#1544 Fedora websites are slow in Germany (a DNS and proxy issue)
Closed: Fixed None Opened 14 years ago by robert.

Fedora websites are slow in Germany (Europe?) - also the static ones, which should be fast, because they're static, e.g. http://fpaste.org/paste/19309. But when explicitly querying proxy5 at Telia located in Germany, speed is excellent, e.g. http://fpaste.org/paste/19311. Notice, that loading pages via https from the US makes the requests up to twice slower. As e.g. http://fedoraproject.org now includes images via https, this is making things not better for German (European?) users.

{{{
64 bytes from 80.239.156.214: icmp_seq=2 ttl=57 time=0.834 ms
64 bytes from 66.35.62.162: icmp_seq=4 ttl=41 time=180 ms
64 bytes from 209.132.176.122: icmp_seq=2 ttl=98 time=278 ms
64 bytes from 152.46.7.221: icmp_seq=4 ttl=45 time=179 ms
}}}

{{{
[00:46:48] < ricky> Apparently mediawiki uses powerdns which has a geo backend
[00:47:25] < rsc> ricky: but that only helps, if NS of fedoraproject.org are using powerdns?
[00:47:58] < ricky> Yes.
[00:48:01] < ricky> We're currently using bind
[00:48:37] < rsc> and both of the DNS are in the US, funky.
[00:50:02] < rsc> ricky: I don't know how the geobackend of powerdns works, but I assume, it returns an IP address more near to me or that one more often?
[00:50:25] < ricky> I think so, I know it has been discussed here before but I haven't looked into it before.
[00:51:25] < rsc> maybe we also can get/put a ns3 to Telia (DE) and combine that with powerdns+geobackend. Or at least investigate to that, whether it speeds up things.
[00:52:29] < smooge> rsc, ricky yes thats what it does
[00:52:59] < rsc> as far as I can see, wikimedia uses powerdns+bindbackend+geobackend
[00:53:10] < smooge> it works well in some situations and others it can cause problems.. like where yes germany is close to denmark but has to go to US to get there
[00:53:29] < smooge> but a lot of thats been fixed in the last couple of years
}}}

{{{
$ time LANG=C wget -S http://fedoraproject.org/static/images/banners/f11release.png
--00:23:23-- http://fedoraproject.org/static/images/banners/f11release.png
=> `f11release.png.7'
Resolving fedoraproject.org... 209.132.176.122, 66.35.62.162, 80.239.156.214, ...
Connecting to fedoraproject.org|209.132.176.122|:80... connected.
HTTP request sent, awaiting response...
HTTP/1.1 200 OK
Date: Mon, 20 Jul 2009 22:23:23 GMT
Server: Apache/2.2.3 (Red Hat)
Last-Modified: Mon, 20 Jul 2009 21:04:00 GMT
ETag: "ff9f0-b171-7a1e7000"
Accept-Ranges: bytes
Content-Length: 45425
Cache-Control: max-age=21600
Expires: Tue, 21 Jul 2009 04:05:09 GMT
ProxyTime: D=269
ProxyServer: proxy1.fedora.phx.redhat.com
Age: 1094
Keep-Alive: timeout=15, max=500
Connection: Keep-Alive
Content-Type: image/png
Length: 45,425 (44K) [image/png]

100%[=================================================================================================================>] 45,425 47.75K/s

00:23:24 (47.67 KB/s) - `f11release.png' saved [45425/45425]

real 0m1.483s
user 0m0.004s
sys 0m0.000s
$

$ time LANG=C wget -S https://fedoraproject.org/static/images/banners/f11release.png
--00:24:28-- https://fedoraproject.org/static/images/banners/f11release.png
=> `f11release.png.17'
Resolving fedoraproject.org... 209.132.176.122, 66.35.62.162, 80.239.156.214, ...
Connecting to fedoraproject.org|209.132.176.122|:443... connected.
HTTP request sent, awaiting response...
HTTP/1.1 200 OK
Date: Mon, 20 Jul 2009 22:24:29 GMT
Server: Apache/2.2.3 (Red Hat)
Last-Modified: Mon, 20 Jul 2009 22:01:50 GMT
ETag: "e7c45-b171-48f26f80"
Accept-Ranges: bytes
Content-Length: 45425
Cache-Control: max-age=21600
Expires: Tue, 21 Jul 2009 04:19:03 GMT
ProxyTime: D=273
ProxyServer: proxy2.fedora.phx.redhat.com
Age: 325
Keep-Alive: timeout=15, max=500
Connection: Keep-Alive
Content-Type: image/png
Length: 45,425 (44K) [image/png]

