--=-=-=
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
The host security-cdn.debian.org, used by some packages on security.debian.org¹, despite having an IPv6 address in the DNS, can not actually be reached from an IPv6-only host, due to issues with DNS
hosting by Fastly, the CDN provider. I raised this problem with Fastly,
first on IRC and then in their issue tracker, but their response is, as
you can see, "IPv4 is required and we have no plans to change this.".
Does Fastly claim IPv6-reachability to Debian in their CDN offering?
See attached correspondence.
/Teddy Hogeborn
1. For example, <
http://security.debian.org/pool/updates/main/l/linux/>
redirects to
<
http://security-cdn.debian.org/pool/updates/main/l/linux/>.
--=-=-Content-Type: multipart/digest; boundary="===-=-="
--===-=-Content-Type: message/rfc822
Date: Mon, 25 Sep 2017 12:57:21 +0200
From: Teddy Hogeborn <
teddy@recompile.se>
To:
support@fastly.com
Subject: IPv6
Message-ID: <
87lgl3avvy.fsf@recompile.se>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=====-=-="
--=====-=-Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
From #fastly:
09:29 < TeddyH> security-cdn.debian.org is hosted by fastly, but is not
reachable by IPv6-only hosts, since none of the
nameservers of
fastly.net has an IPv6 address.
09:59 < unfoo42> hey TeddyH, could you send us an email at support@fastly? 10:00 < unfoo42> along with any info if you have
10:00 < unfoo42> it*
10:04 < jcristau> aiui the info is just "ns[1234].fastly.net have no aaaa
records"
10:06 < unfoo42> jcristau: interesting, would you be able to send the resulting
text block that generates when accessing
https://www.fastly-debug.com/?
10:10 < unfoo42> Oh I think I misunderstood, you were specifically talking
about the ns records, not the resulting dns records. I'd need
to check on this with our team, so if you could send us a
ticket for tracking, that would us look into and follow up
The issue is indeed that none of the DNS nameservers for the fastly.net
domains have any AAAA records. This makes it impossible to reach, for instance, security-cdn.debian.org from an IPv6-only host.
/Teddy Hogeborn
--=====-=-Content-Type: application/pgp-signature; name=signature.asc Content-Transfer-Encoding: base64
LS0tLS1CRUdJTiBQR1AgU0lHTkFUVVJFLS0tLS0KCmlRSXpCQUVCQ0FBZEZpRUVZNzVia3MvZ1FZ VmhsWlJaNjVzYkFkNEZjdVFGQWxuSTRSRUFDZ2tRNjVzYkFkNEYKY3VTZ0N3Ly9aVFNoLzRYOU8r MFh2Wk9WbzJJSFZXVjBzeDhPakZRMlRZSUpqck5nVFNZQmpYY3lFQ1JSZU5sUwpCbkhHa1YzL1Bj QXM0TkJER3kzUkp3SXNQRStlL2xKTkdNT1M1dHJBMmxJZUJQbE9PcFlVYTk0UmhRSzFKelNlCmpI em94eXJkMHZRb3VmQkxMckJHb1A1Z0cyNFdKNXhMM1lWRjE1SVA2cCtnc3hjbVFUbG8va1R3Y0VK R0RSZ24KVU1ITG4rWWhSZ0VzejZzZmdibGNtMVh2eWJReDBrNDdQbGl4TFhMRkJEY0hGVWZoV1Bl