nanog mailing list archives

Re: Akamai IPv6 contact needed


From: Martin Hannigan <hannigan () gmail com>
Date: Mon, 25 Jul 2016 16:03:10 -0400

Thanks! We'll reach out to you offline shortly. You can also always
reach us for peering, v6, or AS specific issues at nocc () akamai com

Best Regards,

Martin Hannigan AS 209040 / AS 32787


On Mon, Jul 25, 2016 at 4:35 AM, Yang Yu <yang.yu.list () gmail com> wrote:
Some servers are not serving content over IPv6 HTTPS. It fails in such
a way that most applications can't fall back to IPv4. tcp/443 is open
but RST as soon as client sends TLS 1.2 client hello. It has been this
way for 24+ hours.


$ telnet 2600:1404:18::17d7:fbc 443
Trying 2600:1404:18::17d7:fbc...
Connected to 2600:1404:18::17d7:fbc.
Escape character is '^]'.

Connection closed by foreign host


ncat -6 --ssl -v 2600:1404:18::17d7:fac 443
Ncat: Version 7.00SVN ( https://nmap.org/ncat )
Ncat: Input/output error.



www.apple.com.          681     IN      CNAME   www.apple.com.edgekey.net.
www.apple.com.edgekey.net. 11306 IN     CNAME
www.apple.com.edgekey.net.globalredir.akadns.net.
www.apple.com.edgekey.net.globalredir.akadns.net. 1664 IN CNAME
e6858.dscc.akamaiedge.net.
e6858.dscc.akamaiedge.net. 5    IN      AAAA    2600:1404:18::17d7:fac
e6858.dscc.akamaiedge.net. 5    IN      AAAA    2600:1404:18::17d7:fbc


2600:1404:18::17d7:0/112 serves www.apple.com, download.microsoft.com etc.


HTTP does work
$ wget http://www.apple.com
--2016-07-25 03:09:17--  http://www.apple.com/
Resolving www.apple.com (www.apple.com)... 2600:1404:18::17d7:fbc,
2600:1404:18::17d7:fac, 23.11.55.206
Connecting to www.apple.com
(www.apple.com)|2600:1404:18::17d7:fbc|:80... connected.
HTTP request sent, awaiting response... 200 OK


$ dig whoami.akamai.com +short
whoami.akamai.net.
72.183.81.39


Thanks.


Yang


Current thread: