IPv6, HTTPS, and SNI
mdounin at mdounin.ru
Mon Dec 7 13:00:50 UTC 2015
On Mon, Dec 07, 2015 at 01:16:06PM +0100, Lukas Tribus wrote:
> > listen 80;
> Afaik this will make nginx listen to both IPv4 and IPv6 family.
> Specify the real IPv4 adress you want to listen to, to avoid the IPv6 bind.
No, just a port means IPv4 wildcard address.
> > listen [::]:80;
> This will make nginx to listen to both IPv6 and IPv4 family.
> Specify ipv6only=on  as a keyword to avoid the IPv4 bind.
No, IPv6-and-IPv4 listen sockets will be created if and only if
you'll explicitly set the ipv6only parameter to off.
(Before nginx 1.3.4, the operation system setting was used as a
default for ipv6only. This was proven to be a wrong approach, and
now nginx forces ipv6only=on by default. See
http://nginx.org/r/listen for some more details.)
More information about the nginx