platformio-core icon indicating copy to clipboard operation
platformio-core copied to clipboard

Bug: sin1.contabostorage.com blocked by QUAD9 (DoH) DNS-over-HTTPS leads to DNS flood

Open omani opened this issue 3 weeks ago • 1 comments

I said "Bug" in the title because, while a blocked DNS is not a bug per se, what platformio does try to do here is definitely a bug:

platformio does NOT look for another mirror like it says in the output, instead it floods the DNS with hundreds of requests per second (while loop as fast as the CPU can).

it continiously tries sin1.contabostorage.com repeatedly.

my primary issue filing here is the above mentioned "DNS flood"-type bug.

on a secondary note: you probably want to fix your DNS (you are definitely on the blocklist of QUAD 9).

omani avatar Dec 05 '25 19:12 omani

bug mentioned in:

  • #5034
  • #5062
  • https://github.com/platformio/platformio-vscode-ide/issues/4192

all of them closed without ever addressing the underlying issue.

omani avatar Dec 05 '25 19:12 omani

Could you provide a log or screenshot? If PlatformIO can’t connect to a mirror, it will keep trying other mirrors until they all fail.

ivankravets avatar Dec 11 '25 14:12 ivankravets

Windows 11, vscode, running into similar, but I do see it progress to another download most times. This appears multiple times per switching of platform version, and has been going on for at least a few weeks:

Tool Manager: Installing platformio/toolchain-xtensa-esp-elf @ 13.2.0+20240530
Tool Manager: Error: Please read https://bit.ly/package-manager-ioerror
Tool Manager: Warning! Package Mirror: HTTPSConnectionPool(host='usc1.contabostorage.com', port=443): Max retries exceeded with url: /250040e607e8431abaff8727621872f9:pioregmirrorus/tools/da/52/3d576994f08b583d81f461b6a3755e563a61f633f55b7a88d062903d9098/toolchain-xtensa-esp-elf-windows_amd64-13.2.0+20240530.tar.gz (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1032)')))
Tool Manager: Looking for another mirror...
Downloading 0% 10% 20% 30% 40% 50% 60% 70% 80% 90% 100%

Running from the UK, and using cloudflare (1.1.1.1) and google (8.8.4.4) for DNS.

tyeth avatar Dec 15 '25 20:12 tyeth

Looks like #5062 documents the real issue and needs re-opening @ivankravets

I also saw situations where it never progressed past the failed mirror. Lately or at least most of the time I do get past that, but to be fair I blow away my ~/.platformio folder regularly when I see the first hint of issues.

Image

tyeth avatar Dec 15 '25 20:12 tyeth