IPv6 issue between Charter and Digital Ocean

Hello, I'm having IPv6 issues between Charter 6rd and Digital Ocean IPv6 servers. HTTP/HTTPS requests do not finish; perhaps MTU issues? Requests to these destinations seem to work fine from some other places I have IPv6 access such as a Vultr VPS. I can access the rest of the IPv6 internet without issue. Source Subnet: 2602:100::/28 (Charter 6rd IPv6 service) Source IP: 2602:100:4475:7e4e::1 Destination IP example 1: 2a03:b0c0:2:d0::1af:a001 Destination IP example 2: 2a01:4f8:210:31fd:1::5 Destination Subnet: 2a00::/12 Both of those example destinations are hosted at Digital Ocean. It just hangs indefinitely for both of these: $ fetch -6 -v http://blog.higgsboson.tk looking up blog.higgsboson.tk connecting to blog.higgsboson.tk:80 requesting http://blog.higgsboson.tk/ (hangs) $ fetch -6 -v https://nzbs.org/ looking up nzbs.org connecting to nzbs.org:443 SSL options: 83004bff Peer verification enabled Using CA cert file: /usr/local/etc/ssl/cert.pem (hangs) The following popular destinations work just fine: Google: $ fetch -6 -v http://www.google.com looking up www.google.com connecting to www.google.com:80 requesting http://www.google.com/ fetch: http://www.google.com: size of remote file is not known www.google.com 150 kB 665 kBps 00m00s Yahoo: $ fetch -6 -v https://www.yahoo.com looking up www.yahoo.com connecting to www.yahoo.com:443 SSL options: 83004bff Peer verification enabled Using CA cert file: /usr/local/etc/ssl/cert.pem Verify hostname TLSv1.2 connection established using ECDHE-RSA-AES128-GCM-SHA256 Certificate subject: /C=US/ST=California/L=Sunnyvale/O=Yahoo Inc./OU=Information Technology/CN=www.yahoo.com Certificate issuer: /C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 Secure Server CA - G4 requesting https://www.yahoo.com/ fetch: https://www.yahoo.com: size of remote file is not known local size / mtime: 329777 / 1444321381 www.yahoo.com 321 kB 130 kBps 00m02s Facebook: $ fetch -6 -v http://www.facebook.com looking up www.facebook.com connecting to www.facebook.com:80 requesting http://www.facebook.com/ 302 redirect to https://www.facebook.com/ looking up www.facebook.com connecting to www.facebook.com:443 SSL options: 83004bff Peer verification enabled Using CA cert file: /usr/local/etc/ssl/cert.pem Verify hostname TLSv1.2 connection established using ECDHE-ECDSA-AES128-GCM-SHA256 Certificate subject: /C=US/ST=CA/L=Menlo Park/O=Facebook, Inc./CN=*.facebook.com Certificate issuer: /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert High Assurance CA-3 requesting https://www.facebook.com/ fetch: http://www.facebook.com: size of remote file is not known www.facebook.com 52 kB 358 kBps 00m00s Some traceroutes: $ mtr -c 2 -n --report nzbs.org Start: Thu Oct 8 11:35:31 2015 HOST: skeletor.feld.me Loss% Snt Last Avg Best Wrst StDev 1.|-- 2602:100:4475:7e4e::1 0.0% 2 0.4 0.4 0.4 0.4 0.0 2.|-- ??? 100.0 2 0.0 0.0 0.0 0.0 0.0 3.|-- 2001:506:100:6c::1 0.0% 2 39.6 37.1 34.7 39.6 3.3 4.|-- 2001:506:100:23::1 0.0% 2 37.0 40.9 37.0 44.7 5.4 5.|-- 2001:506:100:7::1 0.0% 2 47.4 47.4 47.3 47.4 0.0 6.|-- 2001:506:100:305::2 0.0% 2 40.1 40.1 40.1 40.1 0.0 7.|-- 2001:470:0:1b3::1 0.0% 2 36.4 41.1 36.4 45.8 6.6 8.|-- 2001:470:0:346::2 0.0% 2 78.5 64.6 50.7 78.5 19.6 9.|-- 2001:470:0:298::2 0.0% 2 69.2 65.1 60.9 69.2 5.8 10.|-- 2001:470:0:2cf::1 0.0% 2 127.8 129.5 127.8 131.2 2.2 11.|-- 2001:470:0:2d0::2 0.0% 2 138.0 136.4 134.8 138.0 2.2 12.|-- 2001:7f8:1:0:a500:20:2018 0.0% 2 134.8 133.4 132.0 134.8 2.0 13.|-- 2a03:b0c0:2::702 0.0% 2 141.1 141.9 141.1 142.7 1.0 14.|-- 2a03:b0c0:2:d0::1af:a001 0.0% 2 133.0 133.9 133.0 134.7 1.0 $ mtr -c 2 -n --report blog.higgsboson.tk Start: Thu Oct 8 11:36:07 2015 HOST: skeletor.feld.me Loss% Snt Last Avg Best Wrst StDev 1.|-- 2602:100:4475:7e4e::1 0.0% 2 0.4 0.4 0.3 0.4 0.0 2.|-- ??? 100.0 2 0.0 0.0 0.0 0.0 0.0 3.|-- 2001:506:100:6c::1 0.0% 2 38.7 35.0 31.4 38.7 5.1 4.|-- 2001:506:100:23::1 0.0% 2 35.9 36.3 35.9 36.6 0.0 5.|-- 2001:506:100:7::1 0.0% 2 49.1 48.5 47.9 49.1 0.0 6.|-- 2001:506:100:305::2 0.0% 2 45.2 43.1 41.1 45.2 2.8 7.|-- 2001:470:0:1b3::1 0.0% 2 50.7 53.2 50.7 55.6 3.5 8.|-- 2001:470:0:346::2 0.0% 2 37.6 39.6 37.6 41.7 2.8 9.|-- 2001:470:0:298::2 0.0% 2 66.6 71.5 66.6 76.4 6.9 10.|-- 2001:470:0:2cf::1 0.0% 2 142.7 138.6 134.5 142.7 5.7 11.|-- 2001:470:0:2d0::2 0.0% 2 133.5 135.4 133.5 137.3 2.6 12.|-- 2001:7f8:1::a502:4940:1 0.0% 2 130.8 131.9 130.8 133.1 1.4 13.|-- 2a01:4f8:0:3::11d 0.0% 2 143.0 144.7 143.0 146.3 2.2 14.|-- 2a01:4f8:0:3::11a 0.0% 2 142.3 143.4 142.3 144.5 1.4 15.|-- 2a01:4f8:0:3::12e 0.0% 2 150.9 151.5 150.9 152.1 0.0 16.|-- 2a01:4f8:210:31fd::1 0.0% 2 146.3 146.8 146.3 147.3 0.0 17.|-- 2a01:4f8:210:31fd:1::5 0.0% 2 141.7 142.4 141.7 143.1 0.0 Thanks! -- Mark Felder feld@feld.me

Hey, Thanks for letting us know about this issue, we'll check everything out on our end. If you're a customer of ours it's best to log a ticket so this will get more priority. Thanks, Luca. Network Engineering Manager DigitalOcean On Thu, Oct 8, 2015 at 12:39 PM, Mark Felder via Outages < outages@outages.org> wrote:
Hello,
I'm having IPv6 issues between Charter 6rd and Digital Ocean IPv6 servers. HTTP/HTTPS requests do not finish; perhaps MTU issues? Requests to these destinations seem to work fine from some other places I have IPv6 access such as a Vultr VPS. I can access the rest of the IPv6 internet without issue.
Source Subnet: 2602:100::/28 (Charter 6rd IPv6 service) Source IP: 2602:100:4475:7e4e::1
Destination IP example 1: 2a03:b0c0:2:d0::1af:a001 Destination IP example 2: 2a01:4f8:210:31fd:1::5 Destination Subnet: 2a00::/12
Both of those example destinations are hosted at Digital Ocean.
It just hangs indefinitely for both of these:
$ fetch -6 -v http://blog.higgsboson.tk looking up blog.higgsboson.tk connecting to blog.higgsboson.tk:80 requesting http://blog.higgsboson.tk/ (hangs)
$ fetch -6 -v https://nzbs.org/ looking up nzbs.org connecting to nzbs.org:443 SSL options: 83004bff Peer verification enabled Using CA cert file: /usr/local/etc/ssl/cert.pem (hangs)
The following popular destinations work just fine:
Google:
$ fetch -6 -v http://www.google.com looking up www.google.com connecting to www.google.com:80 requesting http://www.google.com/ fetch: http://www.google.com: size of remote file is not known www.google.com 150 kB 665 kBps 00m00s
Yahoo:
$ fetch -6 -v https://www.yahoo.com looking up www.yahoo.com connecting to www.yahoo.com:443 SSL options: 83004bff Peer verification enabled Using CA cert file: /usr/local/etc/ssl/cert.pem Verify hostname TLSv1.2 connection established using ECDHE-RSA-AES128-GCM-SHA256 Certificate subject: /C=US/ST=California/L=Sunnyvale/O=Yahoo Inc./OU=Information Technology/CN=www.yahoo.com Certificate issuer: /C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 Secure Server CA - G4 requesting https://www.yahoo.com/ fetch: https://www.yahoo.com: size of remote file is not known local size / mtime: 329777 / 1444321381 www.yahoo.com 321 kB 130 kBps 00m02s
Facebook:
$ fetch -6 -v http://www.facebook.com looking up www.facebook.com connecting to www.facebook.com:80 requesting http://www.facebook.com/ 302 redirect to https://www.facebook.com/ looking up www.facebook.com connecting to www.facebook.com:443 SSL options: 83004bff Peer verification enabled Using CA cert file: /usr/local/etc/ssl/cert.pem Verify hostname TLSv1.2 connection established using ECDHE-ECDSA-AES128-GCM-SHA256 Certificate subject: /C=US/ST=CA/L=Menlo Park/O=Facebook, Inc./CN=*.facebook.com Certificate issuer: /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert High Assurance CA-3 requesting https://www.facebook.com/ fetch: http://www.facebook.com: size of remote file is not known www.facebook.com 52 kB 358 kBps 00m00s
Some traceroutes:
$ mtr -c 2 -n --report nzbs.org Start: Thu Oct 8 11:35:31 2015 HOST: skeletor.feld.me Loss% Snt Last Avg Best Wrst StDev 1.|-- 2602:100:4475:7e4e::1 0.0% 2 0.4 0.4 0.4 0.4 0.0 2.|-- ??? 100.0 2 0.0 0.0 0.0 0.0 0.0 3.|-- 2001:506:100:6c::1 0.0% 2 39.6 37.1 34.7 39.6 3.3 4.|-- 2001:506:100:23::1 0.0% 2 37.0 40.9 37.0 44.7 5.4 5.|-- 2001:506:100:7::1 0.0% 2 47.4 47.4 47.3 47.4 0.0 6.|-- 2001:506:100:305::2 0.0% 2 40.1 40.1 40.1 40.1 0.0 7.|-- 2001:470:0:1b3::1 0.0% 2 36.4 41.1 36.4 45.8 6.6 8.|-- 2001:470:0:346::2 0.0% 2 78.5 64.6 50.7 78.5 19.6 9.|-- 2001:470:0:298::2 0.0% 2 69.2 65.1 60.9 69.2 5.8 10.|-- 2001:470:0:2cf::1 0.0% 2 127.8 129.5 127.8 131.2 2.2 11.|-- 2001:470:0:2d0::2 0.0% 2 138.0 136.4 134.8 138.0 2.2 12.|-- 2001:7f8:1:0:a500:20:2018 0.0% 2 134.8 133.4 132.0 134.8 2.0 13.|-- 2a03:b0c0:2::702 0.0% 2 141.1 141.9 141.1 142.7 1.0 14.|-- 2a03:b0c0:2:d0::1af:a001 0.0% 2 133.0 133.9 133.0 134.7 1.0
$ mtr -c 2 -n --report blog.higgsboson.tk Start: Thu Oct 8 11:36:07 2015 HOST: skeletor.feld.me Loss% Snt Last Avg Best Wrst StDev 1.|-- 2602:100:4475:7e4e::1 0.0% 2 0.4 0.4 0.3 0.4 0.0 2.|-- ??? 100.0 2 0.0 0.0 0.0 0.0 0.0 3.|-- 2001:506:100:6c::1 0.0% 2 38.7 35.0 31.4 38.7 5.1 4.|-- 2001:506:100:23::1 0.0% 2 35.9 36.3 35.9 36.6 0.0 5.|-- 2001:506:100:7::1 0.0% 2 49.1 48.5 47.9 49.1 0.0 6.|-- 2001:506:100:305::2 0.0% 2 45.2 43.1 41.1 45.2 2.8 7.|-- 2001:470:0:1b3::1 0.0% 2 50.7 53.2 50.7 55.6 3.5 8.|-- 2001:470:0:346::2 0.0% 2 37.6 39.6 37.6 41.7 2.8 9.|-- 2001:470:0:298::2 0.0% 2 66.6 71.5 66.6 76.4 6.9 10.|-- 2001:470:0:2cf::1 0.0% 2 142.7 138.6 134.5 142.7 5.7 11.|-- 2001:470:0:2d0::2 0.0% 2 133.5 135.4 133.5 137.3 2.6 12.|-- 2001:7f8:1::a502:4940:1 0.0% 2 130.8 131.9 130.8 133.1 1.4 13.|-- 2a01:4f8:0:3::11d 0.0% 2 143.0 144.7 143.0 146.3 2.2 14.|-- 2a01:4f8:0:3::11a 0.0% 2 142.3 143.4 142.3 144.5 1.4 15.|-- 2a01:4f8:0:3::12e 0.0% 2 150.9 151.5 150.9 152.1 0.0 16.|-- 2a01:4f8:210:31fd::1 0.0% 2 146.3 146.8 146.3 147.3 0.0 17.|-- 2a01:4f8:210:31fd:1::5 0.0% 2 141.7 142.4 141.7 143.1 0.0
Thanks!
-- Mark Felder feld@feld.me _______________________________________________ Outages mailing list Outages@outages.org https://puck.nether.net/mailman/listinfo/outages
-- Luca Salvatore Network Engineering Manager | DigitalOcean Phone: +1 (929) 214-7242
participants (2)
-
Luca Salvatore
-
Mark Felder