T2E1R25lZE9WWURydgptUkZLa2piL2dkL2tZMHFpdHE0RHBmUWpvbzNMcWgrVlFyWHRBcmtHbWtK S3A1QVJlNGR1Z29yQ1dhaFBldHRXCjJubkVtNkhobEZsN3crd1R3UGFreUNOTGF3aDdUY2JRN045 eEE0OUo4S08waGUvc2FDZ21pMHZVcmpldm1jZlQKS254ZklRT2FVUFl5S3JXSGU3Skh5akZEWDVP V3NKR1ZzZTFiZkl1MzFaZ1FDbTF0c2JZWStLb3VjVDhGUjhLNApEQkRmNWkzVlc0eWlCbVMyYVVx V0J1VEV0RVBvUjBLSHg5RE5IZVpZYWI0RlJmVzVnZ21pMW85WEV1TDRuYTlBCndMWmp5L2hSVkRK WWpkOStFT1FRbE1aTVpLSFIwZ045SUhZQVdIbVY5Vm52ZU11SlNUQ05jUmVPbklid2hLaFQKZkcv cG1uOW9ON1VsQzNEVlBncjJBUFZiMlNYTmNOWDRCOXVQcndWYVlzaTBIM1JrYVFMTUZYYWlnRkdL WEtERAo3WjlkSkU2SXYrenJ2NzhwZnZiV0lNRVB0eU9nanhmTnpvY1diSzNDbnhLOGlnRVJuQzQ9 Cj0zYWl5Ci0tLS0tRU5EIFBHUCBTSUdOQVRVUkUtLS0tLQ==
--=====-=-=--
--===-=-=
Content-Type: message/rfc822
Date: Mon, 25 Sep 2017 10:57:50 +0000
From: Fastly <
support@fastly.zendesk.com>
To: Teddy Hogeborn <
teddy@recompile.se>
Subject: [Request received] IPv6
Message-ID: <
N4GP65X27M_59c8e12e3b76b_aeaf3fd5d8ccb9902156a1_sprut@zendesk.com> MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="======-=-="
--======-=-=
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
## Please do not write below this line ##
Your request (#59274) has been received, and is being reviewed by our support staff.
To review the status of the request and add additional comments, follow the link below:
http://fastly.zendesk.com/hc/requests/59274
Also, visit our forum at community.fastly.com. You may find your answer there.
----------------------------------------------
Teddy Hogeborn, Sep 25, 3:57 AM PDT
From #fastly:
09:29 < TeddyH> security-cdn.debian.org is hosted by fastly, but is not
reachable by IPv6-only hosts, since none of the
nameservers of
fastly.net has an IPv6 address.
09:59 < unfoo42> hey TeddyH, could you send us an email at support@fastly? 10:00 < unfoo42> along with any info if you have
10:00 < unfoo42> it*
10:04 < jcristau> aiui the info is just "ns[1234].fastly.net have no aaaa
records"
10:06 < unfoo42> jcristau: interesting, would you be able to send the resulting
text block that generates when accessing
https://www.fastly-debug.com/?
10:10 < unfoo42> Oh I think I misunderstood, you were specifically talking
about the ns records, not the resulting dns records. I'd need
to check on this with our team, so if you could send us a
ticket for tracking, that would us look into and follow up
The issue is indeed that none of the DNS nameservers for the fastly.net
domains have any AAAA records. This makes it impossible to reach, for instance, security-cdn.debian.org from an IPv6-only host.
/Teddy Hogeborn
Attachment(s):
signature.asc -
https://fastly.zendesk.com/attachments/token/PBoA6UmsY6dTOF8QAYogJb6BT/?name=signature.asc
--------------------------------
This email is a service from Fastly.
[N4GP65-X27M]
--======-=-Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "
http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<style type="text/css">
table td {
border-collapse: collapse;
}
</style>
</head>
<body style="width: 100%!important; margin: 0; padding: 0;">
<div style="padding: 10px ; line-height: 18px; font-family: 'Lucida Grande',Verdana,Arial,sans-serif; font-size: 12px; color:#444444;">
<div style="color: #b5b5b5;">## Please do not write below this line ##</div>
<p>Your request (<a target="_blank" href="
https://fastly.zendesk.com/hc/requests/59274">#59274</a>) has been received, and is being reviewed by our support staff. </p><p>To review the status of the request and add additional comments, follow the link
below:<br /><a href="
http://fastly.zendesk.com/hc/requests/59274" rel="noreferrer">
http://fastly.zendesk.com/hc/requests/59274</a></p><p>Also, visit our forum at community.fastly.com. You may find your answer there.</p><p></p><div style="margin-top: 25px"
data-version="2"><table width="100%" cellpadding="0" cellspacing="0" border="0"><tr><td width="100%" style="padding: 15px 0; border-top: 1px dotted #c5c5c5;"> <table width="100%" cellpadding="0" cellspacing="0" border="0" style=" table-layout:fixed;
"><tr><td valign="top" style="padding: 0 15px 0 15px;width: 40px;"> <img alt="Teddy Hoge" height="40" src="
https://secure.gravatar.com/avatar/989f6e31dc9c4027c83bfc89b4ac379b?size=40&default=https%3A%2F%2Fassets.zendesk.com%2Fimages%
2F2016%2Fdefault-avatar-80.png&r=g" style="height: auto; line-height: 100%; outline: none; text-decoration: none; -webkit-border-radius: 5px; -moz-border-radius: 5px; border-radius: 5px;" width="40" /></td> <td width="100%" style="
padding: 0; margin: 0;" valign="top"> <p style="font-family: 'Lucida Grande','Lucida Sans Unicode','Lucida Sans',Verdana,Tahoma,sans-serif; font-size: 15px; line-height: 18px; margin-bottom: 0; margin-top: 0; padding: 0; color:#1b1d1e;">
<strong>Teddy Hogeborn</strong> </p> <p style="font-family: 'Lucida Grande','Lucida Sans Unicode','Lucida Sans',Verdana,Tahoma,sans-serif; font-size: 13px; line-height: 25px; margin-bottom: 15px;
margin-top: 0; padding: 0; color:#bbbbbb;"> Sep 25, 3:57 AM PDT </p> <div class="zd-comment" style="color: #2b2e2f; font-family: 'Lucida Sans Unicode', 'Lucida Grande', 'Tahoma', Verdana, sans-
serif; font-size: 14px; line-height: 22px; margin: 15px 0"><p style="color: #2b2e2f; font-family: 'Lucida Sans Unicode', 'Lucida Grande', 'Tahoma', Verdana, sans-serif; font-size: 14px; line-height: 22px; margin: 15px 0" dir="auto">From #fastly:</p><p
style="color: #2b2e2f; font-family: 'Lucida Sans Unicode', 'Lucida Grande', 'Tahoma', Verdana, sans-serif; font-size: 14px; line-height: 22px; margin: 15px 0" dir="auto">09:29 < TeddyH> security-cdn.debian.org is hosted by fastly, but is not <br />
reachable by IPv6-only hosts, since none of the<br /> nameservers of <br /> fastly.net has an IPv6 address.<br />09:59 < unfoo42> hey TeddyH, could you send us an email at support@fastly?<br />10:00 <
unfoo42> along with any info if you have<br />10:00 < unfoo42> it*<br />10:04 < jcristau> aiui the info is just "ns[1234].fastly.net have no aaaa<br /> records"<br />10:06 < unfoo42> jcristau: interesting, would you
be able to send the resulting<br /> text block that generates when accessing<br /><a href="
https://www.fastly-debug.com/" rel="nofollow noreferrer" target="_blank">
https://www.fastly-debug.com/</a>?<br />10:10 < unfoo42> Oh I think
I misunderstood, you were specifically talking<br /> about the ns records, not the resulting dns records. I'd need <br /> to check on this with our team, so if you could send us a <br /> ticket for tracking,
that would us look into and follow up</p><p style="color: #2b2e2f; font-family: 'Lucida Sans Unicode', 'Lucida Grande', 'Tahoma', Verdana, sans-serif; font-size: 14px; line-height: 22px; margin: 15px 0" dir="auto">The issue is indeed that none of the
DNS nameservers for the fastly.net<br />domains have any AAAA records. This makes it impossible to reach, for<br />instance, security-cdn.debian.org from an IPv6-only host.</p><p style="color: #2b2e2f; font-family: 'Lucida Sans Unicode', 'Lucida Grande',
'Tahoma', Verdana, sans-serif; font-size: 14px; line-height: 22px; margin: 15px 0" dir="auto">/Teddy Hogeborn</p></div> <p style="line-height: 22px; font-family: 'Lucida Grande','Lucida Sans Unicode','Lucida Sans',Verdana,Tahoma,
sans-serif; margin-top: 15px; margin-bottom: 15px; font-size: 14px; color:#333333;"> Attachment(s)<br /><a href="
https://fastly.zendesk.com/attachments/token/PBoA6UmsY6dTOF8QAYogJb6BT/?name=signature.asc">signature.asc</a><br /></p>
</td> </tr></table></td> </tr></table></div>
<div style="color: #aaaaaa; margin: 10px 0 14px 0; padding-top: 10px; border-top: 1px solid #eeeeee;">
This email is a service from Fastly. Delivered by <a href="
http://www.zendesk.com" style="color:black" target="_new">Zendesk</a>.
