1. Forum
  2. Usenet
  3. LINUX.GENTOO.DEV

  • Re: [gentoo-dev] strange problems with some gentoo sites as seen from R

    From Andreas Sturmlechner@21:1/5 to All on Wed May 14 17:05:42 2025
    On Mittwoch, 14. Mai 2025 15:48:37 Mitteleuropäische Sommerzeit Andrey Grozin wrote:
    Hello *,

    [...]

    Does that somehow also impair your ability to respond to QA bugs?

    Regards
    -----BEGIN PGP SIGNATURE-----

    iQITBAABCgB9FiEEmaksxp6GvcraXyZQrlkbvHPk3V4FAmgksUZfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDk5 QTkyQ0M2OUU4NkJEQ0FEQTVGMjY1MEFFNTkxQkJDNzNFNERENUUACgkQrlkbvHPk 3V65PAwAg6IXJYDW6uKi2LVkulu1OYRMzOqr766AVIBQYeLITlMGqWrc4/Jag5xS D8kGBi42RZiLv7fEiVcvtbbG882yk7YtNZXGjgY7xfBCDlUuudsphoEApkFc3elr YbSvvelRov20osztr96bPN8sB12g7x3cOPBI2NB8a8di3eVNNjiARWTT77mt2qNl lZWmPraCDYlNTcpGdk231/nRQYNgCjLkTsznB7OTvmqCHgIk1FVQD3QFh1CVwsFS SB5kMN3ExHoom7ue50cxFmRYMtbuIRNrkYs3SJRY4VIQPwOicBL27EvN01s6Erv8 lGSDOWCw0RKz/yAc9v6AUD8fhA+p0VgiEK8PJCfDlR6Bl9Pd84Ys3xipGU2FQd+T fNiWO/CgjqLUsEdymZ0G7Th7iq6k5IMO+SZf85zHwTrkbO0ufYAJHY2jjao6ghGO qHPdE3OArZ6HbYiYwtrICiADaBeeahpM6cGNMuieZF3GRhxkdyKiit4A4sG1+QBn
    k0N+Lhr0
    =2qi6
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrey Grozin@21:1/5 to Andreas Sturmlechner on Wed May 14 17:40:01 2025
    On Wed, 14 May 2025, Andreas Sturmlechner wrote:
    Does that somehow also impair your ability to respond to QA bugs?
    Not very much. Any work involving access to gentoo web pages takes substantially more time, that's all.

    Andrey

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Robin H. Johnson@21:1/5 to Andrey Grozin on Wed May 14 19:30:01 2025
    On Wed, May 14, 2025 at 01:48:37PM +0000, Andrey Grozin wrote:
    Hello *,

    I have problems opening several sites

    gentoo.org
    wiki.gentoo.org
    devmanual.gentoo.org
    (but not packages.gentoo.org, forums.gentoo.org)
    As an A/B comparision, this is a good starting point.

    What the sets have as a common difference is loading JS & CSS from assets.gentoo.org.

    From assets.g.o:
    - Packages loads a single image.
    - forums loads nothing.
    - www, wiki, devmanual: loads bootstrap, jquery, CSS, fonts.

    from my gentoo notebook in Novosibirsk, Russia. All these sites have an excellent ping; the problem is only to access them via https. First I wait for several minutes; then either the browser (chrome) declares timeout, or the site opend, but without the top menu, the background picture below the menu. Instead I get the menu as a plain vertical list of lines, each line contains a link. These links work. But if I choose, e.g., the link Support,
    I again have to wait for many minutes for gentoo.org/support/ to load.
    - Use Chrome devtools while loading one of the pages, and identify which
    requests are slow
    - Copy that request from devtools "copy as curl"
    - Repeat it in the shell
    - Test if dropping headers etc changes the behavior.

    The "excellent ping" comment stands out as odd - from Russia, I would
    expect a poor ping to wiki.g.o and forums.go, because they are NOT on
    the CDN.

    All of the others are on CDN: assets, packages, devmanual, www

    We use a mix of CDN77 & Fastly for Gentoo's CDN offering: diversity of providers to avoid single point of failure where possible
    [distfiles.g.o only available on CDN77, Fastly said it would be too much traffic for that sponsorship agreement]

    This is clearly related to me being in Russia. When I go to the same sites from chrome on my android tablet, and this tablet is connected by vpn to a vps in Germany, everything works fast and without defects. Unfortunately, I have no client compatible with this vpn on my gentoo notebook.
    Two theories:
    - Russia/ISP is badly blocking a subset of CDN endpoint IPs, and since
    CDNs host a wide variety of services, this is collateral damage.
    - The CDN provider is doing partial blocking of Russia [not to my
    knowledge, but I wouldn't rule it out, e.g. being ordered to block
    some Russian access]

