AUR connection issues (EOF/TLS errors)

stronnag · 2026-10-18 20:55:14

seth wrote:

2604:cac0:a104:d::2 is aur.archlinux.org, though.
So this seems to fall apart at the SSL level
Do you get 301 from
curl -6v http://aur.archlinux.org >/dev/null 
?
And because of my experiences w/ bugs.kde.org: can you maybe actually
curl -6vL http://aur.archlinux.org

Yes, I get the 301.

$ curl -6vL http://aur.archlinux.org
* Host aur.archlinux.org:80 was resolved.
* IPv6: 2604:cac0:a104:d::2
* IPv4: (none)
*   Trying [2604:cac0:a104:d::2]:80...
* Established connection to aur.archlinux.org (2604:cac0:a104:d::2 port 80) from 2a02:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx port 42112 
* using HTTP/1.x
> GET / HTTP/1.1
> Host: aur.archlinux.org
> User-Agent: curl/8.23.0
> Accept: */*
> 
* Request completely sent off
< HTTP/1.1 301 Moved Permanently
< Server: nginx
< Date: Sun, 18 Oct 2026 20:48:34 GMT
< Content-Type: text/html
< Content-Length: 162
< Connection: keep-alive
< Location: https://aur.archlinux.org/
* Ignoring the response-body
* setting size while ignoring
< 
* Connection #0 to host aur.archlinux.org:80 left intact
* Issue another request to this URL: 'https://aur.archlinux.org/'
* Host aur.archlinux.org:443 was resolved.
* IPv6: 2604:cac0:a104:d::2
* IPv4: (none)
*   Trying [2604:cac0:a104:d::2]:443...
* ALPN: curl offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* SSL Trust Anchors:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
* Recv failure: Connection reset by peer
* TLS connect error: error:00000000:lib(0)::reason(0)
* OpenSSL SSL_connect: Connection reset by peer in connection to aur.archlinux.org:443 
* closing connection #1
curl: (35) Recv failure: Connection reset by peer

Of perhaps 10 attempts in the last 10 minutes (from Arch FreeBSD and Debian), only one of the above succeeded.

seth · 2026-10-18 21:12:43

Because of the intermittency: Does it help to lower the MTU? (1280 or sth. like that)

maksverver · 2026-10-21 02:13:01

seth wrote:

Because of the intermittency: Does it help to lower the MTU? (1280 or sth. like that)

Doesn't make a difference.

stronnag · 2026-10-21 14:42:17

maksverver wrote:

seth wrote:
Because of the intermittency: Does it help to lower the MTU? (1280 or sth. like that)
Doesn't make a difference.

Does here, setting the router's ND MTU to 1280 fixes all Arch properties (and a bunch of previously failing Azure hosted sites as well).

seth · 2026-10-21 14:50:11

@stronnag any chance there's a VPN in the route or anything else that might add overhead to the packages?
@maksverver the problem wasn't intermittent for you, was it? Did you contact the accountsupport or ewaller?

stronnag · 2026-10-21 14:52:52

seth wrote:

@stronnag any chance there's a VPN in the route or anything else that might add overhead to the packages?
@maksverver the problem wasn't intermittent for you, was it? Did you contact the accountsupport or ewaller?

No VPN nor any other overhead I can think of.
As you're seeing this, I can also report that setting the ND MTU to the same as the PPPoE MTU (1492) also works.

Last edited by stronnag (2026-10-21 15:04:57)

seth · 2026-10-21 15:07:34

to the same as the PPPOE MTU (1492)

https://www.reddit.com/r/networking/com … ing_pppoe/
https://wiki.archlinux.org/title/Ppp#Ma … o_not_work

cgarz · 2026-10-24 17:41:36

Just noticed today I have AUR access again. All without any self doxxing which is very noice \o/

Is the internet no longer "fundamentally broken" or did my ISPs blocking expire? I was thinking it didn't expire at all but now I'm not sure.

seth · 2026-10-24 17:49:46

Did your wan IP change?
Since we don't know why you'd been blocked (or iff) at all, we can't nothing but speculate but cool downs and relaxation after silence would not be unusual behavior for any service and any attack scenario.

And that does also not change anything about the wider state of affairs, see the ongoing threads about Anubis issues and random services blocking random IPs.

Edit and for the last time: you would not have "doxxed" yourself by any common definition and not exposed additional identifying data either.

Last edited by seth (2026-10-24 17:51:34)

cgarz · 2026-10-24 18:01:42

Nah it's still the same IP I've had for more than a year now.

I also noticed that manual.archlinux.page was blocked as well when a link from the wiki led there, but that is also fine now too \o/

So do you not know for a fact that there is an expiry on blocking an ISP? I'm pretty sure the issue was on Arch's end so I can only assume something expired. I certainly didn't change anything.

Ah well I'm happy now. Thanks to those here, who helped.

Hopefully the sad situation that necessitated these excessive blocks will end soon, though I still think they are a bit too excessive.

rharish · 2026-10-24 18:35:18

cgarz wrote:

Just noticed today I have AUR access again. All without any self doxxing which is very noice \o/
Is the internet no longer "fundamentally broken" or did my ISPs blocking expire? I was thinking it didn't expire at all but now I'm not sure.

Can confirm, I was blocked previously, and it now it works (at least for now).

Arch Linux

#126 2026-10-18 20:55:14

Re: AUR connection issues (EOF/TLS errors)

#127 2026-10-18 21:12:43

Re: AUR connection issues (EOF/TLS errors)

#128 2026-10-21 02:13:01

Re: AUR connection issues (EOF/TLS errors)

#129 2026-10-21 14:42:17

Re: AUR connection issues (EOF/TLS errors)

#130 2026-10-21 14:50:11

Re: AUR connection issues (EOF/TLS errors)

#131 2026-10-21 14:52:52

Re: AUR connection issues (EOF/TLS errors)

#132 2026-10-21 15:07:34

Re: AUR connection issues (EOF/TLS errors)

#133 2026-10-24 17:41:36

Re: AUR connection issues (EOF/TLS errors)

#134 2026-10-24 17:49:46

Re: AUR connection issues (EOF/TLS errors)

#135 2026-10-24 18:01:42

Re: AUR connection issues (EOF/TLS errors)

#136 2026-10-24 18:35:18

Re: AUR connection issues (EOF/TLS errors)

Board footer