TrueNAS Scale Update issues again

[Vertux]

It seems that TrueNAS has update issues again; the update.xsystems.com domain is unreachable. However, I think the main issue is that link.storjshare.io is blocked again due to security concerns. Perhaps it would be a good idea to stop using this domain/CDN(?).

; <<>> DiG 9.10.6 <<>> update.ixsystems.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64770
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1424
;; QUESTION SECTION:
;update.ixsystems.com.		IN	A

;; ANSWER SECTION:
update.ixsystems.com.	42958	IN	CNAME	link.storjshare.io.

;; Query time: 48 msec
;; SERVER: 192.168.xxx.xxx
;; WHEN: Fri Sep 05 07:14:14 CEST 2025
;; MSG SIZE  rcvd: 81

[LarsR]

Are you from Spain Italy or the UK? If yes then blame your government. Nothing wrong with storj, but your dipshit politicians decided to do stupid things…

[Vertux]

This is not a problem related to a country, government or politics. The issue is that you can often find Storj on widely used ad/security blocklists. I won’t discuss the reasons for that, but it’s a fact that these issues damage the reputation of TrueNAS/xsystems.

[elvisimprsntr]

Couldn’t agree more.

TrueNAS 25.04.2.3 Is Now Available!

@Captain_Morgan When I check Quad9 it shows storjshare.io is not blocked, but when when I perform a DNS lookup it will not resolve, even with Google DNS added. If storjshare.io is routinely blocked or will not resolve, seems iXsystems needs to move to another provider. Just my 2¢ [Screenshot 2025-09-05 at 4.50.51 AM] [Screenshot 2025-09-05 at 5.00.31 AM] [Screenshot 2025-09-05 at 5.02.23 AM] [Screenshot 2025-09-05 at 5.04.48 AM]

[neofusion]

It’s both. You are both right, there have indeed been issues with Storj getting added to block lists every now then for a while now.

But as @LarsR says, there is also active wide scale blocking (of services like Cloudflare) going on in certain European countries. This blocking expanded a month or so ago. There have been multiple posts and topics about it the last few weeks.

[Vertux]

I’ve just done a little investigating and found that the host/domain link.storjshare.iois still blocked (unfortunately I cannot post screenshots here), but you can check it by yourself here: https://quad9.net/de/result/

The domain is still blocked due to the following concerns:

• Team Cymru - Botnet Analysis and Reporting Service (BARS)

It’s just for your information.

[Vertux]

Just a little remark, Team Cymru is american

[elvisimprsntr]

@Vertux

link.storjshare.io

Confirmed blocked by Quad9

Submitted an unblock request to Quad9.

Quad9 Support - New Ticket Created (42717)

[elvisimprsntr]

Looks like link.storjshare.io is at least resolving now, but it is still blocked by Quad9. I have not received a response yet from Quad9. I temporarily added Google DNS in the meantime.

[MBILC]

I appear to be having an issue.

Doing checks from TrueNAS Scale shell, everything says it should work, but the Check for Updates fails.

Full Error:

Error Name: ETIMEDOUT
Error Code: 110
Reason: [ETIMEDOUT] Connection timeout while fetching update manifest
Error Class: CallError
Trace: Traceback (most recent call last):
File “/usr/lib/python3/dist-packages/aiohttp/client.py”, line 770, in _request
resp = await handler(req)
^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/aiohttp/client.py”, line 725, in _connect_and_send_request
conn = await self._connector.connect(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/aiohttp/connector.py”, line 642, in connect
proto = await self._create_connection(req, traces, timeout)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/aiohttp/connector.py”, line 1209, in _create_connection
_, proto = await self._create_direct_connection(req, traces, timeout)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/aiohttp/connector.py”, line 1550, in _create_direct_connection
transp, proto = await self._wrap_create_connection(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/aiohttp/connector.py”, line 1268, in _wrap_create_connection
sock = await aiohappyeyeballs.start_connection(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/aiohappyeyeballs/impl.py”, line 73, in start_connection
sock = await _connect_sock(
^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/aiohappyeyeballs/impl.py”, line 208, in _connect_sock
await loop.sock_connect(sock, address)
File “/usr/lib/python3.11/asyncio/selector_events.py”, line 638, in sock_connect
return await fut
^^^^^^^^^
asyncio.exceptions.CancelledError

