On Wed, May 14, 2025 at 01:48:37PM +0000, Andrey Grozin wrote:
Hello *,
I have problems opening several sites
gentoo.org
wiki.gentoo.org
devmanual.gentoo.org
(but not packages.gentoo.org, forums.gentoo.org)
As an A/B comparision, this is a good starting point.
What the sets have as a common difference is loading JS & CSS from assets.gentoo.org.
From assets.g.o:
- Packages loads a single image.
- forums loads nothing.
- www, wiki, devmanual: loads bootstrap, jquery, CSS, fonts.
from my gentoo notebook in Novosibirsk, Russia. All these sites have an excellent ping; the problem is only to access them via https. First I wait for several minutes; then either the browser (chrome) declares timeout, or the site opend, but without the top menu, the background picture below the menu. Instead I get the menu as a plain vertical list of lines, each line contains a link. These links work. But if I choose, e.g., the link Support,
I again have to wait for many minutes for gentoo.org/support/ to load.
- Use Chrome devtools while loading one of the pages, and identify which
requests are slow
- Copy that request from devtools "copy as curl"
- Repeat it in the shell
- Test if dropping headers etc changes the behavior.
The "excellent ping" comment stands out as odd - from Russia, I would
expect a poor ping to wiki.g.o and forums.go, because they are NOT on
the CDN.
All of the others are on CDN: assets, packages, devmanual, www
We use a mix of CDN77 & Fastly for Gentoo's CDN offering: diversity of providers to avoid single point of failure where possible
[distfiles.g.o only available on CDN77, Fastly said it would be too much traffic for that sponsorship agreement]
This is clearly related to me being in Russia. When I go to the same sites from chrome on my android tablet, and this tablet is connected by vpn to a vps in Germany, everything works fast and without defects. Unfortunately, I have no client compatible with this vpn on my gentoo notebook.
Two theories:
- Russia/ISP is badly blocking a subset of CDN endpoint IPs, and since
CDNs host a wide variety of services, this is collateral damage.
- The CDN provider is doing partial blocking of Russia [not to my
knowledge, but I wouldn't rule it out, e.g. being ordered to block
some Russian access]
--
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail :
robbat2@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136
-----BEGIN PGP SIGNATURE-----
iQIzBAABCAAdFiEEveu2pS8Vb98xaNkRGTlfI8WIJsQFAmgk0owACgkQGTlfI8WI JsQ3FRAAva14tONOb0glP6qW2VWWdHlrUyJP/pliSmeyrb8OdVld/nWzh8CC0DUa a22liH4eIZuy/ltkhMtigHuXe7smp7cFnCVAFzlvb9/mjgyGGXwvJ1e/5u05zENt vwt3WX1f8vHGpkL06I+3D0aB3kgB6m1KokVaUfxXhZNn4i/zn8MtE78HclOJ0y8K vvfcxhNTk5HVwEevXf0SuQyc70r68aJl82A5tNWGcem3mjZd4b3yF3thNJDERmWd 4Kg9nZcdjuw/UwS1dyJybEev1B1F7nXigGpH+hei0Yy2mLODdkyfxMp6HrIG9QIB SFM0la0f1eS0Whb66bpgOxZeC8kZVkCLgWrEf6KeaTL+YUysgzqn4rgpDamUbuIM GGWYizCRvM8iSVKa1EvKJK12/LcJaXmoQIhsNjh3IpkfHX3TCCfY/+KVZ6CtumIa f3BWnRTi4el/wO+MRmLWp2VliYpFNVz/ltVzKkSV7EOrPer0fUtAfTZ+SWqppKxn uYOsD933SZ7KHDpx5bEbKn47Mbysa+GA9egz0z4HV0i8EaABRjYjj8tzvcoLL6wd D1ORk9a0PlDdw9OMf9b3q0+DC/5qRuEfgUzGtQYy/VtKAEPxrW/IBt/srCeKf0IX h47JktmjV3WJObdqgOjqFN2QRwsLN5fLtNZhFfq3