Networking: Sites load slowly or hang for seconds — broken IPv6 (AAAA resolves, IPv6 route missing) falling back to IPv4
The client prefers IPv6, but the IPv6 path is broken, so every connection waits for a timeout before using IPv4.
IPv6 broken slow connectionsHappy Eyeballs fallback delaycurl: (7) Failed to connect to 2606:4700 port 443: Network is unreachableconnect to 2a00 port 80 failed: Network is unreachableIPv6 timeout then IPv4 works Meaning
DNS returns an AAAA record, the host tries IPv6 first, and a missing IPv6 default route, blocked ICMPv6 or firewall makes it fail. Test with curl -6 vs curl -4; fix the IPv6 route and firewall (allow ICMPv6), or disable IPv6 on that network/interface if you can't fix it.
Common causes
- IPv6 address but no working IPv6 default route
- Firewall blocking ICMPv6 (neighbour/RA/PMTU)
- ISP or VPN IPv6 half-working
- Router advertises IPv6 without upstream connectivity
- AAAA record pointing at a server that isn't listening on IPv6
⚡ Quick fix
- Compare
curl -4 -I urlandcurl -6 -I url - Allow ICMPv6 and fix the IPv6 route
- As a workaround, disable IPv6 on the interface
Detailed fix by platform
Linux
- bash
curl -4 -sI -o /dev/null -w "%{time_total} " https://example.com curl -6 -sI -o /dev/null -w "%{time_total} " https://example.com
How to diagnose
- curl -6 — Slow/failing?
- IPv6 route — Present?
- ICMPv6 — Allowed?
🔧 Still not fixed?
Many errors look alike. If the steps above didn’t solve it, one of these is probably what you’re facing:
Similar errors
- dig: status: REFUSED (recursion not available) Networking: dig: status: REFUSED / recursion requested but not available — the DNS server won't resolve queries for you
- dig: status: SERVFAIL (DNSSEC validation failed) Networking: dig: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL — resolver failed to answer (DNSSEC validation or upstream failure)
- DNS lookups take 5 seconds (timeout then retry) Networking: Every connection pauses about 5 seconds — resolv.conf nameserver timeout, then fallback to the next DNS server
Most viewed in Networking
- Native VLAN mismatch / wrong VLAN, no connectivity Networking: %CDP-4-NATIVE_VLAN_MISMATCH / device on the wrong VLAN can't reach the gateway
- Port err-disabled (psecure-violation) Networking: %PM-4-ERR_DISABLE: psecure-violation error detected on Gi0/5, putting Gi0/5 in err-disable state
- Rogue DHCP server hands out wrong gateway/DNS Networking: Clients receive the wrong default gateway or DNS server — a rogue DHCP server (often a home router) answers first
Other ways to find it
Where this error sits
Origin: Network. Errors that are often confused with or caused by this one (click to open):
🧠 Still stuck? Analyze your error
Paste the full message, response headers or stack trace — we'll detect the platform and point to the most likely cause.
💬 What worked for others
No tips yet — did something else fix this for you?
Share what worked for you
Tips are checked by an editor before they appear. Links are removed.
Report a correction or suggest an improvement
Last updated 5 Nov 2026