.255.35) 129.582 ms 127.53 ms 14 * * * 15 gateway-5.ucs.ualberta.ca (129.128.5.1) 140.109 ms 141.08 ms 139.615 ms 16 obsd3.srv.ualberta.ca (129.128.5.194) 128.682 ms 128.259 ms 128.715 ms And I have both working and non-working examples on Zen. One thing that seems interesting to me is that the working ones have IP addresses which are covered by RPKI ROAs and the non working ones that I've seen don't, but the same ISP *does* publish ROAs for other addresses. Anyway I am prety sure we need traceroutes from UofA to find out more.
