Added for rsync.stream target, as that's the only one you needed right ? (per other tickets ref, so not for rsync.centos.org)

Correct, just stream.

this is the command we use.

/usr/bin/rsync -azHP --verbose --timeout=1600 --delete --delete-after --delay-updates rsync://rsync.stream.centos.org/CentOS-Stream-All

I had expected my mirror hosts to be using IPv6. they are not.

I am actually not sure what is up. In the earlier ticket we opened 163.114.128.0/20

and the address of my failing mirror sync host is 163.114.130.3 which should be covered by that range.

this is the error Unknown module 'CentOS-Stream-All

any thoughts

worth verifying which specific machine you're hitting (in the motd rsyncd header) and we can then analyze and search for your specific ipv4 address there ?

here is the motd.

CentOS.org rsync service (centosk8.centos.org)
------------------------------------------------------------

This service is intended for the sole use of the CentOS worldwide mirror network
to synchronize mirrors.

Unless you are running or intending to run a listed public CentOS mirror
use a mirror listed at https://centos.org/download/mirrors

If you intend to populate a mirror for public use please read the
notes at https://wiki.centos.org/HowTos/CreatePublicMirrors

If you do use this service then it is implied that you are providing a
mirror for public use and giving us authority to publicise such mirror.


@ERROR: Unknown module 'CentOS-Stream-All'
rsync error: error starting client-server protocol (code 5) at main.c(1668) [Receiver=3.1.3]

I just looked at that particular node and I do see attemps for CentOS and altarch rsync modules/targets and working (and coming over ipv6, from 2620:10d:c090::/48 network)
But nothing for CentOS-Stream-All from either ipv6 or ipv4 range hitting that machine.
Can you confirm that you don't have any outgoing rule on that server that would use a different ip address ?

While not sufficient, curl http://icanhazip.com and curl -4 http://icanhazip.com can be a good start (even if just limited to http traffic, and for rsync you can have something else)

It looks like it is only the ipv6 address. forcing ipv4 in the rsync command works. So my earlier assertion about them not using ipv6 is clearly incorrect.

Can we change the ipv6 allowed range from 2620:10d:c0a8::/48 to 2620:10d:c0a8::/42

the addresses from my other set of sync hosts are in this range.

thank you.

well, if you're sure that it's a /42 for ipv6, it should be 2620:10d:c080::/42 .. Let me add it and you'll be able to verify in the next minutes. Closing for now but feel free to reopen if that's not working for you

Perfect! Thanks