|
Ticket ID: SIXXS #14866045 Ticket Status: Remote Problem PoP: chzrh02 - Init7 AG (Zurich)
Route to sbb.ch with tunnel chzrh02 not working proprly
![[ch]](/s/countries/ch.gif) Shadow Hawkins on Monday, 01 February 2016 20:01:34
Hi,
Through the IPv6 Tunnel sbb.ch isn't working for me. From another IPv6 host it is working. So it looks like being a problem between me and sbb.ch. IPv4 works flawless.
Not working route:
traceroute to sbb.ch (2a00:4bc0:ffff:ffff::c296:f58e), 30 hops max, 80 byte packets
1 home.geiger-online.ch (2001:1620:f64::1) 8.537 ms 21.653 ms 26.191 ms
2 gw-155.zrh-02.ch.sixxs.net (2001:1620:f00:9a::1) 38.752 ms 51.665 ms 55.766 ms
3 2001:1620:2005:4::2 (2001:1620:2005:4::2) 63.471 ms 67.853 ms 74.767 ms
4 2001:1620:2005:4::1 (2001:1620:2005:4::1) 142.019 ms 155.257 ms 161.195 ms
5 r1zrh1.core.init7.net (2001:1620:2::49) 89.608 ms 98.372 ms 107.566 ms
6 r1zrh2.core.init7.net (2001:1620:2::2) 83.169 ms 84.402 ms 88.216 ms
7 r1brn1.core.init7.net (2001:1620:2::9e) 103.180 ms 37.644 ms 40.000 ms
8 r1qls1.core.init7.net (2001:1620:2::3e) 48.530 ms * 55.144 ms
9 r1gva3.core.init7.net (2001:1620:2::11a) 76.368 ms 84.260 ms 91.148 ms
10 gw-sunrise.init7.net (2001:1620:1000::3a) 97.581 ms 106.740 ms 115.101 ms
11 ::ffff:212.161.249.16 (::ffff:212.161.249.16) 142.605 ms 149.317 ms 155.462 ms
12 2001:1700:0:1::10 (2001:1700:0:1::10) 125.955 ms 135.484 ms 160.832 ms
13 2a00:4bc0:ffff:ff00::1d (2a00:4bc0:ffff:ff00::1d) 126.419 ms 41.186 ms 49.836 ms
14 * * *
working route:
traceroute to sbb.ch (2a00:4bc0:ffff:ffff::c296:f58e), 30 hops max, 80 byte packets
1 ex3k13.rz13.hetzner.de (2a01:4f8::a:13:13) 1.395 ms 1.363 ms 1.345 ms
2 hos-tr2.juniper1.rz13.hetzner.de (2a01:4f8:0:13:2:0:13:1) 0.321 ms hos-tr1.juniper1.rz13.hetzner.de (2a01:4f8:0:13:1:0:13:1) 0.318 ms hos-tr3.juniper2.rz13.hetzner.de (2a01:4f8:0:13:3:0:13:2) 13.971 ms
3 core21.hetzner.de (2a01:4f8:0:3::4d) 0.276 ms 0.262 ms core22.hetzner.de (2a01:4f8:0:3::79) 3.379 ms
4 core4.hetzner.de (2a01:4f8:0:3::a) 5.092 ms core1.hetzner.de (2a01:4f8:0:3::da) 5.059 ms core1.hetzner.de (2a01:4f8:0:3::b1) 11.146 ms
5 Te0-0-0-0-pr1.FRA.router.colt.net (2001:7f8::201c:0:1) 5.347 ms Te0-0-0-0-pr2.FRA.router.colt.net (2001:7f8::201c:0:2) 8.731 ms 8.723 ms
6 fe80::2a0:a50f:fc68:e430%enp2s0 (fe80::2a0:a50f:fc68:e430%enp2s0) 29.967 ms 29.829 ms 29.811 ms
7 2001:920:0:1::141 (2001:920:0:1::141) 14.233 ms 17.124 ms 14.208 ms
8 2a00:4bc0:ffff:ff00::a (2a00:4bc0:ffff:ff00::a) 14.194 ms 14.366 ms 16.484 ms
9 2a00:4bc0:ffff:ff00::1d (2a00:4bc0:ffff:ff00::1d) 17.370 ms 17.345 ms 17.346 ms
10 * * *
Not working in that case means, that the page is timing out. So the connection gets established but the content can't be delivered (as for my understanding)
Here an example with wget:
wget www.sbb.ch
--2016-02-01 20:45:02-- http://www.sbb.ch/
Auflsen des Hostnamens www.sbb.ch 2a00:4bc0:ffff:ffff::c296:f58e, 194.150.245.142
Verbindungsaufbau zu www.sbb.ch|2a00:4bc0:ffff:ffff::c296:f58e|:80 verbunden.
