Looking for support.netapp.com contact

Bernhard Schmidt berni at birkenwald.de
Wed Apr 3 20:03:20 CEST 2013


Hey,

today I had the first "we enabled IPv6 and $something is really broken" 
incident for months, if not years. https://support.netapp.com connects, 
sends a certificate and then just hangs. Of course this does not trigger 
any failover, so the site was completely broken from the user 
perspective. Not too happy to introduce them to 
network.dns.ipv4OnlyDomains in Firefox :-(

I don't think it's pMTU discovery because it happens with MSS 1220 as 
well, and the certificate which makes it through is quite big. Maybe 
broken reverse proxy or something like that. Verified to be broken from 
all NLNOG RING nodes.

berni at pest:~$ curl -v https://support.netapp.com
* About to connect() to support.netapp.com port 443 (#0)
*   Trying 2620:10a:4001:4000::a16...
* connected
* Connected to support.netapp.com (2620:10a:4001:4000::a16) port 443 (#0)
* successfully set certificate verify locations:
*   CAfile: none
   CApath: /etc/ssl/certs
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS handshake, Server finished (14):
* SSLv3, TLS handshake, Client key exchange (16):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSL connection using AES256-SHA
* Server certificate:
* 	 subject: C=US; ST=California; L=Sunnyvale; O=NetApp; OU=IT1 ; 
CN=support.netapp.com
* 	 start date: 2012-12-17 00:00:00 GMT
* 	 expire date: 2014-12-18 23:59:59 GMT
* 	 subjectAltName: support.netapp.com matched
* 	 issuer: C=US; O=VeriSign, Inc.; OU=VeriSign Trust Network; OU=Terms 
of use at https://www.verisign.com/rpa (c)10; CN=VeriSign Class 3 
International Server CA - G3
* 	 SSL certificate verify ok.
 > GET / HTTP/1.1
 > User-Agent: curl/7.26.0
 > Host: support.netapp.com
 > Accept: */*
 >
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* additional stuff not fine transfer.c:1037: 0 0
* SSL read: error:00000000:lib(0):func(0):reason(0), errno 104
* Closing connection #0


Does anyone have any usable contact there to fix this up?

Regards,
Bernhard


More information about the ipv6-ops mailing list