Broken IPv6 on time.google.com

[Ondřej Caletka]

When trying time.google.com over IPv6, I get no response:

$ sntp -6 time.google.com
sntp 4.2...@1.3265-o Wed Jun  8 11:33:56 UTC 2016 (1)
time.google.com 2001:4860:4806:8:: no UCST response after 5 seconds

The ICMPv6 ping returns Administratively prohibited error from the Google edge.

$ ping6 time.google.com
PING time.google.com(time3.google.com) 56 data bytes
From nixcz-v6.net.google.com icmp_seq=1 Destination unreachable: Administratively prohibited

Over IPv4, everything seem to work.

[Jamie Wilkinson]

Can you give a traceroute6 showing the path the packets are taking?

--
You received this message because you are subscribed to the Google Groups "public-ntp-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to public-ntp-discuss+unsub...@googlegroups.com.
To post to this group, send email to public-ntp-discuss@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/public-ntp-discuss/b608300d-6e17-4327-8c53-571e39db0bb2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Jamie Wilkinson]

That was a silly thing to ask for, you've already given the information I need. I'll poke around here and let you know if I need more info.

On 4 Dec. 2016 09:51, "Jamie Wilkinson" <j...@google.com> wrote:

Can you give a traceroute6 showing the path the packets are taking?

On 3 Dec. 2016 20:12, "Ondřej Caletka" <ondrej....@gmail.com> wrote:

When trying time.google.com over IPv6, I get no response:

$ sntp -6 time.google.com
sntp 4.2...@1.3265-o Wed Jun  8 11:33:56 UTC 2016 (1)
time.google.com 2001:4860:4806:8:: no UCST response after 5 seconds

The ICMPv6 ping returns Administratively prohibited error from the Google edge.

$ ping6 time.google.com
PING time.google.com(time3.google.com) 56 data bytes
From nixcz-v6.net.google.com icmp_seq=1 Destination unreachable: Administratively prohibited

Over IPv4, everything seem to work.

--
You received this message because you are subscribed to the Google Groups "public-ntp-discuss" group.

To unsubscribe from this group and stop receiving emails from it, send an email to public-ntp-discuss+unsubscribe@googlegroups.com.

[Jamie Wilkinson]

OK two things:

First, the ping6 issue is unrelated, but is an issue.  We've got a bug open tracking that already.

Second, we can't isolate why ipv6 doesn't work for you.  We can verify v6 service is OK fro mother locations.  So, can you do a udp traceroute to port 123 from your host and provide it here?  We'd like to understand where the packets are going.  Alternatively, if you can capture a tcpdump of udp port 123 and icmp packets while running sntp, that may show us something interesting (but I think the udp traceroute would be sufficient.)

[Ondřej Caletka]

Hello,

I can confirm SNTP now works. I don't remember from which exact spot I tried it last time. I may follow up if I find a place where it does not work.

$ sntp -6 time.google.com  
sntp 4.2...@1.3265-o Wed Jun 22 14:57:52 UTC 2016 (1)
Can't open KOD db file /var/db/ntp-kod for writing: Permission denied
2016-12-06 09:02:35.877091 (-0100) -0.000826 +/- 0.003053 time.google.com 2001:4860:4806:8:: s
2 no-leap

Thanks for fixing it!

Dne úterý 6. prosince 2016 0:25:39 UTC+1 Jamie Wilkinson napsal(a):

[Jamie Wilkinson]

That's good news, thanks for confirming!

--
You received this message because you are subscribed to the Google Groups "public-ntp-discuss" group.

To unsubscribe from this group and stop receiving emails from it, send an email to public-ntp-discuss+unsub...@googlegroups.com.

To post to this group, send email to public-ntp-discuss@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/public-ntp-discuss/264928ee-6e66-4f14-b7bf-cd8b5b9f1075%40googlegroups.com.

[Brandon Jackson]

Getting same thing via HE.net 

Tracing route to time.google.com [2001:4860:4806:4::]

over a maximum of 30 hops:

  1    <1 ms    <1 ms    <1 ms  . [2001:470:****:1::3]

  2    26 ms    42 ms    25 ms  napsterbater-2.tunnel.tserv13.ash1.ipv6.he.net [2001:470:7:****::1]

  3    75 ms    23 ms    75 ms  ge5-4.core1.ash1.he.net [2001:470:0:90::1]

  4     *        *     Destination net unreachable.

[Jamie Wilkinson]

Brandon, is it only ICMP over v6 failing for you, or is the time service also unreachable over IPv6?

--

You received this message because you are subscribed to the Google Groups "public-ntp-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to public-ntp-discuss+unsub...@googlegroups.com.
To post to this group, send email to public-ntp-discuss@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/public-ntp-discuss/0f24dfb3-e875-46d2-acae-09df28ae0bc9%40googlegroups.com.

[Jamie Wilkinson]

Assuming you're on some form of Linux, can you send us the output of a "traceroute -6 -I time.google.com" ?  That's a capital I for ICMP.

On 19 March 2017 at 18:57, Jamie Wilkinson <j...@google.com> wrote:

Brandon, is it only ICMP over v6 failing for you, or is the time service also unreachable over IPv6?

On 21 December 2016 at 11:17, Brandon Jackson <bojac...@gmail.com> wrote:

Getting same thing via HE.net 

Tracing route to time.google.com [2001:4860:4806:4::]

over a maximum of 30 hops:

  1    <1 ms    <1 ms    <1 ms  . [2001:470:****:1::3]

  2    26 ms    42 ms    25 ms  napsterbater-2.tunnel.tserv13.ash1.ipv6.he.net [2001:470:7:****::1]

  3    75 ms    23 ms    75 ms  ge5-4.core1.ash1.he.net [2001:470:0:90::1]

  4     *        *     Destination net unreachable.

On Saturday, December 3, 2016 at 4:12:27 AM UTC-5, Ondřej Caletka wrote:

When trying time.google.com over IPv6, I get no response:

$ sntp -6 time.google.com
sntp 4.2...@1.3265-o Wed Jun  8 11:33:56 UTC 2016 (1)
time.google.com 2001:4860:4806:8:: no UCST response after 5 seconds

The ICMPv6 ping returns Administratively prohibited error from the Google edge.

$ ping6 time.google.com
PING time.google.com(time3.google.com) 56 data bytes
From nixcz-v6.net.google.com icmp_seq=1 Destination unreachable: Administratively prohibited

Over IPv4, everything seem to work.

--
You received this message because you are subscribed to the Google Groups "public-ntp-discuss" group.

To unsubscribe from this group and stop receiving emails from it, send an email to public-ntp-discuss+unsubscribe@googlegroups.com.

To post to this group, send email to public-ntp-discuss@googlegroups.com.