Fedora websites are slow in Germany (Europe?) - also the static ones, which should be fast, because they're static, e.g. http://fpaste.org/paste/19309. But when explicitly querying proxy5 at Telia located in Germany, speed is excellent, e.g. http://fpaste.org/paste/19311. Notice, that loading pages via https from the US makes the requests up to twice slower. As e.g. http://fedoraproject.org now includes images via https, this is making things not better for German (European?) users.
{{{ 64 bytes from 80.239.156.214: icmp_seq=2 ttl=57 time=0.834 ms 64 bytes from 66.35.62.162: icmp_seq=4 ttl=41 time=180 ms 64 bytes from 209.132.176.122: icmp_seq=2 ttl=98 time=278 ms 64 bytes from 152.46.7.221: icmp_seq=4 ttl=45 time=179 ms }}}
{{{ [00:46:48] < ricky> Apparently mediawiki uses powerdns which has a geo backend [00:47:25] < rsc> ricky: but that only helps, if NS of fedoraproject.org are using powerdns? [00:47:58] < ricky> Yes. [00:48:01] < ricky> We're currently using bind [00:48:37] < rsc> and both of the DNS are in the US, funky. [00:50:02] < rsc> ricky: I don't know how the geobackend of powerdns works, but I assume, it returns an IP address more near to me or that one more often? [00:50:25] < ricky> I think so, I know it has been discussed here before but I haven't looked into it before. [00:51:25] < rsc> maybe we also can get/put a ns3 to Telia (DE) and combine that with powerdns+geobackend. Or at least investigate to that, whether it speeds up things. [00:52:29] < smooge> rsc, ricky yes thats what it does [00:52:59] < rsc> as far as I can see, wikimedia uses powerdns+bindbackend+geobackend [00:53:10] < smooge> it works well in some situations and others it can cause problems.. like where yes germany is close to denmark but has to go to US to get there [00:53:29] < smooge> but a lot of thats been fixed in the last couple of years }}}
{{{ $ time LANG=C wget -S http://fedoraproject.org/static/images/banners/f11release.png --00:23:23-- http://fedoraproject.org/static/images/banners/f11release.png => `f11release.png.7' Resolving fedoraproject.org... 209.132.176.122, 66.35.62.162, 80.239.156.214, ... Connecting to fedoraproject.org|209.132.176.122|:80... connected. HTTP request sent, awaiting response... HTTP/1.1 200 OK Date: Mon, 20 Jul 2009 22:23:23 GMT Server: Apache/2.2.3 (Red Hat) Last-Modified: Mon, 20 Jul 2009 21:04:00 GMT ETag: "ff9f0-b171-7a1e7000" Accept-Ranges: bytes Content-Length: 45425 Cache-Control: max-age=21600 Expires: Tue, 21 Jul 2009 04:05:09 GMT ProxyTime: D=269 ProxyServer: proxy1.fedora.phx.redhat.com Age: 1094 Keep-Alive: timeout=15, max=500 Connection: Keep-Alive Content-Type: image/png Length: 45,425 (44K) [image/png]
100%[=================================================================================================================>] 45,425 47.75K/s
00:23:24 (47.67 KB/s) - `f11release.png' saved [45425/45425]
real 0m1.483s user 0m0.004s sys 0m0.000s $
$ time LANG=C wget -S https://fedoraproject.org/static/images/banners/f11release.png --00:24:28-- https://fedoraproject.org/static/images/banners/f11release.png => `f11release.png.17' Resolving fedoraproject.org... 209.132.176.122, 66.35.62.162, 80.239.156.214, ... Connecting to fedoraproject.org|209.132.176.122|:443... connected. HTTP request sent, awaiting response... HTTP/1.1 200 OK Date: Mon, 20 Jul 2009 22:24:29 GMT Server: Apache/2.2.3 (Red Hat) Last-Modified: Mon, 20 Jul 2009 22:01:50 GMT ETag: "e7c45-b171-48f26f80" Accept-Ranges: bytes Content-Length: 45425 Cache-Control: max-age=21600 Expires: Tue, 21 Jul 2009 04:19:03 GMT ProxyTime: D=273 ProxyServer: proxy2.fedora.phx.redhat.com Age: 325 Keep-Alive: timeout=15, max=500 Connection: Keep-Alive Content-Type: image/png Length: 45,425 (44K) [image/png]
100%[=================================================================================================================>] 45,425 18.80K/s
00:24:32 (18.79 KB/s) - `f11release.png' saved [45425/45425]
real 0m3.549s user 0m0.000s sys 0m0.012s $ }}}
{{{ $ time LANG=C wget -S --header="Host: fedoraproject.org" http://proxy5.fedoraproject.org/static/images/banners/f11release.png --no-check-certificate --2009-07-21 00:33:36-- http://proxy5.fedoraproject.org/static/images/banners/f11release.png Resolving proxy5.fedoraproject.org... 80.239.156.214 Connecting to proxy5.fedoraproject.org|80.239.156.214|:80... connected. HTTP request sent, awaiting response... HTTP/1.1 200 OK Date: Mon, 20 Jul 2009 22:33:36 GMT Server: Apache/2.2.3 (Red Hat) Last-Modified: Mon, 20 Jul 2009 22:01:50 GMT ETag: "1c7a26-b171-48f26f80" Accept-Ranges: bytes Content-Length: 45425 Cache-Control: max-age=21600 Expires: Tue, 21 Jul 2009 04:22:39 GMT ProxyTime: D=232 ProxyServer: proxy5.fedoraproject.org Age: 657 Keep-Alive: timeout=15, max=500 Connection: Keep-Alive Content-Type: image/png Length: 45425 (44K) [image/png] Saving to: `f11release.png'
100%[===================================================================================================================>] 45,425 --.-K/s in 0.005s
2009-07-21 00:33:36 (9.20 MB/s) - `f11release.png' saved [45425/45425]
real 0m0.147s user 0m0.002s sys 0m0.006s $
$ time LANG=C wget -S --header="Host: fedoraproject.org" https://proxy5.fedoraproject.org/static/images/banners/f11release.png --no-check-certificate --2009-07-21 00:33:44-- https://proxy5.fedoraproject.org/static/images/banners/f11release.png Resolving proxy5.fedoraproject.org... 80.239.156.214 Connecting to proxy5.fedoraproject.org|80.239.156.214|:443... connected. WARNING: certificate common name fedoraproject.org' doesn't match requested host nameproxy5.fedoraproject.org'. HTTP request sent, awaiting response... HTTP/1.1 200 OK Date: Mon, 20 Jul 2009 22:33:45 GMT Server: Apache/2.2.3 (Red Hat) Last-Modified: Mon, 20 Jul 2009 21:04:00 GMT ETag: "1c7a27-b171-7a1e7000" Accept-Ranges: bytes Content-Length: 45425 Cache-Control: max-age=21600 Expires: Tue, 21 Jul 2009 03:48:29 GMT ProxyTime: D=285 ProxyServer: proxy5.fedoraproject.org Age: 2715 Keep-Alive: timeout=15, max=500 Connection: Keep-Alive Content-Type: image/png Length: 45425 (44K) [image/png] Saving to: `f11release.png.1'
fedoraproject.org' doesn't match requested host name
100%[===================================================================================================================>] 45,425 --.-K/s in 0.006s
2009-07-21 00:33:45 (7.70 MB/s) - `f11release.png.1' saved [45425/45425]
real 0m0.164s user 0m0.026s sys 0m0.013s $ }}}
Hi, we've implemented geo dns since this ticket was filed. PHX2 is still in the EU zonefile, but I will probably take it out today when I add proxy02 in, which will leave only EU servers for people there.
Have you noticed improvements in speed since we implemented this?
OK, I've enabled proxy02, but actually left the other proxies in there for now, pending some more testing. Once we find out which proxies are the slow ones, we can look at taking them out of the EU zonefile in a way that still keeps service distributed to multiple proxies.
Any news here? How has the speed been lately?
I'm going to close this now, feel free to re-open if you see the issue again.
Login to comment on this ticket.