Maven inaccessible from curl (and thus gradle)

[PROMETHIA-27]

Currently the maven repository https://maven.squiddev.cc/ seems to be inaccessible to curl (and some folks I asked?), and so gradle is unable to access it, but it is accessible from the browser (for me). I can manually download whatever files I want. I don't know enough to figure anything else out, but I was unable to coerce curl into working by copying request headers, so it's probably not overzealous scraper protection? I think?

EDIT: Found that accessing directly via IPv4 address works, via this post: https://superuser.com/questions/1498200/firefox-curl-cant-resolve-domain-where-dig-can
Seems to mean something about the DNS record being incorrect?

EDIT 2: And found that the reason firefox can access is due to its "DNS over HTTP" feature, which is set to use cloudflare's DNS server. Disabling that feature causes the site to be inaccessible.

[SquidDev]

Thanks for the report!

Oh, this is very odd. There were some network connectivity issues on the server at 19:30-19:40 UTC, but it sounds like this has lasted longer than that.

RE DNS, what is maven.squiddev.cc resolving to when using DoH? It should be 51.75.162.27 for IPv4 and 2001:41d0:801:2000::4ffc for IPv6.

[PROMETHIA-27]

Hm, my OS is set to use google's by default. I think I can try switching to cloudflare and see what that does.

[PROMETHIA-27]

Doesn't seem to accomplish much. Interestingly, changing the DNS over HTTP server around also doesn't change much; it still works fine. But if disabled, it stops working. Not sure what to make of that, web stuff is not my strong suit.

[SquidDev]

The problem is when not using it, such as curl requests.

Ahh, sorry, had completely misunderstood! Okay, that's very odd that it's not resolving at all, especially on 8.8.8.8 — we've seen issues where CC:T domains get incorrectly flagged as malware, but Google shouldn't be doing that.

Does squiddev.cc resolve correctly?

[zyxkad]

Doesn't seem to accomplish much. Interestingly, changing the DNS over HTTP server around also doesn't change much; it still works fine. But if disabled, it stops working. Not sure what to make of that, web stuff is not my strong suit.

In some region there are DNS hijacking, just stick on DoH or use a VPN.

[PROMETHIA-27]

No, squiddev.cc works the same as maven.squiddev.cc