Proxmox subscription check time-out occurring regularly

[John Driessen]

Hi,

Can anyone tell me if they also experience the following error, which I have almost every month:
Error checking subscription: https://shop.proxmox.com/modules/servers/licensing/verify.php: Network Error: timed out reading response
Therefore updates are not coming in.
This is usually fixed by reissuing the license on the shop, but it takes a few days and therefore it is annoying to do so almost every month.
I have internet access and I can reach the Proxmox shop via the browser.

 

[nunner]

Hi,

does the subscription check start working instantly again when you activate the reissued license?

I have internet access and I can reach the Proxmox shop via the browser.

Can you also reach it from the server? Do you have any firewall rules in place?

 

[John Driessen]

Hi,

does the subscription check start working instantly again when you activate the reissued license?

Can you also reach it from the server? Do you have any firewall rules in place?

No, it doesn't.
When I run the CLI command "pvesubscription update" it gives the time-out. Also when rerunning a few minutes after reissuing the subscription on the shop.
Today I rerun this command approximately 1 hour after reissuing the subscription, and then it worked again and Proxmox notices I have a valid subscription. Last month it took a few days.
I can run the command from the proxmox-shell (CLI) but also from the GUI.

 

[nunner]

That sounds strange. Is the license endpoint really the only place where your server has connectivity problems? Again, do you have any firewall rules in place?

 

[John Driessen]

That sounds strange. Is the license endpoint really the only place where your server has connectivity problems? Again, do you have any firewall rules in place?

Yes, this is the only connectivity problem I have. And it does not occur always, so a firewall rules should have blocked it always.
It is now 3 weeks later, and again my subscription is "invalid".

 

[mr44er]

Do you have multiple/different gateways or dns on your proxmox host? If not, can you ping this ip from your proxmox host, when this happens?

What does netstat -rn say? Is the first entry the correct ip?

Another wild guess: Is the date/time and timezone correct on the host?

 

[John Driessen]

netstat -rn provides my gateway ip number. I can ping it.
Also time-zone is correct.

 

[adamb]

SSL inspectors love to mess with proxmox subscription checks.

I have many server inhouse and out in the field with no issues.

Definitely on your end.

 

[mira]

Can you check if it tries to connect via IPv6?
We've had cases like this where a broken IPv6 setup is at fault.

With the switch from the Perl implementation to Rust, it either tries IPv6 if it is configured or IPv4 if not.

 

[John Driessen]

Can you check if it tries to connect via IPv6?
We've had cases like this where a broken IPv6 setup is at fault.

With the switch from the Perl implementation to Rust, it either tries IPv6 if it is configured or IPv4 if not.

How can I check?

By the way today it occurred again. After a reboot of the Proxmox server, everything was OK again.

 

[mira]

Is there any IPv6 address configured on any of the interfaces? ip address show
Is there an IPv6 address configured in /etc/hosts?

If you resolve `shop.proxmox.com`, which IP do you see?

 

[John Driessen]

Is there any IPv6 address configured on any of the interfaces? ip address show
Is there an IPv6 address configured in /etc/hosts?

If you resolve `shop.proxmox.com`, which IP do you see?

Hi Mira, as it occurred again today I checked. Indeed the ping wanted to go to a IPv6 address, which did not succeed.
I removed (commented in fact with #) the standard ipv6 entries in /etc/hosts and rebooted the machine.
Pinging now worked with ipv4.
Is this all there is to it or do I have to edit something else as well to prevent an interface using IPv6?