</div>
</div>
<span style='color:#FFFFFF'>[N4GP65-X27M]</span></body>
</html><div itemscope itemtype="
http://schema.org/EmailMessage" style="display:none"> <div itemprop="action" itemscope itemtype="
http://schema.org/ViewAction"> <link itemprop="url" href="
https://fastly.zendesk.com/hc/requests/59274" /> <meta
itemprop="name" content="View ticket"/> </div></div>
--======-=-=--
--===-=-Content-Type: message/rfc822
Date: Mon, 25 Sep 2017 11:47:47 +0000
From: "Rex Osafo-Asare \(Fastly\)" <
support@fastly.zendesk.com>
To: Teddy Hogeborn <
teddy@recompile.se>
Subject: [Fastly] Re: IPv6
Message-ID: <
N4GP65X27M_59c8ece38cb63_ab1b3f86294cb988244290_sprut@zendesk.com> References: <
N4GP65X27M@zendesk.com>
<
87lgl3avvy.fsf@recompile.se>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="=======-=-="
--=======-=-Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
## Please do not write below this line ##
Your request (#59274) has been updated.
To review the status of the request and add additional comments, follow the link below:
http://fastly.zendesk.com/hc/requests/59274
You can also add a comment by replying to this email.
----------------------------------------------
Rex Osafo-Asare, Sep 25, 4:47 AM PDT
Hi Teddy,
Thanks for reaching out. We'll look into this for you.
Thanks,
Rex
----------------------------------------------
Teddy Hogeborn, Sep 25, 3:57 AM PDT
From #fastly:
09:29 < TeddyH> security-cdn.debian.org is hosted by fastly, but is not
reachable by IPv6-only hosts, since none of the
nameservers of
fastly.net has an IPv6 address.
09:59 < unfoo42> hey TeddyH, could you send us an email at support@fastly? 10:00 < unfoo42> along with any info if you have
10:00 < unfoo42> it*
10:04 < jcristau> aiui the info is just "ns[1234].fastly.net have no aaaa
records"
10:06 < unfoo42> jcristau: interesting, would you be able to send the resulting
text block that generates when accessing
https://www.fastly-debug.com/?
10:10 < unfoo42> Oh I think I misunderstood, you were specifically talking
about the ns records, not the resulting dns records. I'd need
to check on this with our team, so if you could send us a
ticket for tracking, that would us look into and follow up
The issue is indeed that none of the DNS nameservers for the fastly.net
domains have any AAAA records. This makes it impossible to reach, for instance, security-cdn.debian.org from an IPv6-only host.
/Teddy Hogeborn
Attachment(s):
signature.asc -
https://fastly.zendesk.com/attachments/token/PBoA6UmsY6dTOF8QAYogJb6BT/?name=signature.asc
--------------------------------
This email is a service from Fastly.
