Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Problems with the download of the prereg script #80205

Closed
Klaas- opened this issue Aug 26, 2021 · 29 comments
Closed

Problems with the download of the prereg script #80205

Klaas- opened this issue Aug 26, 2021 · 29 comments

Comments

@Klaas-
Copy link

Klaas- commented Aug 26, 2021

Hi,
I think you have problems in the cdn serving the prereg script. One or more servers are out of date and not updating.

https://github.com/Klaas-/msawb-plugin-config-com-sap-hana.sh/commits/main (this is bascially a github action that gets the script once an hour for archival and change trackig)

You can see that it served the old version 2.0.8.3 as recently as two hours ago. And it switched between versions like 20 times in the last 2 days.

Greetings
Klaas


Document Details

Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

@MonikaReddy-MSFT
Copy link
Contributor

@klaas -
Thanks for brining this to our attention. We will investigate it further and update you shortly.

@BharathNimmala-MSFT
Copy link
Contributor

@Klaas- Apologies for delay in getting back to this thread, I further assigning this issue to our document author @v-amallick to review the query and update the document/script as needed.

@pvrk
Copy link
Contributor

pvrk commented Aug 31, 2021

@Klaas- I have checked the link (https://aka.ms/scriptforpermsonhana) and the latest version is 2.0.8.5. And we updated the script only twice in last 2 months. So, this is little surprising. Can you please let us know what version values were you seeing in those multiple switches?

@Klaas-
Copy link
Author

Klaas- commented Aug 31, 2021

@pvrk, just look at the link I provided https://github.com/Klaas-/msawb-plugin-config-com-sap-hana.sh/commits/main - looks like your cdn is/was messed up

@Klaas-
Copy link
Author

Klaas- commented Aug 31, 2021

Or for quick reference @pvrk

$ git log --pretty=format:"%h%x09%an%x09%ad%x09%s"
5e0e95e github-actions  Fri Aug 27 15:14:30 2021 +0000  Version 2.0.8.5
5c5d658 github-actions  Fri Aug 27 14:12:41 2021 +0000  Version 2.0.8.3
7782819 github-actions  Fri Aug 27 11:11:15 2021 +0000  Version 2.0.8.5
92b9c03 github-actions  Fri Aug 27 10:15:11 2021 +0000  Version 2.0.8.3
edd1c08 github-actions  Fri Aug 27 09:13:16 2021 +0000  Version 2.0.8.5
ad632df github-actions  Fri Aug 27 08:15:31 2021 +0000  Version 2.0.8.3
521ec14 github-actions  Fri Aug 27 00:48:15 2021 +0000  Version 2.0.8.5
422efbf github-actions  Thu Aug 26 23:13:59 2021 +0000  Version 2.0.8.3
1bf3c70 github-actions  Thu Aug 26 19:10:59 2021 +0000  Version 2.0.8.5
2ff58ca github-actions  Thu Aug 26 15:14:31 2021 +0000  Version 2.0.8.3
f984fa6 github-actions  Thu Aug 26 14:12:41 2021 +0000  Version 2.0.8.5
3cdd41e github-actions  Thu Aug 26 11:11:13 2021 +0000  Version 2.0.8.3
277d247 github-actions  Thu Aug 26 10:15:13 2021 +0000  Version 2.0.8.5
f2171f3 github-actions  Thu Aug 26 09:13:22 2021 +0000  Version 2.0.8.3
65abbc4 github-actions  Thu Aug 26 06:16:00 2021 +0000  Version 2.0.8.5
d421378 github-actions  Thu Aug 26 05:11:56 2021 +0000  Version 2.0.8.3
fab8983 github-actions  Thu Aug 26 00:42:13 2021 +0000  Version 2.0.8.5
9dad8c4 github-actions  Wed Aug 25 23:13:33 2021 +0000  Version 2.0.8.3
8eab512 github-actions  Wed Aug 25 14:12:42 2021 +0000  Version 2.0.8.5
2296c24 github-actions  Wed Aug 25 13:19:32 2021 +0000  Version 2.0.8.3
11895dd github-actions  Wed Aug 25 12:21:36 2021 +0000  Version 2.0.8.5
bdf9b2a github-actions  Wed Aug 25 11:11:04 2021 +0000  Version 2.0.8.3
cb43e7e github-actions  Wed Aug 25 09:13:27 2021 +0000  Version 2.0.8.5
282792c github-actions  Wed Aug 25 08:15:38 2021 +0000  Version 2.0.8.3
f7fb19e github-actions  Wed Aug 25 04:17:57 2021 +0000  Version 2.0.8.5
c76b62e github-actions  Wed Aug 25 03:14:27 2021 +0000  Version 2.0.8.3
592b3db github-actions  Wed Aug 25 02:23:38 2021 +0000  Version 2.0.8.5
003d00d github-actions  Tue Aug 24 21:12:01 2021 +0000  Version 2.0.8.3
c755cd8 github-actions  Tue Aug 24 20:14:16 2021 +0000  Version 2.0.8.5