    --
    Robin Hugh Johnson
    Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
    E-Mail : [email protected]
    GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
    GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCAAdFiEEveu2pS8Vb98xaNkRGTlfI8WIJsQFAmgk0owACgkQGTlfI8WI JsQ3FRAAva14tONOb0glP6qW2VWWdHlrUyJP/pliSmeyrb8OdVld/nWzh8CC0DUa a22liH4eIZuy/ltkhMtigHuXe7smp7cFnCVAFzlvb9/mjgyGGXwvJ1e/5u05zENt vwt3WX1f8vHGpkL06I+3D0aB3kgB6m1KokVaUfxXhZNn4i/zn8MtE78HclOJ0y8K vvfcxhNTk5HVwEevXf0SuQyc70r68aJl82A5tNWGcem3mjZd4b3yF3thNJDERmWd 4Kg9nZcdjuw/UwS1dyJybEev1B1F7nXigGpH+hei0Yy2mLODdkyfxMp6HrIG9QIB SFM0la0f1eS0Whb66bpgOxZeC8kZVkCLgWrEf6KeaTL+YUysgzqn4rgpDamUbuIM GGWYizCRvM8iSVKa1EvKJK12/LcJaXmoQIhsNjh3IpkfHX3TCCfY/+KVZ6CtumIa f3BWnRTi4el/wO+MRmLWp2VliYpFNVz/ltVzKkSV7EOrPer0fUtAfTZ+SWqppKxn uYOsD933SZ7KHDpx5bEbKn47Mbysa+GA9egz0z4HV0i8EaABRjYjj8tzvcoLL6wd D1ORk9a0PlDdw9OMf9b3q0+DC/5qRuEfgUzGtQYy/VtKAEPxrW/IBt/srCeKf0IX h47JktmjV3WJObdqgOjqFN2QRwsLN5fLtNZhFfq3
  • From Andrey Grozin@21:1/5 to Andrey Grozin on Thu May 15 13:30:01 2025
    On Thu, 15 May 2025, Andrey Grozin wrote:
    The command

    curl 'https://assets.gentoo.org/tyrian/v1/bootstrap.min.js'

    with the headers provided by chrome still has not terminated (about 10 mins).
    With the original -H parameters from chrome, it failed with a timeout. Now
    I'm running it without any -H parameters, just the bare

    curl 'https://assets.gentoo.org/tyrian/v1/bootstrap.min.js'

    It also takes forever.

    Andrey

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrey Grozin@21:1/5 to Robin H. Johnson on Thu May 15 13:20:01 2025
    Dear Robin,

    Many thanks for the detailed instruction.

    On Wed, 14 May 2025, Robin H. Johnson wrote:
    - Use Chrome devtools while loading one of the pages, and identify which
    requests are slow
    - Copy that request from devtools "copy as curl"
    - Repeat it in the shell
    - Test if dropping headers etc changes the behavior.
    It seems loading bootstrap.min.js takes forever. When I copy this request
    as curl and try it at the command line, it also takes forever.

    The "excellent ping" comment stands out as odd - from Russia, I would
    expect a poor ping to wiki.g.o and forums.go, because they are NOT on
    the CDN.
    For www.gentoo.org it is about 100 ms; for wiki.gentoo.org 300-400 ms, not
    too bad.

    Two theories:
    - Russia/ISP is badly blocking a subset of CDN endpoint IPs, and since
    CDNs host a wide variety of services, this is collateral damage.
    This is highly probable. I read somewhere that Russia blocks some CDNs
    because they transfer urls encripted, thus hindering the Big Brother's
    ability to spy on the users.

    - The CDN provider is doing partial blocking of Russia [not to my
    knowledge, but I wouldn't rule it out, e.g. being ordered to block
    some Russian access]

    The command

    curl 'https://assets.gentoo.org/tyrian/v1/bootstrap.min.js'

    with the headers provided by chrome still has not terminated (about 10
    mins). I haven't tried to change the headers yet.

    Once more, thank you,
    Andrey

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrey Grozin@21:1/5 to All on Sat May 24 08:00:01 2025
    A rare example of good news:

    I contacted my ISP, they contacted me back many times for additional information and interacted with The Main Internet-Blocking Agency of
    Russia (called Roskomnadzor), and bingo: the problem is solved. All 3 problematic sites:
    https://www.gentoo.org/
    https://devmanual.gentoo.org/
    https://wiki.gentoo.org/
    now work fine. Not only via my ISP, it's a global change.

    It seems they wanted to block some "undesirable" sites in cdn77, but
    blocked too much. Now they have fine-tuned what they block, and gentoo
    sited are no longer blocked.

    Andrey

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)