GMail IPv6 IMAP Issue, or is it Just Me?

Brant Ian Stevens branto at argentiumsolutions.com
Sun Jun 2 12:34:43 UTC 2013


It started flowing shortly after I sent the initial message...  Thanks 
to all who answered.

> Mike Tancsa <mailto:mike at sentex.net>
> June 1, 2013 9:43 PM
>
>
> Looks ok for me via Toronto, Ont, Canada
>
> 0(marble)% host imap.gmail.com
> imap.gmail.com is an alias for gmail-imap.l.google.com.
> gmail-imap.l.google.com has address 74.125.142.108
> gmail-imap.l.google.com has address 74.125.142.109
> gmail-imap.l.google.com has IPv6 address 2607:f8b0:4003:c01::6c
> 0(marble)%
>
> % traceroute6 -q1 2607:f8b0:4003:c01::6c
> traceroute6 to 2607:f8b0:4003:c01::6c (2607:f8b0:4003:c01::6c) from
> 2607:f3e0::2, 64 hops max, 12 byte packets
> 1 iolite4-6 0.560 ms
> 2 toronto-torix-6 4.678 ms
> 3 he.ip6.torontointernetxchange.net 3.793 ms
> 4 2001:478:245:1::6 5.810 ms
> 5 2001:4860::1:0:e38 3.471 ms
> 6 2001:4860::8:0:2fe9 16.342 ms
> 7 2001:4860::8:0:29ee 31.341 ms
> 8 2001:4860::2:0:95e 31.340 ms
> 9 *
> 10 ob-in-x6c.1e100.net 30.584 ms
>
>
> 1(marble)% openssl s_client -host imap.gmail.com -port 993
> CONNECTED(00000003)
> depth=1 /C=US/O=Google Inc/CN=Google Internet Authority
> verify error:num=20:unable to get local issuer certificate
> verify return:0
> ---
> Certificate chain
> 0 s:/C=US/ST=California/L=Mountain View/O=Google Inc/CN=imap.gmail.com
> i:/C=US/O=Google Inc/CN=Google Internet Authority
> 1 s:/C=US/O=Google Inc/CN=Google Internet Authority
> i:/C=US/O=Equifax/OU=Equifax Secure Certificate Authority
> ---
> Server certificate
> -----BEGIN CERTIFICATE-----
> MIIDgDCCAumgAwIBAgIKVEsbtQABAACELjANBgkqhkiG9w0BAQUFADBGMQswCQYD
> VQQGEwJVUzETMBEGA1UEChMKR29vZ2xlIEluYzEiMCAGA1UEAxMZR29vZ2xlIElu
> dGVybmV0IEF1dGhvcml0eTAeFw0xMzA0MTUwODQ0MDBaFw0xMzEyMzExNTU4NTBa
> MGgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1N
> b3VudGFpbiBWaWV3MRMwEQYDVQQKEwpHb29nbGUgSW5jMRcwFQYDVQQDEw5pbWFw
> LmdtYWlsLmNvbTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA3a/wUjZBSOgZ
> EeyRqaSaKEwS8+1y/8AK9HdplSR72PU+iBc7HyA4aXgD6XYEJVoyGsO97nMj+oeN
> 2iNvKfkPvTrn2YnQfJLuxpEw9gwIHvwVqy3TNpHwt4DHnxOg5CxV8e7PaCAhAXD+
> uj0H09aVFJmfYDnU0VSSukNJX2MZSJUCAwEAAaOCAVEwggFNMB0GA1UdJQQWMBQG
> CCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQUY9A6EExy3NNFBc2R0vrY8lpf
> OB8wHwYDVR0jBBgwFoAUv8Aw6/VDET5nup6R+/xq2uNrEiQwWwYDVR0fBFQwUjBQ
> oE6gTIZKaHR0cDovL3d3dy5nc3RhdGljLmNvbS9Hb29nbGVJbnRlcm5ldEF1dGhv
> cml0eS9Hb29nbGVJbnRlcm5ldEF1dGhvcml0eS5jcmwwZgYIKwYBBQUHAQEEWjBY
> MFYGCCsGAQUFBzAChkpodHRwOi8vd3d3LmdzdGF0aWMuY29tL0dvb2dsZUludGVy
> bmV0QXV0aG9yaXR5L0dvb2dsZUludGVybmV0QXV0aG9yaXR5LmNydDAMBgNVHRMB
> Af8EAjAAMBkGA1UdEQQSMBCCDmltYXAuZ21haWwuY29tMA0GCSqGSIb3DQEBBQUA
> A4GBAAcrDCcXCKZ2VNcJv31SSXTKs1AH0sU1lvAB0kzy3mIB/H8UHvMz1+T3Lfmy