@pvrk
Copy link
Contributor

pvrk commented Aug 31, 2021

Thanks for the details. We will investigate with our CDN provider.

@pvrk
Copy link
Contributor

pvrk commented Sep 17, 2021

@Klaas- Our CDN provider has confirmed that they have deleted the previous versions of the file. Can you please re-check?

@Klaas-
Copy link
Author

Klaas- commented Sep 17, 2021

I have not seen any version switches in the last 21 days, so yes looks good now :)

@Klaas- Klaas- closed this as completed Sep 17, 2021
@Klaas-
Copy link
Author

Klaas- commented Oct 6, 2021

Hi @pvrk
so I don't think this was fixed :)
https://github.com/Klaas-/msawb-plugin-config-com-sap-hana.sh/commits/main
4 Hours ago it was serving 2.0.9.0
3 minutes ago it was serving 2.0.8.5
so unless you pulled 2.0.9.0 this seems like your CDN again :)

@Klaas- Klaas- reopened this Oct 6, 2021
@pvrk
Copy link
Contributor

pvrk commented Oct 6, 2021

@Klaas- : Sorry to hear this. We just did publish a new version of the script. Do you still see version switches or is it just a lower version than before?

@Klaas-
Copy link
Author

Klaas- commented Oct 7, 2021

Yeah, look at https://github.com/Klaas-/msawb-plugin-config-com-sap-hana.sh/commits/main and the commits on Oct. 6th.

I guess you need to invalidate caches when you publish a new version of your script or something like that. It seems like this is currently taking at least 12 hours (now) and multiple days (last version update) to spread across your CDN.

@pvrk
Copy link
Contributor

pvrk commented Oct 7, 2021

@Klaas- Thanks for the confirmation. Will huddle with the CDN team and figure out how to avoid this in the future.

@Klaas- Klaas- closed this as completed Oct 7, 2021
@Klaas-
Copy link
Author

Klaas- commented Nov 15, 2021

@pvrk
Copy link
Contributor

pvrk commented Nov 15, 2021

@Klaas- : This is so unfortunate. May I know the versions that you are viewing? Our CDN team is ready for a debug call, if you are OK.

@Klaas-
Copy link
Author

Klaas- commented Nov 15, 2021

So on Fri Nov 12 14:13:08 2021 +0000 I first picked up the new version 2.0.9.2 , but some mirrors were showing 2.0.9.1 until at least Sun Nov 14 20:14:20 2021 +0000 which is the last time I downloaded that version. It has been quiet for the last ~16 hours.

The github action simply does this:
curl -s -L https://aka.ms/scriptforpermsonhana -o msawb-plugin-config-com-sap-hana.sh

