For some reason proxy.golang.org keeps rejecting requests for https://proxy.golang.org/github.com/klauspost/compress/@v/v1.18.0.zip but otherwise works without issues from what I can tell. This issue is specific to requests from my server’s IPv6 address at 2a0a:51c0::436
– even from IPv4 185.248.143.73
there are no issue. The response says “This service is unavailable in your region”!?
The issue has been persisting for several days.
Other packages are not affected:
wget -4 "https://proxy.golang.org/github.com/smallstep/nosql/@v/v0.7.0.zip"
→ no issues
log:
go: github.com/caddyserver/transform-encoder imports
github.com/caddyserver/caddy/v2/modules/logging imports
github.com/caddyserver/caddy/v2/modules/caddyhttp imports
github.com/caddyserver/caddy/v2/modules/caddytls imports
github.com/caddyserver/caddy/v2/modules/caddypki imports
github.com/smallstep/certificates/authority imports
github.com/smallstep/nosql imports
github.com/smallstep/nosql/badger/v2 imports
github.com/dgraph-io/badger/v2 imports
github.com/dgraph-io/badger/v2/y imports
github.com/klauspost/compress/zstd: github.com/klauspost/compress@v1.18.0: reading https://proxy.golang.org/github.com/klauspost/compress/@v/v1.18.0.zip: 403 Forbidden
Comment From: gabyhelp
Related Issues
- proxy.golang.org 403 forbidden #48107 (closed)
- proxy.golang.org: 403 forbidden (Hetzner Hosting) #62242 (closed)
- proxy.golang.org: https://proxy.golang.org/github.com/klauspost/compress/@v/v1.13.6.zip: 403 Forbidden #50127 (closed)
- proxy.golang.org 403 forbidden much like #48107 #62448 (closed)
(Emoji vote if this was helpful or unhelpful; more detailed feedback welcome in this discussion.)
Comment From: seankhliao
what does curl -Lv https://proxy.golang.org/github.com/klauspost/compress/@v/v1.18.0.zip
look like?
Comment From: ntninja
Like this: curl-fetch.log
Comment From: prattmic
cc @golang/tools-team @samthanawalla @findleyr
Comment From: findleyr
This error is coming from cloud storage, not the proxy (the proxy redirects to GCS for blobs). Perhaps this is geoip filtering. I know in the past we've had problems when IPs get moved around to different countries (and unfortunately, we don't seem to be able to influence this categorization though it generally fixes itself over time if you're not actually in a blocked location).
For example, that link works fine from my location.
I wonder if the other zips are being served directly out of the proxy (IIRC we do that if they are small enough). Can you verify that with a similar curl
request? (just check that the output doesn't reference storage.googleapis.com).
Comment From: ntninja
@findleyr: I checked https://proxy.golang.org/github.com/smallstep/nosql/@v/v0.7.0.zip and it appears to be served directly from proxy indeed: curl-fetch2.log (note that it’s also using IPv6 in this log)
Comment From: findleyr
Hi @ntninja, it's likely that your ipv6 address was recategorized to an embargoed country recently. I filed a bug internally, but it might not get traction. Sorry, in the short term there's nothing we can do: either the bug will get addressed, or the IP address will eventually be recategorized.