[N4GP65-X27M]
--=======-=-Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "
http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<style type="text/css">
table td {
border-collapse: collapse;
}
</style>
</head>
<body style="width: 100%!important; margin: 0; padding: 0;">
<div style="padding: 10px ; line-height: 18px; font-family: 'Lucida Grande',Verdana,Arial,sans-serif; font-size: 12px; color:#444444;">
<div style="color: #b5b5b5;">## Please do not write below this line ##</div>
<p>Your request (<a target="_blank" href="
https://fastly.zendesk.com/hc/requests/59274">#59274</a>) has been updated. </p><p>To review the status of the request and add additional comments, follow the link below:<br /><a href="
http://fastly.zendesk.
com/hc/requests/59274" rel="noreferrer">
http://fastly.zendesk.com/hc/requests/59274</a></p><p>You can also add a comment by replying to this email.</p><p></p><div style="margin-top: 25px" data-version="2"><table width="100%" cellpadding="0" cellspacing="
0" border="0"><tr><td width="100%" style="padding: 15px 0; border-top: 1px dotted #c5c5c5;"> <table width="100%" cellpadding="0" cellspacing="0" border="0" style=" table-layout:fixed;"><tr><td valign="top" style="padding: 0 15px 0 15px;width: 40px;">
<img alt="Rex Osafo-" height="40" src="
https://fastly.zendesk.com/system/photos/0001/7323/3373/rex_profile_edit.jpg" style="height: auto; line-height: 100%; outline: none; text-decoration: none; -webkit-border-radius: 5px; -moz-border-
radius: 5px; border-radius: 5px;" width="40" /></td> <td width="100%" style="padding: 0; margin: 0;" valign="top"> <p style="font-family: 'Lucida Grande','Lucida Sans Unicode','Lucida Sans',Verdana,Tahoma,sans-serif; font-
size: 15px; line-height: 18px; margin-bottom: 0; margin-top: 0; padding: 0; color:#1b1d1e;"> <strong>Rex Osafo-Asare</strong> <span class="directional_text_wrapper">(Fastly)</span>
</p> <p style="font-family: 'Lucida Grande','Lucida Sans Unicode','Lucida Sans',Verdana,Tahoma,sans-serif; font-size: 13px; line-height: 25px; margin-bottom: 15px; margin-top: 0; padding: 0; color:#bbbbbb;"> Sep 25,
4:47 AM PDT </p> <div class="zd-comment" style="color: #2b2e2f; font-family: 'Lucida Sans Unicode', 'Lucida Grande', 'Tahoma', Verdana, sans-serif; font-size: 14px; line-height: 22px; margin: 15px 0"><p style=
"color: #2b2e2f; font-family: 'Lucida Sans Unicode', 'Lucida Grande', 'Tahoma', Verdana, sans-serif; font-size: 14px; line-height: 22px; margin: 15px 0" dir="auto">Hi Teddy,</p><p style="color: #2b2e2f; font-family: 'Lucida Sans Unicode', 'Lucida Grande',
'Tahoma', Verdana, sans-serif; font-size: 14px; line-height: 22px; margin: 15px 0" dir="auto">Thanks for reaching out. We'll look into this for you.</p><p style="color: #2b2e2f; font-family: 'Lucida Sans Unicode', 'Lucida Grande', 'Tahoma', Verdana,
sans-serif; font-size: 14px; line-height: 22px; margin: 15px 0" dir="auto">Thanks,</p><p style="color: #2b2e2f; font-family: 'Lucida Sans Unicode', 'Lucida Grande', 'Tahoma', Verdana, sans-serif; font-size: 14px; line-height: 22px; margin: 15px 0" dir="
auto">Rex</p><p></p></div> </td> </tr></table></td> </tr></table><p></p><table width="100%" cellpadding="0" cellspacing="0" border="0"><tr><td width="100%" style="padding: 15px 0; border-top: 1px dotted #c5c5c5;">
<table width="100%" cellpadding="0" cellspacing="0" border="0" style=" table-layout:fixed;"><tr><td valign="top" style="padding: 0 15px 0 15px;width: 40px;"> <img alt="Teddy Hoge" height="40" src="
https://secure.gravatar.com/avatar/