e798362 github-actions  Sun Nov 14 21:12:01 2021 +0000  Version 2.0.9.2
b00a6e4 github-actions  Sun Nov 14 20:14:20 2021 +0000  Version 2.0.9.1
78d5e57 github-actions  Sun Nov 14 11:11:32 2021 +0000  Version 2.0.9.2
e9d5b07 github-actions  Sun Nov 14 10:15:31 2021 +0000  Version 2.0.9.1
b181cd9 github-actions  Sun Nov 14 09:13:57 2021 +0000  Version 2.0.9.2
ddb9e98 github-actions  Sun Nov 14 08:16:30 2021 +0000  Version 2.0.9.1
b1c9752 github-actions  Sun Nov 14 07:13:28 2021 +0000  Version 2.0.9.2
b7e5306 github-actions  Sun Nov 14 06:16:47 2021 +0000  Version 2.0.9.1
0733171 github-actions  Sat Nov 13 11:11:34 2021 +0000  Version 2.0.9.2
27d7961 github-actions  Sat Nov 13 08:16:33 2021 +0000  Version 2.0.9.1
5e98041 github-actions  Sat Nov 13 07:13:45 2021 +0000  Version 2.0.9.2
f81f966 github-actions  Sat Nov 13 05:12:07 2021 +0000  Version 2.0.9.1
77d89a7 github-actions  Sat Nov 13 03:15:02 2021 +0000  Version 2.0.9.2
0016267 github-actions  Sat Nov 13 01:54:53 2021 +0000  Version 2.0.9.1
bfb07fa github-actions  Sat Nov 13 00:46:36 2021 +0000  Version 2.0.9.2
5828034 github-actions  Fri Nov 12 22:14:11 2021 +0000  Version 2.0.9.1
a40f725 github-actions  Fri Nov 12 21:12:26 2021 +0000  Version 2.0.9.2
0a285a3 github-actions  Fri Nov 12 18:16:48 2021 +0000  Version 2.0.9.1
e02844f github-actions  Fri Nov 12 14:13:08 2021 +0000  Version 2.0.9.2

@Klaas-
Copy link
Author

Klaas- commented Jan 13, 2022

@pvrk
Copy link
Contributor

pvrk commented Jan 18, 2022

@Klaas- I have asked the CDN team and they need the IP of the machine where this is happening. Can you please email that to me at pullabhk@microsoft.com?

@Klaas-
Copy link
Author

Klaas- commented Jan 18, 2022

I am currently not logging that, I'll change the github action to curl verbose

@Klaas-
Copy link
Author

Klaas- commented Mar 14, 2022

So, I logged IPs this time @pvrk

71975aa github-actions Sat Mar 12 02:36:09 2022 +0000 Version 2.0.9.3 204.79.197.219:443
2400600 github-actions Sat Mar 12 01:59:08 2022 +0000 Version 2.0.9.4 204.79.197.219:443
204.79.197.219:443 -> 0:40 Version 2.0.9.3
947cb1a github-actions Fri Mar 11 23:11:44 2022 +0000 Version 2.0.9.3 204.79.197.219:443
bfb54cb github-actions Fri Mar 11 22:12:23 2022 +0000 Version 2.0.9.4 204.79.197.219:443
In between those two commits there were several attempts (once per hour) that resulted in the old version they were using the following ips:

204.79.197.219:443
131.253.33.219:443

ee91f09 github-actions Fri Mar 11 15:12:32 2022 +0000 Version 2.0.9.3 204.79.197.219 port 443

I do not think you can do much with that, it seems to be the same IP most of the time :)

I will post full curl output of two requests, it includes headers:
71975aa github-actions Sat Mar 12 02:36:09 2022 +0000 Version 2.0.9.3 204.79.197.219:443

* TCP_NODELAY set
* Connected to aka.ms (23.12.134.45) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [108 bytes data]
* TLSv1.2 (IN), TLS handshake, Certificate (11):
{ [3617 bytes data]
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
{ [333 bytes data]
* TLSv1.2 (IN), TLS handshake, Server finished (14):
{ [4 bytes data]
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
} [70 bytes data]
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.2 (OUT), TLS handshake, Finished (20):
} [16 bytes data]
* TLSv1.2 (IN), TLS handshake, Finished (20):
{ [16 bytes data]
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
* ALPN, server accepted to use http/1.1
* Server certificate:
*  subject: C=US; ST=WA; L=Redmond; O=Microsoft Corporation; OU=Microsoft Corporation; CN=go.microsoft.com
*  start date: Dec 15 19:27:42 2021 GMT
*  expire date: Dec 15 19:27:42 2022 GMT
*  subjectAltName: host "aka.ms" matched cert's "aka.ms"
*  issuer: C=US; O=Microsoft Corporation; CN=Microsoft RSA TLS CA 01
*  SSL certificate verify ok.
} [5 bytes data]
> GET /scriptforpermsonhana HTTP/1.1
> Host: aka.ms
> User-Agent: curl/7.68.0
> Accept: */*
> 
{ [5 bytes data]
* Mark bundle as not supporting multiuse
< HTTP/1.1 301 Moved Permanently
< Location: https://download.microsoft.com/download/B/2/E/B2E01EF8-C247-42A6-BCC7-E45B78F20C99/msawb-plugin-config-com-sap-hana.sh
< Server: Kestrel
< Request-Context: appId=cid-v1:b47e5e27-bf85-45ba-a97c-0377ce0e5779
< X-Response-Cache-Status: True
< Content-Length: 0
< Expires: Sat, 12 Mar 2022 02:36:09 GMT
< Cache-Control: max-age=0, no-cache, no-store
< Pragma: no-cache
< Date: Sat, 12 Mar 2022 02:36:09 GMT
< Connection: keep-alive
< Strict-Transport-Security: max-age=31536000 ; includeSubDomains
< 

