New Install on RPi5 Network error on connection to canonical "Network unreachable"

[doug-ravennasprings]

On a brand new installation of Ubuntu on a Raspberry Pi, my firewall/proxy system is logging errors suggesting that the IPv6 configuration is misconfigured.
At least that's my best guess. This looks like a (very) basic configuration error that would affect all versions of Ubuntu, perhaps globally. What the carbon footprint of the increased logs world-wide?

Here are the errors:
httpproxy[20938]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x110f2000" function="connect_server" file="dns.c" line="1288" message="connect() on AF 10 socket to 2620:2d:4002:1::197 failed: Network is unreachable

Here's what I find when I lookup this address:

Address lookup

canonical name	aerodent.canonical.com.
aliases
addresses	2620:2d:4000:1::19

Domain Whois record

Queried whois.internic.net with "dom canonical.com"...
Domain Name: CANONICAL.COM
Registry Domain ID: 34100_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.markmonitor.com
Registrar URL: http://www.markmonitor.com
Updated Date: 2023-08-30T22:38:58Z
Creation Date: 1996-07-05T04:00:00Z
Registry Expiry Date: 2025-07-04T04:00:00Z
Registrar: MarkMonitor Inc.
Registrar IANA ID: 292
Registrar Abuse Contact Email: abusecomplaints@markmonitor.com
Registrar Abuse Contact Phone: +1.2086851750
Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
Name Server: NS1.CANONICAL.COM
Name Server: NS2.CANONICAL.COM
Name Server: NS3.CANONICAL.COM
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2024-10-13T22:35:32Z <<<
Queried whois.markmonitor.com with "canonical.com"...
Domain Name: canonical.com
Registry Domain ID: 34100_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.markmonitor.com
Registrar URL: http://www.markmonitor.com
Updated Date: 2024-08-02T02:17:33+0000
Creation Date: 1996-07-05T04:00:00+0000
Registrar Registration Expiration Date: 2025-07-04T00:00:00+0000
Registrar: MarkMonitor, Inc.
Registrar IANA ID: 292
Registrar Abuse Contact Email: abusecomplaints@markmonitor.com
Registrar Abuse Contact Phone: +1.2086851750
Domain Status: clientUpdateProhibited (https://www.icann.org/epp#clientUpdateProhibited)
Domain Status: clientTransferProhibited (https://www.icann.org/epp#clientTransferProhibited)
Domain Status: clientDeleteProhibited (https://www.icann.org/epp#clientDeleteProhibited)
Registrant Organization: Canonical, Ltd.
Registrant State/Province: Isle of Man
Registrant Country: GB
Registrant Email: Select Request Email Form at https://domains.markmonitor.com/whois/canonical.com
Admin Organization: Canonical, Ltd.
Admin State/Province: Isle of Man
Admin Country: GB
Admin Email: Select Request Email Form at https://domains.markmonitor.com/whois/canonical.com
Tech Organization: Canonical, Ltd.
Tech State/Province: Isle of Man
Tech Country: GB
Tech Email: Select Request Email Form at https://domains.markmonitor.com/whois/canonical.com
Name Server: ns3.canonical.com
Name Server: ns1.canonical.com
Name Server: ns2.canonical.com
DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
>>> Last update of WHOIS database: 2024-10-13T22:33:10+0000 <<<
Network Whois record

Queried whois.arin.net with "n 2620:2d:4000:1::19"...
NetRange: 2620:2D:4000:: - 2620:2D:400F:FFFF:FFFF:FFFF:FFFF:FFFF
CIDR: 2620:2D:4000::/44
NetName: CANONICAL-USA6
NetHandle: NET6-2620-2D-4000-1
Parent: ARIN-V6-ENDUSER-BLOCK (NET6-2620-1)
NetType: Direct Allocation
OriginAS: AS41231
Organization: Canonical USA Inc. (CU-17)
RegDate: 2013-06-04
Updated: 2021-12-14
Comment: http://www.canonical.com/
Ref: https://rdap.arin.net/registry/ip/2620:2D:4000::


