Re: Facebook broken over v6?
On 2013-06-08 15:29, Chris Conn wrote:
It's affecting anyone running dual stack, as the server responds, hangs, times out and then it tries again on v6. At least in the latest FF and Safari browsers, I've not tried chrome. I've cc'd this over to Nanog, as I've not seen anything about it there, and I'm sure others are seeing it. www.v6.facebook.com works fine as a workaround for the time being. --
Indeed, I have seen this behaviour for at least a week. It seems to somehow be related to geo-located DNS (akamai?) since the timeouts and RSTs I see in the traffic are from IPv6 akamai servers, not facebook itself. I tried de-peering from a number of networks to try and isolate it and it was not transit-specific. I stopped questioning my network when I saw a thread on Sixxs and tunnelbroker about this very issue. Hopefully it won't persist as right now as having Facebook intermittently connect is likely hurting deployment slightly. Chris
Måste vara nåt med browsern. Fortsatt god helg! Test IPv6 FAQ Mirrors Stats Test your IPv6 connectivity. Summary Tests Run Share Results / Contact Your IPv4 address on the public Internet appears to be 213.65.35.162 (TELIANET-SWEDEN TeliaSonera AB) Your IPv6 address on the public Internet appears to be 2001:2002:d541:23a2:11fe:f37f:1493:bb73 (TELIANET TeliaNet Global Network) It appears that you use a non managed tunnel mechanism for either IPv4 or IPv6. [more info] Good news! Your current configuration will continue to work as web sites enable IPv6. [more info] Your browser is blocking the test urls. We will try alternate methods, but they may fail to show your IP address; and may affect the quality of the advice given. [more info] Your browser blocked http://ipv6.test-ipv6.com/ip/?callback=?&size=1600&fill=xxx...xxx You appear to be able to browse the IPv4 Internet only. You will not be able to reach IPv6-only sites. IPv6 connections work, but connections using DNS names do not use IPv6. For some reason, your browser or your OS is not doing IPv6 DNS 'AAAA' lookups. [more info] Your DNS server (possibly run by your ISP) appears to have IPv6 Internet access. Your readiness score 0/10 for your IPv6 stability and readiness, when publishers are forced to go IPv6 only Click to see test data (Updated server side IPv6 readiness stats) Copyright (C) 2010, 2012 Jason Fesler. All rights reserved. -- r1190 Mirrors | Mission | Source | Email - - Attributions This is a mirror of test-ipv6.com. The views expressed here may or may not reflect the views of the mirror owner. Sent from my mobile phone On 8 jun 2013, at 21:38, Chris Conn <cconn@b2b2c.ca> wrote:
On 2013-06-08 15:29, Chris Conn wrote:
It's affecting anyone running dual stack, as the server responds, hangs, times out and then it tries again on v6. At least in the latest FF and Safari browsers, I've not tried chrome. I've cc'd this over to Nanog, as I've not seen anything about it there, and I'm sure others are seeing it. www.v6.facebook.com works fine as a workaround for the time being. --
Indeed, I have seen this behaviour for at least a week. It seems to somehow be related to geo-located DNS (akamai?) since the timeouts and RSTs I see in the traffic are from IPv6 akamai servers, not facebook itself.
I tried de-peering from a number of networks to try and isolate it and it was not transit-specific. I stopped questioning my network when I saw a thread on Sixxs and tunnelbroker about this very issue.
Hopefully it won't persist as right now as having Facebook intermittently connect is likely hurting deployment slightly.
Chris
We're actively investigating the v6 issues. We need more data though. If you're experiencing problems, please email me a tcpdump/pcap or any other debug data you think will help. Thanks, -- dsp
On Sat, 8 Jun 2013, Doug Porter wrote:
We're actively investigating the v6 issues. We need more data though. If you're experiencing problems, please email me a tcpdump/pcap or any other debug data you think will help.
I'll see what I can grab. I've noticed the issue intermittently both at home (HE IPv6 tunnel over VZ Fios) and at work (dual-stacked .edu). jms
Someone must have yanked the AAAA for www.facebook.com, because I see a CNAME to star.c10r.facebook.com, which doesn't have an AAAA. ============================================ DNS server: 199.120.69.24 ; <<>> DiG 9.7.3 <<>> AAAA www.facebook.com @199.120.69.24 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 16032 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;www.facebook.com. IN AAAA ;; ANSWER SECTION: www.facebook.com. 3147 IN CNAME star.c10r.facebook.com. ;; AUTHORITY SECTION: c10r.facebook.com. 51 IN SOA a.ns.c10r.facebook.com. dns.facebook.com. 1370731022 300 600 600 300 ;; Query time: 0 msec ;; SERVER: 199.120.69.24#53(199.120.69.24) ;; WHEN: Sat Jun 8 17:41:30 2013 ;; MSG SIZE rcvd: 103 ============================================ DNS server: 167.142.225.5 ; <<>> DiG 9.7.3 <<>> AAAA www.facebook.com @167.142.225.5 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 963 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;www.facebook.com. IN AAAA ;; ANSWER SECTION: www.facebook.com. 2324 IN CNAME star.c10r.facebook.com. ;; AUTHORITY SECTION: c10r.facebook.com. 44 IN SOA a.ns.c10r.facebook.com. dns.facebook.com. 1370731022 300 600 600 300 ;; Query time: 8 msec ;; SERVER: 167.142.225.5#53(167.142.225.5) ;; WHEN: Sat Jun 8 17:41:30 2013 ;; MSG SIZE rcvd: 103 ============================================ Frank -----Original Message----- From: Doug Porter [mailto:dsp@fb.com] Sent: Saturday, June 08, 2013 3:30 PM Cc: nanog@nanog.org Subject: Re: Facebook broken over v6? We're actively investigating the v6 issues. We need more data though. If you're experiencing problems, please email me a tcpdump/pcap or any other debug data you think will help. Thanks, -- dsp
On Sat, Jun 08, 2013 at 01:29:43PM -0700, Doug Porter wrote:
We're actively investigating the v6 issues. We need more data though. If you're experiencing problems, please email me a tcpdump/pcap or any other debug data you think will help.
I was experiencing problems, and disabling ipv6 seemed to fix it, and have also been experiencing sometimes slow speeds to google so didn't know if it was concurrent facebook/google issues (which I suspected) or a general ipv6 issue. So I reenabled ipv6, and did tcpdump and it seems to be behaving fine now, although slightly slower than ipv4 even though ipv6 seems to pick a closer data centre than ipv4. Both of which are further away than they used to be. (entry point lax, destination seems to be frc1 for ipv4 and www.v6.facebook.com, and prn1 for ipv6 www.facebook.com. Is there some url that could run a regular curl to to see if it times out off/on? Another concurrent issue, is it seems images are getting slower and slower over time. It seems for some reason that https is forced, even if disabled in profile settings and that cdn usage keeps varying over time, it used to have urls like photos-a.ak.fbcdn.net but now it seeems to have fbcdn-sphotos-a-a.akamaihd.net. Curiously photos-a.ak.fbcdn.net still looks up with < 1 msec ping rather then ~190 msec ping. Ben.
participants (6)
-
Ben Aitchison -
Chris Conn -
Doug Porter -
Frank Bulk -
Justin M. Streiner -
Rikard Johansson