  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
* Connection #0 to host aka.ms left intact
* Issue another request to this URL: 'https://download.microsoft.com/download/B/2/E/B2E01EF8-C247-42A6-BCC7-E45B78F20C99/msawb-plugin-config-com-sap-hana.sh'
*   Trying 204.79.197.219:443...
* TCP_NODELAY set
* Connected to download.microsoft.com (204.79.197.219) port 443 (#1)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [98 bytes data]
* TLSv1.2 (IN), TLS handshake, Certificate (11):
{ [3811 bytes data]
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
{ [365 bytes data]
* TLSv1.2 (IN), TLS handshake, Server finished (14):
{ [4 bytes data]
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
} [102 bytes data]
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.2 (OUT), TLS handshake, Finished (20):
} [16 bytes data]
* TLSv1.2 (IN), TLS handshake, Finished (20):
{ [16 bytes data]
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
* ALPN, server accepted to use h2
* Server certificate:
*  subject: C=US; ST=WA; L=Redmond; O=Microsoft Corporation; CN=download.microsoft.com
*  start date: Feb 24 06:38:56 2022 GMT
*  expire date: Aug 23 06:38:56 2022 GMT
*  subjectAltName: host "download.microsoft.com" matched cert's "download.microsoft.com"
*  issuer: C=US; O=Microsoft Corporation; CN=Microsoft Azure TLS Issuing CA 06
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
} [5 bytes data]
* Using Stream ID: 1 (easy handle 0x5614e7566880)
} [5 bytes data]
> GET /download/B/2/E/B2E01EF8-C247-42A6-BCC7-E45B78F20C99/msawb-plugin-config-com-sap-hana.sh HTTP/2
> Host: download.microsoft.com
> user-agent: curl/7.68.0
> accept: */*
> 
{ [5 bytes data]
* Connection state changed (MAX_CONCURRENT_STREAMS == 100)!
} [5 bytes data]
< HTTP/2 200 
< content-length: 77972
< content-type: application/octet-stream
< content-md5: +yhNNRMFl46j6lCHoTPRgQ==
< last-modified: Thu, 13 Jan 2022 04:18:14 GMT
< accept-ranges: bytes
< etag: "0x8D9D64BB80CDB4F"
< server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
< x-cache: TCP_HIT
< x-ccc: US
< x-ccc: US
< x-azure-ref-originshield: Ref A: 77BF2E5272E04714A6E02EC7305773D0 Ref B: BLUEDGE1218 Ref C: 2022-03-11T12:19:54Z
< x-msedge-ref: Ref A: 6BC70BB39F174C619D1D94F0F50B48B7 Ref B: BL2EDGE2817 Ref C: 2022-03-12T02:36:09Z
< date: Sat, 12 Mar 2022 02:36:09 GMT
< 
{ [16013 bytes data]

2400600 github-actions Sat Mar 12 01:59:08 2022 +0000 Version 2.0.9.4 204.79.197.219:443

