lucene-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Dawid Weiss <dawid.we...@gmail.com>
Subject Fwd: Maven Central is probably blocked in China
Date Thu, 12 Jul 2012 06:26:29 GMT
Does it mean we can remove that additional mirror from ivy settings?

Dawid


---------- Forwarded message ----------
From: Niclas Hedhman <niclas@hedhman.org>
Date: Thu, Jul 12, 2012 at 3:20 AM
Subject: Re: Maven Central is probably blocked in China
To: Brian Fox <brianf@infinity.nu>
Cc: Maven Developers List <dev@maven.apache.org>


Yes.
repo1
repo2
central
central01
central02

all resolve now to hosts that are not blocked. Well done!!


Cheers
Niclas

On Thu, Jul 12, 2012 at 6:20 AM, Brian Fox <brianf@infinity.nu> wrote:
> Niclas, I'm told it's working now. Can you confirm?
>
>
> On Tue, Jul 10, 2012 at 1:11 PM, Brian Fox <brianf@infinity.nu> wrote:
>>
>> The network team confirmed that this is only Unicom with the issue. They
>> are looking at alternate routes that would hopefully work.
>>
>>
>> On Mon, Jul 9, 2012 at 5:31 PM, Niclas Hedhman <niclas@hedhman.org> wrote:
>>>
>>> Ok, good to know that it is not completely blocked. It is likely that
>>> there are multiple FirewallOps across China regions and the (I think)
>>> 3 ISPs (China Telecom, China Mobile and Unicom).
>>>
>>> As I mentioned, the edgecast address couldn't be reached, but the
>>> akamai one could.
>>>
>>> I am personally in downtown Shanghai, using China Unicom's "Fiber To
>>> The Building".
>>>
>>> I am seen as 58.246.154.81 from the outside at the moment, can reach
>>> your a978.g1.akamai.net, but not wpc.829D.edgecastcdn.net.
>>>
>>> I can also VPN to Beijing, to a 163.com datacenter (which I think is a
>>> China Telecom subsidiary), having IP number 60.191.221.179. From
>>> there, both hosts above are reachable.
>>>
>>> So, yes, it seems to be regionalized or per ISP (which makes this less
>>> of a problem than I thought). I also mentioned that I am personally on
>>> VPN and I am not really affected, but developers I have met are not
>>> willing to pay for that service and don't have it.
>>>
>>>
>>> Cheers
>>> Niclas
>>>
>>> On Tue, Jul 10, 2012 at 1:58 AM, Brian Fox <brianf@infinity.nu> wrote:
>>> > Niclas,
>>> > We are seeing a lot of traffic to Central from China, so this certainly
>>> > isn't a case of the Great Firewall blocking everything, rather it seems
>>> > a
>>> > little more localized. Can you send more more info about your source ip
>>> > and
>>> > geo location that we could use to see what's up? Possibly we can get
>>> > the
>>> > traffic routed to a China friendly ip.
>>> >
>>> > On Mon, Jul 9, 2012 at 12:08 PM, Brian E. Fox <brianf@infinity.nu>
>>> > wrote:
>>> >>
>>> >> Hi Nicolas, this isn't intentional of course. Let me see what I can
>>> >> dig up
>>> >> based in your traces.
>>> >>
>>> >> --Brian (mobile)
>>> >>
>>> >>
>>> >> On Jul 7, 2012, at 11:45 PM, Niclas Hedhman <niclas@hedhman.org>
>>> >> wrote:
>>> >>
>>> >> > (I am not subscribed, so please CC me on any responses)
>>> >> >
>>> >> > I live in China. I normally have a VPN enabled to circumvent various
>>> >> > blocking (YouTube, Twitter, ++) that the Chinese government has
in
>>> >> > place. I normally don't think much about it. But, today I had my
>>> >> > computer rebooted and couldn't build a project, because Maven
>>> >> > Central
>>> >> > couldn't be reached.
