Hi,
We are hosting centos.hostingxtreme.com
The cron is running perfectly and is showing all files are uptodate. See log attached.
However, the status shows that we are lagging by 2.9 days. http://mirror-status.centos.org/
Are the probe servers being blocked? How could we verify what the issue is?
Ruzbeh.
-- Thanks,
The HostingXtreme Support Team http://hostingxtreme.com
On Mon, May 13, 2013 at 10:28 AM, Info | HostingXtreme.com < info@hostingxtreme.com> wrote:
Hi,
We are hosting centos.hostingxtreme.com
The cron is running perfectly and is showing all files are uptodate.
However, the status shows that we are lagging by 2.9 days. http://mirror-status.centos.org/
Are the probe servers being blocked? How could we verify what the issue is?
Ruzbeh.
-- Thanks,
The HostingXtreme Support Team http://hostingxtreme.com
On 05/13/2013 03:55 AM, Info | HostingXtreme.com wrote:
On Mon, May 13, 2013 at 10:28 AM, Info | HostingXtreme.com <info@hostingxtreme.com mailto:info@hostingxtreme.com> wrote:
Hi, We are hosting centos.hostingxtreme.com <http://centos.hostingxtreme.com> The cron is running perfectly and is showing all files are uptodate. However, the status shows that we are lagging by 2.9 days. http://mirror-status.centos.org/ Are the probe servers being blocked? How could we verify what the issue is?
It looks OK now (9 hours since the last sync)
Yes. Its fine now.
What could the issue have been? Is our firewall blocking the probe servers?
Ruzbeh.
-- Thanks,
The HostingXtreme Support Team http://hostingxtreme.com
On Mon, May 13, 2013 at 9:48 PM, Johnny Hughes johnny@centos.org wrote:
On 05/13/2013 03:55 AM, Info | HostingXtreme.com wrote:
On Mon, May 13, 2013 at 10:28 AM, Info | HostingXtreme.com <info@hostingxtreme.com mailto:info@hostingxtreme.com> wrote:
Hi, We are hosting centos.hostingxtreme.com <http://centos.hostingxtreme.com> The cron is running perfectly and is showing all files are uptodate. However, the status shows that we are lagging by 2.9 days. http://mirror-status.centos.org/ Are the probe servers being blocked? How could we verify what the issue is?It looks OK now (9 hours since the last sync)
CentOS-mirror mailing list CentOS-mirror@centos.org http://lists.centos.org/mailman/listinfo/centos-mirror
The same thing is repeating. The mirror monitor is showing our mirror status incorrectly again.
http://mirror-status.centos.org/#us
centos.hostingxtreme.com
I am suspecting that the probe servers are being blocked by our firewall.
On Tue, May 14, 2013 at 9:04 AM, Info | HostingXtreme.com < info@hostingxtreme.com> wrote:
Yes. Its fine now.
What could the issue have been? Is our firewall blocking the probe servers?
Ruzbeh.
-- Thanks,
The HostingXtreme Support Team http://hostingxtreme.com
On Mon, May 13, 2013 at 9:48 PM, Johnny Hughes johnny@centos.org wrote:
On 05/13/2013 03:55 AM, Info | HostingXtreme.com wrote:
On Mon, May 13, 2013 at 10:28 AM, Info | HostingXtreme.com <info@hostingxtreme.com mailto:info@hostingxtreme.com> wrote:
Hi, We are hosting centos.hostingxtreme.com <http://centos.hostingxtreme.com> The cron is running perfectly and is showing all files are uptodate. However, the status shows that we are lagging by 2.9 days. http://mirror-status.centos.org/ Are the probe servers being blocked? How could we verify what the issue is?It looks OK now (9 hours since the last sync)
CentOS-mirror mailing list CentOS-mirror@centos.org http://lists.centos.org/mailman/listinfo/centos-mirror
I think your web server is responding too slow. It takes 11 seconds for me to download http://centos.hostingxtreme.com/
Downloading specific files or browsing other directories seem accpetable but 11 seconds for / is probably timing out.
If / is part of the health check, that might be the problem. Any idea why your site is so slow for the top level directory?