* TCP_NODELAY set
* Connected to aka.ms (72.247.43.121) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [108 bytes data]
* TLSv1.2 (IN), TLS handshake, Certificate (11):
{ [3617 bytes data]
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
{ [333 bytes data]
* TLSv1.2 (IN), TLS handshake, Server finished (14):
{ [4 bytes data]
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
} [70 bytes data]
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.2 (OUT), TLS handshake, Finished (20):
} [16 bytes data]
* TLSv1.2 (IN), TLS handshake, Finished (20):
{ [16 bytes data]
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
* ALPN, server accepted to use http/1.1
* Server certificate:
*  subject: C=US; ST=WA; L=Redmond; O=Microsoft Corporation; OU=Microsoft Corporation; CN=go.microsoft.com
*  start date: Dec 15 19:27:42 2021 GMT
*  expire date: Dec 15 19:27:42 2022 GMT
*  subjectAltName: host "aka.ms" matched cert's "aka.ms"
*  issuer: C=US; O=Microsoft Corporation; CN=Microsoft RSA TLS CA 01
*  SSL certificate verify ok.
} [5 bytes data]
> GET /scriptforpermsonhana HTTP/1.1
> Host: aka.ms
> User-Agent: curl/7.68.0
> Accept: */*
> 
{ [5 bytes data]
* Mark bundle as not supporting multiuse
< HTTP/1.1 301 Moved Permanently
< Location: https://download.microsoft.com/download/B/2/E/B2E01EF8-C247-42A6-BCC7-E45B78F20C99/msawb-plugin-config-com-sap-hana.sh
< Server: Kestrel
< Request-Context: appId=cid-v1:9b037ab9-fa5a-4c09-81bd-41ffa859f01e
< X-Response-Cache-Status: True
< Content-Length: 0
< Expires: Sat, 12 Mar 2022 01:59:08 GMT
< Cache-Control: max-age=0, no-cache, no-store
< Pragma: no-cache
< Date: Sat, 12 Mar 2022 01:59:08 GMT
< Connection: keep-alive
< Strict-Transport-Security: max-age=31536000 ; includeSubDomains
< 

  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
* Connection #0 to host aka.ms left intact
* Issue another request to this URL: 'https://download.microsoft.com/download/B/2/E/B2E01EF8-C247-42A6-BCC7-E45B78F20C99/msawb-plugin-config-com-sap-hana.sh'
*   Trying 204.79.197.219:443...
* TCP_NODELAY set
* Connected to download.microsoft.com (204.79.197.219) port 443 (#1)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [98 bytes data]
* TLSv1.2 (IN), TLS handshake, Certificate (11):
{ [3811 bytes data]
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
{ [365 bytes data]
* TLSv1.2 (IN), TLS handshake, Server finished (14):
{ [4 bytes data]
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
} [102 bytes data]
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.2 (OUT), TLS handshake, Finished (20):
} [16 bytes data]
* TLSv1.2 (IN), TLS handshake, Finished (20):
{ [16 bytes data]
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
* ALPN, server accepted to use h2
* Server certificate:
*  subject: C=US; ST=WA; L=Redmond; O=Microsoft Corporation; CN=download.microsoft.com
*  start date: Feb 24 06:38:56 2022 GMT
*  expire date: Aug 23 06:38:56 2022 GMT
*  subjectAltName: host "download.microsoft.com" matched cert's "download.microsoft.com"
*  issuer: C=US; O=Microsoft Corporation; CN=Microsoft Azure TLS Issuing CA 06
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
} [5 bytes data]
* Using Stream ID: 1 (easy handle 0x557a5fed9880)
} [5 bytes data]
> GET /download/B/2/E/B2E01EF8-C247-42A6-BCC7-E45B78F20C99/msawb-plugin-config-com-sap-hana.sh HTTP/2
> Host: download.microsoft.com
> user-agent: curl/7.68.0
> accept: */*
> 
{ [5 bytes data]
* Connection state changed (MAX_CONCURRENT_STREAMS == 100)!
} [5 bytes data]
< HTTP/2 200 
< content-length: 87552
< content-type: application/octet-stream
< content-md5: raXBXdlrbchG6H85lkoKUQ==
< last-modified: Fri, 11 Mar 2022 06:04:50 GMT
< accept-ranges: bytes
< etag: "0x8DA03250DCB9116"
< server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
< x-cache: TCP_MISS
< x-ccc: US
< x-ccc: US
< x-azure-ref-originshield: Ref A: E501BE217A46463F9F502B8FFCDF8C17 Ref B: BLUEDGE1922 Ref C: 2022-03-12T01:59:08Z
< x-msedge-ref: Ref A: 27C166FDBB6C4DD6B05FDBCE2FE7BF96 Ref B: BN3EDGE0617 Ref C: 2022-03-12T01:59:08Z
< date: Sat, 12 Mar 2022 01:59:08 GMT
< 
{ [16012 bytes data]

@Klaas- Klaas- reopened this Mar 14, 2022
@pvrk
Copy link
Contributor

pvrk commented Apr 4, 2022

Thanks @Klaas- . Will use this information to debug further

@Klaas-
Copy link
Author

Klaas- commented Apr 4, 2022

@pvrk notice the x-cache: TCP_MISS (2.0.9.4) and x-cache: TCP_HIT (2.0.9.3) so I am guessing you have a problem invalidating caches upon a new version being released :)

@pvrk
Copy link
Contributor

pvrk commented May 19, 2022

@Klaas- Sincere apologies for the delay. I was OOF for a while and this completely skipped my radar. Will forward this analysis to the CDN team and get back to you. Apologies again for the delay.

