IPv6, HTTPS, and SNI

Maxim Dounin mdounin at mdounin.ru
Mon Dec 7 13:00:50 UTC 2015


On Mon, Dec 07, 2015 at 01:16:06PM +0100, Lukas Tribus wrote:

> > listen 80;
> Afaik this will make nginx listen to both IPv4 and IPv6 family.
> Specify the real IPv4 adress you want to listen to, to avoid the IPv6 bind.

No, just a port means IPv4 wildcard address.

> > listen [::]:80;
> This will make nginx to listen to both IPv6 and IPv4 family.
> Specify ipv6only=on [1] as a keyword to avoid the IPv4 bind.

No, IPv6-and-IPv4 listen sockets will be created if and only if 
you'll explicitly set the ipv6only parameter to off.

(Before nginx 1.3.4, the operation system setting was used as a 
default for ipv6only.  This was proven to be a wrong approach, and 
now nginx forces ipv6only=on by default.  See 
http://nginx.org/r/listen for some more details.)

Maxim Dounin

More information about the nginx mailing list