大家帮我看看这个 traceroute 有没有问题？

[hanguofu]

我在腾讯云的硅谷节点买了一台 VPS 。这两天频频出现域名无法解析和访问超时的问题：
1. 访问： https://cmake.org/files/v3.28/cmake-3.28.3.tar.gz
出现故障：Resolving cmake.org (cmake.org)... failed: Temporary failure in name resolution.
在持续 25 个小时后自动恢复正常。

2. 访问： https://gmplib.org/download/gmp/gmp-6.3.0.tar.xz
出现 time out : Resolving gmplib.org (gmplib.org)... 130.242.124.102
Connecting to gmplib.org (gmplib.org)|130.242.124.102|:443... failed: Connection timed out.
Retrying.


我 trace 这个 gmplib.org 服务器，没看出什么问题：
traceroute to gmplib.org (130.242.124.102), 30 hops max, 60 byte packets
1 * * *
2 11.81.120.210 (11.81.120.210) 0.940 ms * *
3 10.162.71.229 (10.162.71.229) 6.670 ms 10.162.72.13 (10.162.72.13) 6.451 ms 10.162.71.189 (10.162.71.189) 9.220 ms
4 10.196.2.189 (10.196.2.189) 1.565 ms 30.245.21.249 (30.245.21.249) 1.701 ms 30.245.21.9 (30.245.21.9) 1.755 ms
5 10.162.5.85 (10.162.5.85) 1.216 ms 1.590 ms 10.162.9.76 (10.162.9.76) 4.433 ms
6 * sjo-b23-link.ip.twelve99.net (213.248.81.42) 1.824 ms 1.721 ms
7 * sjo-bb1-link.ip.twelve99.net (62.115.139.16) 5.821 ms *
8 * * den-bb1-link.ip.twelve99.net (62.115.139.105) 27.472 ms
9 den-bb2-link.ip.twelve99.net (62.115.139.113) 27.516 ms * *
10 * * nyk-bb5-link.ip.twelve99.net (62.115.139.32) 67.160 ms
11 chi-bb2-link.ip.twelve99.net (62.115.136.102) 71.549 ms * kanc-bb2-link.ip.twelve99.net (62.115.140.184) 69.923 ms
12 * * ash-b2-link.ip.twelve99.net (62.115.123.123) 71.381 ms
13 ash-b2-link.ip.twelve99.net (62.115.123.123) 71.626 ms nordunet-ic-309102.ip.twelve99-cust.net (213.248.85.174) 71.571 ms rest-bb1-link.ip.twelve99.net (62.115.139.35) 71.802 ms
14 ash-b2-link.ip.twelve99.net (62.115.141.50) 107.979 ms us-man.nordu.net (109.105.97.142) 76.895 ms ash-b2-link.ip.twelve99.net (62.115.123.125) 106.080 ms
15 us-man.nordu.net (109.105.97.142) 75.258 ms ash-b2-link.ip.twelve99.net (62.115.123.125) 69.727 ms nl-ams.nordu.net (109.105.97.65) 157.496 ms
16 dk-esbj.nordu.net (109.105.97.74) 157.380 ms nordunet-ic-309102.ip.twelve99-cust.net (213.248.85.174) 69.804 ms nl-ams.nordu.net (109.105.97.65) 155.451 ms
17 dk-bal2.nordu.net (109.105.97.2) 156.821 ms us-man.nordu.net (109.105.97.142) 75.580 ms nl-ams.nordu.net (109.105.97.65) 158.155 ms
18 dk-bal2.nordu.net (109.105.97.2) 154.932 ms lnd88-r11.sunet.se (109.105.102.67) 158.167 ms 158.267 ms
19 dk-bal2.nordu.net (109.105.97.2) 157.360 ms lnd88-r11.sunet.se (109.105.102.67) 158.603 ms dk-esbj.nordu.net (109.105.97.74) 155.448 ms
20 dk-bal2.nordu.net (109.105.97.2) 155.599 ms jonkoping-jkg-r11.sunet.se (86.104.202.54) 161.919 ms vaxjo-vxj-r11.sunet.se (86.104.202.109) 160.836 ms
21 vaxjo-vxj-r11.sunet.se (86.104.202.109) 159.279 ms lnd88-r11.sunet.se (109.105.102.67) 156.898 ms jonkoping-jkg-r11.sunet.se (86.104.202.54) 159.882 ms
22 skovde-ske109-r11.sunet.se (86.104.202.53) 163.614 ms jonkoping-jkg-r11.sunet.se (86.104.202.54) 160.226 ms orebro-lba-r11.sunet.se (86.104.202.122) 165.418 ms
23 orebro-lba-r11.sunet.se (86.104.202.122) 165.849 ms 164.227 ms skovde-ske109-r11.sunet.se (86.104.202.53) 164.049 ms
24 stockholm-tug-r11.sunet.se (86.104.202.134) 165.778 ms skovde-ske109-r11.sunet.se (86.104.202.53) 163.970 ms orebro-lba-r11.sunet.se (86.104.202.122) 166.239 ms
25 stockholm-tug-r11.sunet.se (86.104.202.134) 163.827 ms orebro-lba-r11.sunet.se (86.104.202.122) 163.915 ms stockholm-tug-r11.sunet.se (86.104.202.134) 163.539 ms
26 stockholm-tug-r12.sunet.se (86.104.202.141) 163.355 ms 165.910 ms stockholm-tug-r2.sunet.se (86.104.203.76) 169.215 ms
27 stockholm-tug-r2.sunet.se (86.104.203.76) 169.277 ms 169.223 ms 163.429 ms
28 stockholm-tug-r12.sunet.se (86.104.202.141) 163.781 ms 163.868 ms martin.gmplib.org (130.242.124.102) 164.000 ms

腾讯云的运维说这是对端的问题。

[v1]

1 是解析失败
2 是连接失败

你用 trace 查确实看不出问题

[xqzr]

# host -v cmake.org
Host cmake.org not found: 2(SERVFAIL)
Received 27 bytes from 183.60.82.98#53 in 4411 ms
默认 DNS ，多次解析后，才能得到结果

gmplib.org 添加 -Tp 443 选项，路由跟踪，发现 TCP 443 超时

[billccn]

感觉你这个机器网络确实很奇怪，特别是这个 traceroue ，twelve99.net 就是原来挪威的 Telia ，而 nordu.net 是北欧教育网，两者互联必然是很好的。你的这个路由一会儿从美国进入 nordu ，一会儿丹麦，一会儿荷兰，进去以后还要跳近 10 毫秒。我家测试进入 nordu 以后 0.7 毫秒便达到最终主机，我觉得这才是大学网络的日常。

会不会是你这个 IP 不干净，被人家防火墙关照了？（当然这解释不了你为什么 DNS 都解析不出来）