OrgName: Canonical USA Inc.
OrgId: CU-17
Address: 720 Brazos Street, Suite 300
City: Austin
StateProv: TX
PostalCode: 78701
Country: US
RegDate: 2012-04-10
Updated: 2023-08-10
Ref: https://rdap.arin.net/registry/entity/CU-17


OrgTechHandle: CANON4-ARIN
OrgTechName: Canonical IS
OrgTechPhone: +1-781-761-9400
OrgTechEmail: hostmaster@canonical.com
OrgTechRef: https://rdap.arin.net/registry/entity/CANON4-ARIN

OrgAbuseHandle: CANON-ARIN
OrgAbuseName: Canonical Abuse
OrgAbusePhone: +1-781-761-9400
OrgAbuseEmail: abuse@canonical.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/CANON-ARIN

OrgNOCHandle: CANON1-ARIN
OrgNOCName: Canonical NOC
OrgNOCPhone: +1-781-761-9400
OrgNOCEmail: noc@canonical.com
OrgNOCRef: https://rdap.arin.net/registry/entity/CANON1-ARIN
DNS records

name	class	type	data	time to live
aerodent.canonical.com	IN	AAAA	2620:2d:4000:1::19	1800s	(00:30:00)
aerodent.canonical.com	IN	A	185.125.190.39	1800s	(00:30:00)
canonical.com	IN	SOA	server: ns1.canonical.com email: hostmaster@canonical.com serial: 2018063071 refresh: 10800 retry: 3600 expire: 604800 minimum ttl: 3600	3600s	(01:00:00)
canonical.com	IN	NS	ns1.canonical.com	172800s	(2.00:00:00)
canonical.com	IN	NS	ns3.canonical.com	172800s	(2.00:00:00)
canonical.com	IN	NS	ns2.canonical.com	172800s	(2.00:00:00)
canonical.com	IN	TXT	miro-verification=2a474c203a12d0d3bdedb1dbfd7df2350d60c 43d	600s	(00:10:00)
canonical.com	IN	TXT	bw=FUPOteh4WFoKj2FJCprEWcFcZYwSQOSwgn2njwUTAlAn	600s	(00:10:00)
canonical.com	IN	TXT	apple-domain-verification=p5U0KoYntPjPy6ah	600s	(00:10:00)
canonical.com	IN	TXT	atlassian-domain-verification=EfMI3zSzpIoFk2/QhOqWVwC3swzqP9UryHYJFB0SyITHLVntyXkupk6prHjka48F	600s	(00:10:00)
canonical.com	IN	TXT	google-site-verification=RFZCSssfnIjPnBo0k6W72VsUfYqbknSNqIgy2 TrcMms	600s	(00:10:00)
canonical.com	IN	TXT	v=spf1 include:_spf.canonical.com -all	600s	(00:10:00)
canonical.com	IN	TXT	google-site-verification=987aj5PIoVpH3ybA_tMmNcCZ7sY64IUEGaeaf o_hrFk	600s	(00:10:00)
canonical.com	IN	MX	preference: 10 exchange: mx.canonical.com	600s	(00:10:00)
canonical.com	IN	AAAA	2620:2d:4000:1::28	60s	(00:01:00)
canonical.com	IN	AAAA	2620:2d:4000:1::27	60s	(00:01:00)
canonical.com	IN	AAAA	2620:2d:4000:1::26	60s	(00:01:00)
canonical.com	IN	A	185.125.190.29	60s	(00:01:00)
canonical.com	IN	A	185.125.190.20	60s	(00:01:00)
canonical.com	IN	A	185.125.190.21	60s	(00:01:00)
canonical.com	IN	CAA	[no interpretation available] hex dump: (36 bytes) 00 05 69 6F 64 65 66 6D ..iodefm 61 69 6C 74 6F 3A 69 73 ailto:is 2D 61 64 6D 69 6E 40 63 -admin@c 61 6E 6F 6E 69 63 61 6C anonical 2E 63 6F 6D .com	3600s	(01:00:00)
canonical.com	IN	CAA	[no interpretation available] hex dump: (23 bytes) 00 09 69 73 73 75 65 77 ..issuew 69 6C 64 64 69 67 69 63 ilddigic 65 72 74 2E 63 6F 6D ert.com	3600s	(01:00:00)