HTTP-Anforderung gesendet, auf Antwort wird gewartet 302 Found
Platz: http://www.sbb.ch/home.html [folgend]
--2016-02-01 20:45:02-- http://www.sbb.ch/home.html
Wiederverwendung der bestehenden Verbindung zu [www.sbb.ch]:80.
HTTP-Anforderung gesendet, auf Antwort wird gewartet 200 OK
Lnge: nicht spezifiziert [text/html]
Wird in index.html.3 gespeichert.
index.html.3 [<=> ] 0 --.-KB/s
From the other host wget can collect the index.html flawless.
For me this looks like a problem with MTU/filtering ICMP packets but not sure about that.
Do you need anything else? tcpdump or the like?
Username is EGJ3-SIXXS
BTW: I did an aiccu test and it showed an error when trying to resolve noc.sixxs.net but I think it isn't resolve-able any more.... Everything else looks good.
I did not put my email address here as this is public I think. I hope you are able to get it from my account using the above mentioned username.
Kind Regards,
Erik Geiger
State change: remoteproblem
The state of this ticket has been changed to remoteproblem
Route to sbb.ch with tunnel chzrh02 not working proprly
11 ::ffff:212.161.249.16 (::ffff:212.161.249.16) 142.605 ms 149.317 ms 155.462 ms
That is an invalid IPv6 address that should never ever go into a packet.
Due to RPF, that packet likely gets dropped in various places.
14 * * *
No ICMPv6, thus likely causing PMTU issues. Nothing we can do. You could try contacting the remote site to resolve this though.
Not working in that case means, that the page is timing out. So the connection gets established but the content can't be delivered (as for my understanding)
Definitely sounds like a PMTU issue.
From the other host wget can collect the index.html flawless.
As that is likely a 1500 pure path.
This is a problem with sbb.ch, please contact them to resolve this. They need to understand that ICMPv6 is crucial to IPv6 operation.
Route to sbb.ch with tunnel chzrh02 not working proprly
Shadow Hawkins on Monday, 01 February 2016 20:24:21
Thanks for that incredible fast reply :)
Jeroen Massar wrote:
> 11 ::ffff:212.161.249.16 (::ffff:212.161.249.16) 142.605 ms 149.317 ms 155.462 ms
That is an invalid IPv6 address that should never ever go into a packet.
So I should also talk to sunrise as this is a sunrise IP...
> 14 * * *
No ICMPv6, thus likely causing PMTU issues. Nothing we can do. You could try contacting the remote site to resolve this though.
Yes, unfortunately sbb.ch does not answer ping request. Neither on IPv4 nor on IPv6, so at least echo requests are blocked.
This is a problem with sbb.ch, please contact them to resolve this. They need to understand that ICMPv6 is crucial to IPv6 operation.
I'll try my very best.
Thanks,
Erik
Route to sbb.ch with tunnel chzrh02 not working proprly
Shadow Hawkins on Tuesday, 02 February 2016 15:47:45
UPDATE: sbb.ch is already aware of the problem. They state that they literally do not block ICMP packages but do have some problems configuring the router.....They are also talking about MTU problems, so our guess was right.
I'll update if I get an update on my own...
Route to sbb.ch with tunnel chzrh02 not working proprly
Erik Geiger wrote:
UPDATE: sbb.ch is already aware of the problem. They state that they literally do not block ICMP packages but do have some problems configuring the router.....They are also talking about MTU problems, so our guess was right.
I'll update if I get an update on my own...
If they need help, don't hesitate to inform them that we can help out through info@sixxs.net.
|
on Monday, 01 February 2016 20:02:45
Posting is only allowed when you are