#11661 Can not connect to rdu-cc lab over ipv4 from some locations
Closed: Fixed 4 months ago by praiskup. Opened 4 months ago by praiskup.

This seems like a similar issue we had recently: https://pagure.io/fedora-infrastructure/issue/11640

[copr@copr-be ~][PROD]$ ssh -vvv -4 copr@vmhost-x86-copr01.rdu-cc.fedoraproject.org
OpenSSH_9.3p1, OpenSSL 3.1.1 30 May 2023
debug1: Reading configuration data /home/copr/.ssh/config
debug1: /home/copr/.ssh/config line 1: Applying options for *
debug1: /home/copr/.ssh/config line 9: Applying options for vmhost-x86-copr01.rdu-cc.fedoraproject.org
debug1: Reading configuration data /etc/ssh/ssh_config
debug3: /etc/ssh/ssh_config line 55: Including file /etc/ssh/ssh_config.d/50-redhat.conf depth 0
debug1: Reading configuration data /etc/ssh/ssh_config.d/50-redhat.conf
debug2: checking match for 'final all' host vmhost-x86-copr01.rdu-cc.fedoraproject.org originally vmhost-x86-copr01.rdu-cc.fedoraproject.org
debug3: /etc/ssh/ssh_config.d/50-redhat.conf line 3: not matched 'final'
debug2: match not found
debug3: /etc/ssh/ssh_config.d/50-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1 (parse only)
debug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config
debug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-]
debug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512]
debug1: configuration requests final Match pass
debug1: re-parsing configuration
debug1: Reading configuration data /home/copr/.ssh/config
debug1: /home/copr/.ssh/config line 1: Applying options for *
debug2: add_identity_file: ignoring duplicate key ~/.ssh/id_rsa
debug1: /home/copr/.ssh/config line 9: Applying options for vmhost-x86-copr01.rdu-cc.fedoraproject.org
debug1: Reading configuration data /etc/ssh/ssh_config
debug3: /etc/ssh/ssh_config line 55: Including file /etc/ssh/ssh_config.d/50-redhat.conf depth 0
debug1: Reading configuration data /etc/ssh/ssh_config.d/50-redhat.conf
debug2: checking match for 'final all' host vmhost-x86-copr01.rdu-cc.fedoraproject.org originally vmhost-x86-copr01.rdu-cc.fedoraproject.org
debug3: /etc/ssh/ssh_config.d/50-redhat.conf line 3: matched 'final'
debug2: match found
debug3: /etc/ssh/ssh_config.d/50-redhat.conf line 5: Including file /etc/crypto-policies/back-ends/openssh.config depth 1
debug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config
debug3: gss kex names ok: [gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-]
debug3: kex names ok: [curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512]
debug2: resolving "vmhost-x86-copr01.rdu-cc.fedoraproject.org" port 22
debug3: resolve_host: lookup vmhost-x86-copr01.rdu-cc.fedoraproject.org:22
debug3: ssh_connect_direct: entering
debug1: Connecting to vmhost-x86-copr01.rdu-cc.fedoraproject.org [8.43.85.57] port 22.
debug3: set_sock_tos: set socket 3 IP_TOS 0x48
debug2: fd 3 setting O_NONBLOCK
debug1: connect to address 8.43.85.57 port 22: Connection timed out
ssh: connect to host vmhost-x86-copr01.rdu-cc.fedoraproject.org port 22: Connection timed out

Working-around by:

Host vmhost-x86-copr01.rdu-cc.fedoraproject.org vmhost-x86-copr02.rdu-cc.fedoraproject.org vmhost-x86-copr03.rdu-cc.fedoraproject.org vmhost-x86-copr04.rdu-cc.fedoraproject.org vmhost-p08-copr01.rdu-cc.fedoraproject.org vmhost-p08-copr02.rdu-cc.fedoraproject.org vmhost-p09-copr01.rdu-cc.fedoraproject.org
  AddressFamily inet6
  ControlPath=~/.ssh/skt_%h_%p_%r
  ControlMaster=auto
  ControlPersist=60

This way I can make Copr builders started over ipv6.


ICMPv4 to people01.fedoraproject.org fails, to people02.fedoraproject.org works.

Hm, ipv4 seems to work fine again. Closing.

Metadata Update from @praiskup:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

4 months ago

It is actually the same issue as the last time (fiber cut), seehttps://pagure.io/centos-infra/issue/1326#comment-887062 (and the internal ref it mentions).

Login to comment on this ticket.

Metadata