989f6e31dc9c4027c83bfc89b4ac379b?size=40&default=https%3A%2F%2Fassets.zendesk.com%2Fimages%2F2016%2Fdefault-avatar-80.png&r=g" style="height: auto; line-height: 100%; outline: none; text-decoration: none; -webkit-border-radius: 5px; -moz-border-
radius: 5px; border-radius: 5px;" width="40" /></td> <td width="100%" style="padding: 0; margin: 0;" valign="top"> <p style="font-family: 'Lucida Grande','Lucida Sans Unicode','Lucida Sans',Verdana,Tahoma,sans-serif; font-
size: 15px; line-height: 18px; margin-bottom: 0; margin-top: 0; padding: 0; color:#1b1d1e;"> <strong>Teddy Hogeborn</strong> </p> <p style="font-family: 'Lucida Grande','Lucida Sans Unicode'
,'Lucida Sans',Verdana,Tahoma,sans-serif; font-size: 13px; line-height: 25px; margin-bottom: 15px; margin-top: 0; padding: 0; color:#bbbbbb;"> Sep 25, 3:57 AM PDT </p> <div class="zd-comment"
style="color: #2b2e2f; font-family: 'Lucida Sans Unicode', 'Lucida Grande', 'Tahoma', Verdana, sans-serif; font-size: 14px; line-height: 22px; margin: 15px 0"><p style="color: #2b2e2f; font-family: 'Lucida Sans Unicode', 'Lucida Grande', 'Tahoma',
Verdana, sans-serif; font-size: 14px; line-height: 22px; margin: 15px 0" dir="auto">From #fastly:</p><p style="color: #2b2e2f; font-family: 'Lucida Sans Unicode', 'Lucida Grande', 'Tahoma', Verdana, sans-serif; font-size: 14px; line-height: 22px; margin:
15px 0" dir="auto">09:29 < TeddyH> security-cdn.debian.org is hosted by fastly, but is not <br /> reachable by IPv6-only hosts, since none of the<br /> nameservers of <br /> fastly.net has an IPv6
address.<br />09:59 < unfoo42> hey TeddyH, could you send us an email at support@fastly?<br />10:00 < unfoo42> along with any info if you have<br />10:00 < unfoo42> it*<br />10:04 < jcristau> aiui the info is just "ns[1234].fastly.
net have no aaaa<br /> records"<br />10:06 < unfoo42> jcristau: interesting, would you be able to send the resulting<br /> text block that generates when accessing<br /><a href="
https://www.fastly-debug.com/" rel="
nofollow noreferrer" target="_blank">
https://www.fastly-debug.com/</a>?<br />10:10 < unfoo42> Oh I think I misunderstood, you were specifically talking<br /> about the ns records, not the resulting dns records. I'd need <br />
to check on this with our team, so if you could send us a <br /> ticket for tracking, that would us look into and follow up</p><p style="color: #2b2e2f; font-family: 'Lucida Sans Unicode', 'Lucida Grande', 'Tahoma', Verdana,
sans-serif; font-size: 14px; line-height: 22px; margin: 15px 0" dir="auto">The issue is indeed that none of the DNS nameservers for the fastly.net<br />domains have any AAAA records. This makes it impossible to reach, for<br />instance, security-cdn.
debian.org from an IPv6-only host.</p><p style="color: #2b2e2f; font-family: 'Lucida Sans Unicode', 'Lucida Grande', 'Tahoma', Verdana, sans-serif; font-size: 14px; line-height: 22px; margin: 15px 0" dir="auto">/Teddy Hogeborn</p></div>
<p style="line-height: 22px; font-family: 'Lucida Grande','Lucida Sans Unicode','Lucida Sans',Verdana,Tahoma,sans-serif; margin-top: 15px; margin-bottom: 15px; font-size: 14px; color:#333333;"> Attachment(s)<br /><a href="
https://fastly.
zendesk.com/attachments/token/PBoA6UmsY6dTOF8QAYogJb6BT/?name=signature.asc">signature.asc</a><br /></p> </td> </tr></table></td> </tr></table></div>
<div style="color: #aaaaaa; margin: 10px 0 14px 0; padding-top: 10px; border-top: 1px solid #eeeeee;">
This email is a service from Fastly. Delivered by <a href="
http://www.zendesk.com" style="color:black" target="_new">Zendesk</a>.
</div>
</div>
<span style='color:#FFFFFF'>[N4GP65-X27M]</span></body>
</html><div itemscope itemtype="
http://schema.org/EmailMessage" style="display:none"> <div itemprop="action" itemscope itemtype="
http://schema.org/ViewAction"> <link itemprop="url" href="
https://fastly.zendesk.com/hc/requests/59274" /> <meta
itemprop="name" content="View ticket"/> </div></div>
--=======-=-=--
--===-=-Content-Type: message/rfc822
Date: Tue, 26 Sep 2017 09:13:17 +0000
From: "Rex Osafo-Asare \(Fastly\)" <
support@fastly.zendesk.com>
To: Teddy Hogeborn <
teddy@recompile.se>
Subject: [Fastly] Re: IPv6
Message-ID: <
N4GP65X27M_59ca1a2cbeb26_312f3fd96a0cb99812746b_sprut@zendesk.com> References: <
N4GP65X27M@zendesk.com>
<
87lgl3avvy.fsf@recompile.se>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="========-=-="
--========-=-Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
## Please do not write below this line ##
Your request (#59274) has been updated.
To review the status of the request and add additional comments, follow the link below:
http://fastly.zendesk.com/hc/requests/59274
You can also add a comment by replying to this email.
----------------------------------------------
Rex Osafo-Asare, Sep 26, 2:13 AM PDT
Hi Teddy,
You are correct. We have not launched IPv6 for those NS records, which means that native IPV6 clients using name servers that are not dual-stack will be unable to reach us. There is currently is no ETA on when these will be added at present. With that
being the case it may be advisable for you to consider some sort of shim/transition technology that will allow you to address IPv4 hosts as you may run into this issue again across services that leverage a CDN with a similar set up to ours.
Hope this helps?
Regards,
Rex
----------------------------------------------
Rex Osafo-Asare, Sep 25, 4:47 AM PDT
Hi Teddy,
Thanks for reaching out. We'll look into this for you.
Thanks,
Rex
----------------------------------------------
Teddy Hogeborn, Sep 25, 3:57 AM PDT
From #fastly:
09:29 < TeddyH> security-cdn.debian.org is hosted by fastly, but is not
reachable by IPv6-only hosts, since none of the
nameservers of
fastly.net has an IPv6 address.
09:59 < unfoo42> hey TeddyH, could you send us an email at support@fastly? 10:00 < unfoo42> along with any info if you have
10:00 < unfoo42> it*
10:04 < jcristau> aiui the info is just "ns[1234].fastly.net have no aaaa
records"
10:06 < unfoo42> jcristau: interesting, would you be able to send the resulting
text block that generates when accessing
https://www.fastly-debug.com/?
10:10 < unfoo42> Oh I think I misunderstood, you were specifically talking
about the ns records, not the resulting dns records. I'd need
to check on this with our team, so if you could send us a
ticket for tracking, that would us look into and follow up
The issue is indeed that none of the DNS nameservers for the fastly.net
domains have any AAAA records. This makes it impossible to reach, for instance, security-cdn.debian.org from an IPv6-only host.
/Teddy Hogeborn
Attachment(s):
signature.asc -
https://fastly.zendesk.com/attachments/token/PBoA6UmsY6dTOF8QAYogJb6BT/?name=signature.asc
--------------------------------
This email is a service from Fastly.
