Re: /dev/random is hot garbage

[Roy Marples <roy%marples.name@localhost>]

On 22/07/2019 15:08, Havard Eidnes wrote:
> > > > > ftp://golden-delicious.urc.uninett.no/pub/rust/rust-std-1.35.0-i686-unknown-netbsd.tar.gz
> > > >
> > > > Why is it not on ftp.NetBSD.org, with other bootstrap kits?
> > >
> > > Because copying the bootstrap kits takes forever...
> > > I'm in the process of copying them over, but it's a multi-day
> > > effort.
> >
> > Because scp is blocked waiting for random bits? :)
>
> Heh.
>
> I think there's just some bad network in the middle here.  No
> packet loss, though, but the congestion window nearly never opens
> up above 64KB.  Then there's the application-window in ssh
> itself, but we have the HPN additions on both client and server,
> so it *should* be able to scale that higher than 64KB(?)

FWIW I cannot ssh to any NetBSD machine using my HE IPv6 tunnel.

$ traceroute6 -I ftp.netbsd.org
traceroute6 to ftp.netbsd.org (2001:470:a085:999::21) from 
2001:470:690c:1::61, 64 hops max, 16 byte packets
 1  gw  9.377 ms  9.48 ms  9.498 ms
 2  tunnel391848.tunnel.tserv5.lon1.ipv6.he.net  40.269 ms  69.627 ms 
39.12 ms
 3  10ge3-16.core1.lon2.he.net  29.34 ms  49.477 ms  29.342 ms
 4  100ge13-2.core1.nyc4.he.net  99.374 ms  99.314 ms  100.149 ms
 5  100ge8-1.core1.sjc2.he.net  158.68 ms  159.794 ms  159.318 ms
 6  10ge4-4.core1.sjc1.he.net  170.059 ms  169.074 ms  159.468 ms
 7  e0-50.core4.fmt1.he.net  169.889 ms  168.744 ms  169.616 ms
 8  tserv1.fmt1.he.net  159.497 ms  159.266 ms  168.968 ms
 9  tunnel426-pt.tunnel.tserv1.fmt.ipv6.he.net  159.609 ms  158.634 ms 
159.788 ms
10  ftp.NetBSD.org  159.498 ms  160.065 ms  159.795 ms

$ ping6 ftp.netbsd.org
PING6(56=40+8+8 bytes) 2001:470:690c:1::61 --> 2001:470:a085:999::21
16 bytes from 2001:470:a085:999::21, icmp_seq=0 hlim=55 time=166.232 ms
16 bytes from 2001:470:a085:999::21, icmp_seq=1 hlim=55 time=169.547 ms
^C
--- ftp.netbsd.org ping6 statistics ---
2 packets transmitted, 2 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 166.232/167.889/169.547/2.344 ms

xenity$ ssh -vvv ftp.netbsd.org
OpenSSH_8.0 NetBSD_Secure_Shell-20190418-hpn13v14-lpk, OpenSSL 1.1.1b 
26 Feb 2019
debug1: Reading configuration data /home/roy/.ssh/config
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 55: Applying options for *.netbsd.org
debug2: resolving "ftp.netbsd.org" port 22
debug2: ssh_connect_direct
debug1: Connecting to ftp.netbsd.org [2001:470:a085:999::21] port 22.

Hangs for a long time before falling back to IPv4 where it works 
perfectly. Oddly, I can ssh using IPv6 from these NetBSD hosts back to 
me so I have nfc why this is.

So, try forcing scp over IPv4 maybe?

Roy