icinga-packaging icon indicating copy to clipboard operation
icinga-packaging copied to clipboard

packages.icinga.com / ipv6

Open jklippel opened this issue 7 years ago • 16 comments

Any chance that packages.icinga.com will get a ipv6 address in the near future? Using packages on a ipv6 only hosts would be much easier.

jklippel avatar Feb 04 '18 17:02 jklippel

Actually, IPv6 is the new default. The IANA Unallocated IPv4 Address Pool has been exhausted since 03-Feb-2011, that's more than 7 years back.

So you should be moving. NOW.

motp avatar Jul 19 '18 16:07 motp

It depends on the entire infrastructure hosting the Icinga servers.

Then lets assume that the infrastructure is rather old and should be replaced anyway. The alternative would be people ignoring reality for quite some time.

BTW: May I quote you in my presentation at the next RIPE meeting in October? No worries you'll be in good company, including github. sourceforge, twitter.

jenslink avatar Jul 19 '18 20:07 jenslink

After almost 1.5 years: Any news on this topic? Why is it taking so long and do you need any help?

jenslink avatar Nov 13 '19 19:11 jenslink

https://packages6.icinga.com/

nbuchwitz avatar Nov 13 '19 20:11 nbuchwitz

packages.icinga.com:443 still refuses the connection

thtomate avatar Dec 28 '19 22:12 thtomate

https://packages6.icinga.com/

Why two different names? Why not just packages.icinga.com as a dualstack server?

motp avatar Dec 28 '19 22:12 motp

Status on https://packages6.icinga.com/?

Connecting to its IPv6 address 2a02:ed80:0:3::2f there is a TLS connection established, followed by a 504 Gateway Time-out.

andreaso avatar Oct 31 '20 15:10 andreaso

I get 100% packet loss on ping and timeouts on http(s).

ekohl avatar Nov 18 '20 22:11 ekohl

the domain packages6.icinga.com was our first approach to test IPv6 support for our repositories. Since our hoster officially does not provide IPv6 support we were happy to be allowed to test it with them.

Unfortunately, as you figured out already, this setup never left the testing environment for stability reasons.

Whenever we get fully working IPv6 we will provide it directly through packages.icinga.com. Right now it does not look promising however, since we’re the only ones requesting this at our hoster.

You may also follow this topic in the forum for a similar discussion: https://community.icinga.com/t/reachability-problems-for-packages6-icinga-com/5493/

bobapple avatar Nov 19 '20 09:11 bobapple

One possible solution is to use a CDN in front of packages.icinga.com. At the Foreman project we're very happy with the sponsoring Fastly provides for us as an open source project. It provides us dual stack access and caching. Take a look at https://www.fastly.com/open-source to see if it's anything that could work for you.

ekohl avatar Nov 19 '20 10:11 ekohl

the domain packages6.icinga.com was our first approach to test IPv6 support for our repositories. Since our hoster officially does not provide IPv6 support we were happy to be allowed to test it with them.

Looking at my calendar: It's almost 2021.

jenslink avatar Nov 19 '20 13:11 jenslink

Since our hoster officially does not provide IPv6 support we were happy to be allowed to test it with them.

Ehm?

  • packages.icinga.com has address 185.11.254.87
  • 185.11.252.0/22 is announced by AS61303 (= NETWAYS GmbH)
  • AS61303 uses transits AS12337 (= noris network AG) and AS33891 (= Core-Backbone GmbH)
  • Both transit providers do support IPv6 very well
  • Thus it's the Netways infrastructure which doesn't support IPv6, yet?

Or what is meant by "hoster" exactly?

robert-scheck avatar Nov 19 '20 14:11 robert-scheck

Today the repo returns "504 Gateway Time-out"

image

mlutfy avatar Jan 06 '22 21:01 mlutfy

Is there any progress or ETA on this issue? Even github and AWS has partial working IPv6 already.

And regarding hoster:

NETWAYS GmbH == Icinga GmbH Management, compare https://icinga.com/company/imprint and https://www.netways.de/en/legal/imprint/

crza avatar Jan 10 '22 21:01 crza

Totally forgot: Happy 4th birthday.

jenslink avatar Feb 09 '22 08:02 jenslink

As my birthday present of this ticket I set up an unofficial reverse proxy available only over IPv6: http://icinga.partial.solutions/

I make no guarantees about its uptime and any future. Use it at your own risk. In case of abuse, I may just take it private.

Right now 1 nameserver is being slow in updating so the AAAA record may not be available yet. Once it is, I can look at a Let's Encrypt certificate for HTTPS.

ekohl avatar Feb 09 '22 10:02 ekohl