The above exception was the direct cause of the following exception:

Traceback (most recent call last):
File “/usr/lib/python3/dist-packages/middlewared/plugins/update_/trains.py”, line 30, in fetch
async with client.get(url) as resp:
File “/usr/lib/python3/dist-packages/aiohttp/client.py”, line 1488, in aenter
self._resp: _RetType = await self._coro
^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/aiohttp/client.py”, line 622, in _request
with timer:
File “/usr/lib/python3/dist-packages/aiohttp/helpers.py”, line 685, in exit
raise asyncio.TimeoutError from exc_val
TimeoutError

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File “/usr/lib/python3/dist-packages/middlewared/api/base/server/ws_handler/rpc.py”, line 360, in process_method_call
result = await method.call(app, id_, params)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/middlewared/api/base/server/method.py”, line 57, in call
result = await self.middleware.call_with_audit(self.name, self.serviceobj, methodobj, params, app,
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/middlewared/main.py”, line 954, in call_with_audit
result = await self.call(method, serviceobj, methodobj, params, app=app,
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/middlewared/main.py”, line 771, in call
return await methodobj(*prepared_call.args)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/middlewared/api/base/decorator.py”, line 108, in wrapped
result = await func(*args)
^^^^^^^^^^^^^^^^^
File "/usr/lib/python3/dist-packages/middlewared/plugins/update/profile.py", line 64, in profile_choices
current_profile = UpdateProfiles[await self.current_version_profile()]
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/middlewared/plugins/update_/profile_.py”, line 81, in current_version_profile
current_train_releases = await self.middleware.call(‘update.get_train_releases’, manifest[‘train’])
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/middlewared/main.py”, line 1043, in call
return await self.call(
^^^^^^^^^^^^^^^^^
File “/usr/lib/python3/dist-packages/middlewared/main.py”, line 771, in call
return await methodobj(*prepared_call.args)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3/dist-packages/middlewared/plugins/update/trains.py", line 69, in get_train_releases
return await self.fetch(f"{self.update_srv}/{name}/releases.json")
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3/dist-packages/middlewared/plugins/update/trains.py", line 40, in fetch
raise CallError(‘Connection timeout while fetching update manifest’, errno.ETIMEDOUT)
middlewared.service_exception.CallError: [ETIMEDOUT] Connection timeout while fetching update manifest

I can reach the URLs fine.

I have my TrueNAS IP bypassing all blocks on my pfsense firewall (wide open all any out, removed from pfblockerNG rules), and it has the same rules as my primary system I use even when not bypassed and on my primary system I can browse to https://update.ixsystems.com/ fine and it lists contents.

From TrueNAS Shell:

$ dig  link.storjshare.io

; <<>> DiG 9.18.33-1~deb12u2-Debian <<>> link.storjshare.io
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6621
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1352
;; QUESTION SECTION:
;link.storjshare.io.            IN      A

;; ANSWER SECTION:
link.storjshare.io.     45      IN      A       136.0.77.4

;; Query time: 92 msec
;; SERVER: 10.0.16.1#53(10.0.16.1) (UDP)
;; WHEN: Tue Mar 17 09:42:04 MDT 2026
;; MSG SIZE  rcvd: 63

$ dig https://update.ixsystems.com/

; <<>> DiG 9.18.33-1~deb12u2-Debian <<>> https://update.ixsystems.com/
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8322
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1352
;; QUESTION SECTION:
;https://update.ixsystems.com/. IN      A

;; AUTHORITY SECTION:
.                       2914    IN      SOA     a.root-servers.net. nstld.verisign-grs.com. 2026031700 1800 900 604800 86400

;; Query time: 80 msec
;; SERVER: 10.0.16.1#53(10.0.16.1) (UDP)
;; WHEN: Tue Mar 17 09:43:00 MDT 2026
;; MSG SIZE  rcvd: 133

Thoughts?

What am I missing or doing wrong..

Quad9 is my primary DNS but checking the site it shows not blocked.