Project

General

Profile

tickets #71131

twsnapshot.o.o is down / not reachable

Added by cboltz about 1 month ago. Updated 15 days ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
Servers hosted in Provo
Start date:
2020-09-08
Due date:
% Done:

100%

Estimated time:

Description

twsnapshot.o.o is down, or at least not reachable from the outside. I verified this a) from my own laptop and b) got it verified by letsencrypt, which failed on certificate renewal (see #71104)

curl -v twsnapshot.opensuse.org directly started on provo-mirror works, and twsnapshot.o.o has a separate IP, therefore I wonder if this could be a firewall issue.

FYI: I had to remove two domains from dehydrated to fix certificate renewal:

  • twsnapshot.o.o doesn't respond at all (= this ticket)
  • debuginfod.o.o is served via proxy-prv (and therefore proxy-prv needs to handle the certificate) - unrelated to this ticket ;-)

History

#1 Updated by cboltz about 1 month ago

  • Private changed from Yes to No

#2 Updated by lrupp 30 days ago

  • Status changed from New to Feedback
  • Assignee changed from lrupp to cboltz

Just followed the debugging path for reference...
from /etc/nginx/vhosts.d/001-tumbleweed-snapshots.conf on provo-mirror.o.o:
listen 91.193.113.73:80
nginx is up and running, bond to the port in the config ('ss -tulpen | grep 91.193.113.73')

input_ext iptables chain shows:
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:80

curl -H "Host: tumbleweed.opensuse.org" http://91.193.113.73
from another machine does indeed not work. I will open a ticket with SUSE-IT to see if they changed some firewall settings.

Question: where (which machine) did you adjust dehydrated?

#3 Updated by cboltz 30 days ago

  • Assignee changed from cboltz to lrupp

lrupp wrote:

curl -H "Host: tumbleweed.opensuse.org" http://91.193.113.73
from another machine does indeed not work. I will open a ticket with SUSE-IT to see if they changed some firewall settings.

Thanks!

Question: where (which machine) did you adjust dehydrated?

On provo-mirror, see my comment in ticket #71104 for details.

#4 Updated by cboltz 30 days ago

  • Status changed from Feedback to New

#5 Updated by lrupp 15 days ago

  • Status changed from New to Closed
  • % Done changed from 0 to 100

http://twsnapshot.opensuse.org/ is reachable again (Firewall is no open for Ports 80/tcp and 443/tcp.

Closing here.

Also available in: Atom PDF