Dear @marcan42, it is only a minor issue in comparison to the great challanges in your great project @AsahiLinux. https://asahilinux.org/ does not support #IPv6 because it has no AAAA-records. Fastly supports it, so it should be a matter of minutes:https://docs.fastly.com/en/guides/ipv6-support …
-
-
Replying to @LTE_Max @AsahiLinux
This is an unfortunate
@GitHub pages limitation, and I do not currently need a CDN in front. All of my self-hosted services (including the MX for that domain) do have AAAA records. You should direct your feedback to GitHub :-)2 replies 0 retweets 15 likes -
It seems there *may* be some undocumented AAAA records I can use, so I'll poke around a bit.
1 reply 0 retweets 3 likes -
Sorry, just saw Fastly, I did not know they offer this with GitHub.
1 reply 0 retweets 0 likes -
@github also uses fastly. Their http://raw.githubusercontent.com can be accessed over IPv6. They just don't publish AAAA.1 reply 0 retweets 1 like -
I'm getting unclear information as to whether that works with custom domains, though. Let's see.
1 reply 0 retweets 1 like -
Nope. The problem is finding an IPv6 that serves the right certificate, if one exists at all. openssl </dev/null 2>&1 s_client -servername http://asahilinux.org -port 443 -host 185.199.109.153 | grep depth=0 Find me an IPv6 that returns the right cert and I'll add an AAAA :)
1 reply 0 retweets 1 like -
The cert should depend on the domain name, not on the IP? But probably I misunderstand the way all this works with github user pages.
1 reply 0 retweets 1 like -
I consider them using magic since they can’t just flip a switch to enable IPv6 at all. There might be selfbotched webservers and maybe logging/monitoring without IPv6 support at all.
1 reply 0 retweets 1 like
The specific SNI mappings presumably have to be enabled for specific Fastly endpoints, so even if a random endpoint still routes you to the right backend via their infra, it won't serve the right cert, and thus won't work with HTTPS.
-
-
Replying to @marcan42 @connectChris and
Yep, tried it. IPv6 should be 2a04:4e42::133 (at least from my location). However, the cert served over this IP is only valid for different tastes of "github". So, unless using another CDN in front, there doesn't seem to be a way right now.
0 replies 0 retweets 1 likeThanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.