>>> >> >
>>> >> > So, before I realized that my VPN wasn't running I tracerouted
a
>>> >> > bit.
>>> >> >
>>> >> > repo1 resolved to
>>> >> >
>>> >> > niclas:~ niclas$ dig repo1.maven.org | grep "^[a-z]"
>>> >> > repo1.maven.org.    1751    IN    CNAME    central.maven.org.
>>> >> > central.maven.org.    212    IN    CNAME    central02.maven.org.
>>> >> > central02.maven.org.    7112    IN    CNAME
>>> >> > wpc.829D.edgecastcdn.net.
>>> >> > wpc.829D.edgecastcdn.net. 3164    IN    CNAME
>>> >> > gs1.wpc.edgecastcdn.net.
>>> >> > gs1.wpc.edgecastcdn.net. 2292    IN    A    68.232.45.253
>>> >> >
>>> >> > and from that I also tried central01
>>> >> >
>>> >> > niclas:~ niclas$ dig central01.maven.org | grep "^[a-z]"
>>> >> > central01.maven.org.    6477    IN    CNAME
>>> >> > central01.maven.org.edgesuite.net.
>>> >> > central01.maven.org.edgesuite.net. 20877 IN CNAME
>>> >> > a978.g1.akamai.net.
>>> >> > a978.g1.akamai.net.    4    IN    A    124.40.42.31
>>> >> > a978.g1.akamai.net.    4    IN    A    124.40.42.6
>>> >> >
>>> >> > And with tracerouting both (see below), it struck me that VPN might
>>> >> > not be enabled and the IP on "edgecastcdn.net" is probably blocked
>>> >> > by
>>> >> > China potentially serving something they don't like, could be
>>> >> > anything... Yeah, China is BAD, we all know that, but shouldn't
we
>>> >> > (Apache) try to minimize the problem for your ordinary Chinese
>>> >> > developer, could be a student, hobbyist, small entrepreneur and
so
>>> >> > on,
>>> >> > who isn't anti-government (most people here are quite content with
>>> >> > the
>>> >> > government) to be able to use Apache projects?
>>> >> >
>>> >> > The fact is now, that without reasonably reliable access to Maven
>>> >> > Central, one can not really participate in many, many of the Java
>>> >> > projects at ASF.
>>> >> >
>>> >> > I don't know how the DNS and host resolution is supposed to work,
>>> >> > who
>>> >> > is participating in the hosting and under what terms. But I think
>>> >> > Maven/Sonatype should have in its interest to NOT EXCLUDE some
>>> >> > staggering amount of Java programmers, and perhaps try to find
a way
>>> >> > to get a better SLA here. If you need help from someone to check
>>> >> > "from
>>> >> > the inside the Great Firewall", just let me know...
>>> >> >
>>> >> >
>>> >> > Cheers
>>> >> > Niclas
>>> >> >
>>> >> >
>>> >> > traceroute to gs1.wpc.edgecastcdn.net (68.232.45.253), 64 hops
max,
>>> >> > 52
>>> >> > byte packets
>>> >> > 1  192.168.2.1 (192.168.2.1)  1.446 ms  0.980 ms  0.900 ms
>>> >> > 2  58.246.152.1 (58.246.152.1)  9.855 ms  11.724 ms  8.662 ms
>>> >> > 3  210.22.67.29 (210.22.67.29)  9.563 ms  3.698 ms  1.712 ms
>>> >> > 4  112.64.251.165 (112.64.251.165)  1.696 ms  1.819 ms  3.215 ms
>>> >> > 5  * * *
>>> >> > 6  * * *
>>> >> > 7  * * *
>>> >> > 8  * * *
>>> >> > 9  * * *
>>> >> > 10  * * *
>>> >> > 11  * * *
>>> >> > 12  * * *
>>> >> > 13  * * *
>>> >> > 14  * * *
>>> >> > 15  * * *
>>> >> > 16  * * *
>>> >> > 17  * * *
>>> >> >
>>> >> >
>>> >> > niclas:qi4j-sdk niclas$ traceroute  central01.maven.org
>>> >> > traceroute: Warning: central01.maven.org has multiple addresses;
>>> >> > using
>>> >> > 209.107.203.19
>>> >> > traceroute to a978.g1.akamai.net (209.107.203.19), 64 hops max,
52
>>> >> > byte
>>> >> > packets