________________________________ From: centos-mirror-bounces@centos.org [centos-mirror-bounces@centos.org] on behalf of Info | HostingXtreme.com [info@hostingxtreme.com] Sent: Thursday, May 16, 2013 10:56 AM To: Mailing list for CentOS mirrors. Subject: Re: [CentOS-mirror] Mirror Status incorrect?
The same thing is repeating. The mirror monitor is showing our mirror status incorrectly again.
http://mirror-status.centos.org/#us
centos.hostingxtreme.comhttp://centos.hostingxtreme.com
I am suspecting that the probe servers are being blocked by our firewall.
On Tue, May 14, 2013 at 9:04 AM, Info | HostingXtreme.com <info@hostingxtreme.commailto:info@hostingxtreme.com> wrote: Yes. Its fine now.
What could the issue have been? Is our firewall blocking the probe servers?
Ruzbeh.
-- Thanks,
[http://hostingxtreme.com/hostingx.gif]
The HostingXtreme Support Team http://hostingxtreme.com
On Mon, May 13, 2013 at 9:48 PM, Johnny Hughes <johnny@centos.orgmailto:johnny@centos.org> wrote: On 05/13/2013 03:55 AM, Info | HostingXtreme.com wrote:
On Mon, May 13, 2013 at 10:28 AM, Info | HostingXtreme.com <info@hostingxtreme.commailto:info@hostingxtreme.com <mailto:info@hostingxtreme.commailto:info@hostingxtreme.com>> wrote:
Hi, We are hosting centos.hostingxtreme.com<http://centos.hostingxtreme.com> <http://centos.hostingxtreme.com> The cron is running perfectly and is showing all files are uptodate. However, the status shows that we are lagging by 2.9 days. http://mirror-status.centos.org/ Are the probe servers being blocked? How could we verify what the issue is?
It looks OK now (9 hours since the last sync)
_______________________________________________ CentOS-mirror mailing list CentOS-mirror@centos.orgmailto:CentOS-mirror@centos.org http://lists.centos.org/mailman/listinfo/centos-mirror
I traced the mirror status probe server to 72.232.223.58 (US/United States/ 58.223.232.72.static.reverse.ltdomains.com)
Whitelisting this IP in the firewall has got it to show up again. Not sure how many other Probe IPs are there.
I am still looking into the reason why the "/" page is taking long to appear.
-- Thanks, Ruzbeh
The HostingXtreme Support Team http://hostingxtreme.com
On Fri, May 17, 2013 at 8:22 PM, Lauro, John jlauro@umflint.edu wrote:
I think your web server is responding too slow. It takes 11 seconds for me to download http://centos.hostingxtreme.com/
Downloading specific files or browsing other directories seem accpetable but 11 seconds for / is probably timing out.
If / is part of the health check, that might be the problem. Any idea why your site is so slow for the top level directory?
From: centos-mirror-bounces@centos.org [centos-mirror-bounces@centos.org] on behalf of Info | HostingXtreme.com [info@hostingxtreme.com] Sent: Thursday, May 16, 2013 10:56 AM To: Mailing list for CentOS mirrors. Subject: Re: [CentOS-mirror] Mirror Status incorrect?
The same thing is repeating. The mirror monitor is showing our mirror status incorrectly again.
http://mirror-status.centos.org/#us
centos.hostingxtreme.comhttp://centos.hostingxtreme.com
I am suspecting that the probe servers are being blocked by our firewall.
On Tue, May 14, 2013 at 9:04 AM, Info | HostingXtreme.com < info@hostingxtreme.commailto:info@hostingxtreme.com> wrote: Yes. Its fine now.
What could the issue have been? Is our firewall blocking the probe servers?
Ruzbeh.
