X-Recipient: archive-cygwin AT delorie DOT com
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 966B13985463
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1589557646;
	bh=LcKksblzRxIHk7UivIq1BthqdxI5p3F/h1fqQp1kcyY=;
	h=References:In-Reply-To:Date:Subject:To:List-Id:List-Unsubscribe:
	 List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:Cc:
	 From;
	b=HPWJxpnlPvN1t7nvF3w9KlJgUmD3xcv4o5CWE5oKuz5NeuBl4wl+Vd4E1uyW+HMN2
	 1k8d9B6tnYtRVJVN6w3tH2MmvOrQjmgsUk2GdN9g1Gjha1TDL8gWmJxdNdBHdPkdBr
	 jGNVadmIsqbAs/nJ39/shoxKdXLxxYPc8Ru+MRmc=
X-Original-To: cygwin AT cygwin DOT com
Delivered-To: cygwin AT cygwin DOT com
DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org 70E9D398305A
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:mime-version:references:in-reply-to:from:date
 :message-id:subject:to:cc;
 bh=hxjXa3usyu/rOeM9L+bU11nw4t7/yES2rqDUkqmWnwQ=;
 b=NxhAzWBLO+ZuOs6TWKlG+COH7dmhG5l5thPkD1mgOMsFjuLOgufMz43YPrnqA3QUzL
 VCW1eNbi2JNs+/hvp0tXwipfMYVfAB+AM73ER+nYnQr8FQ1u5kEdGyDbQfFwMGklNsA4
 NBidV4YIisTv7Z6FHMxi8NglihhO0AZ+y778Cg2+DhFOKGwAAO8G2C1EEzgQeS1s699H
 NUQleQtXCy+O9nGdTrWpvAKlV715wMoMSqDZbnX0NQotXZLlnOSHJqjClUEZd2WIzrdc
 lfAb+DR1qmYidFQVC+5yClVpnxQDPxfXmIZ2kxFmN7D/vizWtqRcGf8RRk+c14+P621U
 sPbA==
X-Gm-Message-State: AOAM533leJQkhCfOQIDXltZUo1w9b/envAssloAKgvhLPGPSU/spA4uM
 ChF2PyygB5fIhc0XjIUmFns0QdHgkdlY9RvqtKEqc66TAaU=
X-Google-Smtp-Source: ABdhPJx85jBSXg7m2Mhk9Ud5Eow4AP7IvGq8T9XtgBpMHQipoaaJdeu5ayq79s4xS57UYxUxlCdlpmVB0pMgg0KDSNY=
X-Received: by 2002:a02:ce26:: with SMTP id v6mr2430720jar.40.1589557633459;
 Fri, 15 May 2020 08:47:13 -0700 (PDT)
MIME-Version: 1.0
References: <CABTKjsz75FkcPzEeKfZLB59O-j42jYXH2SqX1jDd-vxUoQDAmg AT mail DOT gmail DOT com>
 <97e93adb-4782-40bc-d33c-00c27ed56b74 AT dronecode DOT org DOT uk>
In-Reply-To: <97e93adb-4782-40bc-d33c-00c27ed56b74@dronecode.org.uk>
Date: Fri, 15 May 2020 11:47:01 -0400
Message-ID: <CABTKjszwB9vXZKjKomaiovjGpPV+iK94gA_tazmHfWgKmftVow@mail.gmail.com>
Subject: Re: www.cygwin.com DNS setup
To: Jon Turney <jon DOT turney AT dronecode DOT org DOT uk>
X-Spam-Status: No, score=-3.5 required=5.0 tests=BAYES_00, DKIM_SIGNED,
 DKIM_VALID, HTML_MESSAGE, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS,
 TVD_PH_BODY_ACCOUNTS_PRE, TXREP autolearn=ham autolearn_force=no version=3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on
 server2.sourceware.org
X-Content-Filtered-By: Mailman/MimeDel 2.1.29
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.29
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <http://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From: Chad Kimes via Cygwin <cygwin AT cygwin DOT com>
Reply-To: Chad Kimes <chkimes AT github DOT com>
Cc: The Cygwin Mailing List <cygwin AT cygwin DOT com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: "Cygwin" <cygwin-bounces AT cygwin DOT com>

Thanks Jon!

I see the change went through and I re-ran my validation script a few times
and I don't see the error anymore, which is awesome.

However, I believe my suggestions have inadvertently broken IPv6
connectivity for www.cygwin.com! The CNAME accounts for both A and AAAA
records, but only an A record was added after the CNAME was removed.

To fix this, can you please suggest that the team add an AAAA record
pointing to 2620:52:3:1:0:246e:9693:128c (the address for
server2.sourceware.org)?

Thanks,
-Chad

On Thu, May 14, 2020 at 12:31 PM Jon Turney <jon DOT turney AT dronecode DOT org DOT uk>
wrote:

> On 14/05/2020 16:54, Chad Kimes via Cygwin wrote:
> > Hi all,
> >
> > I'm investigating an issue with GitHub Actions runners having issues
> > connecting to www.cygwin.com:
> > https://github.com/actions/virtual-environments/issues/698
> >
> > I worked with the Azure DNS team and in this comment
> > <
> https://github.com/actions/virtual-environments/issues/698#issuecomment-628284472
> >
> > I
> > detail what we believe to be the likely issue. Summarized:
> >
> > www.cygwin.com is CNAME'd to server2.sourceware.org
> > server2.sourceware.org is an NS server for sourceware.org
> >
> > We believe that the above configuration is triggering a bug in WinDNS
> that
> > is causing intermittent DNS resolution failures. I don't have an ETA for
> > resolution from the Azure DNS team, and internally I'm translating that
> to
> > be on the order of months before we see a fix. In order to resolve this
> > faster for customers, I'm reaching out to see what options we have for
> > updating the DNS records that are triggering this bug.
> >
> > Is there a change you can make to either www.cygwin.com or
> > server2.sourceware.org DNS such that it doesn't have this recursive
> > reference issue? Some options are to replace the CNAME with an A record,
> or
> > to use something like ns2.sourceware.org for the NS record instead of
> > server2.sourceware.org which is being used for cygwin's A record
> reference.
>
> I have drawn the attention of sourceware overseers to this.
>
> They have requested the DNS change you suggest.
>
--
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple