Can’t check system update on truenas scale CE

TrueNAS General
1

When I try check system update obtain this error:

Traceback (most recent call last):
File “/usr/lib/python3/dist-packages/middlewared/api/base/server/ws_handler/rpc.py”, line 323, in process_method_call
result = await method.call(app, params)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/middlewared/api/base/server/method.py”, line 52, in call
result = await self.middleware.call_with_audit(self.name, self.serviceobj, methodobj, params, app)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/middlewared/main.py”, line 911, in call_with_audit
result = await self._call(method, serviceobj, methodobj, params, app=app,
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/middlewared/main.py”, line 731, in _call
return await self.run_in_executor(prepared_call.executor, methodobj, *prepared_call.args)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/middlewared/main.py”, line 624, in run_in_executor
return await loop.run_in_executor(pool, functools.partial(method, *args, **kwargs))
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
TimeoutError

This is my OS Version:25.04.2.1

2

How is your network configured on that TN system?

3

Hey @ajmillan

We’re actually tracking issues upstream with several ISPs in the EU that appear to be blocking large swaths of the Internet - including Cloudflare and several CDNs - as an “anti-piracy” measure. Yours might be one of them.

I’ll be making an announcement thread about this shortly, but we’re already working on a way to mitigate the impact of these blocks.

1 Like
4

Something seems to have happened a few weeks ago-ish, so it links up with the “Piracy Shield” debacle.

People started saying they couldn’t download TN-install media, and just the other day someone said the apps-icons were all broken all of a sudden.

5

That is indeed what we’re fighting with.

6

It appears to essentially be an automated tool to blackhole any domain (and IP’s apparently) within at most 30 minutes from a report being filed.

I don’t see how proper precautions to avoid collateral damage can be handled within that time. It appears to be a copyright owners wet dream. DMCA on crack, cocaine and meth all at the same time. It’s already slipperly sloped its way from targeting live broadcasts to much more.

It appears ripe for mistakes and intentional abuse.
A truly sad state of affairs.

Source:

7

It’s not limited to Italy. Several EU member states have similar features - IIRC Telefonica in Spain knocked out the CDN used for Google Fonts, basically kicking anyone who used them back into 1990s HTML markup world. :wink:

8

I think it must be something related to the anti-piracy blockade. I can’t access download.truenas.com from any of my local network machines or from the cellular network.

9

@ajmillan Assuming they haven’t screened out the forum Chat, please check your DM/Chat messages here, let’s see if we can solve this for you :wink:

1 Like
10

I ran into the same TimeoutError when checking for updates on my TrueNAS SCALE installation in Spain and wanted to share what I found.

I first noticed that I didn’t have the problem from my server in the USA. After some testing, it turned out the problem is on Telefónica’s network in Spain. Here’s the traceroute from my Spanish site (public IP redacted):

# traceroute -T -p 443 185.244.226.2
traceroute to 185.244.226.2 (185.244.226.2), 30 hops max, 60 byte packets
 1  LocalRouter (192.168.5.1)  0.549 ms  0.525 ms  0.496 ms
 2  * * *
 3  42.red-81-41-224.staticip.rima-tde.net (81.41.224.42)  1.975 ms 38.red-81-41-224.staticip.rima-tde.net (81.41.224.38)  2.036 ms  1.999 ms
 4  238.red-81-41-224.staticip.rima-tde.net (81.41.224.238)  9.279 ms 246.red-81-41-224.staticip.rima-tde.net (81.41.224.246)  9.268 ms *
 5  * * *
 6  * * *
 7  * * *

As mentioned by others, LaLiga in Spain obtained court approval in spring to enforce IP bans to prevent soccer piracy. This has mainly impacted Cloudflare but seems to be affecting other cloud providers too. From my observations, Cloudflare bans usually last through game days and get lifted afterward, but the ban affecting TrueNAS’ CDN IP ranges looks like it might be lasting much longer — possibly even permanent.

As a temporary workaround, I routed only the TrueNAS update traffic through a VPN tunnel outside Spain. After that, the update check worked normally.

I hope this helps.

11

Related post by @HoneyBadger

https://forums.truenas.com/t/updates-being-blocked-in-certain-regions-due-to-anti-piracy-measures/51146