>>> >> > 1  192.168.2.1 (192.168.2.1)  1.681 ms  0.910 ms  0.889 ms
>>> >> > 2  58.246.152.1 (58.246.152.1)  14.958 ms  14.339 ms  115.382 ms
>>> >> > 3  112.64.251.133 (112.64.251.133)  3.516 ms  2.892 ms  1.682 ms
>>> >> > 4  112.64.251.165 (112.64.251.165)  2.117 ms  1.934 ms  1.926 ms
>>> >> > 5  112.64.243.170 (112.64.243.170)  3.859 ms  8.432 ms  4.110 ms
>>> >> > 6  * * *
>>> >> > 7  219.158.9.209 (219.158.9.209)  4.284 ms  3.517 ms  6.284 ms
>>> >> > 8  219.158.100.194 (219.158.100.194)  32.392 ms  34.428 ms  32.079
>>> >> > ms
>>> >> > 9  219.158.96.230 (219.158.96.230)  33.214 ms  33.501 ms  33.470
ms
>>> >> > 10  219.158.96.222 (219.158.96.222)  31.660 ms  31.564 ms  33.370
ms
>>> >> > 11  sl-st30-sj-0-4-3-3.sprintlink.net (144.228.111.29)  214.116
ms
>>> >> > 466.648 ms  503.740 ms
>>> >> > 12  sl-st31-sj-0-12-0-3.sprintlink.net (144.232.3.33)  180.679
ms
>>> >> >    sl-st31-sj-0-8-0-0.sprintlink.net (144.232.3.29)  214.923 ms
>>> >> > 231.186
>>> >> > ms
>>> >> > 13  144.232.8.194 (144.232.8.194)  522.103 ms  381.628 ms  221.618
>>> >> > ms
>>> >> > 14  te0-0-0-3.ccr22.sjc01.atlas.cogentco.com (154.54.6.109)  219.036
>>> >> > ms
>>> >> >    te0-3-0-3.ccr22.sjc01.atlas.cogentco.com (154.54.6.101)  184.460
>>> >> > ms
>>> >> >    te0-1-0-0.ccr21.sjc03.atlas.cogentco.com (66.28.4.53)  305.247
ms
>>> >> > 15  te0-3-0-2.ccr22.lax01.atlas.cogentco.com (154.54.2.149)  614.732
>>> >> > ms
>>> >> >    te0-1-0-0.ccr21.sjc01.atlas.cogentco.com (154.54.83.253)  216.883
>>> >> > ms
>>> >> >    te0-1-0-3.ccr21.sjc01.atlas.cogentco.com (154.54.6.237)  450.823
>>> >> > ms
>>> >> > 16  te9-3.ccr02.lax05.atlas.cogentco.com (154.54.82.154)  662.795
ms
>>> >> >    154.54.85.25 (154.54.85.25)  189.819 ms
>>> >> >    te7-8.ccr02.lax05.atlas.cogentco.com (154.54.30.198)  888.842
ms
>>> >> > 17  te4-1.mpd01.lax05.atlas.cogentco.com (154.54.28.69)  693.184
ms
>>> >> >    te9-6.mpd01.lax05.atlas.cogentco.com (154.54.82.150)  190.542
ms
>>> >> > *
>>> >> > 18  38.104.84.130 (38.104.84.130)  781.037 ms
>>> >> >    38.104.84.126 (38.104.84.126)  425.045 ms
>>> >> >    38.104.84.130 (38.104.84.130)  643.349 ms
>>> >> > 19  te8-2-3580.bbr1.lax1.bandcon.com (69.16.190.214)  189.074 ms
>>> >> > 189.148 ms  193.641 ms
>>> >> > 20  209.107.203.19 (209.107.203.19)  629.087 ms  412.329 ms  225.912
>>> >> > ms
>>> >> >
>>> >> > --
>>> >> > Niclas Hedhman, Software Developer
>>> >> > http://www.qi4j.org - New Energy for Java
>>> >> >
>>> >> > I live here; http://tinyurl.com/3xugrbk
>>> >> > I work here; http://tinyurl.com/6a2pl4j
>>> >> > I relax here; http://tinyurl.com/2cgsug
>>> >> >
>>> >> >
>>> >> > ---------------------------------------------------------------------
>>> >> > To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
>>> >> > For additional commands, e-mail: dev-help@maven.apache.org
>>> >> >
>>> >
>>> >
>>>
>>>
>>>
>>> --
>>> Niclas Hedhman, Software Developer
>>> http://www.qi4j.org - New Energy for Java
>>>
>>> I live here; http://tinyurl.com/3xugrbk
>>> I work here; http://tinyurl.com/6a2pl4j
>>> I relax here; http://tinyurl.com/2cgsug
>>
>>
>



--
Niclas Hedhman, Software Developer
http://www.qi4j.org - New Energy for Java

I live here; http://tinyurl.com/3xugrbk
I work here; http://tinyurl.com/6a2pl4j
I relax here; http://tinyurl.com/2cgsug

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org


Mime
View raw message