> 68bqBSM97W6MO6UiqmVvbMhwPBrktUVT/Q4cWskVf2MONrW3g0UtX47L1ocs/WZe
> XdUTkjQ3EFCzxpw4joHefndfZHsEn0VrjZR49kzR9+1Me7Rz
> -----END CERTIFICATE-----
> subject=/C=US/ST=California/L=Mountain View/O=Google Inc/CN=imap.gmail.com
> issuer=/C=US/O=Google Inc/CN=Google Internet Authority
> ---
> No client certificate CA names sent
> ---
> SSL handshake has read 1752 bytes and written 325 bytes
> ---
> New, TLSv1/SSLv3, Cipher is RC4-SHA
> Server public key is 1024 bit
> Secure Renegotiation IS supported
> Compression: NONE
> Expansion: NONE
> SSL-Session:
> Protocol : TLSv1
> Cipher : RC4-SHA
> Session-ID:
> 881124D0017ADA0B7D8CEB26ECBCBCF86AF8A593600858D165164A17B2C0C652
> Session-ID-ctx:
> Master-Key:
> 667BDFF99C7FE7733C8CB36FE2F73C76380DE2AC9453A0D3D621E39CE64EC1259BC8AB8FE65C425E15BCA467B80FD274
> Key-Arg : None
> Start Time: 1370137039
> Timeout : 300 (sec)
> Verify return code: 20 (unable to get local issuer certificate)
> ---
> * OK Gimap ready for requests from 199.212.134.2 bj1if1491559oac.162
> ^C
> 1(marble)%
> Stevens, Brant I. <mailto:branto at argentiumsolutions.com>
> June 1, 2013 1:53 PM
> Is anyone else having issues reaching GMail on IPv6 via IMAP, or is it 
> just
> me?
>
> Here's some of what I'm seeing:
>
> It responds to ping...
>
> imac01:~ branto$ ping6 imap.gmail.com
> PING6(56=40+8+8 bytes) 2001:470:8d30:b00c::bb0e --> 2607:f8b0:400d:c00::6c
> 16 bytes from 2607:f8b0:400d:c00::6c, icmp_seq=0 hlim=55 time=31.299 ms
> 16 bytes from 2607:f8b0:400d:c00::6c, icmp_seq=1 hlim=55 time=41.528 ms
> 16 bytes from 2607:f8b0:400d:c00::6c, icmp_seq=2 hlim=55 time=30.092 ms
> 16 bytes from 2607:f8b0:400d:c00::6c, icmp_seq=3 hlim=55 time=35.450 ms
> ^C
> --- gmail-imap.l.google.com ping6 statistics ---
> 4 packets transmitted, 4 packets received, 0.0% packet loss
> round-trip min/avg/max/std-dev = 30.092/34.592/41.528/4.470 ms
>
>
> TCP Sessions on v6 seem to time-out:
>
> imac01:~ branto$ telnet -6 imap.gmail.com 993
> Trying 2607:f8b0:400d:c01::6c...
> telnet: connect to address 2607:f8b0:400d:c01::6c: Operation timed out
> telnet: Unable to connect to remote host
>
> IPv4 Connects:
>
> imac01:~ branto$ telnet -4 imap.gmail.com 993
> Trying 173.194.76.108...
> Connected to gmail-imap.l.google.com.
> Escape character is '^]'.
>
> ^]
> telnet> close
> Connection closed.
>
> and other connectivity via IPv6 works:
>
> imac01:~ branto$ telnet -6 www.google.com 80
> Trying 2607:f8b0:400c:c04::68...
> Connected to www.google.com.
> Escape character is '^]'.
>
> GET /
> HTTP/1.0 200 OK
> Date: Sat, 01 Jun 2013 17:08:58 GMT
>
> <snip>
>
> Connection closed by foreign host.
>
> I've tried flushing my dnscache to make sure I'm not holding on to
> something that's not valid, but no dice.
>
> -Brant



More information about the NANOG mailing list