#9455 one of the dl.fedorproject.org IPs returns HTTP 404s
Closed: Fixed 6 months ago by smooge. Opened 6 months ago by ktdreyer.

dl.fedoraproject.org is sporadically returning HTTP 404s for me. I captured the IP and full HTTP headers of one example:

curl -v -I https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm
*   Trying 38.145.60.24:443...
* Connected to dl.fedoraproject.org (38.145.60.24) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use http/1.1
* Server certificate:
*  subject: C=US; ST=North Carolina; L=Raleigh; O=Red Hat, Inc.; CN=*.fedoraproject.org
*  start date: Feb 27 00:00:00 2020 GMT
*  expire date: Mar  2 12:00:00 2022 GMT
*  subjectAltName: host "dl.fedoraproject.org" matched cert's "*.fedoraproject.org"
*  issuer: C=US; O=DigiCert Inc; OU=www.digicert.com; CN=DigiCert SHA2 High Assurance Server CA
*  SSL certificate verify ok.
> HEAD /pub/epel/epel-release-latest-8.noarch.rpm HTTP/1.1
> Host: dl.fedoraproject.org
> User-Agent: curl/7.69.1
> Accept: */*
> 
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* old SSL session ID is stale, removing
* Mark bundle as not supporting multiuse
< HTTP/1.1 404 Not Found
HTTP/1.1 404 Not Found
< Date: Wed, 11 Nov 2020 19:46:17 GMT
Date: Wed, 11 Nov 2020 19:46:17 GMT
< Server: Apache
Server: Apache
< X-Frame-Options: DENY
X-Frame-Options: DENY
< X-Xss-Protection: 1; mode=block
X-Xss-Protection: 1; mode=block
< X-Content-Type-Options: nosniff
X-Content-Type-Options: nosniff
< Referrer-Policy: same-origin
Referrer-Policy: same-origin
< Content-Security-Policy: default-src 'none'; img-src 'self'
Content-Security-Policy: default-src 'none'; img-src 'self'
< Strict-Transport-Security: max-age=31536000; preload
Strict-Transport-Security: max-age=31536000; preload
< Content-Type: text/html; charset=iso-8859-1
Content-Type: text/html; charset=iso-8859-1

< 
* Connection #0 to host dl.fedoraproject.org left intact

These two are ok:
38.145.60.22
38.145.60.23

This one is causing problems:
38.145.60.24

Thank you for the ticket. NFS did not come up on reboot for some reason

Metadata Update from @smooge:
- Issue priority set to: None (was: Needs Review)
- Issue tagged with: downloads, high-gain, medium-trouble, ops

6 months ago

38.145.60.24 works ok in my testing now. Is this resolved from your perspective?

we are rebooting all the download servers for a planned outage. I will check each server after this and confirm then close ticket.

I have checked all download servers after outage and they are working.

Metadata Update from @smooge:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

6 months ago

Login to comment on this ticket.

Metadata
Boards 1
ops Status: Done