-- Thanks,
[http://hostingxtreme.com/hostingx.gif]
The HostingXtreme Support Team http://hostingxtreme.com
On Mon, May 13, 2013 at 9:48 PM, Johnny Hughes <johnny@centos.orgmailto: johnny@centos.org> wrote: On 05/13/2013 03:55 AM, Info | HostingXtreme.com wrote:
On Mon, May 13, 2013 at 10:28 AM, Info | HostingXtreme.com <info@hostingxtreme.commailto:info@hostingxtreme.com <mailto:
info@hostingxtreme.commailto:info@hostingxtreme.com>> wrote:
Hi, We are hosting centos.hostingxtreme.com<http://centos.hostingxtreme.com%3E
<http://centos.hostingxtreme.com> The cron is running perfectly and is showing all files are uptodate. However, the status shows that we are lagging by 2.9 days. http://mirror-status.centos.org/ Are the probe servers being blocked? How could we verify what the issue is?It looks OK now (9 hours since the last sync)
CentOS-mirror mailing list CentOS-mirror@centos.orgmailto:CentOS-mirror@centos.org http://lists.centos.org/mailman/listinfo/centos-mirror
CentOS-mirror mailing list CentOS-mirror@centos.org http://lists.centos.org/mailman/listinfo/centos-mirror
Whitelisting the IP address of the mirror prober is not a winning strategy. If you have some sort of an automated firewall setup blocking "suspicious" requests, and that ends up blocking the mirror prober, there's a very good chance that it'll block legitimate mirror users as well.
If I were you, I'd have a look at your firewall logs and determine the reason why that IP address was blocked (if that was even the case).
As for the slowdowns, the most common explanation is some sort of a DNS problem. Are you perhaps denying access to your mirror from some networks based on reverse DNS?
It takes me 11 seconds to retrieve the root directory of your mirror as well.
Info | HostingXtreme.com kirjoitti:
I traced the mirror status probe server to 72.232.223.58 (US/United States/58.223.232.72.static.reverse.ltdomains.com
Whitelisting this IP in the firewall has got it to show up again. Not sure how many other Probe IPs are there.
I am still looking into the reason why the "/" page is taking long to appear.
-- Thanks, Ruzbeh
The HostingXtreme Support Team http://hostingxtreme.com
On Fri, May 17, 2013 at 8:22 PM, Lauro, John <jlauro@umflint.edu mailto:jlauro@umflint.edu> wrote:
I think your web server is responding too slow. It takes 11 seconds for me to download http://centos.hostingxtreme.com/ Downloading specific files or browsing other directories seem accpetable but 11 seconds for / is probably timing out. If / is part of the health check, that might be the problem. Any idea why your site is so slow for the top level directory? ________________________________ From: centos-mirror-bounces@centos.org <mailto:centos-mirror-bounces@centos.org> [centos-mirror-bounces@centos.org <mailto:centos-mirror-bounces@centos.org>] on behalf of Info | HostingXtreme.com [info@hostingxtreme.com <mailto:info@hostingxtreme.com>] Sent: Thursday, May 16, 2013 10:56 AM To: Mailing list for CentOS mirrors. Subject: Re: [CentOS-mirror] Mirror Status incorrect? The same thing is repeating. The mirror monitor is showing our mirror status incorrectly again. http://mirror-status.centos.org/#us centos.hostingxtreme.com <http://centos.hostingxtreme.com><http://centos.hostingxtreme.com> I am suspecting that the probe servers are being blocked by our firewall. On Tue, May 14, 2013 at 9:04 AM, Info | HostingXtreme.com <info@hostingxtreme.com <mailto:info@hostingxtreme.com><mailto:info@hostingxtreme.com <mailto:info@hostingxtreme.com>>> wrote: Yes. Its fine now. What could the issue have been? Is our firewall blocking the probe servers? Ruzbeh. -- Thanks, [http://hostingxtreme.com/hostingx.gif] The HostingXtreme Support Team http://hostingxtreme.com On Mon, May 13, 2013 at 9:48 PM, Johnny Hughes <johnny@centos.org <mailto:johnny@centos.org><mailto:johnny@centos.org <mailto:johnny@centos.org>>> wrote: On 05/13/2013 03:55 AM, Info | HostingXtreme.com wrote: > On Mon, May 13, 2013 at 10:28 AM, Info | HostingXtreme.com > <info@hostingxtreme.com <mailto:info@hostingxtreme.com><mailto:info@hostingxtreme.com <mailto:info@hostingxtreme.com>> <mailto:info@hostingxtreme.com <mailto:info@hostingxtreme.com><mailto:info@hostingxtreme.com <mailto:info@hostingxtreme.com>>>> wrote: > > Hi, > > We are hosting centos.hostingxtreme.com <http://centos.hostingxtreme.com><http://centos.hostingxtreme.com> > <http://centos.hostingxtreme.com> > > The cron is running perfectly and is showing all files are uptodate. > > > > However, the status shows that we are lagging by 2.9 > days. http://mirror-status.centos.org/ > > Are the probe servers being blocked? How could we verify what the > issue is? > It looks OK now (9 hours since the last sync) _______________________________________________ CentOS-mirror mailing list CentOS-mirror@centos.org <mailto:CentOS-mirror@centos.org><mailto:CentOS-mirror@centos.org <mailto:CentOS-mirror@centos.org>> http://lists.centos.org/mailman/listinfo/centos-mirror _______________________________________________ CentOS-mirror mailing list CentOS-mirror@centos.org <mailto:CentOS-mirror@centos.org> http://lists.centos.org/mailman/listinfo/centos-mirror
CentOS-mirror mailing list CentOS-mirror@centos.org http://lists.centos.org/mailman/listinfo/centos-mirror
On 20.05.2013 08:47, Info | HostingXtreme.com wrote:
I traced the mirror status probe server to 72.232.223.58 (US/United States/ 58.223.232.72.static.reverse.ltdomains.com)
Whitelisting this IP in the firewall has got it to show up again. Not sure how many other Probe IPs are there.
That should be the only probing IP. But as it is doing http and/or ftp connects on a *public* mirror, it shouldn't be in a blacklist anyway (or firewalled), as it behaves as a normal client.
It checks for the two timestamp files in the / of your mirror.
Regards,
Ralph
Right. It was mod_security's suspicious User-Agent rule that was triggering the firewall block.
[Mon May 13 23:27:28 2013] [error] [client 72.232.223.58] ModSecurity: Access denied with code 403 (phase 2). Match of "rx (^w3c-|systran\\))" against "REQUEST_HEADERS:User-Agent" required. [file "/usr/local/apache/conf/modsec_rules/20_asl_useragents.conf"] [line "130"] [id "330039"] [rev "4"] [msg "Atomicorp.com UNSUPPORTED DELAYED Rules: Suspicious Unusual User Agent (libwww-perl). Disable this rule if you use libwww-perl. "] [severity "CRITICAL"] [hostname "centos.hostingxtreme.com"] [uri "/6.3/os/i386/repodata/repomd.xml"] [unique_id "UZEpiM7eFzIAC1GSBYMAAAAL"]
This was the only IP blocked for this subdomain, so legitimate users should not be getting affected. I have disabled that rule for this subdomain.
As far as the slowdown is concerned, we do not have any block based on DNS / rDNS / region / location etc. In all the test tools etc, the DNS does not seem to be the problem.
Wait 83.19% Connect 8.53% SSL 6.04% DNS 2.23% Receive 0.01% Send 0.00%
Any other suggestions welcome.
Ruzbeh.
On Tue, May 21, 2013 at 2:28 AM, Ralph Angenendt ralph.angenendt@gmail.comwrote:
On 20.05.2013 08:47, Info | HostingXtreme.com wrote:
I traced the mirror status probe server to 72.232.223.58 (US/United
States/
58.223.232.72.static.reverse.ltdomains.com)
Whitelisting this IP in the firewall has got it to show up again. Not
sure
how many other Probe IPs are there.
That should be the only probing IP. But as it is doing http and/or ftp connects on a *public* mirror, it shouldn't be in a blacklist anyway (or firewalled), as it behaves as a normal client.
It checks for the two timestamp files in the / of your mirror.
Regards,
Ralph
CentOS-mirror mailing list CentOS-mirror@centos.org http://lists.centos.org/mailman/listinfo/centos-mirror
-
Anssi Johansson -
Info | HostingXtreme.com -
Johnny Hughes -
Lauro, John -
Ralph Angenendt