On Sun, Jan 29, 2017 at 09:44:04PM +0100, Cyril Brulebois wrote: > Steve McIntyre <st...@einval.com> (2017-01-29): > > > > I'd suggest that now we have an official service at deb.debian.org, > > that's probably the best option for a default. Any objections? > > As it's DSA-maintained, fine with me. Thanks. >
deb.debian.org is a DNS entry to CDN servers. Long version: wget -qO - http://deb.debian.org | html2text ****** Welcome to deb.debian.org! ****** This is deb.debian.org. This service provides mirrors for the following Debian archive repositories: * /debian/ * /debian-debug/ * /debian-ports/ * /debian-security/ The server deb.debian.org does not have packages itself, but the name has SRV records in DNS that let apt in stretch and later find places. To use it with a sufficiently recent apt, you for instance can put deb http://deb.debian.org/debian unstable main deb http://deb.debian.org/debian-debug unstable-debug main deb http://deb.debian.org/debian-ports unstable main in your sources.list. As of October 2016 the SRV record is _http._tcp.deb.debian.org. IN SRV 10 1 80 prod.debian.map.fastly.net. _http._tcp.deb.debian.org. IN SRV 10 1 80 dpvctowv9b08b.cloudfront.net. If you hit the server behind deb.debian.org directly, either because you use an older apt or because you use a HTTP proxy that does not support SRV records, your requests will get HTTP redirected to one of the CDN instances. If you want to avoid the redirects, you can pick one instance directly. For instance, this also works in your sources.list: deb http://cdn-fastly.deb.debian.org/debian stable main deb http://cdn-fastly.deb.debian.org/debian-security stable/updates main The redirection service is also available on HTTPS, so with the apt-transport- https package installed, you can use: deb https://deb.debian.org/debian stable main deb https://deb.debian.org/debian-security stable/updates main This service is sponsored by Fastly and Amazon_CloudFront. =============================================================================== DSA