Web lists-archives.com

Re: Why does my system download directly from security-cdn.debian.org?




Roberto C. Sánchez, Do 23 Aug 2018 19:16:26 CEST:

> The corresponding configurations for apt-cacher-ng are:
> 
> backends_debian_sec:
> http://security.debian.org
> 
> deb_sec_mirrors:
> http://security.debian.org

> However, recent kernel updates have instead been retrieved from
> security-cdn.debian.org, like this from my cron-apt log:
> 
> Get:7 http://apt-cache.localdomain:3142/security stretch/updates/main amd64 samba-common all 2:4.5.12+df
> sg-2+deb9u3 [172 kB]
> Get:8 http://security-cdn.debian.org stretch/updates/main amd64 linux-image-4.9.0-7-amd64 amd64 4.9.110-3+deb9u2 [39.0 MB]

I'd guess that this is simply caused by security.debian.org doing a HTTP
redirect to security-cdn.debian.org (which points to fastly's CDN -
probably to spread the load).

Look here:

$ telnet security.debian.org 80
Trying 2001:a78:5:1:216:35ff:fe7f:6ceb...
Connected to security.debian.org.
Escape character is '^]'.
GET /pool/updates/main/l/linux/ HTTP/1.1
Host: security.debian.org

HTTP/1.1 302 Found
Date: Thu, 23 Aug 2018 17:43:33 GMT
Server: Apache
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
Referrer-Policy: no-referrer
X-Xss-Protection: 1
Location: http://security-cdn.debian.org/pool/updates/main/l/linux/
          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Cache-Control: max-age=120
Expires: Thu, 23 Aug 2018 17:45:33 GMT
Content-Length: 310
Content-Type: text/html; charset=iso-8859-1

-- 
Regards
  mks