[N4GP65-X27M]
--========-=-Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "
http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<style type="text/css">
table td {
border-collapse: collapse;
}
</style>
</head>
<body style="width: 100%!important; margin: 0; padding: 0;">
<div style="padding: 10px ; line-height: 18px; font-family: 'Lucida Grande',Verdana,Arial,sans-serif; font-size: 12px; color:#444444;">
<div style="color: #b5b5b5;">## Please do not write below this line ##</div>
<p>Your request (<a target="_blank" href="
https://fastly.zendesk.com/hc/requests/59274">#59274</a>) has been updated. </p><p>To review the status of the request and add additional comments, follow the link below:<br /><a href="
http://fastly.zendesk.
com/hc/requests/59274" rel="noreferrer">
http://fastly.zendesk.com/hc/requests/59274</a></p><p>You can also add a comment by replying to this email.</p><p></p><div style="margin-top: 25px" data-version="2"><table width="100%" cellpadding="0" cellspacing="
0" border="0"><tr><td width="100%" style="padding: 15px 0; border-top: 1px dotted #c5c5c5;"> <table width="100%" cellpadding="0" cellspacing="0" border="0" style=" table-layout:fixed;"><tr><td valign="top" style="padding: 0 15px 0 15px;width: 40px;">
<img alt="Rex Osafo-" height="40" src="
https://fastly.zendesk.com/system/photos/0001/7323/3373/rex_profile_edit.jpg" style="height: auto; line-height: 100%; outline: none; text-decoration: none; -webkit-border-radius: 5px; -moz-border-
radius: 5px; border-radius: 5px;" width="40" /></td> <td width="100%" style="padding: 0; margin: 0;" valign="top"> <p style="font-family: 'Lucida Grande','Lucida Sans Unicode','Lucida Sans',Verdana,Tahoma,sans-serif; font-
size: 15px; line-height: 18px; margin-bottom: 0; margin-top: 0; padding: 0; color:#1b1d1e;"> <strong>Rex Osafo-Asare</strong> <span class="directional_text_wrapper">(Fastly)</span>
</p> <p style="font-family: 'Lucida Grande','Lucida Sans Unicode','Lucida Sans',Verdana,Tahoma,sans-serif; font-size: 13px; line-height: 25px; margin-bottom: 15px; margin-top: 0; padding: 0; color:#bbbbbb;"> Sep 26,
2:13 AM PDT </p> <div class="zd-comment" style="color: #2b2e2f; font-family: 'Lucida Sans Unicode', 'Lucida Grande', 'Tahoma', Verdana, sans-serif; font-size: 14px; line-height: 22px; margin: 15px 0"><p style=
"color: #2b2e2f; font-family: 'Lucida Sans Unicode', 'Lucida Grande', 'Tahoma', Verdana, sans-serif; font-size: 14px; line-height: 22px; margin: 15px 0" dir="auto">Hi Teddy,</p><p style="color: #2b2e2f; font-family: 'Lucida Sans Unicode', 'Lucida Grande',
'Tahoma', Verdana, sans-serif; font-size: 14px; line-height: 22px; margin: 15px 0" dir="auto">You are correct. We have not launched IPv6 for those NS records, which means that native IPV6 clients using name servers that are not dual-stack will be unable
to reach us. There is currently is no ETA on when these will be added at present. With that being the case it may be advisable for you to consider some sort of shim/transition technology that will allow you to address IPv4 hosts as you may run into this
issue again across services that leverage a CDN with a similar set up to ours.</p><p style="color: #2b2e2f; font-family: 'Lucida Sans Unicode', 'Lucida Grande', 'Tahoma', Verdana, sans-serif; font-size: 14px; line-height: 22px; margin: 15px 0" dir="auto">
Hope this helps?</p><p style="color: #2b2e2f; font-family: 'Lucida Sans Unicode', 'Lucida Grande', 'Tahoma', Verdana, sans-serif; font-size: 14px; line-height: 22px; margin: 15px 0" dir="auto">Regards,<br />
[continued in next message]
--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)
![https://fastly.zendesk.com/system/photos/0001/7323/3373/rex_profile_edit.jpg"](https://fastly.zendesk.com/system/photos/0001/7323/3373/rex_profile_edit.jpg"){kind=link}