@Klaas-
Copy link
Author

Klaas- commented Oct 11, 2022

@pvrk this is still happening with the 2.1.0.0 update:
https://github.com/Klaas-/msawb-plugin-config-com-sap-hana.sh/commits/main
that means once 15 hours ago it was the 2.1.0.0 version, and last 14 curls were served 2.0.9.6 again

@Klaas-
Copy link
Author

Klaas- commented Oct 11, 2022

Version 2.1.0.0 output (Klaas-/msawb-plugin-config-com-sap-hana.sh@c84844c)

% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0*   Trying 92.122.3[8](https://github.com/Klaas-/msawb-plugin-config-com-sap-hana.sh/actions/runs/3220867611/jobs/5268113007#step:3:9).31:443...
* TCP_NODELAY set
* Connected to aka.ms ([9](https://github.com/Klaas-/msawb-plugin-config-com-sap-hana.sh/actions/runs/3220867611/jobs/5268113007#step:3:10)2.122.38.31) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [122 bytes data]
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
{ [35 bytes data]
* TLSv1.3 (IN), TLS handshake, Certificate (11):
{ [3622 bytes data]
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
{ [264 bytes data]
* TLSv1.3 (IN), TLS handshake, Finished (20):
{ [52 bytes data]
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, Finished (20):
} [52 bytes data]
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use http/1.1
* Server certificate:
*  subject: C=US; ST=WA; L=Redmond; O=Microsoft Corporation; OU=Microsoft Corporation; CN=go.microsoft.com
*  start date: Dec 15 19:27:42 2021 GMT
*  expire date: Dec 15 19:27:42 2022 GMT
*  subjectAltName: host "aka.ms" matched cert's "aka.ms"
*  issuer: C=US; O=Microsoft Corporation; CN=Microsoft RSA TLS CA 01
*  SSL certificate verify ok.
} [5 bytes data]
> GET /scriptforpermsonhana HTTP/1.1
> Host: aka.ms
> User-Agent: curl/7.68.0
> Accept: */*
> 
{ [5 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [249 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [249 bytes data]
* old SSL session ID is stale, removing
{ [5 bytes data]
* Mark bundle as not supporting multiuse
< HTTP/1.1 301 Moved Permanently
< Content-Length: 0
< Server: Kestrel
< Location: https://download.microsoft.com/download/B/2/E/B2E01EF8-C247-42A6-BCC7-E45B78F20C99/msawb-plugin-config-com-sap-hana.sh
< Request-Context: appId=cid-v1:9b037ab9-fa5a-4c09-81bd-41ffa859f01e
< X-Response-Cache-Status: True
< Expires: Mon, [10](https://github.com/Klaas-/msawb-plugin-config-com-sap-hana.sh/actions/runs/3220867611/jobs/5268113007#step:3:11) Oct 2022 16:24:46 GMT
< Cache-Control: max-age=0, no-cache, no-store
< Pragma: no-cache
< Date: Mon, 10 Oct 2022 16:24:46 GMT
< Connection: keep-alive
< Strict-Transport-Security: max-age=31536000 ; includeSubDomains
< 

  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
* Connection #0 to host aka.ms left intact
* Issue another request to this URL: 'https://download.microsoft.com/download/B/2/E/B2E01EF8-C247-42A6-BCC7-E45B78F20C99/msawb-plugin-config-com-sap-hana.sh'
*   Trying 204.79.197.219:443...
* TCP_NODELAY set
* Connected to download.microsoft.com (204.79.197.219) port 443 (#1)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [98 bytes data]
* TLSv1.2 (IN), TLS handshake, Certificate ([11](https://github.com/Klaas-/msawb-plugin-config-com-sap-hana.sh/actions/runs/3220867611/jobs/5268113007#step:3:12)):
{ [3688 bytes data]
* TLSv1.2 (IN), TLS handshake, Server key exchange ([12](https://github.com/Klaas-/msawb-plugin-config-com-sap-hana.sh/actions/runs/3220867611/jobs/5268113007#step:3:13)):
{ [365 bytes data]
* TLSv1.2 (IN), TLS handshake, Server finished ([14](https://github.com/Klaas-/msawb-plugin-config-com-sap-hana.sh/actions/runs/3220867611/jobs/5268113007#step:3:15)):
{ [4 bytes data]
* TLSv1.2 (OUT), TLS handshake, Client key exchange ([16](https://github.com/Klaas-/msawb-plugin-config-com-sap-hana.sh/actions/runs/3220867611/jobs/5268113007#step:3:17)):
} [102 bytes data]
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.2 (OUT), TLS handshake, Finished (20):
} [16 bytes data]
* TLSv1.2 (IN), TLS handshake, Finished (20):
{ [16 bytes data]
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
* ALPN, server accepted to use h2
* Server certificate:
*  subject: C=US; ST=WA; L=Redmond; O=Microsoft Corporation; CN=download.microsoft.com
*  start date: Sep 21 08:22:09 2022 GMT
*  expire date: Mar 20 08:22:09 2023 GMT
*  subjectAltName: host "download.microsoft.com" matched cert's "download.microsoft.com"
*  issuer: C=US; O=Microsoft Corporation; CN=Microsoft Azure TLS Issuing CA 02
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
} [5 bytes data]
* Using Stream ID: 1 (easy handle 0x5583fcbdb8c0)
} [5 bytes data]
> GET /download/B/2/E/B2E01EF8-C247-42A6-BCC7-E45B78F[20](https://github.com/Klaas-/msawb-plugin-config-com-sap-hana.sh/actions/runs/3220867611/jobs/5268113007#step:3:21)C99/msawb-plugin-config-com-sap-hana.sh HTTP/2
> Host: download.microsoft.com
> user-agent: curl/7.68.0
> accept: */*
> 
{ [5 bytes data]
* Connection state changed (MAX_CONCURRENT_STREAMS == 100)!
} [5 bytes data]

  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0< HTTP/2 200

2.0.9.6 output (Klaas-/msawb-plugin-config-com-sap-hana.sh@f76e3b6)

  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0*   Trying 104.97.154.95:443...
* TCP_NODELAY set

  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0* Connected to aka.ms (104.97.154.95) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [122 bytes data]
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
{ [35 bytes data]
* TLSv1.3 (IN), TLS handshake, Certificate (11):
{ [3622 bytes data]
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
{ [264 bytes data]
* TLSv1.3 (IN), TLS handshake, Finished (20):
{ [52 bytes data]
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, Finished (20):
} [52 bytes data]
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use http/1.1
* Server certificate:
*  subject: C=US; ST=WA; L=Redmond; O=Microsoft Corporation; OU=Microsoft Corporation; CN=go.microsoft.com
*  start date: Dec 15 19:27:42 2021 GMT
*  expire date: Dec 15 19:27:42 2022 GMT
*  subjectAltName: host "aka.ms" matched cert's "aka.ms"
*  issuer: C=US; O=Microsoft Corporation; CN=Microsoft RSA TLS CA 01
*  SSL certificate verify ok.
} [5 bytes data]
> GET /scriptforpermsonhana HTTP/1.1
> Host: aka.ms
> User-Agent: curl/7.68.0
> Accept: */*
> 
{ [5 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [249 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [249 bytes data]
* old SSL session ID is stale, removing
{ [5 bytes data]
* Mark bundle as not supporting multiuse
< HTTP/1.1 301 Moved Permanently
< Content-Length: 0
< Server: Kestrel
< Location: https://download.microsoft.com/download/B/2/E/B2E01EF8-C247-42A6-BCC7-E45B78F20C99/msawb-plugin-config-com-sap-hana.sh
< Request-Context: appId=cid-v1:26ef1154-5995-4d24-ad78-ef0b04f11587
< X-Response-Cache-Status: True
< Expires: Mon, 10 Oct 2022 17:34:28 GMT
< Cache-Control: max-age=0, no-cache, no-store
< Pragma: no-cache
< Date: Mon, 10 Oct 2022 17:34:28 GMT
< Connection: keep-alive
< Strict-Transport-Security: max-age=31536000 ; includeSubDomains
< 

