Thanks Slávek.
OK, so here's the state of play if someone smarter than me has
any ideas.
Felix is downloading at 10.4MB/s - over 80Mbps. Could the
server think this is a DOS attack? I'm 99% certain there's not
a transparent proxy involved.
--Mike
Felix during apt upgrade (from multiple repos in parallel) sees:
===================================
Get:22
http://mirror.ppa.trinitydesktop.org/trinity-sb bullseye/main-r14 amd64
juk-trinity amd64 4:14.0.9-0debian11.0.0+0~a [699 kB]
[33m
31% [22 juk-trinity 46.3 kB/699 kB 7%] [316 python3.8-minimal 14.0 kB/1,863 kB
1%] [Waiting for headers]
9,609 kB/s 33s[0m
Err:30
http://mirror.ppa.trinitydesktop.org/trinity-sb bullseye/main-r14 amd64
kbstate-trinity amd64 4:14.0.9-0debian11.0.0+0~a
Error reading from server. Remote end closed connection [IP: 37.205.10.16
80]
[33m
31% [22 juk-trinity 305 kB/699 kB 44%] [316 python3.8-minimal 14.0 kB/1,863 kB
1%] [Connecting to
mirror.ppa.trinitydesktop.org (37.205.10.16)]
9,609 kB/s 33s[0m[33m
31% [316 python3.8-minimal 16.9 kB/1,863 kB 1%] [Connecting to
mirror.ppa.trinitydesktop.org (37.205.10.16)]
9,609 kB/s 33s[0m
Get:23
http://mirror.ppa.trinitydesktop.org/trinity-sb bullseye/main-r14 amd64
kaboodle-trinity amd64 4:14.0.9-0debian11.0.0+0~a [120 kB]
[33m
31% [23 kaboodle-trinity 65.5 kB/120 kB 55%] [316 python3.8-minimal 16.9
kB/1,863 kB 1%] [Connecting to
mirror.ppa.trinitydesktop.org (37.205.10.16)]
9,609 kB/s 33s[0m[33m
===================================
Meanwhile the server sees only:
===================================
/var/log/apache2/ppa-access.log:24.75.154.218 - - [02/Nov/2020:09:20:19
+0000] "GET
/trinity-sb/pool/main-r14/t/tdemultimedia-trinity/juk-trinity_14.0.9-0debian11.0.0%2b0%7ea_amd64.deb
HTTP/1.1" 302 0 "-" "Debian APT-HTTP/1.3 (1.8.2.1)"
/var/log/apache2/ppa-access.log:24.75.154.218 - - [02/Nov/2020:09:20:19
+0000] "GET
/trinity-sb/pool/main-r14/t/tdemultimedia-trinity/kaboodle-trinity_14.0.9-0debian11.0.0%2b0%7ea_amd64.deb
HTTP/1.1" 302 0 "-" "Debian APT-HTTP/1.3 (1.8.2.1)"
===================================