nanog mailing list archives

Re: GMail IPv6 IMAP Issue, or is it Just Me?


From: Brant Ian Stevens <branto () argentiumsolutions com>
Date: Sun, 02 Jun 2013 08:34:43 -0400

It started flowing shortly after I sent the initial message... Thanks to all who answered.

Mike Tancsa <mailto:mike () sentex net>
June 1, 2013 9:43 PM


Looks ok for me via Toronto, Ont, Canada

0(marble)% host imap.gmail.com
imap.gmail.com is an alias for gmail-imap.l.google.com.
gmail-imap.l.google.com has address 74.125.142.108
gmail-imap.l.google.com has address 74.125.142.109
gmail-imap.l.google.com has IPv6 address 2607:f8b0:4003:c01::6c
0(marble)%

% traceroute6 -q1 2607:f8b0:4003:c01::6c
traceroute6 to 2607:f8b0:4003:c01::6c (2607:f8b0:4003:c01::6c) from
2607:f3e0::2, 64 hops max, 12 byte packets
1 iolite4-6 0.560 ms
2 toronto-torix-6 4.678 ms
3 he.ip6.torontointernetxchange.net 3.793 ms
4 2001:478:245:1::6 5.810 ms
5 2001:4860::1:0:e38 3.471 ms
6 2001:4860::8:0:2fe9 16.342 ms
7 2001:4860::8:0:29ee 31.341 ms
8 2001:4860::2:0:95e 31.340 ms
9 *
10 ob-in-x6c.1e100.net 30.584 ms


1(marble)% openssl s_client -host imap.gmail.com -port 993
CONNECTED(00000003)
depth=1 /C=US/O=Google Inc/CN=Google Internet Authority
verify error:num=20:unable to get local issuer certificate
verify return:0
---
Certificate chain
0 s:/C=US/ST=California/L=Mountain View/O=Google Inc/CN=imap.gmail.com
i:/C=US/O=Google Inc/CN=Google Internet Authority
1 s:/C=US/O=Google Inc/CN=Google Internet Authority
i:/C=US/O=Equifax/OU=Equifax Secure Certificate Authority
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=US/ST=California/L=Mountain View/O=Google Inc/CN=imap.gmail.com
issuer=/C=US/O=Google Inc/CN=Google Internet Authority
---
No client certificate CA names sent
---
SSL handshake has read 1752 bytes and written 325 bytes
---
New, TLSv1/SSLv3, Cipher is RC4-SHA
Server public key is 1024 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : TLSv1
Cipher : RC4-SHA
Session-ID:
881124D0017ADA0B7D8CEB26ECBCBCF86AF8A593600858D165164A17B2C0C652
Session-ID-ctx:
Master-Key:
667BDFF99C7FE7733C8CB36FE2F73C76380DE2AC9453A0D3D621E39CE64EC1259BC8AB8FE65C425E15BCA467B80FD274
Key-Arg : None
Start Time: 1370137039
Timeout : 300 (sec)
Verify return code: 20 (unable to get local issuer certificate)
---
* OK Gimap ready for requests from 199.212.134.2 bj1if1491559oac.162
^C
1(marble)%
Stevens, Brant I. <mailto:branto () argentiumsolutions com>
June 1, 2013 1:53 PM
Is anyone else having issues reaching GMail on IPv6 via IMAP, or is it just
me?

Here's some of what I'm seeing:

It responds to ping...

imac01:~ branto$ ping6 imap.gmail.com
PING6(56=40+8+8 bytes) 2001:470:8d30:b00c::bb0e --> 2607:f8b0:400d:c00::6c
16 bytes from 2607:f8b0:400d:c00::6c, icmp_seq=0 hlim=55 time=31.299 ms
16 bytes from 2607:f8b0:400d:c00::6c, icmp_seq=1 hlim=55 time=41.528 ms
16 bytes from 2607:f8b0:400d:c00::6c, icmp_seq=2 hlim=55 time=30.092 ms
16 bytes from 2607:f8b0:400d:c00::6c, icmp_seq=3 hlim=55 time=35.450 ms
^C
--- gmail-imap.l.google.com ping6 statistics ---
4 packets transmitted, 4 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 30.092/34.592/41.528/4.470 ms


TCP Sessions on v6 seem to time-out:

imac01:~ branto$ telnet -6 imap.gmail.com 993
Trying 2607:f8b0:400d:c01::6c...
telnet: connect to address 2607:f8b0:400d:c01::6c: Operation timed out
telnet: Unable to connect to remote host

IPv4 Connects:

imac01:~ branto$ telnet -4 imap.gmail.com 993
Trying 173.194.76.108...
Connected to gmail-imap.l.google.com.
Escape character is '^]'.

^]
telnet> close
Connection closed.

and other connectivity via IPv6 works:

imac01:~ branto$ telnet -6 www.google.com 80
Trying 2607:f8b0:400c:c04::68...
Connected to www.google.com.
Escape character is '^]'.

GET /
HTTP/1.0 200 OK
Date: Sat, 01 Jun 2013 17:08:58 GMT

<snip>

Connection closed by foreign host.

I've tried flushing my dnscache to make sure I'm not holding on to
something that's not valid, but no dice.

-Brant


Current thread: