IPv6, HTTPS, and SNI

[Maxim Dounin]

Hello!

On Mon, Dec 07, 2015 at 01:16:06PM +0100, Lukas Tribus wrote:

> > listen 80;
> 
> Afaik this will make nginx listen to both IPv4 and IPv6 family.
> 
> Specify the real IPv4 adress you want to listen to, to avoid the IPv6 bind.

No, just a port means IPv4 wildcard address.

> > listen [::]:80;
> 
> This will make nginx to listen to both IPv6 and IPv4 family.
> 
> Specify ipv6only=on [1] as a keyword to avoid the IPv4 bind.

No, IPv6-and-IPv4 listen sockets will be created if and only if 
you'll explicitly set the ipv6only parameter to off.

(Before nginx 1.3.4, the operation system setting was used as a 
default for ipv6only.  This was proven to be a wrong approach, and 
now nginx forces ipv6only=on by default.  See 
http://nginx.org/r/listen for some more details.)

-- 
Maxim Dounin
http://nginx.org/