100%[=================================================================================================================>] 45,425 18.80K/s

00:24:32 (18.79 KB/s) - `f11release.png' saved [45425/45425]

real 0m3.549s
user 0m0.000s
sys 0m0.012s
$
}}}

{{{
$ time LANG=C wget -S --header="Host: fedoraproject.org" http://proxy5.fedoraproject.org/static/images/banners/f11release.png --no-check-certificate
--2009-07-21 00:33:36-- http://proxy5.fedoraproject.org/static/images/banners/f11release.png
Resolving proxy5.fedoraproject.org... 80.239.156.214
Connecting to proxy5.fedoraproject.org|80.239.156.214|:80... connected.
HTTP request sent, awaiting response...
HTTP/1.1 200 OK
Date: Mon, 20 Jul 2009 22:33:36 GMT
Server: Apache/2.2.3 (Red Hat)
Last-Modified: Mon, 20 Jul 2009 22:01:50 GMT
ETag: "1c7a26-b171-48f26f80"
Accept-Ranges: bytes
Content-Length: 45425
Cache-Control: max-age=21600
Expires: Tue, 21 Jul 2009 04:22:39 GMT
ProxyTime: D=232
ProxyServer: proxy5.fedoraproject.org
Age: 657
Keep-Alive: timeout=15, max=500
Connection: Keep-Alive
Content-Type: image/png
Length: 45425 (44K) [image/png]
Saving to: `f11release.png'

100%[===================================================================================================================>] 45,425 --.-K/s in 0.005s

2009-07-21 00:33:36 (9.20 MB/s) - `f11release.png' saved [45425/45425]

real 0m0.147s
user 0m0.002s
sys 0m0.006s
$

$ time LANG=C wget -S --header="Host: fedoraproject.org" https://proxy5.fedoraproject.org/static/images/banners/f11release.png --no-check-certificate
--2009-07-21 00:33:44-- https://proxy5.fedoraproject.org/static/images/banners/f11release.png
Resolving proxy5.fedoraproject.org... 80.239.156.214
Connecting to proxy5.fedoraproject.org|80.239.156.214|:443... connected.
WARNING: certificate common name fedoraproject.org' doesn't match requested host nameproxy5.fedoraproject.org'.
HTTP request sent, awaiting response...
HTTP/1.1 200 OK
Date: Mon, 20 Jul 2009 22:33:45 GMT
Server: Apache/2.2.3 (Red Hat)
Last-Modified: Mon, 20 Jul 2009 21:04:00 GMT
ETag: "1c7a27-b171-7a1e7000"
Accept-Ranges: bytes
Content-Length: 45425
Cache-Control: max-age=21600
Expires: Tue, 21 Jul 2009 03:48:29 GMT
ProxyTime: D=285
ProxyServer: proxy5.fedoraproject.org
Age: 2715
Keep-Alive: timeout=15, max=500
Connection: Keep-Alive
Content-Type: image/png
Length: 45425 (44K) [image/png]
Saving to: `f11release.png.1'

100%[===================================================================================================================>] 45,425 --.-K/s in 0.006s

2009-07-21 00:33:45 (7.70 MB/s) - `f11release.png.1' saved [45425/45425]

real 0m0.164s
user 0m0.026s
sys 0m0.013s
$
}}}


Hi, we've implemented geo dns since this ticket was filed. PHX2 is still in the EU zonefile, but I will probably take it out today when I add proxy02 in, which will leave only EU servers for people there.

Have you noticed improvements in speed since we implemented this?

OK, I've enabled proxy02, but actually left the other proxies in there for now, pending some more testing. Once we find out which proxies are the slow ones, we can look at taking them out of the EU zonefile in a way that still keeps service distributed to multiple proxies.

Any news here? How has the speed been lately?

I'm going to close this now, feel free to re-open if you see the issue again.

Login to comment on this ticket.

Metadata