canonical.com	IN	CAA	[no interpretation available] hex dump: (19 bytes) 00 05 69 73 73 75 65 64 ..issued 69 67 69 63 65 72 74 2E igicert. 63 6F 6D com	3600s	(01:00:00)
canonical.com	IN	CAA	[no interpretation available] hex dump: (89 bytes) 00 05 69 73 73 75 65 6C ..issuel 65 74 73 65 6E 63 72 79 etsencry 70 74 2E 6F 72 67 3B 20 pt.org; 61 63 63 6F 75 6E 74 75 accountu 72 69 3D 68 74 74 70 73 ri=https 3A 2F 2F 61 63 6D 65 2D ://acme- 76 30 31 2E 61 70 69 2E v01.api. 6C 65 74 73 65 6E 63 72 letsencr 79 70 74 2E 6F 72 67 2F ypt.org/ 61 63 6D 65 2F 72 65 67 acme/reg 2F 33 32 35 34 31 32 39 /3254129 30 0	3600s	(01:00:00)
canonical.com	IN	CAA	[no interpretation available] hex dump: (22 bytes) 00 05 69 73 73 75 65 6C ..issuel 65 74 73 65 6E 63 72 79 etsencry 70 74 2E 6F 72 67 pt.org	3600s	(01:00:00)
canonical.com	IN	CAA	[no interpretation available] hex dump: (26 bytes) 00 09 69 73 73 75 65 77 ..issuew 69 6C 64 6C 65 74 73 65 ildletse 6E 63 72 79 70 74 2E 6F ncrypt.o 72 67 rg	3600s	(01:00:00)
9.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.0.0.0.0.0.0.4.d. 2.0.0.0.2.6.2.ip6.arpa	IN	PTR	aerodent.canonical.com	3600s	(01:00:00)
1.0.0.0.0.0.0.4.d.2.0.0.0.2.6.2.ip6.arpa	IN	SOA	server: ns1.canonical.com email: hostmaster@canonical.com serial: 28 refresh: 10800 retry: 3600 expire: 604800 minimum ttl: 3600	3600s	(01:00:00)
1.0.0.0.0.0.0.4.d.2.0.0.0.2.6.2.ip6.arpa	IN	NS	ns1.canonical.com	3600s	(01:00:00)
1.0.0.0.0.0.0.4.d.2.0.0.0.2.6.2.ip6.arpa	IN	NS	ns3.canonical.com	3600s	(01:00:00)
1.0.0.0.0.0.0.4.d.2.0.0.0.2.6.2.ip6.arpa	IN	NS	ns2.canonical.com	3600s	(01:00:00)

[doug-ravennasprings]

This appears to be an error in how Ubuntu is attempting to accessing updates.
Is this not tested, before release?

Typing the address into a browser gets a successful connection with the following result:


I've added the graphic of a http-based file directory of Ubuntu updates. The image is not showing up for some reason.

I refuse to troubleshoot the troubleshooting system.
Are things falling apart at Canonical?
I've been away for years.

[doug-ravennasprings]

apt-get update shows problems:

This line is displayed a couple dozen times
Get:12 http://ports.ubuntu.com/ubuntu-ports oracular/universe arm64 Packages [15.5 MB]

Then this line...
Ign:12 http://ports.ubuntu.com/ubuntu-ports oracular/universe arm64 Packages

The web proxy is showing successful access to http://ports.ubuntu.com/ubuntu-ports...64/Packages.xz

Proxy is also showing
sub="http" request="0xd775800" function="connect_server" file="dns.c" line="1288" message="connect() on AF 10 socket to 2620:2d:4000:1::19 failed: Network is unreachable"

[doug-ravennasprings]

More errors updating this post.
I give up.