  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
* Connection #0 to host aka.ms left intact
* Issue another request to this URL: 'https://download.microsoft.com/download/B/2/E/B2E01EF8-C247-42A6-BCC7-E45B78F20C99/msawb-plugin-config-com-sap-hana.sh'
*   Trying 204.79.197.219:443...
* TCP_NODELAY set
* Connected to download.microsoft.com (204.79.197.219) port 443 (#1)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [98 bytes data]
* TLSv1.2 (IN), TLS handshake, Certificate (11):
{ [3688 bytes data]
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
{ [365 bytes data]
* TLSv1.2 (IN), TLS handshake, Server finished (14):
{ [4 bytes data]
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
} [102 bytes data]
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.2 (OUT), TLS handshake, Finished (20):
} [16 bytes data]
* TLSv1.2 (IN), TLS handshake, Finished (20):
{ [16 bytes data]
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
* ALPN, server accepted to use h2
* Server certificate:
*  subject: C=US; ST=WA; L=Redmond; O=Microsoft Corporation; CN=download.microsoft.com
*  start date: Sep 21 08:22:09 2022 GMT
*  expire date: Mar 20 08:22:09 2023 GMT
*  subjectAltName: host "download.microsoft.com" matched cert's "download.microsoft.com"
*  issuer: C=US; O=Microsoft Corporation; CN=Microsoft Azure TLS Issuing CA 02
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
} [5 bytes data]
* Using Stream ID: 1 (easy handle 0x55b0a6c6d8c0)
} [5 bytes data]
> GET /download/B/2/E/B2E01EF8-C247-42A6-BCC7-E45B78F20C99/msawb-plugin-config-com-sap-hana.sh HTTP/2
> Host: download.microsoft.com
> user-agent: curl/7.68.0
> accept: */*
> 
{ [5 bytes data]
* Connection state changed (MAX_CONCURRENT_STREAMS == 100)!
} [5 bytes data]
< HTTP/2 200 
< content-length: 95975
< content-type: application/octet-stream
< content-md5: yFsfautCMnnMgwQ55WmX/A==
< last-modified: Fri, 29 Jul 2022 09:35:33 GMT
< accept-ranges: bytes
< etag: "0x8DA7145AF12C7E5"
< server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
< x-cache: TCP_HIT
< x-ccc: US
< x-azure-ref-originshield: Ref A: C1B1014754E243F49C2C0B628ED4B2F9 Ref B: BLUEDGE1912 Ref C: 2022-10-10T12:24:43Z
< x-msedge-ref: Ref A: E7787C86565E4AFE8CB626D777C40107 Ref B: ASHEDGE1419 Ref C: 2022-10-10T17:34:28Z
< date: Mon, 10 Oct 2022 17:34:28 GMT
< 
{ [16015 bytes data]

@Klaas-
Copy link
Author

Klaas- commented Nov 3, 2022

with the releases of 2.1.0.1 I am still seeing this happening @pvrk -- any more input I can provide to actually find and fix this issue? :)

@Klaas-
Copy link
Author

Klaas- commented May 2, 2023

Hi @pvrk
with the release of Version 2.1.0.2 this is still happening. 1 1/2 years after first reporting this issue :)

https://github.com/Klaas-/msawb-plugin-config-com-sap-hana.sh/commits/main

First occurrence of 2.1.0.2: Sun Apr 30 10:13:08 2023 +0000
It's still serving the old version, last occurrence as of now: Tue May 2 04:15:38 2023 +0000

@Klaas-
Copy link
Author

Klaas- commented Jun 13, 2023

Still happening every time you release a new version of the prereq script.

https://github.com/Klaas-/msawb-plugin-config-com-sap-hana.sh/commits/main

@AbhishekMallick-MS
Copy link
Contributor

Hi @Klaas- we are looking in this issue, will get back soon. Thanks for your patience.

@AbhishekMallick-MS
Copy link
Contributor

Hi @Klaas- Thanks for your dedication to our documentation. Unfortunately, at this time we have been unable to review your issue in a timely manner and we sincerely apologize for the delayed response. We are closing this issue for now, but if you feel that it's still a concern, please respond and let us know. If you determine another possible update to our documentation, please don't hesitate to reach out again. #please-close

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

7 participants